chore(deps): bump the all group across 1 directory with 64 updates

[dependabot]

Bumps the all group with 64 updates in the /java directory:

Package	From	To
io.grpc:grpc-bom	1.75.0	1.83.1
io.grpc:grpc-netty-shaded	1.75.0	1.83.1
io.grpc:grpc-protobuf	1.75.0	1.83.1
io.grpc:grpc-stub	1.75.0	1.83.1
org.apache.logging.log4j:log4j-api	2.25.4	2.26.1
org.apache.logging.log4j:log4j-slf4j2-impl	2.25.4	2.26.1
org.apache.logging.log4j:log4j-core	2.25.4	2.26.1
org.slf4j:slf4j-api	2.0.17	2.0.18
commons-cli:commons-cli	1.10.0	1.11.0
org.apache.commons:commons-text	1.14.0	1.15.0
commons-io:commons-io	2.20.0	2.22.0
org.apache.commons:commons-lang3	3.18.0	3.20.0
io.debezium:debezium-api	3.2.4.Final	3.2.7.Final
io.debezium:debezium-embedded	3.2.4.Final	3.2.7.Final
io.debezium:debezium-connector-postgres	3.2.4.Final	3.2.7.Final
io.debezium:debezium-connector-mysql	3.2.4.Final	3.2.7.Final
io.debezium:debezium-connector-mongodb	3.2.4.Final	3.2.7.Final
io.debezium:debezium-connector-sqlserver	3.2.4.Final	3.2.7.Final
org.postgresql:postgresql	42.7.12	42.7.13
com.mysql:mysql-connector-j	9.4.0	9.7.0
org.opensearch.client:opensearch-rest-high-level-client	2.19.3	2.19.6
com.google.code.gson:gson	2.13.1	2.14.0
com.google.guava:guava	33.4.8-jre	33.6.0-jre
org.xerial:sqlite-jdbc	3.50.3.0	3.53.2.1
software.amazon.awssdk:s3	2.32.19	2.51.3
software.amazon.awssdk:sts	2.32.19	2.51.3
software.amazon.awssdk:apache-client	2.32.19	2.51.3
software.amazon.awssdk:glue	2.32.19	2.51.3
software.amazon.awssdk:kms	2.32.19	2.51.3
org.eclipse.jetty:jetty-client	12.0.35	12.1.12
org.eclipse.jetty:jetty-util	12.0.35	12.1.12
org.eclipse.jetty:jetty-http	12.0.35	12.1.12
org.testcontainers:testcontainers	1.21.3	1.21.4
org.testcontainers:mysql	1.21.3	1.21.4
org.testcontainers:postgresql	1.21.3	1.21.4
org.testcontainers:mongodb	1.21.3	1.21.4
org.testcontainers:elasticsearch	1.21.3	1.21.4
org.apache.maven.plugins:maven-jar-plugin	3.4.1	3.5.1
org.apache.maven.plugins:maven-surefire-plugin	3.5.3	3.5.6
org.apache.maven.plugins:maven-source-plugin	3.3.1	3.4.0
org.apache.maven.plugins:maven-javadoc-plugin	3.11.2	3.12.0
com.google.protobuf:protobuf-java	3.25.8	3.25.9
org.apache.iceberg:iceberg-core	1.10.1	1.11.0
org.apache.iceberg:iceberg-api	1.10.1	1.11.0
org.apache.iceberg:iceberg-bundled-guava	1.10.1	1.11.0
org.apache.iceberg:iceberg-hive-metastore	1.10.1	1.11.0
org.apache.iceberg:iceberg-aws	1.10.1	1.11.0
org.apache.iceberg:iceberg-gcp	1.10.1	1.11.0
org.apache.iceberg:iceberg-snowflake	1.10.1	1.11.0
org.apache.hadoop:hadoop-common	3.4.1	3.5.0
org.apache.hadoop:hadoop-mapreduce-client-core	3.4.1	3.5.0
org.apache.hadoop:hadoop-mapreduce-client-common	3.4.1	3.5.0
org.apache.hadoop:hadoop-mapreduce-client-jobclient	3.4.1	3.5.0
org.apache.hadoop:hadoop-aws	3.4.1	3.5.0
com.google.cloud:google-cloud-storage	2.55.0	2.71.0
com.google.cloud:google-cloud-kms	2.75.0	2.98.0
org.apache.cassandra:java-driver-core	4.19.0	4.19.3
com.amazon.redshift:redshift-jdbc42	2.2.2	2.2.8
net.snowflake:snowflake-jdbc	3.23.1	3.28.0
org.bouncycastle:bcprov-jdk18on	1.84	1.85.2
org.bouncycastle:bcpkix-jdk18on	1.84	1.85
com.zendesk:mysql-binlog-connector-java	0.30.1	0.31.0
com.zaxxer:HikariCP	6.3.2	6.3.3
org.apache.maven.plugins:maven-assembly-plugin	3.7.1	3.8.0

Updates io.grpc:grpc-bom from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-bom's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

• netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
• core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

• api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
• api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

• okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
• xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
• xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
• xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
• xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

• api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
• core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
• core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
• netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
• core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

• Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
• Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
• Upgrade various dependencies (064272c61d):
  • gson to 2.14.0
  • guava to 33.6.0
  • cel-java to 0.13.0
  • protobuf-java to 3.25.9
  • error-prone-annotations to 2.50.0
  • opentelemetry to 1.63.0

Documentation

• Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits

• 8f621c0 Bump version to 1.83.1
• 2bafe5e Update README etc to reference 1.83.1
• e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
• ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
• b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
• b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
• 1fbfa86 Bump version to 1.83.1-SNAPSHOT
• 8ab6e0a Bump version to 1.83.0
• 33ad6a4 Update README etc to reference 1.83.0
• 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
• Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

• netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
• core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

• api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
• api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

• okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
• xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
• xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
• xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
• xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

• api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
• core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
• core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
• netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
• core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

• Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
• Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
• Upgrade various dependencies (064272c61d):
  • gson to 2.14.0
  • guava to 33.6.0
  • cel-java to 0.13.0
  • protobuf-java to 3.25.9
  • error-prone-annotations to 2.50.0
  • opentelemetry to 1.63.0

Documentation

• Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits

• 8f621c0 Bump version to 1.83.1
• 2bafe5e Update README etc to reference 1.83.1
• e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
• ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
• b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
• b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
• 1fbfa86 Bump version to 1.83.1-SNAPSHOT
• 8ab6e0a Bump version to 1.83.0
• 33ad6a4 Update README etc to reference 1.83.0
• 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
• Additional commits viewable in compare view

Updates io.grpc:grpc-protobuf from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

• netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
• core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

• api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
• api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

• okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
• xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
• xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
• xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
• xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

• api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
• core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
• core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
• netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
• core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

• Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
• Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
• Upgrade various dependencies (064272c61d):
  • gson to 2.14.0
  • guava to 33.6.0
  • cel-java to 0.13.0
  • protobuf-java to 3.25.9
  • error-prone-annotations to 2.50.0
  • opentelemetry to 1.63.0

Documentation

• Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits

• 8f621c0 Bump version to 1.83.1
• 2bafe5e Update README etc to reference 1.83.1
• e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
• ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
• b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
• b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
• 1fbfa86 Bump version to 1.83.1-SNAPSHOT
• 8ab6e0a Bump version to 1.83.0
• 33ad6a4 Update README etc to reference 1.83.0
• 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
• Additional commits viewable in compare view

Updates io.grpc:grpc-stub from 1.75.0 to 1.83.1

Release notes

Sourced from io.grpc:grpc-stub's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

• netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK
• core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

• api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)
• api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

• okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers
• xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85
• xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters
• xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree
• xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

• api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)
• core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.
• core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.
• netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise
• core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

• Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue
• Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)
• Upgrade various dependencies (064272c61d):
  • gson to 2.14.0
  • guava to 33.6.0
  • cel-java to 0.13.0
  • protobuf-java to 3.25.9
  • error-prone-annotations to 2.50.0
  • opentelemetry to 1.63.0

Documentation

• Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits

• 8f621c0 Bump version to 1.83.1
• 2bafe5e Update README etc to reference 1.83.1
• e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
• ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
• b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
• b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
• 1fbfa86 Bump version to 1.83.1-SNAPSHOT
• 8ab6e0a Bump version to 1.83.0
• 33ad6a4 Update README etc to reference 1.83.0
• 17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
• Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-api from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.4 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates commons-cli:commons-cli from 1.10.0 to 1.11.0

Changelog

Sourced from commons-cli:commons-cli's changelog.

Apache Commons CLI 1.11.0 Release Notes

The Apache Commons CLI team is pleased to announce the release of Apache Commons CLI 1.11.0.

Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.

This is a feature and maintenance release. Java 8 or later is required.

New Features

•       Add CommandLine.getOptionCount() to measure option repetition [#396](https://github.com/apache/commons-cli/issues/396). Thanks to David Larochette, Gary Gregory.
  

Fixed Bugs

• CLI-351: Multiple trailing BREAK_CHAR_SET characters cause infinite loop in HelpFormatter. Thanks to Damien Carbonne, Claude Warren, Gary Gregory.
• CLI-351: Fix issue with groups not being reported in help output. #411. Thanks to Damien Carbonne, Claude Warren, Gary Gregory.

Updates

•       Bump org.apache.commons:commons-parent from 85 to 91 [#393](https://github.com/apache/commons-cli/issues/393). Thanks to Gary Gregory, Dependabot.
  

•       Bump commons-io:commons-io from 2.20.0 to 2.21.0. Thanks to Gary Gregory.
  

Historical list of changes: https://commons.apache.org/proper/commons-cli/changes.html

For complete information on Apache Commons CLI, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CLI website:

https://commons.apache.org/proper/commons-cli/

Download page: https://commons.apache.org/proper/commons-cli/download_cli.cgi

Have fun! The Apache Commons Team

---

Apache Commons CLI 1.11.0 Release Notes

The Apache Commons CLI team is pleased to announce the release of Apache Commons CLI 1.11.0.

Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.

This is a feature and maintenance release. Java 8 or later is required.

... (truncated)

Commits

• d746133 Prepare for the release candidate 1.11.0 RC1
• 966ddd6 Prepare for the next release candidate
• 234a34d Use ternary to reduce duplication
• ef98fc4 Better test assertions
• a9baf80 No need to create an intermediary array
• 4c46459 Reduce returns
• 7108379 Javadoc
• 7199a70 Use forEachRemaining
• e852acf Reuse constants
• 395346c Better exception message
• Additional commits viewable in compare view

Updates org.apache.commons:commons-text from 1.14.0 to 1.15.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.15.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.15.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.15.0. This is a feature and maintenance release. Java 8 or later is required.

New features

•        Add experimental CycloneDX VEX file [#683](https://github.com/apache/commons-text/issues/683). Thanks to Piotr P. Karwasz, Gary Gregory.
  

• TEXT-235: Add Damerau-Levenshtein distance #687. Thanks to LorgeN, Gary Gregory.

•        Add unit tests to increase coverage [#719](https://github.com/apache/commons-text/issues/719). Thanks to Michael Hausegger, Gary Gregory.
  

•        Add new test for CharSequenceTranslator#with() [#725](https://github.com/apache/commons-text/issues/725). Thanks to Michael Hausegger, Gary Gregory.
  

•        Add tests and assertions to org.apache.commons.text.similarity to get to 100% code coverage [#727](https://github.com/apache/commons-text/issues/727), [#728](https://github.com/apache/commons-text/issues/728). Thanks to Michael Hausegger.
  

Fixed Bugs

•        Fix exception message typo in XmlStringLookup.XmlStringLookup(Map, Path...). Thanks to Gary Gregory.
  

• TEXT-236: Inserting at the end of a TextStringBuilder throws a StringIndexOutOfBoundsException. Thanks to Pierre Post, Sumit Bera, Alex Herbert, Gary Gregory.

•        Fix TextStringBuilderTest.testAppendToCharBuffer() to use proper argument type [#724](https://github.com/apache/commons-text/issues/724). Thanks to Michael Hausegger.
  

•        Fix Apache RAT plugin console warnings. Thanks to Gary Gregory.
  

•        Fix site XML to use version 2.0.0 XML schema. Thanks to Gary Gregory.
  

•        Removed unreachable threshold verification code in src/main/java/org/apache/commons/text/similarity [#730](https://github.com/apache/commons-text/issues/730). Thanks to Michael Hausegger.
  

•        Enable secure processing for the XML parser in XmlStringLookup in case the underlying JAXP implementation doesn't [#729](https://github.com/apache/commons-text/issues/729). Thanks to 김민재 (minjas0507), Gary Gregory, Piotr Karwasz.
  

Changes

•        Bump org.apache.commons:commons-parent from 85 to 93 [#704](https://github.com/apache/commons-text/issues/704), [#723](https://github.com/apache/commons-text/issues/723), [#726](https://github.com/apache/commons-text/issues/726). Thanks to Gary Gregory.
  

•        Bump commons.bytebuddy.version from 1.17.6 to 1.18.2 [#696](https://github.com/apache/commons-text/issues/696), [#722](https://github.com/apache/commons-text/issues/722). Thanks to Gary Gregory.
  

•        Bump graalvm.version from 24.2.2 to 25.0.1 [#703](https://github.com/apache/commons-text/issues/703), [#716](https://github.com/apache/commons-text/issues/716). Thanks to Gary Gregory, Dependabot.
  

•        Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0. Thanks to Gary Gregory.
  

•        Bump commons-io:commons-io from 2.20.0 to 2.21.0. Thanks to Gary Gregory.
  

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

Download page: https://commons.apache.org/proper/commons-text/download_text.cgi

... (truncated)

Commits

• 04e9374 Prepare for the release candidate 1.15.0 RC1
• 502c4c4 Prepare for the next release candidate
• c6e17ec Use direct access
• 58e1e12 Simplify XML FSP (#731)
• b5052c9 Bump actions/setup-java from 5.0.0 to 5.1.0
• 2e2d4bc Revert "Bump actions/setup-java from 5.0.0 to 5.1.0"
• b0ddbd1 Bump actions/setup-java from 5.0.0 to 5.1.0
• 1c2d382 Add tests with external DTD
• ed3df4b Internal clean up
• bb508f3 Bump actions/checkout from 6.0.0 to 6.0.1
• Additional commits viewable in compare view

Updates commons-io:commons-io from 2.20.0 to 2.22.0

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0

Updates io.debezium:debezium-api from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-embedded from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-postgres from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-mysql from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-mongodb from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-sqlserver from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-embedded from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-postgres from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-mysql from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-mongodb from 3.2.4.Final to 3.2.7.Final

Updates io.debezium:debezium-connector-sqlserver from 3.2.4.Final to 3.2.7.Final

Updates org.postgresql:postgresql from 42.7.12 to 42.7.13

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.13

Changes

• docs: add 42.7.13 release changelog @​davecramer (#4270)
• Adjust EditorConfig für Makefile @​BaumiCoder (#4279)
• fix(scram): fail closed on channel-binding downgrade (no scram bump) @​vlsi (#4272)
• Bump pgjdbc version from 42.7.12 to 42.7.13 @​davecramer (#4269)
• chore: remove test-anorm-sbt module and its disabled CI wiring @​vlsi (#4261)
• refactor(test-gss): convert to Java/JUnit 5 submodule of the main build @​vlsi (#4166)
• ci: derive PG test versions from a Renovate-managed maxPgVersion @​vlsi (#4218)
• feat(insert): cap reWriteBatchedInserts by the protocol limit, not 128 @​vlsi (#4207)
• refactor(metadata): derive getPrimaryKeys from pg_constraint.conkey @​vlsi (#4202)
• fix(protocol): defer flushes until response processing @​vlsi (#4196)
• fix(build): resolve the Temurin 8 test toolchain by vendor @​vlsi (#4257)
• build: include multi-release source sets in the JaCoCo coverage report @​vlsi (#4256)
• fix(ci): read java_vendor before overwriting java_distribution @​vlsi (#4255)
• ci: generate the whole matrix in one batch, coverage job included @​vlsi (#4253)
• ci: pass CODECOV_TOKEN so protected-branch coverage uploads succeed @​vlsi (#4254)
• ci: collect coverage on one pinned job @​vlsi (#4245)
• ci: apply -DqueryTimeout from the matrix query_timeout axis @​vlsi (#4246)
• ci: make Codecov project and patch statuses informational @​vlsi (#4244)
• fix(build): restore JaCoCo XML report so Codecov receives coverage @​vlsi (#4240)
• test(replication): shrink big-transaction inserts to avoid CI timeouts @​vlsi (#4243)
• update maintainers @​davecramer (#4222)
• test: add hermetic test for localSocketAddress @​vlsi (#4224)
• docs(translation): clean up leftover German header in ja.po @​vlsi (#4206)
• Update ja.po @​davecramer (#2004)
• test: add PostgreSQL 18 to the CI test matrix @​vlsi (#4198)
• test: silence expected SSPI warning stack trace in SSPIClientWaffleTest @​vlsi (#4197)
• fix(ssl): build PKIX trust anchors without a KeyStore so FIPS-mode JVMs can load sslrootcert @​vlsi (#4193)
• test: fix flaky sentLocationEqualToLastReceiveLSN replication test @​vlsi (#4175)
• build: promote MethodCanBeStatic to error level @​vlsi (#4172)
• Fix PGInterval.setSeconds to reject out of range and NaN values @​sehrope (#4194)
• Replace connectThreadFactory with connectExecutor @​sehrope (#4165)
• Fix deleting temp file when spooling large stream to disk in StreamWrapper @​sehrope (#4190)
• chore: Add top level /scratch to gitignore @​sehrope (#4164)
• refactor: favour composition over inheritance for Driver.ConnectTask @​vlsi (#4160)
• Fix NumberParser.getFastLong(...) handling of overlong values @​sehrope (#4163)
• build: produce a multi-release jar from reduced-pom.xml on Java 11+ @​vlsi (#4157)
• Add connectThreadFactory and refactor Driver to use FutureTask for loginTimeout connection attempts @​sehrope (#4120)
• test: verify custom properties reach socket factory @​vlsi (#4125)
• test: fix LazyCleanerTest timeouts for the lingering Java 8 cleanup thread @​vlsi (#4122)
• test: stabilise StatementTest.fastCloses on Windows @​vlsi (#4121)
• fix: append default non-proxy hosts when socksNonProxyHosts is set @​davecramer (#4045)
• test: budget terminating Sync in BatchDeadlockTest small-RETURNING branch @​vlsi (#4116)
• test: make message assertions locale-independent @​vlsi (#4113)
• build: drop xgettext default keywords; regenerate translations @​vlsi (#4100)
• ci: opt-in scheduled workflows via ENABLE_SCHEDULED_JOBS repo variable @​vlsi (#4085)
• Avoid direct java.lang.management dependency in maxResultBuffer parser @​mblakley-casana (#4069)
• fix: restore pre-describe for generated-key batches @​bilalshehata (#4014)

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.13] (2026-07-06)

Added

• feat: invalidate the prepared-statement cache when the server reports a search_path change via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema [PR #4259](pgjdbc/pgjdbc#4259)
• feat: reWriteBatchedInserts now merges up to 32768 rows into one multi-values INSERT (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new reWriteBatchedInsertsSize connection property lowers that cap when set; the default of 0 uses that maximum. [PR #4207](pgjdbc/pgjdbc#4207)
• feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into autosave=ALWAYS. Controlled by the new flushCacheOnDdl connection property (default true); set to false for the prior behaviour. [PR #4067](pgjdbc/pgjdbc#4067)
• feat: add connectExecutor connection property to customize the Executor used to run the worker task that performs the connection attempt when loginTimeout is in effect. The value is the fully qualified name of a class implementing java.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named "PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. [PR #4165](pgjdbc/pgjdbc#4165)
• feat: add classLoaderStrategy connection property to control which classloaders the driver searches when loading a class named by a connection property, for example socketFactory. The default driver-first now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set driver to keep the previous driver-classloader-only behaviour, or context-first to prefer the thread context classloader [Issue #2112](pgjdbc/pgjdbc#2112) [PR #4167](pgjdbc/pgjdbc#4167)
• feat: add OID constants for geometric arrays, RECORD, and refcursor [PR #4220](pgjdbc/pgjdbc#4220)
• feat: LargeObject BlobInputStream now skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available [PR #4204](pgjdbc/pgjdbc#4204)

Changed

• refactor: the worker that runs the connection attempt under loginTimeout is now a FutureTask (ConnectTask) instead of the hand-rolled ConnectThread. When the caller hits the timeout, the task is now cancelled with cancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so loginTimeout can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. [PR #4120](pgjdbc/pgjdbc#4120)
• chore: PGXAConnection.ConnectionHandler now rejects setAutoCommit(false) and setSavepoint(...) during an active XA branch, in addition to the long-rejected setAutoCommit(true) / commit() / rollback(). The setSavepoint rejection was already meant to be in place but the guard misspelled the method name as setSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. [PR #4114](pgjdbc/pgjdbc#4114)
• chore: commitPrepared / rollback-of-prepared now return XAER_RMFAIL instead of XAER_RMERR when the underlying connection is left in a non-idle TransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treat XAER_RMFAIL as retryable on a fresh XAResource; the prepared transaction is no longer abandoned. [PR #4114](pgjdbc/pgjdbc#4114)
• refactor: derive getPrimaryKeys from pg_constraint.conkey [PR #4202](pgjdbc/pgjdbc#4202)

Fixed

• fix: the published GitHub release now ships the released postgresql-<version>.jar and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar [Issue #3812](pgjdbc/pgjdbc#3812) [PR #3814](pgjdbc/pgjdbc#3814)
• fix: simplify the Statement#cancel state machine by dropping the redundant CANCELLED state. killTimerTask now waits for the state to return to IDLE directly, which removes a spin-forever case when more than one thread observes the cancel completing [PR #1827](pgjdbc/pgjdbc#1827).
• perf: defer simple-query flushes until the driver reads the response, allowing BEGIN and the following query to share a network flush [Issue #3894](pgjdbc/pgjdbc#3894) [PR #4196](pgjdbc/pgjdbc#4196)
• fix: reWriteBatchedInserts no longer throws IllegalArgumentException when batching a parameterless INSERT (for example INSERT INTO t VALUES (1, 2)) of 256 rows or more [PR #4207](