Skip to content

chore(deps): bump the production group with 2 updates - #102

Merged
softwaremill-ci merged 1 commit into
mainfrom
dependabot/gradle/production-d61b2af128
Aug 5, 2026
Merged

chore(deps): bump the production group with 2 updates#102
softwaremill-ci merged 1 commit into
mainfrom
dependabot/gradle/production-d61b2af128

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the production group with 2 updates: com.mysql:mysql-connector-j and ch.qos.logback:logback-classic.

Updates com.mysql:mysql-connector-j from 9.7.0 to 26.7.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 26.7.0

  • Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file URL path forms.

  • Fix for Bug#39328305, X Protocol reader does not validate server-supplied frame length before allocation.

  • Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.

  • Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and connection options.

  • Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet on IOException leaves server thread hanging.

  • Fix for Bug#120096 (Bug#39125648), MysqlConnector/Java Connection Url CharacterEncoding bug. Thanks to Rahman Rejepov for his contribution.

Version 9.7.0

  • Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

  • WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

  • Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

  • Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

  • Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

  • Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

  • Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

  • Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

  • Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

  • Fix for Bug#119271 (Bug#38599496), Connector/J fails to accept legacy value zeroDateTimeBehavior=convertToNull on multi-host URLs (failover).

  • Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them.

Version 9.5.0

  • Fix for Bug#72036 (Bug#18403804), XA isSameRM() shouldn't take database into account.

  • Fix for Bug#62693 (Bug#16722068), XAConnection savepoint capability.

... (truncated)

Commits
  • 559f62d Update for GPL license book.
  • e2a58f7 Update for .gitignore with exclusion rules for codex files.
  • 373584a Fix for Bug#39449361, LOAD DATA LOCAL INFILE accepts ambiguous Windows file U...
  • 1ed6f37 Fix for Bug#39328305, X Protocol reader does not validate server-supplied fra...
  • 55a2860 Fix for Bug#39327277, Restrict SSL keystore loading to local file inputs.
  • 9ce460a Update for CalVer numbering scheme.
  • 20e1e5d Update for README, README.md and CONTRIBUTING.md files.
  • f40d3be Post-release version bump for CalVer numbering scheme.
  • 61cf1f6 Fix for Bug#39320456, Unexpected behavior with LOAD DATA LOCAL INFILE and con...
  • 2c2d139 Fix for Bug#120227 (Bug#39204043), LOAD DATA LOCAL INFILE: missing EOF packet...
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.6.0 to 1.6.1

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.1

2026-07-28 Release of logback version 1.6.1

• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. .gz, .zip, .xz). Previously it used a nanotime-based .tmp suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)

• On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact.

• ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. This issue was reported in issues/1043 by seonwoo_jung who also provided the relevant PR.

• LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. This issue was reported in issues/1046 by seonwoo_jung who also provided the relevant PR.

• FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. This enhancement was contributed in [PR #1041](qos-ch/logback#1041) by seonwoo_jung.

• More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 57759f433000a133088ef0441038963134437fbd associated with the tag v_1.6.1. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

• See https://logback.qos.ch/news.html#1.6.1 for the original text.

Commits
  • 57759f4 prepare release 1.6.1
  • 175f99f fix imports
  • 4b8773e add compressionFailureLeavesOriginalFileIntact test for XZ compression
  • cafaf11 do not delete original file if compression fails
  • ee50125 let the temporary file before compression be target file without the .gz or ....
  • 5626acc minor refactoring
  • d97da4f minor refactoring
  • 159c045 more defensive coding in SyslogOutputStream and in SyslogAppenderBase
  • 9427d6b slight refactoring for clarity
  • 79c4179 slight refactoring
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production group with 2 updates: [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) and [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).


Updates `com.mysql:mysql-connector-j` from 9.7.0 to 26.7.0
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/trunk/CHANGES)
- [Commits](mysql/mysql-connector-j@9.7.0...26.7.0)

Updates `ch.qos.logback:logback-classic` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.0...v_1.6.1)

---
updated-dependencies:
- dependency-name: com.mysql:mysql-connector-j
  dependency-version: 26.7.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the automerge Auto-merge after CI passes label Aug 5, 2026
Copilot AI lite review requested due to automatic review settings August 5, 2026 10:24
@dependabot dependabot Bot added the automerge Auto-merge after CI passes label Aug 5, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates dependency versions in the Gradle version catalog.

Changes:

  • Updated the mysql dependency version.
  • Updated the logback dependency version.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@softwaremill-ci
softwaremill-ci merged commit d7b71f2 into main Aug 5, 2026
7 checks passed
@softwaremill-ci
softwaremill-ci deleted the dependabot/gradle/production-d61b2af128 branch August 5, 2026 10:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automerge Auto-merge after CI passes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants