Skip to content

Combined dependencies PR #1899

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
iwahbe merged 19 commits into from
Oct 8, 2025
Merged

Combined dependencies PR #1899

iwahbe merged 19 commits into from
Oct 8, 2025

Conversation

@iwahbe
Copy link
Member

@iwahbe iwahbe commented Oct 7, 2025

Combining multiple dependencies PRs into one.

Instructions for merging
  • Use a merge commit, so that GitHub will mark all original PRs as merged.
  • If your repository does not have merge commits enabled, please temporarily enable them in settings. Tick Allow merge commits in the repository settings.
  • When ready, merge this PR using Create a merge commit.

Combined PRs

dependabot bot and others added 18 commits April 28, 2025 14:32
@dependabot
build(deps): bump jaxxstorm/action-install-gh-release
801bfeb 
Bumps [jaxxstorm/action-install-gh-release](https://github.com/jaxxstorm/action-install-gh-release) from 1.14.0 to 2.1.0.
- [Release notes](https://github.com/jaxxstorm/action-install-gh-release/releases)
- [Commits](jaxxstorm/action-install-gh-release@v1.14.0...v2.1.0)

---
updated-dependencies:
- dependency-name: jaxxstorm/action-install-gh-release
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump grpcVersion from 1.57.2 to 1.72.0 in /sdk/java
8da8244 
Bumps `grpcVersion` from 1.57.2 to 1.72.0.

Updates `io.grpc:grpc-protobuf` from 1.57.2 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.57.2...v1.72.0)

Updates `io.grpc:grpc-stub` from 1.57.2 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.57.2...v1.72.0)

Updates `io.grpc:grpc-netty-shaded` from 1.57.2 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.57.2...v1.72.0)

Updates `io.grpc:grpc-testing` from 1.57.2 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.57.2...v1.72.0)

Updates `io.grpc:protoc-gen-grpc-java` from 1.57.2 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.57.2...v1.72.0)

---
updated-dependencies:
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:grpc-testing
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.grpc:protoc-gen-grpc-java
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump actions/create-github-app-token from 1 to 2
8c21a4a 
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1 to 2.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v1...v2)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump github.com/hashicorp/hcl/v2 in /pkg
caa3cb2 
---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump actions/download-artifact from 4 to 5
f83ca64 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump org.yaml:snakeyaml from 2.3 to 2.5 in /sdk/java
14dd774 
Bumps [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) from 2.3 to 2.5.
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.5..snakeyaml-2.3)

---
updated-dependencies:
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump com.google.code.gson:gson in /sdk/java
2838e63 
Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.10 to 2.13.2.
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.10...gson-parent-2.13.2)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump org.mockito:mockito-core in /sdk/java
72c7389 
Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 5.14.2 to 5.20.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.14.2...v5.20.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
build(deps): bump google.golang.org/grpc from 1.72.1 to 1.76.0 in /pkg
d178193 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.72.1 to 1.76.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.72.1...v1.76.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@iwahbe
Merge remote-tracking branch 'origin/dependabot/go_modules/pkg/google…
e65b91f 
….golang.org/grpc-1.76.0' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/gradle/sdk/java/org.m…
a452d64 
…ockito-mockito-core-5.20.0' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/gradle/sdk/java/com.g…
5ec6a22 
…oogle.code.gson-gson-2.13.2' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/gradle/sdk/java/org.y…
5a26b4f 
…aml-snakeyaml-2.5' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/github_actions/action…
41cbb0b 
…s/download-artifact-5' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/go_modules/pkg/github…
2dc6303 
….com/hashicorp/hcl/v2-2.24.0' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/github_actions/action…
369af9e 
…s/create-github-app-token-2' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/gradle/sdk/java/grpcV…
4803481 
…ersion-1.72.0' into combined-pr-branch
@iwahbe
Merge remote-tracking branch 'origin/dependabot/github_actions/jaxxst…
462749e 
…orm/action-install-gh-release-2.1.0' into combined-pr-branch
@iwahbe iwahbe requested a review from a team as a code owner October 7, 2025 15:56
@iwahbe iwahbe added dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update labels Oct 7, 2025
@iwahbe
Back out the Java changes
530ee35 
It appears that they cause build failures:

```
/home/runner/work/pulumi-java/pulumi-java/sdk/java/pulumi/src/test/java/com/pulumi/provider/internal/ResourceProviderServiceTest.java:9: error: package io.grpc.inprocess does not exist

import io.grpc.inprocess.InProcessChannelBuilder;
                        ^
/home/runner/work/pulumi-java/pulumi-java/sdk/java/pulumi/src/test/java/com/pulumi/provider/internal/
```
@iwahbe iwahbe enabled auto-merge (squash) October 7, 2025 16:18
@iwahbe iwahbe merged commit 8ecd399 into main Oct 8, 2025
28 checks passed
@iwahbe iwahbe deleted the combined-pr-branch branch October 8, 2025 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tgummerer tgummerer tgummerer approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file impact/no-changelog-required This issue doesn't require a CHANGELOG update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@iwahbe @tgummerer