Bump the all group across 1 directory with 12 updates

[dependabot]

Bumps the all group with 12 updates in the / directory:

Package	From	To
org.slf4j:slf4j-api	2.0.18	2.0.20
org.junit.jupiter:junit-jupiter-api	6.1.2	6.1.3
org.junit.jupiter:junit-jupiter-params	6.1.2	6.1.3
org.junit.jupiter:junit-jupiter-engine	6.1.2	6.1.3
org.slf4j:slf4j-simple	2.0.18	2.0.20
org.jetbrains.kotlin.jvm	2.4.10	2.4.20
com.diffplug.spotless	8.9.0	8.10.3
org.sonarqube	7.3.1.8318	7.5.0.8588
com.github.ben-manes.versions	0.56.0	0.64.0
io.ktor:ktor-server-netty	3.5.1	3.6.0
org.projectlombok:lombok	1.18.46	1.18.48
gradle-wrapper	9.6.1	9.8.0

Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.20

Updates org.junit.jupiter:junit-jupiter-api from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.slf4j:slf4j-simple from 2.0.18 to 2.0.20

Updates org.jetbrains.kotlin.jvm from 2.4.10 to 2.4.20

Release notes

Sourced from org.jetbrains.kotlin.jvm's releases.

Kotlin 2.4.20

Changelog

Analysis API

• KT-86546 Check suspicious when over ConeKotlinType in ConeTypeCompatibilityChecker
• KT-85418 Implement an API for accessing deserialized file annotations in Analysis API
• KT-74448 K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt, kotlinx.coroutines
• KT-85856 containingSymbol of constructor property differs for local and non-local classes
• KT-65417 K2 IDE: KTOR false positive expect-actual matching error on enum class because of implicit clone() in non-JVM source sets

Analysis API. Code Compilation

• KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm

Analysis API. FIR

• KT-70552 No expects for actual
• KT-69727 K2 IDE. Wrong error in the editor on calling clone function of actual enum instance in non-jvm platform
• KT-69726 FP errors on declaring fun clone() in actual enum in not-jvm source-set
• KT-86014 Types are broken after remove parameter through change signature
• KT-86363 KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier found on companion blocks
• KT-86147 Drop kotlin.parallel.resolve.under.global.lock registry key
• KT-85543 Avoid lazy resolve for the contracts phase if no constracts might be resolved

Analysis API. Infrastructure

• KT-84914 Do not publish analysis-api-test-framework
• KT-86986 kotlin-compiler-common-for-ide bundles unrelated Analysis API modules
• KT-86186 Analysis API: Codebase tests run twice in some analysis modules — pick a single JUnit runner and migrate
• KT-85360 Drop kotlin-compiler-testdata-for-ide artifact
• KT-85585 Simplify the dependencies graph for the Analysis API modules
• KT-85381 Remove tests for the FE10 implementation

Analysis API. Light Classes

New Features

• KT-84645 Support resolving to companion block members & extensions from Java (light classes)
• KT-80775 Support PsiClass#getRecordComponents in light classes

Fixes

• KT-57537 SLC: propagate default parameter value from (@JvmOverloads) expect declarations to actual declarations
• KT-85040 [Analysis API] Improve Java / Kotlin interop in KMP projects
• KT-87301 SymbolLightAccessorMethod#isValid returns false for delegated properties
• KT-87171 SLC: non-mapped Kotlin collection supertype is dropped from supertype list
• KT-87250 JvmExposeBoxed: light classes shouldn't be autogenerated for private declarations
• KT-70428 AA: good code is red when a Java class extends a Kotlin class implementing MutableList by delegation
• KT-63568 Symbol Light Classes: KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work incorrectly when psi is not set

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin.jvm's changelog.

2.4.20

Analysis API

• KT-86546 Check suspicious when over ConeKotlinType in ConeTypeCompatibilityChecker
• KT-85418 Implement an API for accessing deserialized file annotations in Analysis API
• KT-74448 K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt, kotlinx.coroutines
• KT-85856 containingSymbol of constructor property differs for local and non-local classes
• KT-65417 K2 IDE: KTOR false positive expect-actual matching error on enum class because of implicit clone() in non-JVM source sets

Analysis API. Code Compilation

• KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm

Analysis API. FIR

• KT-70552 No expects for actual
• KT-69727 K2 IDE. Wrong error in the editor on calling clone function of actual enum instance in non-jvm platform
• KT-69726 FP errors on declaring fun clone() in actual enum in not-jvm source-set
• KT-86014 Types are broken after remove parameter through change signature
• KT-86363 KotlinIllegalArgumentExceptionWithAttachments: No dangling modifier found on companion blocks
• KT-86147 Drop kotlin.parallel.resolve.under.global.lock registry key
• KT-85543 Avoid lazy resolve for the contracts phase if no constracts might be resolved

Analysis API. Infrastructure

• KT-84914 Do not publish analysis-api-test-framework
• KT-86986 kotlin-compiler-common-for-ide bundles unrelated Analysis API modules
• KT-86186 Analysis API: Codebase tests run twice in some analysis modules — pick a single JUnit runner and migrate
• KT-85360 Drop kotlin-compiler-testdata-for-ide artifact
• KT-85585 Simplify the dependencies graph for the Analysis API modules
• KT-85381 Remove tests for the FE10 implementation

Analysis API. Light Classes

New Features

• KT-84645 Support resolving to companion block members & extensions from Java (light classes)
• KT-80775 Support PsiClass#getRecordComponents in light classes

Fixes

• KT-57537 SLC: propagate default parameter value from (@JvmOverloads) expect declarations to actual declarations
• KT-85040 [Analysis API] Improve Java / Kotlin interop in KMP projects
• KT-87301 SymbolLightAccessorMethod#isValid returns false for delegated properties
• KT-87171 SLC: non-mapped Kotlin collection supertype is dropped from supertype list
• KT-87250 JvmExposeBoxed: light classes shouldn't be autogenerated for private declarations
• KT-70428 AA: good code is red when a Java class extends a Kotlin class implementing MutableList by delegation
• KT-63568 Symbol Light Classes: KtAnnotationApplicationWithArgumentsInfo.normalizedArguments() may work incorrectly when psi is not set
• KT-36740 MPP: False-positive incompatible types in .java when using expect-class returned by non-expect member from common when actual is actual typealias

... (truncated)

Commits

• 890ac1d Add Changelog for 2.4.20-RC3
• 8860aed 🍒 [FIR] Fix suspend conversion when expected type is nullable (#7769)
• ab5bcd9 Edit ChangeLog for 2.4.20-RC2
• 9464edc Add ChangeLog for 2.4.20-RC2
• 0261e43 Cherry-pick "Fix asBodyAndResultVar call in `visitInlinedLambdaInComposable...
• 0763513 [box-tests] Workaround for klib compatibility tests (#7626)
• 045aec6 [Wasm] Append scripts from webpack.config.d in the end of the file (#7615)
• cd7173b 🍒 [2.4.20] [K/JS] Keep associated obj annotation only if getInstance survives...
• d36a2ff CastsOptimizationPass: break aliases cycles (#7578)
• 8664983 [CLI] Restore custom IC search scope creation
• Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.9.0 to 8.10.3

Release notes

Sourced from com.diffplug.spotless's releases.

Gradle Plugin v8.10.3

Changes

• Generate formatter defaults from version catalog. (#3045)
• Bump default gson version 2.13.2 -> 2.14.0. (#3045)
• Bump default zjsonpatch version 0.4.14 -> 0.4.16. (#3045)
• Bump default jackson-dataformat-yaml version 2.14.1 -> 2.20.1. (#3045)
• Bump default ktfmt version 0.63 -> 0.64. (2988)
• Bump default cleanthat version 2.25 -> 2.26. (#2882)
• Bump default jackson version 2.20.1 -> 2.22.2. (#2819)
• Bump default javaparser version 3.27.1 -> 3.28.2. (#3065)
• Bump default palantir-java-format version 2.80.0 -> 2.98.0. (#3068)
• Bump default scalafmt version 3.8.1 -> 3.11.5. (#2173)
• Bump default google-java-format version 1.30.0 -> 1.36.1. (#3075)
• Bump default gherkin-utils version 10.0.0 -> 12.0.2. (#2979)
• We no longer publish a plugin marker for the legacy com.diffplug.gradle.spotless id, which has been redirecting to com.diffplug.spotless since 4.0. Builds that still request it now fail with Plugin [id: 'com.diffplug.gradle.spotless'] was not found instead of the migration message. (#3086)

Fixed

• Fix release signing by using Gradle's required eight-digit signing subkey ID. (#3105)
• Fix race when creating the npm install cache directory. ((#3096)
• GrEclipse no longer emits expected OSGi and nested-jar warnings during initialization. (#2445)
• typescript prettier() no longer emits a warning when its parser is already set to typescript. (#3098)
• versionCatalog() preserves standalone comments at section boundaries and the end of the file. (#3048)
• versionCatalog() preserves entries when comments contain unmatched brackets, preserves commas inside quoted strings, and keeps significant line boundaries in multiline entries. (#3042)
• versionCatalog() now reports unfinished entries as lints at their starting line. These fail formatting by default, so upgrading may expose catalog errors that previously caused silent data loss. (#3042)
• Stop calling deprecated Configuration.setVisible from Gradle 9.0.0 (#3053)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError or NoSuchMethodError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Gradle Plugin v8.10.2

Fixed

• shortenFullyQualifiedTypes() now shortens fully-qualified types used in expression contexts (such as static method calls, static fields, and enum constants) while avoiding imports that would change how existing unqualified type references resolve. (#3039)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Gradle Plugin v8.10.1

Fixed

• prettier() and other npm-based steps no longer fail to start on npm 12 (EUNKNOWNCONFIG from --scripts-prepend-node-path). (#3024)
• spotlessInternalRegisterDependencies now writes its output under a build directory that is configured after the plugin is applied, instead of always under the default build/. (#2114)
• targetExclude now accepts a Gradle Directory, DirectoryProperty, or Provider<Directory> and excludes the files under it. Previously the directory was treated as a single file, so excluding one silently did nothing. (#2667)

Gradle Plugin v8.10.0

Added

• New shortenFullyQualifiedTypes() step for Java, which replaces fully-qualified type names with their simple names and adds the imports they need. Best combined with importOrder() and removeUnusedImports(). (#2945)
• Add embedded lockfiles to Eclipse JDT for every supported version (4.9 through 4.40), so eclipse() resolves from Maven Central instead of querying a P2 update site. Versions without an embedded lockfile still fall back to P2 provisioning. (#1996)

Fixed

• removeUnusedImports no longer fails on Java import module declarations. (#2890)
• expandWildcardImports() now builds its type-solver classpath from each Java source set's compile classpath instead of every resolvable configuration. Unrelated configurations (for example generated-code or custom resolvable configs that are not ready yet) are no longer resolved. (#2998)
• spotlessCheck violation message now suggests the correct composite/included-build task path (e.g. ./gradlew :my-utils:spotlessApply) instead of a bare spotlessApply / :spotlessApply that does not select included-build tasks. (#2421)
• Parallel multi-project builds no longer intermittently fail with "Cannot fingerprint input property 'stepsInternalEquality': ConfigurationCacheHackList cannot be serialized" / "Failed to provision P2 dependencies" when using eclipse() (or other P2-backed steps). Subprojects now share one deduping P2 provisioner and P2 queries are serialized process-wide. (#3004)

Changes

• Default google-java-format remains 1.28.0 on JVM 17; bumps to 1.30.0 on JVM 21+; require at least 1.30.0 on JVM 25+ for import module support.
• Bump default eclipse version to latest 4.39 -> 4.40. (#1996)

... (truncated)

Commits

• eae36d8 Published gradle/8.10.3
• 61e2016 Published maven/3.10.3
• 49e0b07 Published lib/4.10.3
• b7a7748 Fix release signing key ID format (#3105)
• be8005a Document release signing correction (#3105)
• 073fe61 Use short signing subkey ID for release publishing
• 8ac44c7 Fix race when creating the npm install cache directory (#3096)
• 3f2d955 Update dependency org.slf4j:slf4j-api to v2.0.20 (#3100)
• 0c70ca8 Merge branch 'main' into fix/npm-cache-directory-race
• bbf44a4 Fix GrEclipse initialization warnings (#3097)
• Additional commits viewable in compare view

Updates org.sonarqube from 7.3.1.8318 to 7.5.0.8588

Updates com.github.ben-manes.versions from 0.56.0 to 0.64.0

Updates io.ktor:ktor-server-netty from 3.5.1 to 3.6.0

Release notes

Sourced from io.ktor:ktor-server-netty's releases.

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine
• KTOR-9785 Typesafe Authentication DSL
• KTOR-462 Async CIO DNS resolver with timeout
• KTOR-9709 Add resource attribute for client resources plugin
• KTOR-5009 ContentNegotiation: Add a way to prevent changing Accept and Content-Type headers
• KTOR-9776 OpenAPI: Support the "const" validation keyword
• KTOR-7468 DefaultConversionService: Support Uuid type introduced in Kotlin 2.0
• KTOR-9578 HttpCache add method for clearing
• KTOR-9590 OpenAPI Contextual JSON schema inference support
• KTOR-6610 Log which ConfigLoader has been used for loading the server configuration
• KTOR-9735 Commonize HttpCache FileCacheStorage
• KTOR-8953 WebRTC client on JVM
• KTOR-9674 UDP support for Node.js targets
• KTOR-9612 Add text/markdown to the ContentType constants

Improvements

• KTOR-9876 Typo in KDoc for routing function: "for the this Application".
• KTOR-9778 Character classification in ktor-http hot paths uses boxed Set lookups and per-symbol encoder allocations
• KTOR-9702 Duplicate code in ByteReadChannel
• KTOR-9716 Make ApplicationCallPipeline.ApplicationPhase.Validators public in 3.6.0
• KTOR-9734 Use TagConsumer in respondHtmlFragment lambda receiver
• KTOR-5577 Support nullable types in ApplicationCall.receive
• KTOR-2367 OAuth: clients expect to get authenticated once per "session" for all protected routes
• KTOR-8594 Auth: Non-optional principal is of nullable type
• KTOR-9816 Escape $ in application.yaml file
• KTOR-8193 Unnecessary blocking in OutputStream wrapper

Bugfixes

• KTOR-8705 testApplication: call coroutine context isn't preserved when responding with ChannelWriterContent
• KTOR-9248 JWTAuthenticationProvider silently swallows exceptions
• KTOR-9892 Digest Auth client: nc and qop are not handled according to RFC 7616
• KTOR-9891 CIO on Kotlin/Native collapses above ~50 connections: HttpHeadersMap pools contend on an allocating SynchronizedObject
• KTOR-9794 Digest Auth: NullPointerException when the server does not expect Digest auth
• KTOR-9788 Netty: engine double-responds after its built-in 400, crashing the call-handler coroutine with "Headers can no longer be set because response was already completed"
• KTOR-9834 HttpClient eagerly initializes SLF4J during Android startup
• KTOR-9701 Jackson/Gson converters waste time on unnecessary Dispatchers.IO dispatch
• KTOR-9832 Apache5: Upgrading Apache HttpClient5 to version 5.6 breaks the Ktor client with Content-Length mismatch error for any gzipped content
• KTOR-9870 OkHttp: Reduce coroutine dispatching and allocations while reading response bodies
• KTOR-9627 Cancel blocking bridges when coroutine is cancelled
• KTOR-7067 Ktor Cookie.parseClientCookiesHeader returns Map, which breaks Cookie header contract

... (truncated)

Changelog

Sourced from io.ktor:ktor-server-netty's changelog.

3.6.0

Published 16 September 2026

Features

• KTOR-8596 OpenID Connect (OAuth2) auto-discover & configuration
• KTOR-9645 Client curated multi-platform facade module
• KTOR-8883 Support nested jars in static resources
• KTOR-8672 Support at least zstd and deflate formats of precompressed files
• KTOR-8595 Auth JWK Support (auto-discover)
• KTOR-9841 OIDC Server Plugin
• KTOR-9654 Override fetch in JS engine
• KTOR-9785 Typesafe Authentication DSL
• KTOR-462 Async CIO DNS resolver with timeout
• KTOR-9709 Add resource attribute for client resources plugin
• KTOR-5009 ContentNegotiation: Add a way to prevent changing Accept and Content-Type headers
• KTOR-9776 OpenAPI: Support the "const" validation keyword
• KTOR-7468 DefaultConversionService: Support Uuid type introduced in Kotlin 2.0
• KTOR-9578 HttpCache add method for clearing
• KTOR-9590 OpenAPI Contextual JSON schema inference support
• KTOR-6610 Log which ConfigLoader has been used for loading the server configuration
• KTOR-9735 Commonize HttpCache FileCacheStorage
• KTOR-8953 WebRTC client on JVM
• KTOR-9674 UDP support for Node.js targets
• KTOR-9612 Add text/markdown to the ContentType constants

Improvements

• KTOR-9876 Typo in KDoc for routing function: "for the this Application".
• KTOR-9778 Character classification in ktor-http hot paths uses boxed Set lookups and per-symbol encoder allocations
• KTOR-9702 Duplicate code in ByteReadChannel
• KTOR-9716 Make ApplicationCallPipeline.ApplicationPhase.Validators public in 3.6.0
• KTOR-9734 Use TagConsumer in respondHtmlFragment lambda receiver
• KTOR-5577 Support nullable types in ApplicationCall.receive
• KTOR-2367 OAuth: clients expect to get authenticated once per "session" for all protected routes
• KTOR-8594 Auth: Non-optional principal is of nullable type
• KTOR-9816 Escape $ in application.yaml file
• KTOR-8193 Unnecessary blocking in OutputStream wrapper

Bugfixes

• KTOR-8705 testApplication: call coroutine context isn't preserved when responding with ChannelWriterContent
• KTOR-9248 JWTAuthenticationProvider silently swallows exceptions
• KTOR-9892 Digest Auth client: nc and qop are not handled according to RFC 7616
• KTOR-9891 CIO on Kotlin/Native collapses above ~50 connections: HttpHeadersMap pools contend on an allocating SynchronizedObject
• KTOR-9794 Digest Auth: NullPointerException when the server does not expect Digest auth
• KTOR-9788 Netty: engine double-responds after its built-in 400, crashing the call-handler coroutine with "Headers can no longer be set because response was already completed"
• KTOR-9834 HttpClient eagerly initializes SLF4J during Android startup
• KTOR-9701 Jackson/Gson converters waste time on unnecessary Dispatchers.IO dispatch
• KTOR-9832 Apache5: Upgrading Apache HttpClient5 to version 5.6 breaks the Ktor client with Content-Length mismatch error for any gzipped content
• KTOR-9870 OkHttp: Reduce coroutine dispatching and allocations while reading response bodies
• KTOR-9627 Cancel blocking bridges when coroutine is cancelled
• KTOR-7067 Ktor Cookie.parseClientCookiesHeader returns Map, which breaks Cookie header contract

... (truncated)

Commits

• 111c580 Release 3.6.0 (#5882)
• 1e4186c KTOR-9876 Fix typo in Application.routing KDoc (#5876)
• 6930eee Fix KTOR-9892 Digest Auth client: nc and qop ... (#5875)
• 875b2f0 Fix KTOR-9794 Digest Auth: NullPointerException when the server does not expe...
• dc56137 KTOR-8705 Pass coroutine context to the channel writer (#5868)
• 55f6e71 Fix KTOR-9640 forward autoFlush in reader/writer helpers
• 2b04a1f Fix KTOR-9248 JWTAuthenticationProvider silently swallows exceptions (#5877)
• 702ff9f KTOR-9889 Fix deadlock in concurrent module loading with Dependency Injection...
• 1fab5f1 Reject Accept entries with q=0 in ContentNegotiation (#5873)
• b06c3b5 KTOR-9891 Delegate SynchronizedObject to kotlinx.atomicfu on Native (#5874)
• Additional commits viewable in compare view

Updates org.projectlombok:lombok from 1.18.46 to 1.18.48

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.48 (September 1st, 2026)

• BREAKING CHANGE/BUGFIX: @Builder(builderClassName = "Builder") now generates an error, because the type names collide. #3857 (found after release)
• PLATFORM: JDK27 support added #4072.
• BUGFIX: @SneakyThrows usage on JDK26 no longer results in class files that require lombok.jar to be on the runtime classpath (which should not be neccessary). #4040.
• FEATURE: New config key lombok.checkReturnValueAnnotation (values: none, lombok; default: none) lets lombok generate @lombok.CheckReturnValue on generated methods where the return value should not be ignored, such as @With methods and @Builder.build(). A future lombok release may flip the default to lombok. #4013.
• PROMOTION: @SuperBuilder has been promoted to the main package. Otherwise, no changes have been made to the annotation. The old experimental annotation will remain for a few versions, at which point it will be marked as a deprecated annotation. Eventually it'll be removed. If you had lombok.config configuration for this annotation, the configuration keys for this feature have been renamed. #2209.
• OLD-CRUFT: lombok.experimental.Wither and lombok.Delegate are deprecated remnants; these features were moved (to respectively lombok.With and lombok.experimental.Delegate over 5 years ago. They are now removed entirely. If your project is dependent on an older version of lombok which still has those; fret not, lombok still processes these annotations. It just no longer includes them in the jar.
• FEATURE: CheckerFramework: Lombok now adds @SideEffectFree to constructors it makes if you have enabled checker framework via lombok.config.
• BUGFIX: CheckerFramework: Lombok would add @SideEffectFree to the build() method of any generated builder, even if it is a builder for invoking a method; in that case, the side-effect-free nature of build() mirrors the side-effect-free nature of the method invocation you've built. Lombok now checks if the method it generated a builder for is side effect free / 'check return type'.

Commits

• b48657c [version] pre-release version bump v1.18.48
• d1d0039 Merge branch 'jdk27'
• 1a23dad [review][refactor] No meaningful changes: Improved comments, javadoc, and cle...
• 40cdde8 [changelog] JDK27 support
• 25eae29 Add Danish Nawab to AUTHORS
• 10ab92b Support JDK27: end positions moved from EndPosTable to JCTree.endpos
• af01b7a Document the new configuration syntax for listy things
• 1be3857 There is no more HtAccess
• 405985d Semantic sections for website
• 04b7340 [trivial] fixing some outdated tests (tests were broken, not lombok).
• Additional commits viewable in compare view

Updates gradle-wrapper from 9.6.1 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits

• a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
• eaee500 Add the Develocity plugin back to the Android smoke tests
• 189b672 Route everything still hitting Maven Central through the mirror (#39257)
• 36b1814 Add back mavenCentral to doc snippets
• 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
• 2099383 Update Gradle wrapper to version 9.8.0-rc-3
• c80202f Route everything still hitting Maven Central through the mirror
• 3f6a534 Fix when a best practice was introduced (#39253)
• 9efc9ed Fix when a best practice was introduced
• 459e143 Route integration test dependencies through the repository mirror (#39239)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud