Skip to content

Bump the metadata group across 1 directory with 11 updates#3981

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/metadata/metadata-d501871a2c
Open

Bump the metadata group across 1 directory with 11 updates#3981
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/metadata/metadata-d501871a2c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026 •
edited
Loading

Bumps the metadata group with 11 updates in the /metadata directory:

Package From To
com.google.guava:guava 32.1.2-jre 33.6.0-jre
commons-io:commons-io 2.18.0 2.22.0
org.codehaus.plexus:plexus-utils 4.0.2 4.0.3
com.ibm.icu:icu4j 73.2 78.3
com.google.protobuf:protobuf-java 3.25.5 4.34.1
com.google.auto.value:auto-value 1.10.2 1.11.1
com.google.auto.value:auto-value-annotations 1.10.2 1.11.1
com.google.truth:truth 1.1.5 1.4.5
com.google.truth.extensions:truth-java8-extension 1.0.1 1.4.5
org.apache.maven.plugins:maven-compiler-plugin 3.8.1 3.15.0
org.apache.maven.plugins:maven-javadoc-plugin 3.5.0 3.12.0

Updates com.google.guava:guava from 32.1.2-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)

33.5.0

Maven

<dependency>
</tr></table>

... (truncated)

Commits

Updates commons-io:commons-io from 2.18.0 to 2.22.0

Updates org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3

Release notes

Sourced from org.codehaus.plexus:plexus-utils's releases.

4.0.3

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • c86a34f [maven-release-plugin] prepare release plexus-utils-4.0.3
  • aa38f66 Fix release-drafter v7 branch filtering (#322)
  • 08018c8 Use filter-by-range instead of filter-by-commitish (#320)
  • bcb8a13 Scope release-drafter to master branch releases (#318)
  • 18fa340 Fix release-drafter v7 label validation error (#317)
  • a1d6820 Fix release-drafter config for v7 (#316)
  • 4ffcc20 Restore release-drafter config with correct tag template (#315)
  • d250e15 Add Automatic-Module-Name manifest entry (#314)
  • 96227de Delete .github/release-drafter.yml
  • 0da61cd Bump release-drafter/release-drafter from 6 to 7
  • Additional commits viewable in compare view

Updates com.ibm.icu:icu4j from 73.2 to 78.3

Release notes

Sourced from com.ibm.icu:icu4j's releases.

ICU 78.3

Unicode® ICU 78.3 is a maintenance update on top of ICU 78 and 78.2, mostly for the CLDR 48.2 bug fixes. In addition, it fixes a C++ code point iterator bug, and updates to timezone data 2026a.

Details: ICU 78 Download: releases/tag/release-78.3 Maven: com.ibm.icu / icu4j / version 78.3

The next major release of ICU will be ICU 79, planned for October. It will update to CLDR 49 and Unicode 18.

ICU 78.2

We are pleased to announce the release of Unicode® ICU 78.2. It updates to CLDR 48.1. These are maintenance releases for ICU 78 and CLDR 48, with limited sets of bug fixes and no API or structural changes.

ICU 78.2 also includes a small number of bug fixes, as well as a minor update for time zone data (tzdata) version 2025c (2025-dec) ICU-23296.

Changes in ICU 78.2:

  • C++ ucasemap_setLocale() better handles errors in reading uninitialized memory from a bogus locale ID
  • Java & C++ yield the correct long time zone name for Europe/Dublin
  • C++ fixes a build issue on the clang-cl compiler related to the 'dllexport' attribute
  • C++ fixes a build issue when operator+ on UnicodeString is used with non-ICU code when ICU headers are included
  • List of all tickets fixed in ICU 78.2

For details, please see https://unicode-org.github.io/icu/download/78.html.

ICU 78.1

We are pleased to announce the release of Unicode® ICU 78. It updates to Unicode 17 (blog), including new characters and scripts, emoji, collation & IDNA changes, and corresponding APIs and implementations.

It also updates to CLDR 48 (beta blog) locale data with new locales, and various additions and corrections.

In Java, there is a draft new Segmenter API which is easier and safer to use than BreakIterator. In C++, there is a new set of APIs for Unicode string (UTF-8/16/32) code point iteration that works seamlessly with modern C++ iterators and ranges.

The Java implementation of the CLDR MessageFormat 2.0 specification has been updated to CLDR 48. The core API has been upgraded to “draft”, while the Data Model API remains in technology preview.

The C++ implementation of MessageFormat 2.0 is at CLDR 47 level and remains in technology preview.

ICU 78 and CLDR 48 are major releases, including a new version of Unicode and major locale data improvements.

ICU 78 RC

We are pleased to announce the release candidate for Unicode® ICU 78. It updates to Unicode 17 (blog), including new characters and scripts, emoji, collation & IDNA changes, and corresponding APIs and implementations.

It also updates to CLDR 48 (beta blog) locale data with new locales, and various additions and corrections.

In Java, there is a draft new Segmenter API which is easier and safer to use than BreakIterator. In C++, there is a new set of APIs for Unicode string (UTF-8/16/32) code point iteration that works seamlessly with modern C++ iterators and ranges.

... (truncated)

Commits

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.34.1

Commits

Updates com.google.auto.value:auto-value from 1.10.2 to 1.11.1

Release notes

Sourced from com.google.auto.value:auto-value's releases.

AutoValue 1.11.1

  • Fixed a crash with @AutoValue.CopyAnnotations(exclude=Missing.class), where Missing is a class that does not exist.
  • Type-use annotations such as @Nullable are now better preserved in generated builder setter method parameters. Previously they could be lost in some circumstances, for example with @Nullable T.
  • An issue with @Nullable type-use annotations in AutoBuilder has been fixed.
  • Report a diagnostic for setters with boxed primitive types for primitive properties.
  • A bug with AutoBuilder and Kotlin data classes has been fixed. If there was a mix of required and optional parameters in a data class with a large number of properties, sometimes the generated code would not compile.

AutoValue 1.11.0

What's Changed

  • AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)
  • Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)
  • AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)
  • Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)
  • The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)
  • The "copy constructor" in a generated Builder is no longer private. (6730615c9)
  • Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)
  • The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

AutoValue 1.10.4

  • A workaround for a JDK bug with reading jar resources has been extended so it always applies, rather than just as a fallback. See #1572. (3f69cd255)
  • If an AutoValue property method is @Nullable, the corresponding field in the generated class will be too. This was already the case for TYPE_USE @Nullable or if the method had @CopyAnnotations, but now @Nullable will be copied in other cases too. (4506804f1)

AutoValue 1.10.3

  • An "incompatible version" issue with Kotlin compilation has been fixed. See #1574. (b21c7f4fb)
  • A warning is now produced if a setX method in a Builder or its return type is marked @Nullable. Those methods always return the Builder instance, which is never null. (e5b4b5484)
Commits
  • 4a03588 Set version number for auto-value-parent to 1.11.1.
  • c5c1ae5 Update do-not-publish configuration.
  • 6d41b70 [maven-release-plugin] prepare for next development iteration
  • 74d3d07 [maven-release-plugin] prepare release auto-value-parent-1.11.1
  • 82eb4f8 Bump the dependencies group in /value with 2 updates
  • d09c2d3 Bump the dependencies group in /value with 4 updates
  • 893034b Delete the WeakHashMap recommendation.
  • 4bcb6b9 Bump net.ltgt.gwt.maven:gwt-maven-plugin from 1.1.0 to 1.2.0 in /value in the...
  • 66a26da Slightly reword @​AutoOneOf docs
  • 7e5e3c8 Bump the dependencies group in /value with 2 updates
  • Additional commits viewable in compare view

Updates com.google.auto.value:auto-value-annotations from 1.10.2 to 1.11.1

Release notes

Sourced from com.google.auto.value:auto-value-annotations's releases.

AutoValue 1.11.1

  • Fixed a crash with @AutoValue.CopyAnnotations(exclude=Missing.class), where Missing is a class that does not exist.
  • Type-use annotations such as @Nullable are now better preserved in generated builder setter method parameters. Previously they could be lost in some circumstances, for example with @Nullable T.
  • An issue with @Nullable type-use annotations in AutoBuilder has been fixed.
  • Report a diagnostic for setters with boxed primitive types for primitive properties.
  • A bug with AutoBuilder and Kotlin data classes has been fixed. If there was a mix of required and optional parameters in a data class with a large number of properties, sometimes the generated code would not compile.

AutoValue 1.11.0

What's Changed

  • AutoValue (including AutoBuilder) no longer bundles the Kotlin metadata API. This may require adding an explicit dependency on org.jetbrains.kotlinx:kotlinx-metadata-jvm:0.9.0 or org.jetbrains.kotlin:kotlin-metadata-jvm:2.0.0 to client code that uses AutoBuilder to build Kotlin classes. The metadata API has changed from kotlinx.metadata to kotlin.metadata, but AutoBuilder uses reflection to function with either. (260b61ec7)
  • Support for generating Java 7 code has been removed from AutoValue, AutoAnnotation, and AutoBuilder. You must be on at least Java 8, or an Android version with desugaring that allows it to pass for Java 8. 1.10.4 is the last AutoValue version with support for Java 7. (b9142b7cd)
  • AutoBuilder now reports an error if it encounters a @Nullable primitive parameter. Primitive types cannot be null, and should not be annotated for nullness. (7cbdeb43b)
  • Annotations on type parameters, like abstract @Nullable T foo(), are now better propagated to fields and constructor parameters. (92d881ed9)
  • The generated toBuilder() method now says new AutoValue_Foo.Builder(this) rather than just new Builder(this), to do the right thing if an extension generates its own subclass of Builder. (324470ba2)
  • The "copy constructor" in a generated Builder is no longer private. (6730615c9)
  • Added support for extending AutoValue.Builder with abstract methods. (7d4b020dd)
  • The annotation processors now support all kinds of resource URLs when loading template resources. This change only affects the case where the AutoValue (etc) processors are being invoked in an unusual environment, for example from a GraalVM app. It does not affect code that is merely being compiled for such an environment. (80b0ada75)

Full Changelog: google/auto@auto-value-1.10.4...auto-value-1.11.0

AutoValue 1.10.4

  • A workaround for a JDK bug with reading jar resources has been extended so it always applies, rather than just as a fallback. See #1572. (3f69cd255)
  • If an AutoValue property method is @Nullable, the corresponding field in the generated class will be too. This was already the case for TYPE_USE @Nullable or if the method had @CopyAnnotations, but now @Nullable will be copied in other cases too. (4506804f1)

AutoValue 1.10.3

  • An "incompatible version" issue with Kotlin compilation has been fixed. See #1574. (b21c7f4fb)
  • A warning is now produced if a setX method in a Builder or its return type is marked @Nullable. Those methods always return the Builder instance, which is never null. (e5b4b5484)
Commits
  • 4a03588 Set version number for auto-value-parent to 1.11.1.
  • c5c1ae5 Update do-not-publish configuration.
  • 6d41b70 [maven-release-plugin] prepare for next development iteration
  • 74d3d07 [maven-release-plugin] prepare release auto-value-parent-1.11.1
  • 82eb4f8 Bump the dependencies group in /value with 2 updates
  • d09c2d3 Bump the dependencies group in /value with 4 updates
  • 893034b Delete the WeakHashMap recommendation.
  • 4bcb6b9 Bump net.ltgt.gwt.maven:gwt-maven-plugin from 1.1.0 to 1.2.0 in /value in the...
  • 66a26da Slightly reword @​AutoOneOf docs
  • 7e5e3c8 Bump the dependencies group in /value with 2 updates
  • Additional commits viewable in compare view

Updates com.google.truth:truth from 1.1.5 to 1.4.5

Release notes

Sourced from com.google.truth:truth's releases.

1.4.5

  • Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e96f)
  • Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef195b)
  • Improved isWithin to pretty-print numbers in its failure messages. (de785536d, 07318c23e)
  • Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d60fdb384aa97da03e2403a6757f63bf129)
  • Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e845)
  • Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75cf4)
  • Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37e7)

v1.4.4

  • Annotated the rest of the main package for nullness, and moved the @NullMarked annotation from individual classes up to the package to avoid a warning under --release 8. (e107aeadc)
  • Improved the failure message for matches to conditionally suggest using containsMatch. (7e9fc7aec)

1.4.3

Known Issue for at least some builds targeting Java 8, fixed in 1.4.4: "unknown enum constant ElementType.MODULE": google/truth#1320. As far as we know, this is only a warning, so it should cause practical problems only if you use -Werror or you perform reflection on @NullMarked under a Java 8 runtime.

  • Added more nullness information to our APIs (in the form of JSpecify annotations). This could lead to additional warnings (or even errors) for users of Kotlin and other nullness checkers. Please report any problems. (ee680cbaf)
  • Deprecated Subject.Factory methods for Java 8 types. We won't remove them, but you can simplify your code by migrating off them: Just replace assertAbout(foos()).that(foo) with assertThat(foo) (or about(foos()).that(foo) with that(foo)). (59e7a5065)

1.4.2

This release is the final step of copying all our methods from Truth8 to Truth. If you have not already migrated your usages from Truth8 to Truth, you may see build errors:

OptionalSubjectTest.java:39: error: reference to assertThat is ambiguous
    assertThat(Optional.of("foo")).isPresent();
    ^
  both method assertThat(@org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth8 and method assertThat(@org.checkerframework.checker.nullness.qual.Nullable Optional<?>) in Truth match

In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'. (You can make that change before upgrading to Truth 1.4.2 or as part of the same commit.)

If you instead need to migrate your project incrementally (for example, because it is very large), you may want to upgrade your version of Truth incrementally, too, following our instructions for 1.3.0 and 1.4.0.

For help

Please feel welcome to open an issue to report problems or request help.

Changelog

  • Removed temporary type parameters from Truth.assertThat(Stream) and Truth.assertThat(Optional). This can create build errors, which you can fix by replacing all your references to Truth8 with references to Truth. (45782bd0e)

1.4.1

This release deprecates Truth8.

