Skip to content

Update all non-major dependencies#4591

Open
solrbot wants to merge 12 commits into
apache:mainfrom
solrbot:renovate/all-non-major-dependencies
Open

Update all non-major dependencies#4591
solrbot wants to merge 12 commits into
apache:mainfrom
solrbot:renovate/all-non-major-dependencies

Conversation

@solrbot

@solrbot solrbot commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator

This PR contains the following updates:

Package Type Update Change Pending
com.github.spotbugs:spotbugs-annotations (source) dependencies minor 4.9.84.10.2
org.owasp.dependencycheck plugin minor 12.1.312.2.2
dev.langchain4j:langchain4j-bom (source) dependencies minor 1.16.31.17.0 1.17.1
org.jetbrains:annotations dependencies minor 26.0.226.1.0
com.google.errorprone:error_prone_core (source) dependencies minor 2.41.02.50.0
com.google.errorprone:error_prone_annotations (source) dependencies minor 2.41.02.50.0
org.eclipse.jdt:ecj (source) dependencies minor 3.39.03.46.0
com.diffplug.spotless plugin minor 8.3.08.7.0 8.8.0
org.checkerframework:checker-qual (source) dependencies minor 3.54.03.55.1
com.carrotsearch.randomizedtesting:randomizedtesting-runner dependencies minor 2.8.42.9.1
org.carrot2:carrot2-core (source) dependencies patch 4.8.14.8.6
net.bytebuddy:byte-buddy-agent (source) dependencies patch 1.18.8-jdk51.18.9
net.bytebuddy:byte-buddy (source) dependencies patch 1.18.8-jdk51.18.9
com.github.ben-manes.versions plugin minor 0.53.00.54.0
com.github.ben-manes.caffeine:caffeine dependencies patch 3.2.33.2.4
org.apache.rat:apache-rat (source) dependencies minor 0.150.18

Release Notes

spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)

v4.10.2

Compare Source

Build
  • Add release protection to ensure version released matches the tag and that snapshot has been removed. (#​4156)
  • Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#​4159)
  • Add binary check to the gradle build to ensure compatibility remains. (#​4159)

v4.10.1

Compare Source

Build
  • 4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.
langchain4j/langchain4j (dev.langchain4j:langchain4j-bom)

v1.17.0: and 1.17.0-beta27

Compare Source

Notable Changes

Other Changes

New Contributors

Full Changelog: langchain4j/langchain4j@1.16.3...1.17.0

JetBrains/java-annotations (org.jetbrains:annotations)

v26.1.0

Compare Source

  • @NotNullByDefault is not experimental anymore.

v26.0.2-1

Compare Source

google/error-prone (com.google.errorprone:error_prone_core)

v2.50.0: Error Prone 2.50.0

New checks:

Closed issues: #​5553, #​5649, #​5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

v2.49.0: Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (1dd9c3a).

New checks:

Closed issues: #​2283, #​3503, #​5210, #​5289, #​5548, #​5548, #​5554, #​5609, #​5614, #​5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

v2.48.0: Error Prone 2.48.0

Changes:

  • Added support for passing flags with command-line argument files (@-files) (8e84edf)

New checks:

Closed issues: #​5529, #​5537, #​5522, #​5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

v2.47.0: Error Prone 2.47.0

New checks:

Closed issues: #​1811, #​4168, #​5459, #​5460

Full changelog: google/error-prone@v2.46.0...v2.47.0

v2.46.0: Error Prone 2.46.0

Changes:

New checks:

Full changelog: google/error-prone@v2.45.0...v2.46.0

v2.45.0: Error Prone 2.45.0

Changes:

  • Improved compatibility with latest JDK 26 EA builds.

New checks:

Closed issues: #​5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

v2.44.0: Error Prone 2.44.0

Changes

Closed issues: #​5218, #​5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

v2.43.0: Error Prone 2.43.0

The minimum supported JDK version to run Error Prone is now JDK 21 (#​4867).

Changes:

  • -XepPatchChecks now skips disabled checks (#​4943)
  • AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

Closed issues: #​4943, #​5102, #​5107, #​5121, #​5158, #​5217, #​5239

Full changelog: google/error-prone@v2.42.0...v2.43.0

v2.42.0: Error Prone 2.42.0

New checks:

Changes:

  • The return type of ASTHelpers.asFlagSet has changed. The previous type was EnumSet<Flags.Flag>, where Flags.Flag is an enum in the javac class Flags. A recent JDK change has replaced that enum with a new top-level enum called FlagsEnum. It is not possible to change ASTHelpers.asFlagSet in a way that would be type-safe and compatible with the enums from JDKs both before and after the change. Instead, the method now returns ImmutableSet<String>, where the strings come from the toString() of the enum constants. That means they are "native", "abstract", etc.
  • Flag IO.print[ln]() in SystemOut.

Full changelog: google/error-prone@v2.41.0...v2.42.0

raphw/byte-buddy (net.bytebuddy:byte-buddy-agent)

v1.18.9

  • Disable use of Unsafe by default when Java 25or newer is discovered.
  • Check for escape when creating folders in Plugin.Engine.
  • Improve OpenJ9 attachment.
  • Avoid null pointer on missing annotation types.
  • Improve diagnostics for external agent attachment.
  • Improve on Gradle context discovery.
  • Support Android libraries on AGP9 or newer.
  • Update ASM.

v1.18.8

  • Improve support for repeatable builds.
  • Fix reordering of exception table in type initializers when instrumenting.
ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)

v3.2.4: 3.2.4

  • Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update
  • Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#​1954)
  • Fixed various minor issues found using AI audits
  • Added ObjectInputFilter support to JCache

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Every minute (* * * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot

@solrbot solrbot added the exempt-stale Prevent a PR from going stale label Jul 2, 2026
@solrbot

solrbot commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml
Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q :dependencies :platform:dependencies :solr:dependencies :solr:api:dependencies :solr:benchmark:dependencies :solr:core:dependencies :solr:cross-dc-manager:dependencies :solr:distribution:dependencies :solr:docker:dependencies :solr:documentation:dependencies :solr:example:dependencies :solr:modules:dependencies :solr:packaging:dependencies :solr:server:dependencies :solr:solr-ref-guide:dependencies :solr:solrj:dependencies :solr:solrj-jetty:dependencies :solr:solrj-streaming:dependencies :solr:solrj-zookeeper:dependencies :solr:test-framework:dependencies :solr:ui:dependencies :solr:webapp:dependencies :solr:modules:analysis-extras:dependencies :solr:modules:clustering:dependencies :solr:modules:cross-dc:dependencies :solr:modules:cuvs:dependencies :solr:modules:extraction:dependencies :solr:modules:gcs-repository:dependencies :solr:modules:jwt-auth:dependencies :solr:modules:langid:dependencies :solr:modules:language-models:dependencies :solr:modules:ltr:dependencies :solr:modules:opentelemetry:dependencies :solr:modules:s3-repository:dependencies :solr:modules:scripting:dependencies :solr:modules:sql:dependencies --update-locks com.github.spotbugs:spotbugs-annotations,org.owasp.dependencycheck:org.owasp.dependencycheck.gradle.plugin,dev.langchain4j:langchain4j-bom,org.jetbrains:annotations,com.google.errorprone:error_prone_core,com.google.errorprone:error_prone_annotations,org.eclipse.jdt:ecj,com.diffplug.spotless:com.diffplug.spotless.gradle.plugin,org.checkerframework:checker-qual,com.carrotsearch.randomizedtesting:randomizedtesting-runner,org.carrot2:carrot2-core,net.bytebuddy:byte-buddy-agent,net.bytebuddy:byte-buddy,com.github.ben-manes.versions:com.github.ben-manes.versions.gradle.plugin,com.github.ben-manes.caffeine:caffeine,org.apache.rat:apache-rat

FAILURE: Build failed with an exception.

* Where:
Script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle' line: 19

* What went wrong:
Groovy DSL script compilation problem
  Could not compile script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle'.
    Location: /tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle line 19
> startup failed:
  script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle': 19: unable to resolve class org.apache.rat.document.impl.FileDocument
   @ line 19, column 1.
     import org.apache.rat.document.impl.FileDocument
     ^
  
  1 error


* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 28s

File name: undefined
Command failed: ./gradlew resolveAndLockAll collectJarInfos --write-locks

FAILURE: Build failed with an exception.

* Where:
Script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle' line: 19

* What went wrong:
Groovy DSL script compilation problem
  Could not compile script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle'.
    Location: /tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle line 19
> startup failed:
  script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle': 19: unable to resolve class org.apache.rat.document.impl.FileDocument
   @ line 19, column 1.
     import org.apache.rat.document.impl.FileDocument
     ^
  
  1 error


* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 8s

File name: undefined
Command failed: ./gradlew kotlinUpgradeYarnLock

FAILURE: Build failed with an exception.

* Where:
Script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle' line: 19

* What went wrong:
Groovy DSL script compilation problem
  Could not compile script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle'.
    Location: /tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle line 19
> startup failed:
  script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle': 19: unable to resolve class org.apache.rat.document.impl.FileDocument
   @ line 19, column 1.
     import org.apache.rat.document.impl.FileDocument
     ^
  
  1 error


* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 8s

File name: undefined
Command failed: ./gradlew updateLicenses

FAILURE: Build failed with an exception.

* Where:
Script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle' line: 19

* What went wrong:
Groovy DSL script compilation problem
  Could not compile script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle'.
    Location: /tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle line 19
> startup failed:
  script '/tmp/renovate/repos/github/apache/solr/gradle/validation/validate-source-patterns.gradle': 19: unable to resolve class org.apache.rat.document.impl.FileDocument
   @ line 19, column 1.
     import org.apache.rat.document.impl.FileDocument
     ^
  
  1 error


* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Get more help at https://help.gradle.org.

BUILD FAILED in 8s

@janhoy

janhoy commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Pushed a commit that makes this bundle build-clean on JDK 21. AI assisted of course... Summary of what changed:

🔻 Reverted the RAT upgrade

apache-rat 0.18 → 0.15. RAT 0.18 removes/relocates org.apache.rat.document.impl.FileDocument, which gradle/validation/validate-source-patterns.gradle imports, breaking the build at configuration time. Leaving the RAT upgrade to already-in-progress #4569

🔧 Fixed breakage from ECJ 3.46

ECJ 3.46 tightened nested generic-method inference and rejected SolrMatchers.subListMatches(...) when fed Matchers.contains(...) / containsInAnyOrder(...) in TestRecovery (javac still accepts it). Fixed in one place by changing the matcher parameter from Matcher<? super List<? super T>> to Matcher<Iterable<? extends T>> — which is both inference-friendly for javac and ECJ and the semantically-correct bound (Hamcrest's contains/containsInAnyOrder return Matcher<Iterable<? extends E>>). subListMatches has no other callers.

📝 Changelog

Title now lists each concrete dependency bump (RAT excluded since reverted).

@janhoy janhoy force-pushed the renovate/all-non-major-dependencies branch from 4556b6b to 1e93702 Compare July 2, 2026 16:58
solrbot and others added 6 commits July 2, 2026 19:41
…icenses

- Revert apache-rat 0.18 -> 0.15 (rat 0.18 removes FileDocument API used by
  validate-source-patterns.gradle); to be handled separately
- Fix SolrMatchers.subListMatches signature for stricter ECJ 3.46 generic
  inference (Matcher<Iterable<? extends T>>), unblocking TestRecovery
- Regenerate gradle.lockfile + license sha1s (missing from the original bot PR)
- List concrete dependency bumps in the changelog title
The error-prone 2.50.0 NotJavadoc check flags Javadoc comments on
methods inside local/anonymous classes, which cannot be documented
with Javadoc. Convert the two /** */ comments to regular /* */
comments in SolrDocument.java.
@janhoy janhoy force-pushed the renovate/all-non-major-dependencies branch from 1e93702 to fa5eece Compare July 2, 2026 17:42
janhoy added 2 commits July 2, 2026 20:40
Use URLEncoder.encode(String, Charset) instead of the deprecated
charset-name overload, removing the now-unnecessary
UnsupportedEncodingException handling.
Error Prone 2.50.0 introduced new/stricter bug patterns (ReferenceEquality,
JdkObsolete, NotJavadoc) that require source-level follow-up, which does not
belong in the bulk "all non-major dependencies" PR. Downgrade error_prone back
to the main-branch version (2.41.0), revert the source fixes that were only
needed for 2.50.0 (SolrParams, SolrDocument), and refresh lockfiles/licenses.

Add a dedicated "Error Prone" Renovate group (com.google.errorprone) so future
compiler-check upgrades land in their own PR for dedicated review. Restore the
monthly Renovate schedule ("before 9am on the first day of the month").

The 2.50.0 upgrade plus all source fixes is preserved on branch
errorprone-2.50.0-upgrade for a future dedicated PR.
janhoy and others added 4 commits July 2, 2026 23:46
randomizedtesting 2.9.1 changed the test name format from
"testFoo {seed=[...]}" to "testFoo[seed=[...]]" (no space). getSaferTestName
only stripped at the first space, so the seed leaked into collection names
derived from it, failing TestPullReplica/TestTlogReplica.testCreateDelete with
invalid collection names. Cut at the first space or '[', matching the branch_9x
fix (c566e61).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants