Skip to content

Bump the all group with 2 updates#195

Merged
IRus merged 1 commit into
mainfrom
dependabot/gradle/all-df1c011220
Jun 15, 2026
Merged

Bump the all group with 2 updates#195
IRus merged 1 commit into
mainfrom
dependabot/gradle/all-df1c011220

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 2 updates: com.zaxxer:HikariCP and io.micrometer:micrometer-registry-prometheus.

Updates com.zaxxer:HikariCP from 7.0.2 to 7.1.0

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 7.1.0

  • merged #2402 avoid virtual-thread yield spin in ConcurrentBag. Thanks to @​ittaigolde for addressing this and deep investigation into the issue.

Changes in 7.0.2

  • decrease thread yield frequency in ConcurrentBag.unreserve()

Changes in 7.0.1

  • merged #2346 fix regression with setSchema behavior

  • decrease thread yield frequency in ConcurrentBag.requite()

Changes in 7.0.0

  • merged #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

  • fixed #1294 add support for HikariCredentialsProvider class

  • fixed #2265 bail out of the pool filling loop if the thread is interrupted

Changes in 6.3.3

  • backport #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

Changes in 6.3.2

  • fixed #2342 restore module-info.class to jar file, which was lost in 6.3.1

  • fixed #2256 add support for legacy override of getUsername()/getPassword() of HikariDataSource. See project page for documentation of system property com.zaxxer.hikari.legacy.supportUserPassDataSourceOverride.

  • fixed #2323 right or wrong (wrt driver behavior) return to previous Connection.get/setSchema behavior

  • fixed #2288 upgrade dependencies and fix build warnings

Changes in 6.3.1

  • fixed #2315 source jar contains also binary .class files and missing some .java files

  • fixed #2307 remove improper hardcoded timout, use validationTimeout

  • fixed #2305 keep properties key and values as is rather than forcing stringification. Also fixes #2286 and #2304

... (truncated)

Commits
  • e4c04e8 [maven-release-plugin] prepare release HikariCP-7.1.0
  • b7c5afe upgrade fabric8 docker dependency for tests
  • 315ab1c update testcontainer dependency and postgresql test dependency
  • a400521 fix compiler warnings
  • 37167dc prepare for v7.1.0 release
  • 5e63223 Avoid virtual-thread yield spin in ConcurrentBag (#2402)
  • bba167f Update README.md
  • 62d720b update CHANGES for backport release 6.3.3, fix micrometrics dep version
  • c3a2473 Update README.md
  • 25663ef [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.micrometer:micrometer-registry-prometheus from 1.17.0-RC1 to 1.17.0

Release notes

Sourced from io.micrometer:micrometer-registry-prometheus's releases.

1.17.0

See also the 1.17 migration guide and the release notes for 1.17.0-RC1, 1.17.0-M3, 1.17.0-M2, 1.17.0-M1.

🐞 Bug Fixes

  • ArrayIndexOutOfBoundsException when using LongTaskTimer #3877
  • Jetty 12's TimedHandler marks some requests with outcome UNKNOWN #7276
  • MeterRegistry closes HighCardinalityTagsDetector twice if the registry is closed twice #7409
  • Reduce allocation in HTTP server instrumentation #7580
  • Reduce allocation in gRPC server convention #7581

📔 Documentation

  • Clarify time series produced by LongTaskTimer when using Prometheus #6507
  • Document metrics that need to close the MeterBinder #4624
  • Multigauge Documentation lacks overwrite=true #4403

🔨 Dependency Upgrades

  • Bump com.dynatrace.metric.util:dynatrace-metric-utils-java from 2.4.0 to 2.5.0 #7452
  • Bump com.google.auth:google-auth-library-oauth2-http from 1.43.0 to 1.48.0 #7397
  • Bump com.google.cloud:google-cloud-monitoring from 3.89.0 to 3.94.0 #7398
  • Bump com.google.cloud:libraries-bom from 26.79.0 to 26.83.0 #7497
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.6 to 1.9.9 #7552
  • Bump dropwizard-metrics from 4.2.38 to 4.2.39 #7527
  • Bump io.prometheus:prometheus-metrics-bom from 1.5.1 to 1.7.0 #7572
  • Bump software.amazon.awssdk:cloudwatch from 2.42.32 to 2.46.4 #7494

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​blaspat, @​codingkiddo, @​izeye, @​jewoodev, and @​schiemon

Commits
  • 8466fea Merge branch '1.16.x'
  • fa2ed32 Merge branch '1.15.x' into 1.16.x
  • dc2e5e2 Reduce allocation in gRPC server convention
  • 36da131 Reduce allocation in HTTP server instrumentation
  • 9591cb4 Bump com.uber.nullaway:nullaway from 0.13.5 to 0.13.6 (#7575)
  • 7a92a44 Bump software.amazon.awssdk:cloudwatch from 2.46.3 to 2.46.4 (#7576)
  • e11e7c6 Merge branch '1.16.x'
  • d8e8bcb Merge branch '1.15.x' into 1.16.x
  • cf6ac02 Reduce flakiness of PushMeterRegistryTest (#7574)
  • d74759a Bump com.google.cloud:google-cloud-monitoring from 3.93.0 to 3.94.0 (#7573)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 2 updates: [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) and [io.micrometer:micrometer-registry-prometheus](https://github.com/micrometer-metrics/micrometer).


Updates `com.zaxxer:HikariCP` from 7.0.2 to 7.1.0
- [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES)
- [Commits](brettwooldridge/HikariCP@HikariCP-7.0.2...HikariCP-7.1.0)

Updates `io.micrometer:micrometer-registry-prometheus` from 1.17.0-RC1 to 1.17.0
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.17.0-RC1...v1.17.0)

---
updated-dependencies:
- dependency-name: com.zaxxer:HikariCP
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: io.micrometer:micrometer-registry-prometheus
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 15, 2026
@IRus
IRus merged commit 5a4b873 into main Jun 15, 2026
7 of 8 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/all-df1c011220 branch June 15, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Development

Successfully merging this pull request may close these issues.

1 participant