Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 26, 2025

Bumps com.github.mwiede:jsch from 2.27.2 to 2.27.3.

Release notes

Sourced from com.github.mwiede:jsch's releases.

jsch-2.27.3

What's Changed

  • 2.27.3 changes by @​norrisjeremy in mwiede/jsch#865
    • Update to Maven 3.9.11.
    • Update to latest Java (24.0.2) release.
    • Ensure that bnd-maven-plugin doesn't add java package imports into OSGi imports.
    • Run Dependabot on Wednesdays since Github is frequently overloaded on Mondays & fails.
  • 2.27.3 changes by @​norrisjeremy in mwiede/jsch#877
    • Drop unneeded compiler-annotations dependency.
    • Generate SPDX SBOM.
    • #852 Fix ChannelAgentForwarding when an unknown agent message type is received immediately preceding a known agent message type.
    • Consistently use Temurin JDK for all Github workflows.
    • Add --enable-native-access=ALL-UNNAMED that will be required for JNA and junixsocket to function in future Java releases.
    • Remove additional extraneous dependencies for log4j-core-test.
    • Use toolchains plugin to select JDK to allow eventual Maven 4 support. -- Maven 4 will only run on Java 17+, so in order to execute tests with Java 8 & 11 in GHA, we'll need to use the toolchains plugin to allow executing tests with a different JDK than used to execute Maven itself.

Dependency Updates

... (truncated)

Commits
  • 561401d [maven-release-plugin] prepare release jsch-2.27.3
  • 85ae26f add execute flag
  • 8a318e2 Merge pull request #877 from norrisjeremy/20250813
  • 5ca897d Merge pull request #880 from mwiede/dependabot/github_actions/actions/checkou...
  • 25ac6c5 Merge pull request #875 from mwiede/dependabot/github_actions/actions/downloa...
  • 778de19 Use toolchains plugin to select JDK to allow eventual Maven 4 support.
  • 7539107 Remove additional extraneous dependencies for log4j-core-test.
  • 61e0531 Add --enable-native-access=ALL-UNNAMED that will be required for JNA and juni...
  • ccce2da Consistently use Temurin JDK for all Github workflows.
  • 91d1cc3 #852 Fix ChannelAgentForwarding when an unknown agent message type is receive...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependency-upgrade Dependency upgrade is needed label Aug 26, 2025
@github-project-automation github-project-automation bot moved this to To review in Pull Requests Aug 26, 2025
@tchiotludo
Copy link
Member

@dependabot rebase

Bumps [com.github.mwiede:jsch](https://github.com/mwiede/jsch) from 2.27.2 to 2.27.3.
- [Release notes](https://github.com/mwiede/jsch/releases)
- [Changelog](https://github.com/mwiede/jsch/blob/master/ChangeLog)
- [Commits](mwiede/jsch@jsch-2.27.2...jsch-2.27.3)

---
updated-dependencies:
- dependency-name: com.github.mwiede:jsch
  dependency-version: 2.27.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/gradle/com.github.mwiede-jsch-2.27.3 branch from 13393b8 to 843e552 Compare September 2, 2025 16:30
Copy link
Contributor

github-actions bot commented Sep 2, 2025

Download Logs
10.7 MB (updated: Sep 2, 25, 4:34:34 PM UTC, expiration: Sep 9, 25, 4:34:34 PM UTC)

@tchiotludo tchiotludo merged commit 0c33ef3 into master Sep 2, 2025
4 checks passed
@tchiotludo tchiotludo deleted the dependabot/gradle/com.github.mwiede-jsch-2.27.3 branch September 2, 2025 17:34
@github-project-automation github-project-automation bot moved this from To review to Done in Pull Requests Sep 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependency-upgrade Dependency upgrade is needed
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

1 participant