Skip to content

Bump the gradle-minor-patch group across 1 directory with 11 updates - #37

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-minor-patch-c3eeab4834
Open

Bump the gradle-minor-patch group across 1 directory with 11 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-minor-patch-c3eeab4834

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-minor-patch group with 9 updates in the / directory:

Package From To
software.amazon.awssdk:bedrockruntime 2.42.27 2.46.9
com.fasterxml.jackson.jr:jackson-jr-all 2.21.2 2.22.0
com.fasterxml.jackson.core:jackson-databind 2.21.2 2.22.0
com.google.cloud:google-cloud-vertexai 1.50.0 1.52.0
io.netty:netty-codec-http 4.2.12.Final 4.2.15.Final
io.grpc:grpc-netty-shaded 1.80.0 1.82.0
com.google.protobuf:protobuf-java 4.34.1 4.35.1
org.jetbrains.kotlinx:kotlinx-coroutines-core 1.10.2 1.11.0
jvm 2.3.20 2.4.0

Updates software.amazon.awssdk:bedrockruntime from 2.42.27 to 2.46.9

Updates com.fasterxml.jackson.jr:jackson-jr-all from 2.21.2 to 2.22.0

Commits
  • de0bbc3 [maven-release-plugin] prepare release jackson-jr-parent-2.22.0
  • f0d0e61 Prep for 2.22.0 release
  • a3e2800 Merge branch '2.21' into 2.x
  • 2459728 Post-release dep version bump
  • 17fa6d2 [maven-release-plugin] prepare for next development iteration
  • b6cfdbf [maven-release-plugin] prepare release jackson-jr-parent-2.21.4
  • 562ae25 Prep for 2.21.4 release
  • b9a483a Merge branch '2.20' into 2.21
  • 00727ce Merge branch '2.19' into 2.20
  • 8ad73a9 Merge branch '2.18' into 2.19
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.22.0

Commits

Updates com.google.cloud:google-cloud-vertexai from 1.50.0 to 1.52.0

Release notes

Sourced from com.google.cloud:google-cloud-vertexai's releases.

v1.52.0

1.52.0 (2025-02-11)

Features

  • [aiplatform] A new field response_id is added to message .google.cloud.aiplatform.v1.GenerateContentResponse (8791ef3)
  • [aiplatform] Add additional Probe options to v1 model.proto (dab28be)
  • [aiplatform] add Notebooks Runtime Software Configuration (dab28be)
  • [aiplatform] add Notebooks Runtime Software Configuration (dab28be)
  • [aiplatform] Add rag_files_count to RagCorpus to count number of associated files (dab28be)
  • [aiplatform] Add RolloutOptions to DeployedModel in v1beta1 endpoint.proto, add additional Probe options in v1beta1 model.proto (dab28be)
  • [aiplatform] EvaluateDataset API v1beta1 initial release (dab28be)
  • [batch] promote cancel job API to GA (8791ef3)
  • [compute] Update Compute Engine API to revision 20250119 (#981) (dab28be)
  • [dataplex] Added value NONE to the SyncMode enum (dab28be)
  • [dialogflow] add PhoneNumbers API (dab28be)
  • [netapp] add support for Quota Rule apis (dab28be)
  • [run] add BuildConfig to Services for configuring Run functions (dab28be)
  • [valkey] add Instance.Mode.CLUSTER_DISABLED value, and deprecate STANDALONE (8791ef3)
  • [valkey] add Instance.Mode.CLUSTER_DISABLED value, and deprecate STANDALONE (8791ef3)

Bug Fixes

  • deps: update dependency com.google.cloud:google-cloud-storage to v2.48.1 (#11422) (ce9929e)
  • update dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (#11426) (afdc294)

Documentation

  • [document-ai] mark fields as unused (dab28be)
  • [monitoring] remove extra fenced code block markers (dab28be)

v1.51.0

1.51.0 (2025-01-29)

Features

  • [aiplatform] add Context Cache to v1 (87de77d)
  • [aiplatform] Add machine_spec, data_persistent_disk_spec, network_spec, euc_config, shielded_vm_config to .google.cloud.aiplatform.v1beta1.NotebookRuntime (87de77d)
  • [aiplatform] Add machine_spec, data_persistent_disk_spec, network_spec, euc_config, shielded_vm_config to message .google.cloud.aiplatform.v1.NotebookRuntime (87de77d)
  • [aiplatform] add optimized config in v1 API (87de77d)
  • [aiplatform] add per-modality token count break downs for GenAI APIs (87de77d)
  • [aiplatform] add per-modality token count break downs for GenAI APIs (87de77d)
  • [aiplatform] add retrieval_config to ToolConfig v1 (87de77d)
  • [aiplatform] add retrieval_config to ToolConfig v1beta1 (87de77d)
  • [aiplatform] Add speculative decoding spec to DeployedModel proto (87de77d)
  • [aiplatform] enable FeatureGroup IAM Methods in v1beta1 API version (87de77d)

... (truncated)

Changelog

Sourced from com.google.cloud:google-cloud-vertexai's changelog.

1.52.0 (2025-02-11)

Features

  • [aiplatform] A new field response_id is added to message .google.cloud.aiplatform.v1.GenerateContentResponse (8791ef3)
  • [aiplatform] Add additional Probe options to v1 model.proto (dab28be)
  • [aiplatform] add Notebooks Runtime Software Configuration (dab28be)
  • [aiplatform] add Notebooks Runtime Software Configuration (dab28be)
  • [aiplatform] Add rag_files_count to RagCorpus to count number of associated files (dab28be)
  • [aiplatform] Add RolloutOptions to DeployedModel in v1beta1 endpoint.proto, add additional Probe options in v1beta1 model.proto (dab28be)
  • [aiplatform] EvaluateDataset API v1beta1 initial release (dab28be)
  • [batch] promote cancel job API to GA (8791ef3)
  • [compute] Update Compute Engine API to revision 20250119 (#981) (dab28be)
  • [dataplex] Added value NONE to the SyncMode enum (dab28be)
  • [dialogflow] add PhoneNumbers API (dab28be)
  • [netapp] add support for Quota Rule apis (dab28be)
  • [run] add BuildConfig to Services for configuring Run functions (dab28be)
  • [valkey] add Instance.Mode.CLUSTER_DISABLED value, and deprecate STANDALONE (8791ef3)
  • [valkey] add Instance.Mode.CLUSTER_DISABLED value, and deprecate STANDALONE (8791ef3)

Bug Fixes

  • deps: update dependency com.google.cloud:google-cloud-storage to v2.48.1 (#11422) (ce9929e)
  • update dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (#11426) (afdc294)

Documentation

  • [document-ai] mark fields as unused (dab28be)
  • [monitoring] remove extra fenced code block markers (dab28be)

1.51.0 (2025-01-29)

Features

  • [aiplatform] add Context Cache to v1 (87de77d)
  • [aiplatform] Add machine_spec, data_persistent_disk_spec, network_spec, euc_config, shielded_vm_config to .google.cloud.aiplatform.v1beta1.NotebookRuntime (87de77d)
  • [aiplatform] Add machine_spec, data_persistent_disk_spec, network_spec, euc_config, shielded_vm_config to message .google.cloud.aiplatform.v1.NotebookRuntime (87de77d)
  • [aiplatform] add optimized config in v1 API (87de77d)
  • [aiplatform] add per-modality token count break downs for GenAI APIs (87de77d)
  • [aiplatform] add per-modality token count break downs for GenAI APIs (87de77d)
  • [aiplatform] add retrieval_config to ToolConfig v1 (87de77d)
  • [aiplatform] add retrieval_config to ToolConfig v1beta1 (87de77d)
  • [aiplatform] Add speculative decoding spec to DeployedModel proto (87de77d)
  • [aiplatform] enable FeatureGroup IAM Methods in v1beta1 API version (87de77d)
  • [aiplatform] enable FeatureView Service Account in v1 API version (87de77d)
  • [aiplatform] enable UpdateFeatureMonitor in v1beta1 API version (87de77d)

... (truncated)

Commits
  • 185fed0 chore(main): release 1.52.0 (#11427)
  • a31d3e7 chore: Update generation configuration at Wed Feb 12 02:22:23 UTC 2025 (#11435)
  • afdc294 fix: update dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (...
  • a1f2575 chore(deps): update googleapis/sdk-platform-java action to v2.53.0 (#11434)
  • 31f1560 chore(deps): update dependency com.google.api:gapic-generator-java to v2.53.0...
  • 8791ef3 chore: Update generation configuration at Tue Feb 11 02:23:11 UTC 2025 (#11429)
  • c6bdac2 chore(deps): update dependency joda-time:joda-time to v2.13.1 (#11421)
  • e7971a5 chore(deps): update googleapis/sdk-platform-java action to v2.53.0 (#11425)
  • ac8a89c chore(deps): update dependency com.google.cloud:libraries-bom to v26.54.0 (#1...
  • a03826b chore(deps): update googleapis/java-cloud-bom action to v26.54.0 (#11423)
  • Additional commits viewable in compare view

Updates io.netty:netty-codec-http from 4.2.12.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-codec-http's releases.

netty-4.2.15.Final

Security fixes

  • CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).
  • CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-50560: DDoS in io.netty:netty-codec-http2.
  • CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.
  • CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).
  • CVE-2026-50020: request smuggling in io.netty:netty-codec-http.
  • CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).
  • CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).
  • CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).
  • CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.
  • CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).
  • CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.
  • CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).
  • CVE-2026-47244: denial of service in io.netty:netty-codec-http2.
  • CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

New Contributors

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

netty-4.2.14.Final

What's Changed

... (truncated)

Commits
  • a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
  • 2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
  • 0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
  • 76291f5 Fix SCTP and Redis tests (#16893)
  • e067b6e Fix revapi warnings (#16885)
  • 5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
  • 541add0 Merge commit from fork
  • 270800e Merge commit from fork
  • 3d45a1e Merge commit from fork
  • 75127ca Merge commit from fork
  • Additional commits viewable in compare view

Updates io.netty:netty-codec-http2 from 4.2.12.Final to 4.2.15.Final

Release notes

Sourced from io.netty:netty-codec-http2's releases.

netty-4.2.15.Final

Security fixes

  • CVE-2026-48059: memory exhaustion in io.netty:netty-codec-haproxy (high).
  • CVE-2026-47691: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-50560: DDoS in io.netty:netty-codec-http2.
  • CVE-2026-50011: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44250: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-44890: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-50009: information disclosure and denial of service in io.netty:netty-codec-classes-quic.
  • CVE-2026-44249: IPv6 subnet filter bypass in io.netty:netty-handler (high).
  • CVE-2026-50020: request smuggling in io.netty:netty-codec-http.
  • CVE-2026-44892: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-44893: memory leak in io.netty:netty-codec-haproxy (high).
  • CVE-2026-44894: traffic amplification in io.netty:netty-codec-classes-quic (high).
  • CVE-2026-50010: TLS hostname verification accidentally disabled in io.netty:netty-handler (high).
  • CVE-2026-45673: DNS cache poisoning in io.netty:netty-resolver-dns.
  • CVE-2026-45416: excessive memory usage from SNIHandler in io.netty:netty-handler (high).
  • CVE-2026-45536: file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue.
  • CVE-2026-45674: DNS cache poisoning in io.netty:netty-resolver-dns (high).
  • CVE-2026-46340: memory exhaustion in io.netty:netty-transport-sctp (high).
  • CVE-2026-47244: denial of service in io.netty:netty-codec-http2.
  • CVE-2026-48006: memory exhaustion in io.netty:netty-codec-redis (high).
  • CVE-2026-48748: memory exhaustion in io.netty:netty-codec-http3 (high).
  • CVE-2026-48043: memory exhaustion in io.netty:netty-codec-http2.

What's Changed

New Contributors

Full Changelog: netty/netty@netty-4.2.14.Final...netty-4.2.15.Final

netty-4.2.14.Final

What's Changed

... (truncated)

Commits
  • a41f7b2 [maven-release-plugin] prepare release netty-4.2.15.Final
  • 2394530 Auto-port 4.2: MQTT: Reject malformed no-payload packets with non-zero Remain...
  • 0bd1657 Add maxWindowLog parameter to ZstdDecoder to bound memory allocation (#16850)
  • 76291f5 Fix SCTP and Redis tests (#16893)
  • e067b6e Fix revapi warnings (#16885)
  • 5a52600 Pass maxAllocation to Brotli and Zstd decoders (#16844)
  • 541add0 Merge commit from fork
  • 270800e Merge commit from fork
  • 3d45a1e Merge commit from fork
  • 75127ca Merge commit from fork
  • Additional commits viewable in compare view

Updates io.grpc:grpc-netty-shaded from 1.80.0 to 1.82.0

Release notes

Sourced from io.grpc:grpc-netty-shaded's releases.

v1.82.0

This release drops support for Bazel 7. It may still run, but we are no longer testing it. We are testing Bazel 8 and 9.

We are anticipating requiring Netty 4.2 in the next release. Please file an issue if you still need Netty 4.1 support.

Behavior Changes

  • xds: Disable Priority LB child policy retention cache (#12806). Previously, when a priority became inactive, its associated child load balancer was kept in a deactivated state for potential reuse. Now, inactive child balancers are immediately torn down and removed.
  • xds: skip DiscoveryRequest for unsubscribed types on stream ready (#12782). When the bootstrap declares more than one xDS server (e.g. a default server for LDS/CDS plus an authority-specific EDS-only server), grpc-java was sending CDS/LDS DiscoveryRequests to the EDS-only server too. That server replies UNIMPLEMENTED, which tears down the stream and EDS data never arrives. This fix makes it skip DiscoveryRequests for resource types we don't actually subscribe to on a given server.

Improvements

  • Remove JSR-305 @ThreadSafe annotation and replace with JavaDoc (#12762). Removes JSR-305 annotations but instead of replacing it with ErrorProne's ThreadSafe, sticks to adding a JavaDoc comment. This is done only in public non-final classes and interfaces. This allows Java applications that have moved away from javax to compile and avoids a bug in Immutables and Lombok (and possibly other annotation processors) from failing when JSR-305 is not present.
  • core: Reduce per-stream idle memory on the server by 0.5 KB (b38df6c94). The main improvement here is not retaining the request Metadata for the life of the RPC. That means RPCs with larger request Metadata would see a larger benefit.
  • core: Clarify missing content-type on HTTP error responses (#12720). Adjusts the diagnostic for the missing rather than invalid content-type, in the Status description.
  • core: throw IOException when ProxySelector returns null or empty list (#12793). ProxySelector.select(URI) is required to return a non-null, non-empty list. Some implementations violate this, which previously caused an opaque crash in ProxyDetectorImpl. Now it detects this case explicitly and fails gracefully, naming the offending ProxySelector class to help with debugging.
  • okhttp: enable TLS 1.3 by default for Android clients, retain TLS 1.2-only for desktop JVM (f43013161)
  • xds: Reduce per-endpoint memory from CDS LB (cc0d1a810). This is most noticeable when there are many endpoints returned by EDS, but the LB policy only uses a few of them, like pick_first.
  • xds: pre-parse custom metric names in WRR load balancer (#12773) (324fce715). This reduces the per-RPC overhead of the gRFC A114 support added in v1.81.0
  • xds: Propagate status cause through XdsDepManager (13b4b9727). This preserves more information for failures communicating with the control plane.
  • binder: Give clear error when message is larger than parcel (d92ca44a1)

Bug Fixes

  • xds: Trust Manager fix for certain scenarios where SAN validation shouldn't use the SNI sent (#12775) (bb153a83f).
  • core: Cancel DelayedClientCall when application listener throws (#12761). Align DelayedClientCall.DelayedListener with ClientCallImpl's existing behavior for listener exceptions. When the application listener throws from onHeaders/onMessage/onReady, catch the Throwable, cancel the call with CANCELLED (cause = the throwable), and swallow subsequent callbacks. Previously, a throw from the application listener escaped to the callExecutor's uncaught-exception handler. The real call was not cancelled and the transport kept delivering callbacks to an already broken listener
  • core,opentelemetry: Fix server metric labels on early close (#12774). Addresses the server-side OpenTelemetry metric labeling bug where a generated method can be recorded as grpc.method="other" if streamClosed() happens before serverCallStarted().
  • core: Fix pick_first NPE with GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST=true when accepting resolved addresses and in CONNECTING state (#12814). It makes sure that whenever PickFirstLeafLoadBalancer transitions into CONNECTING the current address in the addressIndex has a corresponding subchannel. This prevents an NPE in acceptResolvedAddresses in some situations.
  • okhttp: HPACK should fail on varint overflow (ec1099254). This should have no visible impact in normal use. It mostly just makes it easier to debug broken implementations
  • xds: When using the file watcher certificate provider, reload cert/key even if only one of them changes (f4125c591)
  • compiler: Avoid compile error on weird proto file names (f021befcd)

New Features

  • googleapis: support ?force-xds query parameter in the google-c2p resolver (#12760) (86fa86063). This disables environment checks and uses xDS unconditionally. Please note that this feature has not yet seen comprehensive testing.

Dependencies

  • Upgrade Netty to 4.1.133 (ada087b9d)
  • bazel: Upgrade googleapis proto repo to commit 1dbb1a14 (ec0a9c976). This fixed a rules_go incompatibility issue with Bazel 9.1. But it also greatly reduced the overall transitive dependencies, as the C++ grpc repo is no longer a dependency
  • bazel: Upgrade workflows to Bazel 8 (039ad7779) add Bazel 9.1.0 to our CI matrix (17be0d3d1)
  • protoc-gen-grpc-java: Linux binaries are now built with Ubuntu 20.04 instead of 18.04 (8802dc35b5, da98b04b09)

Thanks to

@​becomeStar
@​bengtsson1-flir
@​jnowjack-lucidchart
@​Kainsin
@​kenkangxgwe

... (truncated)

Commits
  • 78fb519 Bump version to 1.82.0
  • b62b0fc Update README etc to reference 1.82.0
  • 8802dc3 build: downgrade multiarch to Ubuntu 20.04 and consolidate images (#12830)
  • be300bd kokoro: Avoid brew on Mac OS
  • 4111f6f core: throw IOException when ProxySelector returns null or empty list (#12793)
  • 9410caf Revert "xds: CEL implementation (#12770)" (#12823)
  • a6916c9 core: Fix pick_first NPE when accepting resolved addresses and in `CONNECTING...
  • 52f2cd5 Revert "okhttp: Optimize HPACK to index :path" (#12820)
  • cc0d1a8 xds: Reduce per-endpoint memory from CDS
  • 17be0d3 Add Bazel 9.1.0 to our CI matrix
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 4.34.1 to 4.35.1

Commits

Updates org.jetbrains.kotlinx:kotlinx-coroutines-core from 1.10.2 to 1.11.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's releases.

1.11.0

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

  • Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
  • Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. B efore, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
  • Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
  • Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
  • Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

  • Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
  • Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
  • Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
  • Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
  • Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
  • Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
  • Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

  • Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
  • Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
  • Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
  • Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
  • Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
  • Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

1.11.0-rc01

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-coroutines-core's changelog.

Version 1.11.0

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

Breaking changes and deprecations

  • Moved Promise-related functions from JS and Wasm/JS to the new web target. On Wasm/JS, this is a breaking change. Before the change, Promise on Wasm/JS could work with arbitrary Kotlin types, but now, only JsAny subtypes are accepted (#4563).
  • Changed handling of coroutine exceptions that can't be propagated on JS and Wasm/JS. Before, exceptions were logged, but now, they are reported to the JS runtime (#4451, #4631).
  • Deprecated using CoroutineDispatcher as the coroutine context key; now, ContinuationInterceptor has to be used instead (#4333).
  • Advanced the deprecation levels on kotlinx-coroutines-test APIs (#4604).
  • Added lint functions that mark passing a Job to coroutine builders as deprecated (#4435).

Bug fixes and improvements

  • Added a callsInPlace(EXACTLY_ONCE) contract to runBlocking in code shared between JVM and Native (#4368).
  • Added a callsInPlace(EXACTLY_ONCE) contract to suspendCancellableCoroutine (#4574).
  • Fixed flowOn incorrectly handling ThreadContextElement updates (#4403).
  • Fixed exceptions in user-supplied Thread.UncaughtExceptionHandler instances causing the internal coroutines machinery to fail (#4516).
  • Fixed CoroutineDispatcher.asScheduler in the RxJava integration not cancelling outstanding work when a Worker gets cancelled, which led to memory leaks in some scenarios (#4615).
  • Fixed SharedFlow entering an invalid state when a subscriber and an emitter are cancelled simultaneously (#4583).
  • Fixed an R8 optimization leading to shareIn/stateIn coroutines getting garbage-collected (#4646). Thanks, @​solevic!

Small additions

  • Added CompletableDeferred.asDeferred for obtaining a read-only Deferred view (#4408).
  • Added SharedFlow.asFlow for obtaining a Flow view with hidden hot flow semantics (#4530). Thanks, @​g000sha256!
  • Added a StateFlow.collectLatest overload returning Nothing to assist with finding unreachable code (#4454).
  • Added ReceiveChannel.consumeTo for consuming a ReceiveChannel into a MutableCollection (#4520).
  • Added a StateFlow<T>.onSubscription overload returning a StateFlow<T>, similar to SharedFlow<T>.onSubscription returning SharedFlow<T> (#4275). Thanks, @​xit0c!
  • Added terminal Flow operators for collecting a Flow to a Map (#1541).

Changelog relative to version 1.11.0

No changes, only the version is increased.

Version 1.11.0-rc02

Restored binary compatibility with 1.10.2 and older versions on Wasm/JS for usages of Promise-related functions (#4661).

Version 1.11.0-rc01

Various

  • Kotlin was updated to 2.2.20 (#4545).
  • Improved the published jar files (#3842, #4599).
  • Various documentation improvements, including complete rewrites of structured concurrency and error handling-related KDoc (#4433, #4596).

... (truncated)

Commits

Bumps the gradle-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| software.amazon.awssdk:bedrockruntime | `2.42.27` | `2.46.9` |
| [com.fasterxml.jackson.jr:jackson-jr-all](https://github.com/FasterXML/jackson-jr) | `2.21.2` | `2.22.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.2` | `2.22.0` |
| [com.google.cloud:google-cloud-vertexai](https://github.com/googleapis/google-cloud-java) | `1.50.0` | `1.52.0` |
| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.2.12.Final` | `4.2.15.Final` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.80.0` | `1.82.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.34.1` | `4.35.1` |
| [org.jetbrains.kotlinx:kotlinx-coroutines-core](https://github.com/Kotlin/kotlinx.coroutines) | `1.10.2` | `1.11.0` |
| [jvm](https://github.com/JetBrains/kotlin) | `2.3.20` | `2.4.0` |



Updates `software.amazon.awssdk:bedrockruntime` from 2.42.27 to 2.46.9

Updates `com.fasterxml.jackson.jr:jackson-jr-all` from 2.21.2 to 2.22.0
- [Commits](FasterXML/jackson-jr@jackson-jr-parent-2.21.2...jackson-jr-parent-2.22.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.2 to 2.22.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.google.cloud:google-cloud-vertexai` from 1.50.0 to 1.52.0
- [Release notes](https://github.com/googleapis/google-cloud-java/releases)
- [Changelog](https://github.com/googleapis/google-cloud-java/blob/main/CHANGELOG.md)
- [Commits](googleapis/google-cloud-java@v1.50.0...v1.52.0)

Updates `io.netty:netty-codec-http` from 4.2.12.Final to 4.2.15.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.12.Final...netty-4.2.15.Final)

Updates `io.netty:netty-codec-http2` from 4.2.12.Final to 4.2.15.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.12.Final...netty-4.2.15.Final)

Updates `io.grpc:grpc-netty-shaded` from 1.80.0 to 1.82.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.80.0...v1.82.0)

Updates `com.google.protobuf:protobuf-java` from 4.34.1 to 4.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `org.jetbrains.kotlinx:kotlinx-coroutines-core` from 1.10.2 to 1.11.0
- [Release notes](https://github.com/Kotlin/kotlinx.coroutines/releases)
- [Changelog](https://github.com/Kotlin/kotlinx.coroutines/blob/master/CHANGES.md)
- [Commits](Kotlin/kotlinx.coroutines@1.10.2...1.11.0)

Updates `software.amazon.awssdk:sagemakerruntime` from 2.42.27 to 2.46.9

Updates `jvm` from 2.3.20 to 2.4.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.20...v2.4.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-minor-patch
- dependency-name: com.fasterxml.jackson.jr:jackson-jr-all
  dependency-version: 2.21.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-minor-patch
- dependency-name: com.google.cloud:google-cloud-vertexai
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-minor-patch
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-minor-patch
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-minor-patch
- dependency-name: io.netty:netty-codec-http
  dependency-version: 4.2.14.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-minor-patch
- dependency-name: io.netty:netty-codec-http2
  dependency-version: 4.2.14.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-minor-patch
- dependency-name: jvm
  dependency-version: 2.3.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-minor-patch
- dependency-name: org.jetbrains.kotlinx:kotlinx-coroutines-core
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-minor-patch
- dependency-name: software.amazon.awssdk:bedrockruntime
  dependency-version: 2.44.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-minor-patch
- dependency-name: software.amazon.awssdk:sagemakerruntime
  dependency-version: 2.44.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/gradle-minor-patch-c3eeab4834 branch from dc54b92 to 3cae577 Compare June 12, 2026 00:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants