Skip to content

Bump the prod-deps group across 1 directory with 35 updates #428

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the prod-deps group across 1 directory with 35 updates #428

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 10, 2025 •
edited
Loading

Bumps the prod-deps group with 35 updates in the / directory:

Package From To
org.graalvm.polyglot:polyglot 24.2.2 25.0.1
org.graalvm.python:python-language 24.2.2 25.0.1
org.graalvm.python:python-resources 24.2.2 25.0.1
org.graalvm.truffle:truffle-runtime 24.2.2 25.0.1
org.graalvm.truffle:truffle-api 24.2.2 25.0.1
org.apache.commons:commons-text 1.14.0 1.15.0
com.squareup.wire:wire-schema-jvm 5.2.0 5.4.0
com.squareup.wire:wire-schema 5.2.0 5.4.0
io.confluent:kafka-json-schema-serializer 8.1.0 8.1.1
io.confluent:kafka-protobuf-serializer 8.1.0 8.1.1
com.fasterxml.jackson.dataformat:jackson-annotations 2.20.0 2.20.1
com.fasterxml.jackson.dataformat:jackson-dataformat-csv 2.20.0 2.20.1
com.fasterxml.jackson.dataformat:jackson-dataformat-xml 2.20.0 2.20.1
com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider 2.20.0 2.20.1
com.fasterxml.jackson.module:jackson-module-jsonSchema-jakarta 2.20.0 2.20.1
org.glassfish.jersey.containers:jersey-container-grizzly2-servlet 3.1.11 4.0.0
org.glassfish.jersey.core:jersey-common 3.1.11 4.0.0
org.glassfish.jersey.core:jersey-client 3.1.11 4.0.0
org.glassfish.jersey.inject:jersey-hk2 3.1.11 4.0.0
org.glassfish.jersey.media:jersey-media-json-jackson 3.1.11 4.0.0
ch.qos.logback:logback-classic 1.5.19 1.5.21
net.logstash.logback:logstash-logback-encoder 8.1 9.0
io.prometheus:prometheus-metrics-instrumentation-jvm 1.4.1 1.4.3
org.junit:junit-bom 6.0.0 6.0.1
org.mockito:mockito-core 5.20.0 5.21.0
org.mockito:mockito-junit-jupiter 5.19.0 5.21.0
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.codehaus.mojo:exec-maven-plugin 3.6.0 3.6.2
org.codehaus.mojo:versions-maven-plugin 2.19.1 2.20.1
org.apache.maven.plugins:maven-resources-plugin 3.3.1 3.4.0
org.jacoco:jacoco-maven-plugin 0.8.13 0.8.14
org.sonarsource.scanner.maven:sonar-maven-plugin 5.2.0.4988 5.5.0.6356
org.assertj:assertj-core 3.26.3 3.27.6
org.apache.commons:commons-csv 1.12.0 1.14.1
org.apache.ws.xmlschema:xmlschema-core 2.3.1 2.3.2

Updates org.graalvm.polyglot:polyglot from 24.2.2 to 25.0.1

Commits
  • 05ec025 release GraalVM 25.0.1
  • 6ea8be5 [GR-69464] Backport to 25.0: Evaluate Merge Explode PE without ProxyPlaceHold...
  • 32edf14 [GR-69811] Backport to 25.0: Mark compiler threads as crashed in both isolates.
  • e179587 [GR-68927] Backport to 25.0: Analyze and Fix Tier 2 Compile Times on function...
  • 386311f [GR-69429] Backport to 25.0: Speed up LinearScan lifetime analysis by compres...
  • 5f699a0 Drop metric changes
  • 26a139b late proxy generation: improvements.
  • 921a2d3 partial evluation: create proxies after PE not during.
  • 579c737 Adapt fix
  • 92a598b Review comments
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-language from 24.2.2 to 25.0.1

Release notes

Sourced from org.graalvm.python:python-language's releases.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-language's changelog.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.
    • See the documentation for more information.
  • Remove support for running with Sulong managed both in embeddings as well as through the graalpy-managed launcher.
  • Rewrite wheelbuilder to be easier to use and contribute to. This version is now the same we run internally to build publishable wheels for some platforms we support, so the community can build the same wheels on their own hardware easily if desired.
  • pip is now able to fetch newer versions of GraalPy patches for third-party packages from graalpython GitHub repository, allowing us to add new patches to released versions.
    • The patch repository can be overridden using PIP_GRAALPY_PATCHES_URL environment variable, which can point to a local path or a URL. It can be disabled by setting it to an empty string.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros.
  • Remove ginstall module. It hasn't been necessary for several releases. Please, use pip install.
  • Remove experimental SetupLLVMLibraryPaths option. It was used to pre-set library path for LLVM toolchain's libc++. The path can still be set manually.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros
  • Added experimental python.IsolateNativeModules option to allow loading native extensions multiple times in different contexts. See the documentation for more information.
  • GraalPy Embedding:
    • Introduced new types: KeywordArguments and PositionalArguments, in the GraalPy Embedding library (org.graalvm.python:python-embedding), to support directly passing keyword and positional arguments from Java to Python.
    • Deprecated the org.graalvm.python.embedding.util API package and added new equivalents to org.graalvm.python.embedding
    • Maven and Gradle plugins do not embed Python home into the generated virtual filesystem. Instead, the handling of language home for any Truffle language, including GraalPy, for the GraalVM Native Image build can be controlled by new Native Image options +H:IncludeLanguageResources and +H:CopyLanguageResources. By default, the whole Python home is embedded into the native executable. In the case of JVM deployment, the language home is embedded in the GraalPy artifacts at Mavencentral.
    • Removed deprecated methods in VirtualFileSystem
  • No longer ship graalpy_virtualenv virtualenv plugin within the standard library. Instead, inject the dependency on it into virtualenv, so that it gets installed only when necessary and can be uninstalled.
  • Rename graalpy_virtualenv to graalpy_virtualenv_seeder.

Version 24.1.0

  • GraalPy is now considered stable for pure Python workloads. While many workloads involving native extension modules work, we continue to consider them experimental. You can use the command-line option --python.WarnExperimentalFeatures to enable warnings for such modules at runtime. In Java embeddings the warnings are enabled by default and you can suppress them by setting the context option 'python.WarnExperimentalFeatures' to 'false'.
  • Update to Python 3.11.7.
  • We now provide intrinsified _pickle module also in the community version.
  • polyglot.eval now raises more meaningful exceptions. Unavailable languages raise ValueError. Exceptions from the polyglot language are raised directly as interop objects (typed as polyglot.ForeignException). The shortcut for executing python files without specifying language has been removed, use regular eval for executing Python code.

... (truncated)

Commits
  • 0284445 release GraalVM 25.0.1
  • 1a24c15 [GR-68952] Backport to 25.0: Fix wrong line endings on windows when downloadi...
  • baca0dc [GR-68973] Backport to 25.0: Github issue #532: datetime.strptime is broken...
  • a7be968 [GR-69541] Backport to 25.0: Fix integer division with large negative divisors
  • 81c2967 Handle windows newlines in JavaInteropTest
  • 13d1a04 Fix spurious rebuilds of pegparser
  • 1b2aef2 Add iprof files to gitignore
  • 2091c8b Fix integer division of large integers
  • 6f54c07 Fix setting time.tzname when the timezone has no DST
  • 85d2e82 Move graalpy-website-build to tier1
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-resources from 24.2.2 to 25.0.1

Release notes

Sourced from org.graalvm.python:python-resources's releases.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-resources's changelog.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.
    • See the documentation for more information.
  • Remove support for running with Sulong managed both in embeddings as well as through the graalpy-managed launcher.
  • Rewrite wheelbuilder to be easier to use and contribute to. This version is now the same we run internally to build publishable wheels for some platforms we support, so the community can build the same wheels on their own hardware easily if desired.
  • pip is now able to fetch newer versions of GraalPy patches for third-party packages from graalpython GitHub repository, allowing us to add new patches to released versions.
    • The patch repository can be overridden using PIP_GRAALPY_PATCHES_URL environment variable, which can point to a local path or a URL. It can be disabled by setting it to an empty string.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros.
  • Remove ginstall module. It hasn't been necessary for several releases. Please, use pip install.
  • Remove experimental SetupLLVMLibraryPaths option. It was used to pre-set library path for LLVM toolchain's libc++. The path can still be set manually.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros
  • Added experimental python.IsolateNativeModules option to allow loading native extensions multiple times in different contexts. See the documentation for more information.
  • GraalPy Embedding:
    • Introduced new types: KeywordArguments and PositionalArguments, in the GraalPy Embedding library (org.graalvm.python:python-embedding), to support directly passing keyword and positional arguments from Java to Python.
    • Deprecated the org.graalvm.python.embedding.util API package and added new equivalents to org.graalvm.python.embedding
    • Maven and Gradle plugins do not embed Python home into the generated virtual filesystem. Instead, the handling of language home for any Truffle language, including GraalPy, for the GraalVM Native Image build can be controlled by new Native Image options +H:IncludeLanguageResources and +H:CopyLanguageResources. By default, the whole Python home is embedded into the native executable. In the case of JVM deployment, the language home is embedded in the GraalPy artifacts at Mavencentral.
    • Removed deprecated methods in VirtualFileSystem
  • No longer ship graalpy_virtualenv virtualenv plugin within the standard library. Instead, inject the dependency on it into virtualenv, so that it gets installed only when necessary and can be uninstalled.
  • Rename graalpy_virtualenv to graalpy_virtualenv_seeder.

Version 24.1.0

  • GraalPy is now considered stable for pure Python workloads. While many workloads involving native extension modules work, we continue to consider them experimental. You can use the command-line option --python.WarnExperimentalFeatures to enable warnings for such modules at runtime. In Java embeddings the warnings are enabled by default and you can suppress them by setting the context option 'python.WarnExperimentalFeatures' to 'false'.
  • Update to Python 3.11.7.
  • We now provide intrinsified _pickle module also in the community version.
  • polyglot.eval now raises more meaningful exceptions. Unavailable languages raise ValueError. Exceptions from the polyglot language are raised directly as interop objects (typed as polyglot.ForeignException). The shortcut for executing python files without specifying language has been removed, use regular eval for executing Python code.

... (truncated)

Commits
  • 0284445 release GraalVM 25.0.1
  • 1a24c15 [GR-68952] Backport to 25.0: Fix wrong line endings on windows when downloadi...
  • baca0dc [GR-68973] Backport to 25.0: Github issue #532: datetime.strptime is broken...
  • a7be968 [GR-69541] Backport to 25.0: Fix integer division with large negative divisors
  • 81c2967 Handle windows newlines in JavaInteropTest
  • 13d1a04 Fix spurious rebuilds of pegparser
  • 1b2aef2 Add iprof files to gitignore
  • 2091c8b Fix integer division of large integers
  • 6f54c07 Fix setting time.tzname when the timezone has no DST
  • 85d2e82 Move graalpy-website-build to tier1
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-runtime from 24.2.2 to 25.0.1

Commits
  • 05ec025 release GraalVM 25.0.1
  • 6ea8be5 [GR-69464] Backport to 25.0: Evaluate Merge Explode PE without ProxyPlaceHold...
  • 32edf14 [GR-69811] Backport to 25.0: Mark compiler threads as crashed in both isolates.
  • e179587 [GR-68927] Backport to 25.0: Analyze and Fix Tier 2 Compile Times on function...
  • 386311f [GR-69429] Backport to 25.0: Speed up LinearScan lifetime analysis by compres...
  • 5f699a0 Drop metric changes
  • 26a139b late proxy generation: improvements.
  • 921a2d3 partial evluation: create proxies after PE not during.
  • 579c737 Adapt fix
  • 92a598b Review comments
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-api from 24.2.2 to 25.0.1

Commits
  • 05ec025 release GraalVM 25.0.1
  • 6ea8be5 [GR-69464] Backport to 25.0: Evaluate Merge Explode PE without ProxyPlaceHold...
  • 32edf14 [GR-69811] Backport to 25.0: Mark compiler threads as crashed in both isolates.
  • e179587 [GR-68927] Backport to 25.0: Analyze and Fix Tier 2 Compile Times on function...
  • 386311f [GR-69429] Backport to 25.0: Speed up LinearScan lifetime analysis by compres...
  • 5f699a0 Drop metric changes
  • 26a139b late proxy generation: improvements.
  • 921a2d3 partial evluation: create proxies after PE not during.
  • 579c737 Adapt fix
  • 92a598b Review comments
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-language from 24.2.2 to 25.0.1

Release notes

Sourced from org.graalvm.python:python-language's releases.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-language's changelog.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.
    • See the documentation for more information.
  • Remove support for running with Sulong managed both in embeddings as well as through the graalpy-managed launcher.
  • Rewrite wheelbuilder to be easier to use and contribute to. This version is now the same we run internally to build publishable wheels for some platforms we support, so the community can build the same wheels on their own hardware easily if desired.
  • pip is now able to fetch newer versions of GraalPy patches for third-party packages from graalpython GitHub repository, allowing us to add new patches to released versions.
    • The patch repository can be overridden using PIP_GRAALPY_PATCHES_URL environment variable, which can point to a local path or a URL. It can be disabled by setting it to an empty string.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros.
  • Remove ginstall module. It hasn't been necessary for several releases. Please, use pip install.
  • Remove experimental SetupLLVMLibraryPaths option. It was used to pre-set library path for LLVM toolchain's libc++. The path can still be set manually.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros
  • Added experimental python.IsolateNativeModules option to allow loading native extensions multiple times in different contexts. See the documentation for more information.
  • GraalPy Embedding:
    • Introduced new types: KeywordArguments and PositionalArguments, in the GraalPy Embedding library (org.graalvm.python:python-embedding), to support directly passing keyword and positional arguments from Java to Python.
    • Deprecated the org.graalvm.python.embedding.util API package and added new equivalents to org.graalvm.python.embedding
    • Maven and Gradle plugins do not embed Python home into the generated virtual filesystem. Instead, the handling of language home for any Truffle language, including GraalPy, for the GraalVM Native Image build can be controlled by new Native Image options +H:IncludeLanguageResources and +H:CopyLanguageResources. By default, the whole Python home is embedded into the native executable. In the case of JVM deployment, the language home is embedded in the GraalPy artifacts at Mavencentral.
    • Removed deprecated methods in VirtualFileSystem
  • No longer ship graalpy_virtualenv virtualenv plugin within the standard library. Instead, inject the dependency on it into virtualenv, so that it gets installed only when necessary and can be uninstalled.
  • Rename graalpy_virtualenv to graalpy_virtualenv_seeder.

Version 24.1.0

  • GraalPy is now considered stable for pure Python workloads. While many workloads involving native extension modules work, we continue to consider them experimental. You can use the command-line option --python.WarnExperimentalFeatures to enable warnings for such modules at runtime. In Java embeddings the warnings are enabled by default and you can suppress them by setting the context option 'python.WarnExperimentalFeatures' to 'false'.
  • Update to Python 3.11.7.
  • We now provide intrinsified _pickle module also in the community version.
  • polyglot.eval now raises more meaningful exceptions. Unavailable languages raise ValueError. Exceptions from the polyglot language are raised directly as interop objects (typed as polyglot.ForeignException). The shortcut for executing python files without specifying language has been removed, use regular eval for executing Python code.

... (truncated)

Commits
  • 0284445 release GraalVM 25.0.1
  • 1a24c15 [GR-68952] Backport to 25.0: Fix wrong line endings on windows when downloadi...
  • baca0dc [GR-68973] Backport to 25.0: Github issue #532: datetime.strptime is broken...
  • a7be968 [GR-69541] Backport to 25.0: Fix integer division with large negative divisors
  • 81c2967 Handle windows newlines in JavaInteropTest
  • 13d1a04 Fix spurious rebuilds of pegparser
  • 1b2aef2 Add iprof files to gitignore
  • 2091c8b Fix integer division of large integers
  • 6f54c07 Fix setting time.tzname when the timezone has no DST
  • 85d2e82 Move graalpy-website-build to tier1
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-resources from 24.2.2 to 25.0.1

Release notes

Sourced from org.graalvm.python:python-resources's releases.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-resources's changelog.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.
    • See the documentation for more information.
  • Remove support for running with Sulong managed both in embeddings as well as through the graalpy-managed launcher.
  • Rewrite wheelbuilder to be easier to use and contribute to. This version is now the same we run internally to build publishable wheels for some platforms we support, so the community can build the same wheels on their own hardware easily if desired.
  • pip is now able to fetch newer versions of GraalPy patches for third-party packages from graalpython GitHub repository, allowing us to add new patches to released versions.
    • The patch repository can be overridden using PIP_GRAALPY_PATCHES_URL environment variable, which can point to a local path or a URL. It can be disabled by setting it to an empty string.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros.
  • Remove ginstall module. It hasn't been necessary for several releases. Please, use pip install.
  • Remove experimental SetupLLVMLibraryPaths option. It was used to pre-set library path for LLVM toolchain's libc++. The path can still be set manually.
  • Added GRAALPY_VERSION and GRAALPY_VERSION_NUM C macros
  • Added experimental python.IsolateNativeModules option to allow loading native extensions multiple times in different contexts. See the documentation for more information.
  • GraalPy Embedding:
    • Introduced new types: KeywordArguments and PositionalArguments, in the GraalPy Embedding library (org.graalvm.python:python-embedding), to support directly passing keyword and positional arguments from Java to Python.
    • Deprecated the org.graalvm.python.embedding.util API package and added new equivalents to org.graalvm.python.embedding
    • Maven and Gradle plugins do not embed Python home into the generated virtual filesystem. Instead, the handling of language home for any Truffle language, including GraalPy, for the GraalVM Native Image build can be controlled by new Native Image options +H:IncludeLanguageResources and +H:CopyLanguageResources. By default, the whole Python home is embedded into the native executable. In the case of JVM deployment, the language home is embedded in the GraalPy artifacts at Mavencentral.
    • Removed deprecated methods in VirtualFileSystem
  • No longer ship graalpy_virtualenv virtualenv plugin within the standard library. Instead, inject the dependency on it into virtualenv, so that it gets installed only when necessary and can be uninstalled.
  • Rename graalpy_virtualenv to graalpy_virtualenv_seeder.

Version 24.1.0

  • GraalPy is now considered stable for pure Python workloads. While many workloads involving native extension modules work, we continue to consider them experimental. You can use the command-line option --python.WarnExperimentalFeatures to enable warnings for such modules at runtime. In Java embeddings the warnings are enabled by default and you can suppress them by setting the context option 'python.WarnExperimentalFeatures' to 'false'.
  • Update to Python 3.11.7.
  • We now provide intrinsified _pickle module also in the community version.
  • polyglot.eval now raises more meaningful exceptions. Unavailable languages raise ValueError. Exceptions from the polyglot language are raised directly as interop objects (typed as polyglot.ForeignException). The shortcut for executing python files without specifying language has been removed, use regular eval for executing Python code.

... (truncated)

Commits
  • 0284445 release GraalVM 25.0.1
  • 1a24c15 [GR-68952] Backport to 25.0: Fix wrong line endings on windows when downloadi...
  • baca0dc [GR-68973] Backport to 25.0: Github issue #532: datetime.strptime is broken...
  • a7be968 [GR-69541] Backport to 25.0: Fix integer division with large negative divisors
  • 81c2967 Handle windows newlines in JavaInteropTest
  • 13d1a04 Fix spurious rebuilds of pegparser
  • 1b2aef2 Add iprof files to gitignore
  • 2091c8b Fix integer division of large integers
  • 6f54c07 Fix setting time.tzname when the timezone has no DST
  • 85d2e82 Move graalpy-website-build to tier1
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-runtime from 24.2.2 to 25.0.1

Commits
  • 05ec025 release GraalVM 25.0.1
  • 6ea8be5 [GR-69464] Backport to 25.0: Evaluate Merge Explode PE without ProxyPlaceHold...
  • 32edf14 [GR-69811] Backport to 25.0: Mark compiler threads as crashed in both isolates.
  • e179587 [GR-68927] Backport to 25.0: Analyze and Fix Tier 2 Compile Times on function...
  • 386311f [GR-69429] Backport to 25.0: Speed up LinearScan lifetime analysis by compres...
  • 5f699a0 Drop metric changes
  • 26a139b late proxy generation: improvements.
  • 921a2d3 partial evluation: create proxies after PE not during.
  • 579c737 Adapt fix
  • 92a598b Review comments
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-api from 24.2.2 to 25.0.1

Commits
  • 05ec025 release GraalVM 25.0.1
  • 6ea8be5 [GR-69464] Backport to 25.0: Evaluate Merge Explode PE without ProxyPlaceHold...
  • 32edf14 [GR-69811] Backport to 25.0: Mark compiler threads as crashed in both isolates.
  • e179587 [GR-68927] Backport to 25.0: Analyze and Fix Tier 2 Compile Times on function...
  • 386311f [GR-69429] Backport to 25.0: Speed up LinearScan lifetime analysis by compres...
  • 5f699a0 Drop metric changes
  • 26a139b late proxy generation: improvements.
  • 921a2d3 partial evluation: create proxies after PE not during.
  • 579c737 Adapt fix
  • 92a598b Review comments
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-text from 1.14.0 to 1.15.0

Changelog

Source...

Description has been truncated

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 10, 2025
@dependabot
Bump the prod-deps group across 1 directory with 35 updates
460e287 
Bumps the prod-deps group with 35 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.graalvm.polyglot:polyglot](https://github.com/oracle/graal) | `24.2.2` | `25.0.1` |
| [org.graalvm.python:python-language](https://github.com/graalvm/graalpython) | `24.2.2` | `25.0.1` |
| [org.graalvm.python:python-resources](https://github.com/graalvm/graalpython) | `24.2.2` | `25.0.1` |
| [org.graalvm.truffle:truffle-runtime](https://github.com/oracle/graal) | `24.2.2` | `25.0.1` |
| [org.graalvm.truffle:truffle-api](https://github.com/oracle/graal) | `24.2.2` | `25.0.1` |
| [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.14.0` | `1.15.0` |
| [com.squareup.wire:wire-schema-jvm](https://github.com/square/wire) | `5.2.0` | `5.4.0` |
| [com.squareup.wire:wire-schema](https://github.com/square/wire) | `5.2.0` | `5.4.0` |
| [io.confluent:kafka-json-schema-serializer](https://github.com/confluentinc/schema-registry) | `8.1.0` | `8.1.1` |
| [io.confluent:kafka-protobuf-serializer](https://github.com/confluentinc/schema-registry) | `8.1.0` | `8.1.1` |
| com.fasterxml.jackson.dataformat:jackson-annotations | `2.20.0` | `2.20.1` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-csv](https://github.com/FasterXML/jackson-dataformats-text) | `2.20.0` | `2.20.1` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.20.0` | `2.20.1` |
| com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider | `2.20.0` | `2.20.1` |
| [com.fasterxml.jackson.module:jackson-module-jsonSchema-jakarta](https://github.com/FasterXML/jackson-module-jsonSchema) | `2.20.0` | `2.20.1` |
| org.glassfish.jersey.containers:jersey-container-grizzly2-servlet | `3.1.11` | `4.0.0` |
| org.glassfish.jersey.core:jersey-common | `3.1.11` | `4.0.0` |
| org.glassfish.jersey.core:jersey-client | `3.1.11` | `4.0.0` |
| org.glassfish.jersey.inject:jersey-hk2 | `3.1.11` | `4.0.0` |
| org.glassfish.jersey.media:jersey-media-json-jackson | `3.1.11` | `4.0.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.19` | `1.5.21` |
| [net.logstash.logback:logstash-logback-encoder](https://github.com/logfellow/logstash-logback-encoder) | `8.1` | `9.0` |
| io.prometheus:prometheus-metrics-instrumentation-jvm | `1.4.1` | `1.4.3` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.20.0` | `5.21.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.19.0` | `5.21.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.0` | `3.6.2` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.19.1` | `2.20.1` |
| [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) | `3.3.1` | `3.4.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |
| [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven) | `5.2.0.4988` | `5.5.0.6356` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.6` |
| [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.12.0` | `1.14.1` |
| org.apache.ws.xmlschema:xmlschema-core | `2.3.1` | `2.3.2` |



Updates `org.graalvm.polyglot:polyglot` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.python:python-language` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.python:python-resources` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.truffle:truffle-runtime` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.truffle:truffle-api` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.python:python-language` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.python:python-resources` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.truffle:truffle-runtime` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.1)

Updates `org.graalvm.truffle:truffle-api` from 24.2.2 to 25.0.1
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.1)

Updates `org.apache.commons:commons-text` from 1.14.0 to 1.15.0
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-text@rel/commons-text-1.14.0...rel/commons-text-1.15.0)

Updates `com.squareup.wire:wire-schema-jvm` from 5.2.0 to 5.4.0
- [Changelog](https://github.com/square/wire/blob/master/CHANGELOG.md)
- [Commits](square/wire@5.2.0...5.4.0)

Updates `com.squareup.wire:wire-schema` from 5.2.0 to 5.4.0
- [Changelog](https://github.com/square/wire/blob/master/CHANGELOG.md)
- [Commits](square/wire@5.2.0...5.4.0)

Updates `com.squareup.wire:wire-schema` from 5.2.0 to 5.4.0
- [Changelog](https://github.com/square/wire/blob/master/CHANGELOG.md)
- [Commits](square/wire@5.2.0...5.4.0)

Updates `io.confluent:kafka-json-schema-serializer` from 8.1.0 to 8.1.1
- [Commits](confluentinc/schema-registry@v8.1.0...v8.1.1)

Updates `io.confluent:kafka-protobuf-serializer` from 8.1.0 to 8.1.1
- [Commits](confluentinc/schema-registry@v8.1.0...v8.1.1)

Updates `io.confluent:kafka-protobuf-serializer` from 8.1.0 to 8.1.1
- [Commits](confluentinc/schema-registry@v8.1.0...v8.1.1)

Updates `com.fasterxml.jackson.dataformat:jackson-annotations` from 2.20.0 to 2.20.1

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-csv` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.20.0...jackson-dataformats-text-2.20.1)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.20.0...jackson-dataformat-xml-2.20.1)

Updates `com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider` from 2.20.0 to 2.20.1

Updates `com.fasterxml.jackson.module:jackson-module-jsonSchema-jakarta` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-module-jsonSchema@jackson-module-jsonSchema-parent-2.20.0...jackson-module-jsonSchema-parent-2.20.1)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.20.0...jackson-dataformat-xml-2.20.1)

Updates `com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider` from 2.20.0 to 2.20.1

Updates `com.fasterxml.jackson.module:jackson-module-jsonSchema-jakarta` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-module-jsonSchema@jackson-module-jsonSchema-parent-2.20.0...jackson-module-jsonSchema-parent-2.20.1)

Updates `org.glassfish.jersey.containers:jersey-container-grizzly2-servlet` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.core:jersey-common` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.core:jersey-client` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.inject:jersey-hk2` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.media:jersey-media-json-jackson` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.core:jersey-common` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.core:jersey-client` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.inject:jersey-hk2` from 3.1.11 to 4.0.0

Updates `org.glassfish.jersey.media:jersey-media-json-jackson` from 3.1.11 to 4.0.0

Updates `ch.qos.logback:logback-classic` from 1.5.19 to 1.5.21
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.19...v_1.5.21)

Updates `net.logstash.logback:logstash-logback-encoder` from 8.1 to 9.0
- [Release notes](https://github.com/logfellow/logstash-logback-encoder/releases)
- [Commits](logfellow/logstash-logback-encoder@logstash-logback-encoder-8.1...logstash-logback-encoder-9.0)

Updates `io.prometheus:prometheus-metrics-instrumentation-jvm` from 1.4.1 to 1.4.3

Updates `org.junit:junit-bom` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.0.1)

Updates `org.mockito:mockito-core` from 5.20.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.21.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.19.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.19.0...v5.21.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.0 to 3.6.2
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.0...3.6.2)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.19.1 to 2.20.1
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.19.1...2.20.1)

Updates `org.apache.maven.plugins:maven-resources-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-resources-plugin/releases)
- [Commits](apache/maven-resources-plugin@maven-resources-plugin-3.3.1...v3.4.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.sonarsource.scanner.maven:sonar-maven-plugin` from 5.2.0.4988 to 5.5.0.6356
- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)
- [Commits](SonarSource/sonar-scanner-maven@5.2.0.4988...5.5.0.6356)

Updates `org.assertj:assertj-core` from 3.26.3 to 3.27.6
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.26.3...assertj-build-3.27.6)

Updates `org.apache.commons:commons-csv` from 1.12.0 to 1.14.1
- [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-csv@rel/commons-csv-1.12.0...rel/commons-csv-1.14.1)

Updates `org.apache.ws.xmlschema:xmlschema-core` from 2.3.1 to 2.3.2

---
updated-dependencies:
- dependency-name: org.graalvm.polyglot:polyglot
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-language
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-resources
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-runtime
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-api
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-language
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-resources
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-runtime
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-api
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: com.squareup.wire:wire-schema-jvm
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: com.squareup.wire:wire-schema
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: com.squareup.wire:wire-schema
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.confluent:kafka-json-schema-serializer
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: io.confluent:kafka-protobuf-serializer
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: io.confluent:kafka-protobuf-serializer
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.dataformat:jackson-annotations
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-csv
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.module:jackson-module-jsonSchema-jakarta
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.fasterxml.jackson.module:jackson-module-jsonSchema-jakarta
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.containers:jersey-container-grizzly2-servlet
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-common
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-client
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.inject:jersey-hk2
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.media:jersey-media-json-jackson
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-common
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-client
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.inject:jersey-hk2
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.media:jersey-media-json-jackson
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: net.logstash.logback:logstash-logback-encoder
  dependency-version: '9.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: io.prometheus:prometheus-metrics-instrumentation-jvm
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-resources-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin
  dependency-version: 5.5.0.6356
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-csv
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.ws.xmlschema:xmlschema-core
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-50e9c55248 branch from 785cc9d to 460e287 Compare December 19, 2025 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant