Skip to content

[12.1.x Root pom] Bump the integration-deps group across 1 directory with 6 updates - #15688

Closed
dependabot[bot] wants to merge 1 commit into
jetty-12.1.xfrom
dependabot/maven/jetty-12.1.x/integration-deps-fb9282b09a
Closed

[12.1.x Root pom] Bump the integration-deps group across 1 directory with 6 updates#15688
dependabot[bot] wants to merge 1 commit into
jetty-12.1.xfrom
dependabot/maven/jetty-12.1.x/integration-deps-fb9282b09a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the integration-deps group with 6 updates in the / directory:

Package From To
org.infinispan.protostream:protostream 6.0.10 6.0.11
org.infinispan.protostream:protostream-processor 6.0.10 6.0.11
org.mongodb:mongodb-driver-sync 5.10.0 5.11.0
org.mongodb:bson 5.10.0 5.11.0
org.mongodb:mongodb-driver-core 5.10.0 5.11.0
com.google.cloud:google-cloud-datastore 2.40.0 2.41.0

Updates org.infinispan.protostream:protostream from 6.0.10 to 6.0.11

Release notes

Sourced from org.infinispan.protostream:protostream's releases.

6.0.11

What's Changed

New Contributors

Full Changelog: infinispan/protostream@6.0.10...6.0.11

Commits
  • 187b66a Releasing 6.0.11
  • 36f13e4 #720 Add unit tests for ProtobufUtil
  • c4f5d44 #733 Generated marshallers box/unbox primitive array elements unnecessarily
  • 0623787 Bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0
  • 613ec48 Bump version.jackson from 2.22.1 to 2.22.2
  • 5f52206 Bump org.apache.maven:apache-maven from 3.9.9 to 3.9.16
  • cc0e8ff Bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4
  • 22b642c Bump version.junit from 6.1.2 to 6.1.3
  • 29d2e2a Bump org.infinispan:infinispan-checkstyle from 16.2.1 to 16.2.2
  • 57374a4 Bump actions/setup-java from 5.6.0 to 5.7.0
  • Additional commits viewable in compare view

Updates org.infinispan.protostream:protostream-processor from 6.0.10 to 6.0.11

Release notes

Sourced from org.infinispan.protostream:protostream-processor's releases.

6.0.11

What's Changed

New Contributors

Full Changelog: infinispan/protostream@6.0.10...6.0.11

Commits
  • 187b66a Releasing 6.0.11
  • 36f13e4 #720 Add unit tests for ProtobufUtil
  • c4f5d44 #733 Generated marshallers box/unbox primitive array elements unnecessarily
  • 0623787 Bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0
  • 613ec48 Bump version.jackson from 2.22.1 to 2.22.2
  • 5f52206 Bump org.apache.maven:apache-maven from 3.9.9 to 3.9.16
  • cc0e8ff Bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4
  • 22b642c Bump version.junit from 6.1.2 to 6.1.3
  • 29d2e2a Bump org.infinispan:infinispan-checkstyle from 16.2.1 to 16.2.2
  • 57374a4 Bump actions/setup-java from 5.6.0 to 5.7.0
  • Additional commits viewable in compare view

Updates org.infinispan.protostream:protostream-processor from 6.0.10 to 6.0.11

Release notes

Sourced from org.infinispan.protostream:protostream-processor's releases.

6.0.11

What's Changed

New Contributors

Full Changelog: infinispan/protostream@6.0.10...6.0.11

Commits
  • 187b66a Releasing 6.0.11
  • 36f13e4 #720 Add unit tests for ProtobufUtil
  • c4f5d44 #733 Generated marshallers box/unbox primitive array elements unnecessarily
  • 0623787 Bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0
  • 613ec48 Bump version.jackson from 2.22.1 to 2.22.2
  • 5f52206 Bump org.apache.maven:apache-maven from 3.9.9 to 3.9.16
  • cc0e8ff Bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4
  • 22b642c Bump version.junit from 6.1.2 to 6.1.3
  • 29d2e2a Bump org.infinispan:infinispan-checkstyle from 16.2.1 to 16.2.2
  • 57374a4 Bump actions/setup-java from 5.6.0 to 5.7.0
  • Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-sync from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + ":" + context.getPort();
    String connectRequest = "CONNECT " + target + " HTTP/1.1\r\n"
            + "Host: " + target + "\r\n"
            // If the proxy requires authentication, add the appropriate header, for example:
            // + "Proxy-Authorization: Basic " + base64("user:password") + "\r\n"
            + "\r\n";
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:bson from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:mongodb-driver-core from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-core's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates com.google.cloud:google-cloud-datastore from 2.40.0 to 2.41.0

Changelog

Sourced from com.google.cloud:google-cloud-datastore's changelog.

2.41.0 (2024-03-06)

  • No change
Commits

Updates org.mongodb:bson from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

Updates org.mongodb:mongodb-driver-core from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-core's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + &quot;:&quot; + context.getPort();
    String connectRequest = &quot;CONNECT &quot; + target + &quot; HTTP/1.1\r\n&quot;
            + &quot;Host: &quot; + target + &quot;\r\n&quot;
            // If the proxy requires authentication, add the appropriate header, for example:
            // + &quot;Proxy-Authorization: Basic &quot; + base64(&quot;user:password&quot;) + &quot;\r\n&quot;
            + &quot;\r\n&quot;;
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-12.1.x/integration-deps-fb9282b09a branch 2 times, most recently from b16d7cb to 61d6a6f Compare September 3, 2026 06:32
@olamy

olamy commented Sep 3, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-12.1.x/integration-deps-fb9282b09a branch from 61d6a6f to de032f4 Compare September 3, 2026 21:54
@dependabot
[12.1.x Root pom] Bump the integration-deps group across 1 directory …
681e592 
…with 6 updates

Bumps the integration-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.infinispan.protostream:protostream](https://github.com/infinispan/protostream) | `6.0.10` | `6.0.11` |
| [org.infinispan.protostream:protostream-processor](https://github.com/infinispan/protostream) | `6.0.10` | `6.0.11` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.10.0` | `5.11.0` |
| [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.10.0` | `5.11.0` |
| [org.mongodb:mongodb-driver-core](https://github.com/mongodb/mongo-java-driver) | `5.10.0` | `5.11.0` |
| [com.google.cloud:google-cloud-datastore](https://github.com/googleapis/google-cloud-java) | `2.40.0` | `2.41.0` |



Updates `org.infinispan.protostream:protostream` from 6.0.10 to 6.0.11
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](infinispan/protostream@6.0.10...6.0.11)

Updates `org.infinispan.protostream:protostream-processor` from 6.0.10 to 6.0.11
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](infinispan/protostream@6.0.10...6.0.11)

Updates `org.infinispan.protostream:protostream-processor` from 6.0.10 to 6.0.11
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](infinispan/protostream@6.0.10...6.0.11)

Updates `org.mongodb:mongodb-driver-sync` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.10.0...r5.11.0)

Updates `org.mongodb:bson` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.10.0...r5.11.0)

Updates `org.mongodb:mongodb-driver-core` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.10.0...r5.11.0)

Updates `com.google.cloud:google-cloud-datastore` from 2.40.0 to 2.41.0
- [Release notes](https://github.com/googleapis/google-cloud-java/releases)
- [Changelog](https://github.com/googleapis/google-cloud-java/blob/main/java-document-ai/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-java/commits)

Updates `org.mongodb:bson` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.10.0...r5.11.0)

Updates `org.mongodb:mongodb-driver-core` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.10.0...r5.11.0)

---
updated-dependencies:
- dependency-name: com.google.cloud:google-cloud-datastore
  dependency-version: 2.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
- dependency-name: org.infinispan.protostream:protostream
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.infinispan.protostream:protostream-processor
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.infinispan.protostream:protostream-processor
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.mongodb:bson
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
- dependency-name: org.mongodb:bson
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-12.1.x/integration-deps-fb9282b09a branch from de032f4 to 681e592 Compare September 5, 2026 00:05
@olamy

olamy commented Sep 8, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 8, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/jetty-12.1.x/integration-deps-fb9282b09a branch September 8, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@olamy