[dependabot]

Bumps the minor-and-patch group with 7 updates in the / directory:

Package	From	To
com.fasterxml.jackson.core:jackson-databind	2.22.3	2.22.4
org.apache.httpcomponents.client5:httpclient5	5.6.4	5.6.5
org.apache.httpcomponents.core5:httpcore5	5.4.3	5.4.4
org.apache.httpcomponents.core5:httpcore5-h2	5.4.3	5.4.4
org.jetbrains.kotlin:kotlin-gradle-plugin	2.4.10	2.4.21
jvm	2.4.10	2.4.21
gradle-wrapper	9.7.1	9.8.2

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.3 to 2.22.4

Commits

• a56a810 [maven-release-plugin] prepare release jackson-databind-2.22.4
• c172c5d Prep for 2.22.4 release
• 1e761c0 Merge branch '2.21' into 2.22
• fe3780f Post-release dep version bump
• a0e1fad [maven-release-plugin] prepare for next development iteration
• c92512e [maven-release-plugin] prepare release jackson-databind-2.21.8
• 0a41b7c Prep for 2.21.8 release
• ab63665 Remove stale empty 2.23.0 section from 2.22 release notes
• 2b5a04b Merge branch '2.21' into 2.22
• 3402e80 Merge branch '2.20' into 2.21
• Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.5

This maintenance release fixes several defects found since the previous release including the defect in the async Brotli decompression code that can cause the message exchange to hang indefinitely. It also upgrades HttpCore to version 5.4.4.

Change Log

• Upgraded HttpCore to version 5.4.4. Contributed by Oleg Kalnichevski

• HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay. Contributed by Matthias Kurz <m.kurz at irregular.at>

• HTTPCLIENT-2432: Fixed connection-pool leak in ResponseEntityProxy#cleanup() when runtime #disconnectEndpoint throws an exception (#883). Contributed by Victor Alekseev

• Decode punycode public suffixes in PublicSuffixMatcher#verify (#876). Contributed by Javid Khan

• Fixed Brotli decompression hang with large input buffers. Contributed by Arturo Bernal

• HTTP cache to treat malformed delta-seconds as absent. Contributed by Arturo Bernal Javid Khan

• Bug-fix: ResponseCachingPolicy incorrectly applies neverCache1_1ResponsesWithQueryString config parameter. This config parameter and related functionality will be deprecated in the next feature release and removed in the future. Contributed by Oleg Kalnichevski

• Removed invalid request version check from ResponseCachingPolicy. Contributed by Oleg Kalnichevski

• Fixed resource leaking on error in AsyncCachingExec Contributed by Jeremie Bolduc <16137441+Jouramie at users.noreply.github.com>

Commits

• e6970b4 HttpClient 5.6.5 release
• d0ff6ec Updated release notes for HttpClient 5.6.5 release
• 03a2abc Upgraded HttpCore to version 5.4.4
• 7ed9d66 HTTPCLIENT-2433: Prevent concurrent HTTP/2 request body replay
• bd278a6 Improved connection expiry and eviction example
• 02f11eb HTTPCLIENT-2432: fix connection-pool leak in ResponseEntityProxy.cleanup() wh...
• 8e45f17 decode punycode public suffixes in PublicSuffixMatcher.verify (#876)
• 6d8319a Fix Brotli decompression hang with large input buffers
• 908ccc1 treat malformed delta-seconds as absent in deltaSeconds
• 815043a Moved timeout and stale connection related integration tests into separate gr...
• Additional commits viewable in compare view

Updates org.apache.httpcomponents.core5:httpcore5 from 5.4.3 to 5.4.4

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.4

This maintenance release optimizes HTTP/1.1 message buffer configuration and corrects the handling of asynchronous entity producer state resets after interrupted writes.

Change Log

• HTTPCORE-800: Fixed hexadecimal encoding of control characters in HttpException messages. Contributed by Arturo Bernal

• HTTPCORE-799: Corrected the handling of asynchronous entity producer state resets after interrupted writes. Contributed by Matthias Kurz <m.kurz at irregular.at>

• Fixed URIBuilder encoding policy documentation and null reset behavior. Contributed by Praful Gupta

• Increased the default HTTP/1.1 buffer size to 32 KiB. Contributed by Arturo Bernal

Commits

• d40892e HttpCore 5.4.4 release
• 698b2b6 Updated release notes for HttpCore 5.4.4 release
• 8ada43a HTTPCORE-800: Fix hexadecimal encoding of control characters
• 9cb751e HTTPCORE-799: Reset async entity producer state after interrupted writes
• e871fa0 Fix URIBuilder encoding policy documentation and null reset
• 34542fc Increase default HTTP/1.1 buffer size to 32 KiB
• a79f87e Add details to solve compatibility issues.
• 93421d3 Upgraded HttpCore version to 5.4.4-SNAPSHOT
• See full diff in compare view

Updates org.apache.httpcomponents.core5:httpcore5-h2 from 5.4.3 to 5.4.4

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5-h2's changelog.

Release 5.4.4

This maintenance release optimizes HTTP/1.1 message buffer configuration and corrects the handling of asynchronous entity producer state resets after interrupted writes.

Change Log

• HTTPCORE-800: Fixed hexadecimal encoding of control characters in HttpException messages. Contributed by Arturo Bernal

• HTTPCORE-799: Corrected the handling of asynchronous entity producer state resets after interrupted writes. Contributed by Matthias Kurz <m.kurz at irregular.at>

• Fixed URIBuilder encoding policy documentation and null reset behavior. Contributed by Praful Gupta

• Increased the default HTTP/1.1 buffer size to 32 KiB. Contributed by Arturo Bernal

Commits

• d40892e HttpCore 5.4.4 release
• 698b2b6 Updated release notes for HttpCore 5.4.4 release
• 8ada43a HTTPCORE-800: Fix hexadecimal encoding of control characters
• 9cb751e HTTPCORE-799: Reset async entity producer state after interrupted writes
• e871fa0 Fix URIBuilder encoding policy documentation and null reset
• 34542fc Increase default HTTP/1.1 buffer size to 32 KiB
• a79f87e Add details to solve compatibility issues.
• 93421d3 Upgraded HttpCore version to 5.4.4-SNAPSHOT
• See full diff in compare view

Updates org.jetbrains.kotlin:kotlin-gradle-plugin from 2.4.10 to 2.4.21

Release notes

Sourced from org.jetbrains.kotlin:kotlin-gradle-plugin's releases.

Kotlin 2.4.21

Changelog

Backend. Wasm

• KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

• KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
• KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

• KT-89449 Kotlin/JS: Member names no longer minified in production
• KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

• KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

• KT-89285 SwiftPM import results in flooded log
• KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

• KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script
• KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls
• KT-88458 Audit closeable resource usage
• KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

Kotlin 2.4.21-RC

Changelog

Backend. Wasm

• KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

• KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
• KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

• KT-89449 Kotlin/JS: Member names no longer minified in production
• KT-89363 KJS. Regular class with companion can't extend external class

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-gradle-plugin's changelog.

2.4.21

Backend. Wasm

• KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

• KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
• KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

• KT-89449 Kotlin/JS: Member names no longer minified in production
• KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

• KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

• KT-89285 SwiftPM import results in flooded log
• KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

• KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script
• KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls
• KT-88458 Audit closeable resource usage
• KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

2.4.20

Analysis API

• KT-86546 Check suspicious when over ConeKotlinType in ConeTypeCompatibilityChecker
• KT-85418 Implement an API for accessing deserialized file annotations in Analysis API
• KT-74448 K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt, kotlinx.coroutines
• KT-85856 containingSymbol of constructor property differs for local and non-local classes
• KT-65417 K2 IDE: KTOR false positive expect-actual matching error on enum class because of implicit clone() in non-JVM source sets

Analysis API. Code Compilation

• KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm

Analysis API. FIR

• KT-70552 No expects for actual

... (truncated)

Commits

• 9180ce6 Add changelog for 2.4.21-RC
• 851077b [Serialization] Copy type parameter bounds onto generated serializers (#8421)
• 1b6b624 [Wasm]: Generate a Kotlin-level cast for bridged lambda functions. (#8404)
• 3c223c2 Rrr/2.4.20/core docs (#8322)
• c681c2e [2.4.20] [KT-89285] Stop the xcodebuild logs being output by default (#8277)
• f0645d1 [2.4.20] [JS] Reorder CompilerConfiguration properties initialization (#8282)
• f507ecd [JS] Don't try to initialize an external class's companion object
• c60d7d8 Reflection: fix NoSuchElementException in ConvertFromJava.kt
• 05d1cde REPL: render correct reflected binding type
• 5acec47 Scripting: store collected dependencies recursively
• Additional commits viewable in compare view

Updates jvm from 2.4.10 to 2.4.21

Release notes

Sourced from jvm's releases.

Kotlin 2.4.21

Changelog

Backend. Wasm

• KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

• KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
• KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

• KT-89449 Kotlin/JS: Member names no longer minified in production
• KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

• KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

• KT-89285 SwiftPM import results in flooded log
• KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

• KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script
• KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls
• KT-88458 Audit closeable resource usage
• KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

Kotlin 2.4.21-RC

Changelog

Backend. Wasm

• KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

• KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
• KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

• KT-89449 Kotlin/JS: Member names no longer minified in production
• KT-89363 KJS. Regular class with companion can't extend external class

... (truncated)

Changelog

Sourced from jvm's changelog.

2.4.21

Backend. Wasm

• KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

• KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class
• KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

• KT-89449 Kotlin/JS: Member names no longer minified in production
• KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

• KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

• KT-89285 SwiftPM import results in flooded log
• KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

• KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script
• KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls
• KT-88458 Audit closeable resource usage
• KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

2.4.20

Analysis API

• KT-86546 Check suspicious when over ConeKotlinType in ConeTypeCompatibilityChecker
• KT-85418 Implement an API for accessing deserialized file annotations in Analysis API
• KT-74448 K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt, kotlinx.coroutines
• KT-85856 containingSymbol of constructor property differs for local and non-local classes
• KT-65417 K2 IDE: KTOR false positive expect-actual matching error on enum class because of implicit clone() in non-JVM source sets

Analysis API. Code Compilation

• KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm

Analysis API. FIR

• KT-70552 No expects for actual

... (truncated)

Commits

• 9180ce6 Add changelog for 2.4.21-RC
• 851077b [Serialization] Copy type parameter bounds onto generated serializers (#8421)
• 1b6b624 [Wasm]: Generate a Kotlin-level cast for bridged lambda functions. (#8404)
• 3c223c2 Rrr/2.4.20/core docs (#8322)
• c681c2e [2.4.20] [KT-89285] Stop the xcodebuild logs being output by default (#8277)
• f0645d1 [2.4.20] [JS] Reorder CompilerConfiguration properties initialization (#8282)
• f507ecd [JS] Don't try to initialize an external class's companion object
• c60d7d8 Reflection: fix NoSuchElementException in ConvertFromJava.kt
• 05d1cde REPL: render correct reflected binding type
• 5acec47 Scripting: store collected dependencies recursively
• Additional commits viewable in compare view

Updates gradle-wrapper from 9.7.1 to 9.8.2

Release notes

Sourced from gradle-wrapper's releases.

9.8.2

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.1

This is a patch release for Gradle 9.8.0. We recommend using 9.8.1 instead of 9.8.0.

This release addresses three high rated vulnerabilities:

... (truncated)

Commits

• 8de7bcf Speed up the AllVersionsCrossVersion flaky quarantine (#39494)
• 66805db Run all cross-version targets in flaky quarantine
• cdd4c8f Skip empty test tasks in the flaky test quarantine
• 6badb77 Split the AllVersionsCrossVersion quarantine across agents
• 1655e44 Prepare for 9.8.2 (#39492)
• 6702214 Prepare for 9.8.2
• 688c0c1 Fix false warning about unstable graph (#39479)
• 3601d4f Clarify selector reuse comments in SelectorState
• 6e836fd Fix false warning about unstable graph
• a0790e5 Fix hidden artifact cleanup pattern in CheckProject (#39451)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions