Skip to content

build(deps): bump the maven-dependencies group across 1 directory with 9 updates - #4871

Merged
kubernetes-prow[bot] merged 2 commits into
masterfrom
dependabot/maven/maven-dependencies-3519deff0f
Aug 4, 2026
Merged

build(deps): bump the maven-dependencies group across 1 directory with 9 updates#4871
kubernetes-prow[bot] merged 2 commits into
masterfrom
dependabot/maven/maven-dependencies-3519deff0f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 9 updates in the / directory:

Package From To
commons-codec:commons-codec 1.22.0 1.22.1
software.amazon.awssdk:sts 2.49.5 2.50.0
software.amazon.awssdk:auth 2.49.5 2.50.0
software.amazon.awssdk:http-auth-aws 2.49.5 2.50.0
software.amazon.awssdk:http-auth-spi 2.49.5 2.50.0
software.amazon.awssdk:http-client-spi 2.49.5 2.50.0
software.amazon.awssdk:utils 2.49.5 2.50.0
com.google.auth:google-auth-library-oauth2-http 1.49.0 1.50.0
org.apache.felix:maven-bundle-plugin 6.0.2 6.1.0

Updates commons-codec:commons-codec from 1.22.0 to 1.22.1

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.22.1 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

Fixed Bugs

  • CODEC-344: Base64.Builder.setEncodeTable(byte...) accepts invalid custom alphabets. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-340: Base58.Builder.setEncodeTable(byte...) is ignored when encoding and decoding. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-342: Base32.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-343: Base32.Builder.setHexDecodeTable(boolean) sets the encode table to a decode lookup table. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-341: Base16.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-339: URLCodec.encodeUrl(BitSet, byte[]) allows custom safe sets to emit URL encoding control characters. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-338: PercentCodec loses literal '+' when plusForSpace is enabled. Thanks to Ruiqi Dong, Gary Gregory.
  • CODEC-337: Digest ALL reuses System.in, so only the first algorithm sees the real input (#431). Thanks to Ruiqi Dong, Gary Gregory.
  •         Fix Base64.toIntegerBytes(BigInteger) for zero edge case ([#441](https://github.com/apache/commons-codec/issues/441)). Thanks to Gary Gregory.
    
  •         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
    
  •         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
    
  •         StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails fast on null input. Thanks to Gary Gregory.
    

Changes

  •         Bump org.apache.commons:commons-parent from 98 to 103. Thanks to Gary Gregory.
    
  •         Bump commons-io:commons-io from 2.21.0 to 2.22.0. Thanks to Gary Gregory.
    

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi


Commits
  • dc8f6c8 Prepare for the release candidate 1.22.1 RC1
  • 8203c1c Prepare for the next release candidate
  • 5647fe2 StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails
  • 00c27a9 Reduce vertical whitespace
  • 568f2d7 Remove unused method
  • 316fb15 Remove unused method
  • bf6b543 Bump actions/checkout from 7.0.0 to 7.0.1
  • e14cdfe Extract redundant code.
  • 3351e63 Add messages when throwing NullPointerException.
  • f22dab7 Update SCM tag
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:sts from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:auth from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:http-auth-aws from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:http-auth-spi from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:http-client-spi from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:utils from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:auth from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:http-auth-aws from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:http-auth-spi from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:http-client-spi from 2.49.5 to 2.50.0

Updates software.amazon.awssdk:utils from 2.49.5 to 2.50.0

Updates com.google.auth:google-auth-library-oauth2-http from 1.49.0 to 1.50.0

Updates org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 9 updates

Bumps the maven-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.0` | `1.22.1` |
| software.amazon.awssdk:sts | `2.49.5` | `2.50.0` |
| software.amazon.awssdk:auth | `2.49.5` | `2.50.0` |
| software.amazon.awssdk:http-auth-aws | `2.49.5` | `2.50.0` |
| software.amazon.awssdk:http-auth-spi | `2.49.5` | `2.50.0` |
| software.amazon.awssdk:http-client-spi | `2.49.5` | `2.50.0` |
| software.amazon.awssdk:utils | `2.49.5` | `2.50.0` |
| com.google.auth:google-auth-library-oauth2-http | `1.49.0` | `1.50.0` |
| org.apache.felix:maven-bundle-plugin | `6.0.2` | `6.1.0` |



Updates `commons-codec:commons-codec` from 1.22.0 to 1.22.1
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.22.0...rel/commons-codec-1.22.1)

Updates `software.amazon.awssdk:sts` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:auth` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:http-auth-aws` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:http-auth-spi` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:http-client-spi` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:utils` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:auth` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:http-auth-aws` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:http-auth-spi` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:http-client-spi` from 2.49.5 to 2.50.0

Updates `software.amazon.awssdk:utils` from 2.49.5 to 2.50.0

Updates `com.google.auth:google-auth-library-oauth2-http` from 1.49.0 to 1.50.0

Updates `org.apache.felix:maven-bundle-plugin` from 6.0.2 to 6.1.0

---
updated-dependencies:
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:sts
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-aws
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-spi
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-client-spi
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:utils
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-aws
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-auth-spi
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:http-client-spi
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:utils
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.google.auth:google-auth-library-oauth2-http
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.felix:maven-bundle-plugin
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 3, 2026
@kubernetes-prow kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Aug 3, 2026
@kubernetes-prow kubernetes-prow Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Aug 3, 2026
@brendandburns

Copy link
Copy Markdown
Contributor

/lgtm
/approve

@kubernetes-prow kubernetes-prow Bot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Aug 4, 2026
@kubernetes-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: brendandburns, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubernetes-prow kubernetes-prow Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 4, 2026
@kubernetes-prow
kubernetes-prow Bot merged commit e1437f9 into master Aug 4, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/maven-dependencies-3519deff0f branch August 4, 2026 17:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. dependencies Pull requests that update a dependency file java Pull requests that update Java code lgtm "Looks good to me", indicates that a PR is ready to be merged. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant