Skip to content

chore(deps): bump the backend-other group across 7 directories with 7 updates - #1643

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/backend/backend-other-feb77defdd
Closed

chore(deps): bump the backend-other group across 7 directories with 7 updates#1643
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/backend/backend-other-feb77defdd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the backend-other group with 3 updates in the /backend directory: org.jetbrains.exposed:exposed-dao, org.jetbrains.exposed:exposed-jdbc and gradle-wrapper.
Bumps the backend-other group with 2 updates in the /backend/api directory: com.netflix.graphql.dgs:graphql-dgs-spring-boot-starter and com.graphql-java:graphql-java-extended-scalars.
Bumps the backend-other group with 1 update in the /backend/crawlers/cli directory: com.fasterxml.jackson.core:jackson-databind.
Bumps the backend-other group with 1 update in the /backend/crawlers/discoverdev.io directory: com.gradleup.shadow.
Bumps the backend-other group with 1 update in the /backend/crawlers/engineeringblogs.xyz directory: com.gradleup.shadow.
Bumps the backend-other group with 1 update in the /backend/crawlers/rm3l.org directory: com.gradleup.shadow.
Bumps the backend-other group with 1 update in the /backend/persistence directory: com.fasterxml.jackson.core:jackson-databind.

Updates org.jetbrains.exposed:exposed-dao from 0.39.2 to 1.6.0

Release notes

Sourced from org.jetbrains.exposed:exposed-dao's releases.

1.6.0

Change log

New Contributors

1.5.1

Change log

  • Fixes CVE-2026-108474: SQL injection through the string arguments of SQL functions, fixed by EXPOSED-1093

New Contributors

1.5.0

Change log

New Contributors

1.4.0

Change log

New Contributors

1.3.1

Change log

New Contributors

1.3.0

Change log

... (truncated)

Changelog

Sourced from org.jetbrains.exposed:exposed-dao's changelog.

1.6.0

Features:

Bug fixes:

Documentation:

Refactoring:

Performance:

Infrastructure:

  • redshift-jdbc42 2.2.8
  • flyway 13.6.0
  • binary-compatibility-validator 0.18.2
  • sqlite-jdbc 3.53.4.0
  • bcprov-jdk18on 1.86
  • plugin-publish 2.2.1
  • r2dbc-postgresql 1.1.3.RELEASE
  • joda-time 2.14.4

1.5.1

Security:

  • Fixes CVE-2026-108474: SQL injection through the string arguments of SQL functions, fixed by EXPOSED-1093 below

... (truncated)

Commits
  • ba50abc chore: Bump Exposed version from 1.5.1 to 1.6.0
  • fd384de chore: Bump Exposed version from 1.5.1 to 1.6.0
  • 8789a23 chore: Bump Exposed version from 1.5.1 to 1.6.0
  • 1570785 chore: Bump Exposed version from 1.5.1 to 1.6.0
  • 376571a docs: chore: update the auto-fill columns section in the DAO CRUD topic (#2974)
  • 0e12654 docs: EXPOSED-1086 Add docs for R2DBC DAO and a what's new topic (#2949)
  • 43a637e fix: EXPOSED-851 Resolve parent ids without extra queries in warmUpReferences...
  • 87b5cc0 chore: comment about CVE-2026-108474 (#2967)
  • 9ef4e83 fix: EXPOSED-1092 Don't insert a JDBC DAO entity that is deleted befo… (#2943)
  • f0ee53d fix: EXPOSED-1088 Bind column defaults in batch insert rows that leav… (#2939)
  • Additional commits viewable in compare view

Updates org.jetbrains.exposed:exposed-jdbc from 0.39.2 to 1.6.0

Release notes

Sourced from org.jetbrains.exposed:exposed-jdbc's releases.

1.6.0

Change log

New Contributors

1.5.1

Change log

  • Fixes CVE-2026-108474: SQL injection through the string arguments of SQL functions, fixed by EXPOSED-1093

New Contributors

1.5.0

Change log

New Contributors

1.4.0

Change log

New Contributors

1.3.1

Change log

New Contributors

1.3.0

Change log

... (truncated)

Changelog

Sourced from org.jetbrains.exposed:exposed-jdbc's changelog.

1.6.0

Features:

Bug fixes:

Documentation:

Refactoring:

Performance:

Infrastructure:

  • redshift-jdbc42 2.2.8
  • flyway 13.6.0
  • binary-compatibility-validator 0.18.2
  • sqlite-jdbc 3.53.4.0
  • bcprov-jdk18on 1.86
  • plugin-publish 2.2.1
  • r2dbc-postgresql 1.1.3.RELEASE
  • joda-time 2.14.4

1.5.1

Security:

  • Fixes CVE-2026-108474: SQL injection through the string arguments of SQL functions, fixed by EXPOSED-1093 below

... (truncated)

Commits
  • ba50abc chore: Bump Exposed version from 1.5.1 to 1.6.0
  • fd384de chore: Bump Exposed version from 1.5.1 to 1.6.0
  • 8789a23 chore: Bump Exposed version from 1.5.1 to 1.6.0
  • 1570785 chore: Bump Exposed version from 1.5.1 to 1.6.0
  • 376571a docs: chore: update the auto-fill columns section in the DAO CRUD topic (#2974)
  • 0e12654 docs: EXPOSED-1086 Add docs for R2DBC DAO and a what's new topic (#2949)
  • 43a637e fix: EXPOSED-851 Resolve parent ids without extra queries in warmUpReferences...
  • 87b5cc0 chore: comment about CVE-2026-108474 (#2967)
  • 9ef4e83 fix: EXPOSED-1092 Don't insert a JDBC DAO entity that is deleted befo… (#2943)
  • f0ee53d fix: EXPOSED-1088 Bind column defaults in batch insert rows that leav… (#2939)
  • Additional commits viewable in compare view

Updates gradle-wrapper from 8.14.1 to 9.8.2

Release notes

Sourced from gradle-wrapper's releases.

9.8.2

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.1

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

... (truncated)

Commits
  • 8de7bcf Speed up the AllVersionsCrossVersion flaky quarantine (#39494)
  • 66805db Run all cross-version targets in flaky quarantine
  • cdd4c8f Skip empty test tasks in the flaky test quarantine
  • 6badb77 Split the AllVersionsCrossVersion quarantine across agents
  • 1655e44 Prepare for 9.8.2 (#39492)
  • 6702214 Prepare for 9.8.2
  • 688c0c1 Fix false warning about unstable graph (#39479)
  • 3601d4f Clarify selector reuse comments in SelectorState
  • 6e836fd Fix false warning about unstable graph
  • a0790e5 Fix hidden artifact cleanup pattern in CheckProject (#39451)
  • Additional commits viewable in compare view

Updates com.netflix.graphql.dgs:graphql-dgs-spring-boot-starter from 5.3.0 to 9.2.2

Release notes

Sourced from com.netflix.graphql.dgs:graphql-dgs-spring-boot-starter's releases.

v9.2.2

Ignore builds/.kotlin to not fail the build because of uncommitted changes.

v9.2.1

What’s Changed

v9.2.0

What’s Changed

v9.1.3

What’s Changed

v9.1.2

What’s Changed

... (truncated)

Commits
  • fe7256e ignore buildsrc/.kotlin dir
  • 90c98c6 Merge pull request #2068 from Netflix/gradlew-update-8.11.1
  • 0c991c8 Merge branch 'master' into gradlew-update-8.11.1
  • eb204f2 Merge pull request #2070 from Netflix/fix/2047
  • 67bb2d7 Remove strictly everywhere because it's no longer necessary
  • e0acaa3 Merge branch 'master' into fix/2047
  • 0df18d0 Merge pull request #2069 from Netflix/fix/2059
  • 3439450 Remove "strictly" for graphql-java and upgrade to Boot 3.3.6
  • 5d3990a Remove incorrect toString() for URL in RestClientGraphQLClient error handling...
  • d3a1950 Update Gradle Wrapper from 8.10.2 to 8.11.1
  • Additional commits viewable in compare view

Updates com.graphql-java:graphql-java-extended-scalars from 22.0 to 24.0

Release notes

Sourced from com.graphql-java:graphql-java-extended-scalars's releases.

24.0

This new version updates the base dependency to graphql-java 24.0

We have six new Scalars included from members of the community. Thank you one and all.

  • HexColorCode
  • Year
  • YearMonth
  • AccurateDuration
  • NominalDuration
  • SecondsSinceEpoch

What's Changed

New Contributors

Full Changelog: graphql-java/graphql-java-extended-scalars@v22.0...v24.0

Commits
  • 2c594c2 Merge pull request #168 from graphql-java/fix-doco-for-24
  • 2c86983 Updated doco for upcoming 24.0
  • d2dd261 Merge pull request #167 from graphql-java/fix-doco
  • d8a609c Fixed docos for #105
  • 05a3bb9 Merge pull request #162 from graphql-java/dependabot/gradle/org.codehaus.groo...
  • 850ae19 Merge pull request #159 from graphql-java/valueToLiteral_support
  • df78c80 Merge pull request #163 from clutcher/seconds_since_epoch_scalar
  • 4470f60 Update ExtendedScalars.java
  • 64a2449 Merge pull request #165 from graphql-java/update-github-actions
  • 29eb914 Update GitHub action to reduce CI flakes
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.3 to 2.22.4

Commits
  • a56a810 [maven-release-plugin] prepare release jackson-databind-2.22.4
  • c172c5d Prep for 2.22.4 release
  • 1e761c0 Merge branch '2.21' into 2.22
  • fe3780f Post-release dep version bump
  • a0e1fad [maven-release-plugin] prepare for next development iteration
  • c92512e [maven-release-plugin] prepare release jackson-databind-2.21.8
  • 0a41b7c Prep for 2.21.8 release
  • ab63665 Remove stale empty 2.23.0 section from 2.22 release notes
  • 2b5a04b Merge branch '2.21' into 2.22
  • 3402e80 Merge branch '2.20' into 2.21
  • Additional commits viewable in compare view

Updates com.gradleup.shadow from 9.4.3 to 9.6.1

Release notes

Sourced from com.gradleup.shadow's releases.

9.6.1

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

[!NOTE] With the introduction of DuplicatesStrategy checking for transformers, you may see warnings like:

'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}

Added

  • Check DuplicatesStrategy for merging transformers. (#2026)

... (truncated)

Changelog

Sourced from com.gradleup.shadow's changelog.

9.6.1 - 2026-07-22

Changed

  • Use GradleException for expected build failures. (#2113)

Fixed

  • Preserve repeated lines in R8 rule files when using minimize { r8 { ... } }. (#2115)

9.6.0 - 2026-07-16

Added

  • Extract R8 rules from dependency JARs when using minimize { r8 { ... } }. (#2089)

Changed

  • Rename ShadowDslMarker to ShadowDsl. (#2091)
  • POTENTIALLY BREAKING: Apply @ShadowDsl to ShadowJar, ResourceTransformer, DependencyFilter, and Relocator. (#2090)
    This restricts nested DSL configuration blocks from implicitly calling outer receiver APIs in Kotlin script files.

Fixed

  • Validate ZIP entry names to prevent Zip Slip path traversal.
  • Avoid resolving unused R8 dependency. (#2101)

9.5.1 - 2026-07-06

Fixed

  • Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0 - 2026-07-06

[!NOTE] With the introduction of DuplicatesStrategy checking for transformers, you may see warnings like:

'META-INF/...kotlin_module' is matched by com.github.jengelman.gradle.plugins.shadow.transformers.KotlinModuleMetadataTransformer but its DuplicatesStrategy is EXCLUDE — duplicates may be silently dropped before the transformer processes them.

If you do not need Kotlin module metadata remapping, you can disable it:

tasks.shadowJar {
  @Suppress("DEPRECATION") // This flag will be disabled and removed in the next major version of Shadow.
  enableKotlinModuleRemapping = false
}

....

Description has been truncated

@dependabot
chore(deps): bump the backend-other group across 7 directories with 7…
bfc669b 
… updates

Bumps the backend-other group with 3 updates in the /backend directory: [org.jetbrains.exposed:exposed-dao](https://github.com/JetBrains/Exposed), [org.jetbrains.exposed:exposed-jdbc](https://github.com/JetBrains/Exposed) and [gradle-wrapper](https://github.com/gradle/gradle).
Bumps the backend-other group with 2 updates in the /backend/api directory: [com.netflix.graphql.dgs:graphql-dgs-spring-boot-starter](https://github.com/Netflix/dgs-framework) and [com.graphql-java:graphql-java-extended-scalars](https://github.com/graphql-java/graphql-java-extended-scalars).
Bumps the backend-other group with 1 update in the /backend/crawlers/cli directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind).
Bumps the backend-other group with 1 update in the /backend/crawlers/discoverdev.io directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the backend-other group with 1 update in the /backend/crawlers/engineeringblogs.xyz directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the backend-other group with 1 update in the /backend/crawlers/rm3l.org directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow).
Bumps the backend-other group with 1 update in the /backend/persistence directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind).


Updates `org.jetbrains.exposed:exposed-dao` from 0.39.2 to 1.6.0
- [Release notes](https://github.com/JetBrains/Exposed/releases)
- [Changelog](https://github.com/JetBrains/Exposed/blob/main/CHANGELOG.md)
- [Commits](JetBrains/Exposed@0.39.2...1.6.0)

Updates `org.jetbrains.exposed:exposed-jdbc` from 0.39.2 to 1.6.0
- [Release notes](https://github.com/JetBrains/Exposed/releases)
- [Changelog](https://github.com/JetBrains/Exposed/blob/main/CHANGELOG.md)
- [Commits](JetBrains/Exposed@0.39.2...1.6.0)

Updates `gradle-wrapper` from 8.14.1 to 9.8.2
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v8.14.1...v9.8.2)

Updates `com.netflix.graphql.dgs:graphql-dgs-spring-boot-starter` from 5.3.0 to 9.2.2
- [Release notes](https://github.com/Netflix/dgs-framework/releases)
- [Commits](Netflix/dgs-framework@v5.3.0...v9.2.2)

Updates `com.graphql-java:graphql-java-extended-scalars` from 22.0 to 24.0
- [Release notes](https://github.com/graphql-java/graphql-java-extended-scalars/releases)
- [Commits](graphql-java/graphql-java-extended-scalars@v22.0...v24.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.3...jackson-databind-2.22.4)

Updates `com.gradleup.shadow` from 9.4.3 to 9.6.1
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Changelog](https://github.com/GradleUp/shadow/blob/main/CHANGELOG.md)
- [Commits](GradleUp/shadow@9.4.3...9.6.1)

Updates `com.gradleup.shadow` from 9.4.3 to 9.6.1
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Changelog](https://github.com/GradleUp/shadow/blob/main/CHANGELOG.md)
- [Commits](GradleUp/shadow@9.4.3...9.6.1)

Updates `com.gradleup.shadow` from 9.4.3 to 9.6.1
- [Release notes](https://github.com/GradleUp/shadow/releases)
- [Changelog](https://github.com/GradleUp/shadow/blob/main/CHANGELOG.md)
- [Commits](GradleUp/shadow@9.4.3...9.6.1)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.3...jackson-databind-2.22.4)

---
updated-dependencies:
- dependency-name: org.jetbrains.exposed:exposed-dao
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-other
- dependency-name: org.jetbrains.exposed:exposed-jdbc
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-other
- dependency-name: gradle-wrapper
  dependency-version: 9.8.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-other
- dependency-name: com.netflix.graphql.dgs:graphql-dgs-spring-boot-starter
  dependency-version: 9.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-other
- dependency-name: com.graphql-java:graphql-java-extended-scalars
  dependency-version: '24.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: backend-other
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-other
- dependency-name: com.gradleup.shadow
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-other
- dependency-name: com.gradleup.shadow
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-other
- dependency-name: com.gradleup.shadow
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-other
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-other
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from rm3l as a code owner October 24, 2026 04:04
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 24, 2026
@rm3l rm3l mentioned this pull request Oct 24, 2026
Open
@dependabot @github

dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 31, 2026
@dependabot
dependabot Bot deleted the dependabot/gradle/backend/backend-other-feb77defdd branch October 31, 2026 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rm3l rm3l Awaiting requested review from rm3l rm3l is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants