Skip to content

Bump the maven-patch-updates group with 2 updates - #47

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-patch-updates-ff4b81b6b8
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-patch-updates-ff4b81b6b8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven-patch-updates group with 2 updates: org.bouncycastle:bcpkix-fips and org.jruby:jruby-core.

Updates org.bouncycastle:bcpkix-fips from 2.1.12 to 2.1.13

Updates org.jruby:jruby-core from 10.1.1.0 to 10.1.2.0

Release notes

Sourced from org.jruby:jruby-core's releases.

JRuby 10.1.2.0

The JRuby community is pleased to announce the release of JRuby 10.1.2.0.

JRuby 10.1.x targets Ruby 4.0 compatibility.

Thank you to our contributors this release, you help keep JRuby moving forward! [@​aminmansuri], [@​drzaiusx11], [@​evaniainbrooks], [@​gillesbergerp], [@​jcharaoui], [@​jwils], [@​kares], [@​lloeki], [@​makenowjust], [@​nobu], [@​sampokuokkanen], [@​shugo]

Notable Changes

Compatibility

Performance

  • Fixed a regression in startup time on MacOS by properly loading native JNR subsystem. #9690
  • Improve performance of Ruby subclasses of Java classes. #9619, #9557
  • Improve performance of autoloads overridden by an actual require. #9677

Standard Library

  • Update to jar-dependencies 0.6.1 using mima for dependency resolution instead of the ruby-maven gem. #9515, #9720
  • Update default and bundled standard library gems. #9705

Default gems

  • erb 6.0.7
  • error_highligh 0.7.2
  • ffi 1.17.4
  • io-console 0.9.4
  • ipaddr 1.2.9
  • json 2.21.2
  • net-protocol 0.4.0
  • pp 0.6.4
  • psych 5.5.0
  • resolv 0.8.0
  • strscan 3.1.8
  • syntax_suggest 3.0.0
  • timeout 0.6.1
  • win32-registry 0.1.2

Bundled gems

  • bigdecimal 4.1.2 (ruby parts only)
  • csv 3.3.6
  • minitest 5.27.0

... (truncated)

Commits
  • 36cf8bb Version 10.1.2.0 updated for release
  • 0e6e01b Merge pull request #9720 from headius/jar_deps_0.6.1
  • 528c114 Update jar-dependencies to 0.6.1
  • b7268d0 Merge remote-tracking branch 'origin/jruby-10.0'
  • 6718ce1 Move AOT cache skip into the example block in GH-9319 regression spec
  • 9bca2f8 Avoid timing-sensitive sleep(250) in TestRubyThread tests
  • f5ea9a2 Merge pull request #9716 from aminmansuri/fix-io-npe-on-concurrent-close
  • 7aaeb92 Move AOT cache skip into the example block in GH-9319 regression spec
  • 99d93c8 Avoid timing-sensitive sleep(250) in TestRubyThread tests
  • 203eb0a Read the IO fd field once for fileno and tty?
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-patch-updates group with 2 updates: org.bouncycastle:bcpkix-fips and [org.jruby:jruby-core](https://github.com/jruby/jruby).


Updates `org.bouncycastle:bcpkix-fips` from 2.1.12 to 2.1.13

Updates `org.jruby:jruby-core` from 10.1.1.0 to 10.1.2.0
- [Release notes](https://github.com/jruby/jruby/releases)
- [Commits](jruby/jruby@10.1.1.0...10.1.2.0)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcpkix-fips
  dependency-version: 2.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-patch-updates
- dependency-name: org.jruby:jruby-core
  dependency-version: 10.1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 29, 2026
@github-actions

github-actions Bot commented Sep 29, 2026 •

Copy link
Copy Markdown

PR: #47
Mode: squash
Topic: GH-policy-parent-47
Change-Ids:
Id20a8da3988fabc459dcbac85e2bef540664b07e
GitHub-Hash: dd9bd3b54dec5147

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/parent/+/147941

@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 6, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-patch-updates-ff4b81b6b8 branch October 6, 2026 14:25
@github-actions

github-actions Bot commented Oct 6, 2026

Copy link
Copy Markdown

Change synchronized in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/parent/+/147941

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Development

Successfully merging this pull request may close these issues.

0 participants