Skip to content

[12.1.x EE8] Bump the integration-deps group across 1 directory with 3 updates - #15696

Closed
dependabot[bot] wants to merge 1 commit into
jetty-12.1.xfrom
dependabot/maven/jetty-ee8/jetty-12.1.x/integration-deps-489b580304
Closed

[12.1.x EE8] Bump the integration-deps group across 1 directory with 3 updates#15696
dependabot[bot] wants to merge 1 commit into
jetty-12.1.xfrom
dependabot/maven/jetty-ee8/jetty-12.1.x/integration-deps-489b580304

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the integration-deps group with 3 updates in the /jetty-ee8 directory: org.infinispan.protostream:protostream, org.infinispan.protostream:protostream-processor and org.mongodb:mongodb-driver-sync.

Updates org.infinispan.protostream:protostream from 6.0.10 to 6.0.11

Release notes

Sourced from org.infinispan.protostream:protostream's releases.

6.0.11

What's Changed

New Contributors

Full Changelog: infinispan/protostream@6.0.10...6.0.11

Commits
  • 187b66a Releasing 6.0.11
  • 36f13e4 #720 Add unit tests for ProtobufUtil
  • c4f5d44 #733 Generated marshallers box/unbox primitive array elements unnecessarily
  • 0623787 Bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0
  • 613ec48 Bump version.jackson from 2.22.1 to 2.22.2
  • 5f52206 Bump org.apache.maven:apache-maven from 3.9.9 to 3.9.16
  • cc0e8ff Bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4
  • 22b642c Bump version.junit from 6.1.2 to 6.1.3
  • 29d2e2a Bump org.infinispan:infinispan-checkstyle from 16.2.1 to 16.2.2
  • 57374a4 Bump actions/setup-java from 5.6.0 to 5.7.0
  • Additional commits viewable in compare view

Updates org.infinispan.protostream:protostream-processor from 6.0.10 to 6.0.11

Release notes

Sourced from org.infinispan.protostream:protostream-processor's releases.

6.0.11

What's Changed

New Contributors

Full Changelog: infinispan/protostream@6.0.10...6.0.11

Commits
  • 187b66a Releasing 6.0.11
  • 36f13e4 #720 Add unit tests for ProtobufUtil
  • c4f5d44 #733 Generated marshallers box/unbox primitive array elements unnecessarily
  • 0623787 Bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0
  • 613ec48 Bump version.jackson from 2.22.1 to 2.22.2
  • 5f52206 Bump org.apache.maven:apache-maven from 3.9.9 to 3.9.16
  • cc0e8ff Bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4
  • 22b642c Bump version.junit from 6.1.2 to 6.1.3
  • 29d2e2a Bump org.infinispan:infinispan-checkstyle from 16.2.1 to 16.2.2
  • 57374a4 Bump actions/setup-java from 5.6.0 to 5.7.0
  • Additional commits viewable in compare view

Updates org.infinispan.protostream:protostream-processor from 6.0.10 to 6.0.11

Release notes

Sourced from org.infinispan.protostream:protostream-processor's releases.

6.0.11

What's Changed

New Contributors

Full Changelog: infinispan/protostream@6.0.10...6.0.11

Commits
  • 187b66a Releasing 6.0.11
  • 36f13e4 #720 Add unit tests for ProtobufUtil
  • c4f5d44 #733 Generated marshallers box/unbox primitive array elements unnecessarily
  • 0623787 Bump com.google.protobuf:protobuf-java from 4.35.1 to 4.36.0
  • 613ec48 Bump version.jackson from 2.22.1 to 2.22.2
  • 5f52206 Bump org.apache.maven:apache-maven from 3.9.9 to 3.9.16
  • cc0e8ff Bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4
  • 22b642c Bump version.junit from 6.1.2 to 6.1.3
  • 29d2e2a Bump org.infinispan:infinispan-checkstyle from 16.2.1 to 16.2.2
  • 57374a4 Bump actions/setup-java from 5.6.0 to 5.7.0
  • Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-sync from 5.10.0 to 5.11.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.11.0 (August 28, 2026)

What's Changed

CSFLE/QE Http proxies notes

  • The driver always negotiates TLS with the KMS host itself, using the SSLContext configured for the KMS provider. Implementations must not negotiate TLS with the KMS host; doing so would let an intermediary read the key material in transit.
  • An implementation may use TLS for its own connection to the intermediary, in which case it returns an SSLSocket and the driver layers the KMS host's TLS session on top of it.
  • Ownership of the returned socket passes to the driver, which closes it when the KMS request completes. A socket that is never returned must be closed by the implementation.
  • Applicable only to the synchronous driver. The reactive streams driver rejects(RuntimeException) a configured callback.

Code example

Code example uses only the JDK API , so no HTTP client dependency is required. If you use your own HTTP client, it must return the tunnelled socket without negotiating TLS with the KMS host

First define the callback

private static final String PROXY_HOST = "proxy.example.com";
private static final int PROXY_PORT = 8080;
private static final int TIMEOUT_MILLIS = 10_000;

// Routes every KMS request through an HTTP proxy using the HTTP CONNECT method

// refer to the docs https://www.rfc-editor.org/info/rfc9110/#section-9.3.6

KmsConnectCallback proxyCallback = context -> {

Socket socket = new Socket();

try {

// 1. Connect to the proxy, not to the KMS host.

socket.connect(new InetSocketAddress(PROXY_HOST, PROXY_PORT), TIMEOUT_MILLIS);

socket.setSoTimeout(TIMEOUT_MILLIS);


    // 2. Ask the proxy to open a tunnel to the KMS host the driver wants to reach. Only the
    //    driver knows which host that is, so always take it from the context rather than
    //    hard-coding it.
    String target = context.getHost() + ":" + context.getPort();
    String connectRequest = "CONNECT " + target + " HTTP/1.1\r\n"
            + "Host: " + target + "\r\n"
            // If the proxy requires authentication, add the appropriate header, for example:
            // + "Proxy-Authorization: Basic " + base64("user:password") + "\r\n"
            + "\r\n";
    socket.getOutputStream().write(connectRequest.getBytes(StandardCharsets.US_ASCII));

// 3. Check the proxy accepted the tunnel before handing the socket back.
checkProxyAcceptedTunnel(socket.getInputStream());



} catch (IOException | RuntimeException e) {

// The driver never received this socket, so it cannot close it for you.

socket.close();

throw e;




</tr></table>

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 2, 2026
@dependabot dependabot Bot changed the title [12.1.x EE8] Bump the integration-deps group in /jetty-ee8 with 3 updates [12.1.x EE8] Bump the integration-deps group across 1 directory with 3 updates Sep 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-ee8/jetty-12.1.x/integration-deps-489b580304 branch from 1a5ea87 to 3f4ebe7 Compare September 3, 2026 06:32
@olamy

olamy commented Sep 3, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-ee8/jetty-12.1.x/integration-deps-489b580304 branch 2 times, most recently from af543d3 to 775ef01 Compare September 5, 2026 00:04
@olamy

olamy commented Sep 8, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
[12.1.x EE8] Bump the integration-deps group across 1 directory with …
131929c 
…3 updates

Bumps the integration-deps group with 3 updates in the /jetty-ee8 directory: [org.infinispan.protostream:protostream](https://github.com/infinispan/protostream), [org.infinispan.protostream:protostream-processor](https://github.com/infinispan/protostream) and [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver).


Updates `org.infinispan.protostream:protostream` from 6.0.10 to 6.0.11
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](infinispan/protostream@6.0.10...6.0.11)

Updates `org.infinispan.protostream:protostream-processor` from 6.0.10 to 6.0.11
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](infinispan/protostream@6.0.10...6.0.11)

Updates `org.infinispan.protostream:protostream-processor` from 6.0.10 to 6.0.11
- [Release notes](https://github.com/infinispan/protostream/releases)
- [Commits](infinispan/protostream@6.0.10...6.0.11)

Updates `org.mongodb:mongodb-driver-sync` from 5.10.0 to 5.11.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.10.0...r5.11.0)

---
updated-dependencies:
- dependency-name: org.infinispan.protostream:protostream
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.infinispan.protostream:protostream-processor
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.infinispan.protostream:protostream-processor
  dependency-version: 6.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: integration-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-ee8/jetty-12.1.x/integration-deps-489b580304 branch from 775ef01 to 131929c Compare September 8, 2026 09:41
@dependabot @github

dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 9, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/jetty-ee8/jetty-12.1.x/integration-deps-489b580304 branch September 9, 2026 01:55
@olamy

olamy commented Sep 9, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@olamy