All its methods have become available on the main Truth class. In most cases, you can migrate your whole project mechanically: git grep -l Truth8 | xargs perl -pi -e 's/\bTruth8\b/Truth/g;'

While we do not plan to delete Truth8, we recommend migrating off it, at least if you static import assertThat: If you do not migrate, such static imports become ambiguous in Truth 1.4.2, breaking your build.

1.4.0

... (truncated)

Commits
  • 0c43ea0 Set version number for truth-parent to 1.4.5.
  • 24b5a31 Fix TODO style.
  • 7261f72 Make ActualValueInference see through casts and also recognize some of Kotl...
  • 3caa0e8 In ExpectFailure, never generate "value of" lines based on bytecode.
  • a29e1b2 Attempt to fix Javadoc snapshots:
  • 3a0cf9a Bump the github-actions group with 2 updates
  • 3053945 Use the standard parameter name ("expected") in MultimapSubject.isEqualTo.
  • 079b919 Add a TODO to containsNoDuplicates.
  • b515e71 Show only the duplicate keys in the exception message, not all keys.
  • 534518e Don't bother to explicitly set [publishingServerId](https://central.sonatyp...
  • Additional commits viewable in compare view

Updates com.google.truth.extensions:truth-java8-extension from 1.0.1 to 1.4.5

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.8.1 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

3.14.0

... (truncated)

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.12.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.12.0

💥 Breaking changes

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.11.3

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

  • Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use --source-path in legacy mode) (#1217) @​fridrich
  • [MJAVADOC-826] - Don't try to modify project source roots (#358) @​oehme

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 2a06bed [maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0
  • a71ecf9 bump version 3.12.0-SNAPSHOT
  • 88f2b71 [maven-release-plugin] prepare for next development iteration
  • 7e18956 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4
  • c11b76c In legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...
  • bc9904b remove fix mojo (#1263)
  • f310135 Fix package {...} does not exist in legacyMode (#1243)
  • c8270f9 detectOfflineLinks is now false per default for all jar mojo issue #1258 ...
  • 953e609 Delete flaky test (#1260)
  • 2bba7a4 Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 2, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 2, 2026 03:17
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 2, 2026
@dependabot
Bump the metadata group across 1 directory with 11 updates
1410309 
Bumps the metadata group with 11 updates in the /metadata directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.guava:guava](https://github.com/google/guava) | `32.1.2-jre` | `33.6.0-jre` |
| commons-io:commons-io | `2.18.0` | `2.22.0` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `4.0.2` | `4.0.3` |
| [com.ibm.icu:icu4j](https://github.com/unicode-org/icu) | `73.2` | `78.3` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.34.1` |
| [com.google.auto.value:auto-value](https://github.com/google/auto) | `1.10.2` | `1.11.1` |
| [com.google.auto.value:auto-value-annotations](https://github.com/google/auto) | `1.10.2` | `1.11.1` |
| [com.google.truth:truth](https://github.com/google/truth) | `1.1.5` | `1.4.5` |
| com.google.truth.extensions:truth-java8-extension | `1.0.1` | `1.4.5` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.8.1` | `3.15.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.5.0` | `3.12.0` |



Updates `com.google.guava:guava` from 32.1.2-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `commons-io:commons-io` from 2.18.0 to 2.22.0

Updates `org.codehaus.plexus:plexus-utils` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-4.0.2...plexus-utils-4.0.3)

Updates `com.ibm.icu:icu4j` from 73.2 to 78.3
- [Release notes](https://github.com/unicode-org/icu/releases)
- [Commits](https://github.com/unicode-org/icu/commits/release-78.3)

Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.34.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.google.auto.value:auto-value` from 1.10.2 to 1.11.1
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.10.2...auto-value-1.11.1)

Updates `com.google.auto.value:auto-value-annotations` from 1.10.2 to 1.11.1
- [Release notes](https://github.com/google/auto/releases)
- [Commits](google/auto@auto-value-1.10.2...auto-value-1.11.1)

Updates `com.google.truth:truth` from 1.1.5 to 1.4.5
- [Release notes](https://github.com/google/truth/releases)
- [Commits](google/truth@v1.1.5...v1.4.5)

Updates `com.google.truth.extensions:truth-java8-extension` from 1.0.1 to 1.4.5

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.8.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.8.1...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.5.0 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.12.0)

---
updated-dependencies:
- dependency-name: com.google.auto.value:auto-value
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.google.auto.value:auto-value-annotations
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: metadata
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: metadata
- dependency-name: com.google.truth.extensions:truth-java8-extension
  dependency-version: 1.4.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.google.truth:truth
  dependency-version: 1.4.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: com.ibm.icu:icu4j
  dependency-version: '78.3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: metadata
- dependency-name: commons-io:commons-io
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: metadata
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: metadata
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/maven/metadata/metadata-d501871a2c branch from 1c8ef9f to 1410309 Compare May 2, 2026 02:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants