[labianchin]

🏗️ build · 🟢 behaviour-neutral

Motivation

Keep dbeam on a current, Dataflow-supported Apache Beam release (2.76.0 → 2.77.0).

Change

• beam.version 2.76.0 → 2.77.0
• Align with Beam 2.77.0's own dependency versions so the RequireUpperBoundDeps enforcer rule passes:
  • libraries-bom 26.85.0 → 26.87.0
  • netty 4.1.132.Final → 4.1.133.Final
  • pin io.opentelemetry.contrib:opentelemetry-gcp-resources 1.45.0-alpha (google-cloud-storage needs a higher version than libraries-bom provides)
• Fix 5 open Dependabot alerts on JDBC drivers:
  • postgresql 42.7.11 → 42.7.14 (1 alert, fixed in 42.7.12)
  • mariadb-java-client 3.5.8 → 3.5.10 (4 alerts, fixed in 3.5.9)

Expected impact

No functional change. Picks up upstream Beam fixes, newer GCP client, gRPC, and Netty versions, and security fixes in the PostgreSQL and MariaDB drivers.

Risk/rollback

Low risk: only dependency versions change. To roll back, revert the commits.

Validation

mvn verify passes locally: enforcer, compile, and tests.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.87%. Comparing base (b05b278) to head (ea36005).

Additional details and impacted files

@@            Coverage Diff            @@
##             master    #1046   +/-   ##
=========================================
  Coverage     91.87%   91.87%           
  Complexity      288      288           
=========================================
  Files            27       27           
  Lines          1034     1034           
  Branches         90       90           
=========================================
  Hits            950      950           
  Misses           55       55           
  Partials         29       29           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.