Skip to content

[12.0.x EE10] Bump the integration-deps group across 1 directory with 2 updates - #15789

Open
dependabot[bot] wants to merge 1 commit into
jetty-12.0.xfrom
dependabot/maven/jetty-ee10/jetty-12.0.x/integration-deps-429e76d640
Open

dependabot[bot] wants to merge 1 commit into
jetty-12.0.xfrom
dependabot/maven/jetty-ee10/jetty-12.0.x/integration-deps-429e76d640

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the integration-deps group with 2 updates in the /jetty-ee10 directory: org.eclipse.platform:org.eclipse.osgi and org.mongodb:mongodb-driver-sync.

Updates org.eclipse.platform:org.eclipse.osgi from 3.24.200 to 3.24.300

Commits

Updates org.mongodb:mongodb-driver-sync from 5.11.0 to 5.12.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.12.0 (September 17, 2026)

What's Changed

Full Changelog: mongodb/mongo-java-driver@r5.11.0...r5.12.0

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Java Driver 5.11.1 (September 10, 2026)

What's Changed

[!WARNING] Starting from driver version 3.3.0, an improper neutralization of a query operator in the GridFS delete methods allowed unintended data deletion.

See JAVA-6283 / CVE-2026-88033]

Upgrade reactive/sync driver version to 5.11.1 or later.

If you cannot upgrade, applications using older driver versions should call another delete overload delete(ObjectId). The driver constructs the BsonObjectId internally from a typed value, so no document can reach the filter.

[!WARNING] Starting from driver version 4.2.0, cancelling or timing out an encrypted operation while the driver fetches cloud KMS credentials makes it call into freed native memory, crashing or corrupting the application.

See JAVA-6266 / CVE-2026-88032

Upgrade both reactive driver and mongodb-crypt to version 5.11.1 or later.

Full Changelog: mongodb/mongo-java-driver@r5.11.0...r5.11.1

Commits
  • 84ee9a8 Version: bump 5.12.0
  • f0bc4cb Update the specifications submodule from d4d0cdf to 92b3c0b to match the `m...
  • dbcd762 Remove a TODO-BACKPRESSURE comment because it is no longer relevant
  • 795f7ce Introduce temporary fallback scheduler into DefaultAsyncClientExecutor (#2056)
  • 71c3f6e Add baseBackoffMS support (#2052)
  • 546ce8c Update client and server @​since labels to 5.12 and 9 for server (#2057)
  • 4b576bb Add code design rules for AI (#2028)
  • 7e4a331 Replace error label string literals with constants(#2055)
  • ca40f31 Add overload retry for non-retryable commands (#2048)
  • 5013a53 Adds overload retry for cursor getMore (#2046)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-ee10/jetty-12.0.x/integration-deps-429e76d640 branch from 635d146 to 76a7e77 Compare September 19, 2026 00:04
@olamy

olamy commented Sep 19, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR is already up-to-date with jetty-12.0.x! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

… 2 updates

Bumps the integration-deps group with 2 updates in the /jetty-ee10 directory: [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) and [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver).


Updates `org.eclipse.platform:org.eclipse.osgi` from 3.24.200 to 3.24.300
- [Commits](https://github.com/eclipse-equinox/equinox/commits)

Updates `org.mongodb:mongodb-driver-sync` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.11.0...r5.12.0)

---
updated-dependencies:
- dependency-name: org.eclipse.platform:org.eclipse.osgi
  dependency-version: 3.24.300
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: integration-deps
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: integration-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/jetty-ee10/jetty-12.0.x/integration-deps-429e76d640 branch from 76a7e77 to ac9a4d4 Compare September 20, 2026 23:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant