Update all non-major dependencies by solrbot · Pull Request #4591 · apache/solr

solrbot · 2026-07-02T15:25:04Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
com.github.spotbugs:spotbugs-annotations (source)	dependencies	minor	`4.9.8` → `4.10.2`
org.owasp.dependencycheck	plugin	minor	`12.1.3` → `12.2.2`
dev.langchain4j:langchain4j-bom (source)	dependencies	minor	`1.16.3` → `1.17.0`	`1.17.1`
org.jetbrains:annotations	dependencies	minor	`26.0.2` → `26.1.0`
org.eclipse.jdt:ecj (source)	dependencies	minor	`3.39.0` → `3.46.0`
com.diffplug.spotless	plugin	minor	`8.3.0` → `8.7.0`	`8.8.0`
org.checkerframework:checker-qual (source)	dependencies	minor	`3.54.0` → `3.55.1`
com.carrotsearch.randomizedtesting:randomizedtesting-runner	dependencies	minor	`2.8.4` → `2.9.1`
org.carrot2:carrot2-core (source)	dependencies	patch	`4.8.1` → `4.8.6`
net.bytebuddy:byte-buddy-agent (source)	dependencies	patch	`1.18.8-jdk5` → `1.18.9`
net.bytebuddy:byte-buddy (source)	dependencies	patch	`1.18.8-jdk5` → `1.18.9`
com.github.ben-manes.versions	plugin	minor	`0.53.0` → `0.54.0`
com.github.ben-manes.caffeine:caffeine	dependencies	patch	`3.2.3` → `3.2.4`

Release Notes

spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)

`v4.10.2`

Compare Source

Build

Add release protection to ensure version released matches the tag and that snapshot has been removed. (#4156)
Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#4159)
Add binary check to the gradle build to ensure compatibility remains. (#4159)

`v4.10.1`

Compare Source

Build

4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.

langchain4j/langchain4j (dev.langchain4j:langchain4j-bom)

`v1.17.0`: and 1.17.0-beta27

Compare Source

Notable Changes

Introduce new Debate agentic pattern by @mariofusco in #5382
Allow a tool to declare its compensating action and invoke it when it fails by @mariofusco in #5171
Add Oracle Database for Chat Memory by @psilberk in #5351
Expose unmapped raw streaming events by @dliubarskyi in #5589

Other Changes

Migrate OpenAI image models from DALL-E to new GPT image API by @edeandrea in #5373
Document non-Result IMMEDIATE behavior by @patriot1burke in #5372
fix(elasticsearch): apply hybrid filters to full-text retriever by @SJvaca30 in #5387
Update dependency io.netty:netty-codec-http2 to v4.1.135.Final [SECURITY] by @renovate[bot] in #5392
Surface MCP icons in MCP client models by @DragonFSKY in #5381
Fix filtering for non-TextSegment entries in InMemoryEmbeddingStore by @Q1Xuan in #5405
Add an agent factory to the AgentConfigurator allowing to wire agents generated through the Quarkus extension by @mariofusco in #5397
feat(agentic): generalise SupplierParameterResolver to all supplier types by @mdproctor in #5394
Add support for IBM watsonx.ai deployed models by @andreadimaio in #5344
chore: update google-genai dependency to 1.58.0 by @glaforge in #5420
Allow to declaratively create an agentic system with a single A2A agent by @mariofusco in #5408
Upgrade A2A to version 1.0.0.Final by @mariofusco in #5414
Allow to use InvocationParameters with agents by @mariofusco in #5417
Allow to optionally propagate the exception raised by a tool execution by @mariofusco in #5413
docs: Remove broken PaLM 2 link from language models comparison table by @thswlsqls in #5432
Expose MCP server instructions by @fw-coder-tl in #5425
feat(agentic): support SupplierParameterResolver for @ParallelExecutor by @DragonFSKY in #5437
Fix: Log exceptions when tool execution fails by @Q1Xuan in #5427
fix: infinite loop in OnnxBertBiEncoder.partition for oversized subword runs by @thswlsqls in #5454
fix: Throw typed exception for null-valued required shell tool argument by @thswlsqls in #5456
Fix broken Anthropic documentation links by @angus-guo in #5460
Add tests demonstrating how guardrails work with agents by @mariofusco in #5450
Allow to set user and system message providers declaratively on agents by @mariofusco in #5448
chore(deps): bump dompurify from 3.4.0 to 3.4.10 in /docs by @dependabot[bot] in #5459
fix: Validate bucket and key in TencentCosDocumentLoader.loadDocument by @thswlsqls in #5434
fix: swapped account and container names in Azure Blob Storage document source URL by @thswlsqls in #5430
fix: Decode Markdown as UTF-8 instead of the platform default charset by @thswlsqls in #5436
docs: fix 'allows to' grammar in Guardrail Javadocs by @aswego123 in #5438
docs: fix 'allow(s) to' grammar across docs and Javadocs by @aswego123 in #5439
fix(tests): normalize JAR entry path separators for Windows compatibility by @Demonese in #5422
docs: add Javadoc to VoyageAiEmbeddingModel and VoyageAiScoringModel … by @vjayakumarvjk-art in #5412
docs: add Javadoc to Watsonx builder methods across all model classes by @vjayakumarvjk-art in #5415
chore(deps): bump shell-quote from 1.8.3 to 1.8.4 in /docs by @dependabot[bot] in #5411
chore(deps): bump launch-editor from 2.13.2 to 2.14.1 in /docs by @dependabot[bot] in #5461
Fix Milvus L2 relevance score mapping by @Q1Xuan in #5428
feat: implement image token estimation for HIGH/AUTO detail levels by @RuleViz in #5388
docs: add Hazelcast embedding store and chat memory store integration by @arodionov in #5449
fix: LoopAgent subAgents() Javadoc: sub-agents run in sequence, not in parallel by @thswlsqls in #5475
fix: Coerce Number values to short and byte target types in agentic argument adaptation by @thswlsqls in #5469
fix: declarative agentic Javadoc. replace removed @SubAgent with the array form by @thswlsqls in #5473
chore(deps): bump ws in /docs by @dependabot[bot] in #5463
fix: make Byte/Short/BigInteger/BigDecimal output parsers consistent with the other numeric parsers by @subhashpolisetti in #5465
fix: omit blank/null Content-Type part header in JDK multipart body by @Q1Xuan in #5480
fix: Omit blank/null Content-Type part header in Apache multipart body by @thswlsqls in #5467
introduce AnthropicChatRequestParameters for per-call overrides (#5301) by @imyash2004 in #5390
Update OpenAI Java SDK to 4.41.0 by @jdubois in #5485
chore(deps): bump webpack-dev-server from 5.2.3 to 5.2.5 in /docs by @dependabot[bot] in #5482
chore: update google-genai dependency to 1.59.0 by @glaforge in #5488
Update Dev Container support by @jdubois in #5489
fix: Surface failed A2A tasks as exceptions instead of empty results by @thswlsqls in #5471
fix: Throw MissingArgumentException for missing required input in McpClientAgentInvoker by @thswlsqls in #5477
fix: unanimousLastWord convergence to normalize verdict token by @thswlsqls in #5479
fix: Include $defs in Anthropic tool input schema for tools using schema references by @thswlsqls in #5499
fix: prevent integer overflow in AwsDocumentConverter for long and BigInteger tool arguments by @thswlsqls in #5503
fix: add langchain4j-document-parser-docling to BOM by @thswlsqls in #5505
fix: wmv MIME type mapping key in CustomMimeTypesFileTypeDetector by @thswlsqls in #5511
fix: Make ElasticsearchContentRetriever minScore boundary inclusive by @thswlsqls in #5513
Preserve response whitespace when parsing GPULlama3 thinking content by @thswlsqls in #5517
Render Gemini executable code as a valid Markdown fenced block by @thswlsqls in #5520
Report total token count from Google GenAI usage metadata by @thswlsqls in #5519
fix: Escape SQL LIKE single-character wildcard in Hibernate metadata contains filter by @thswlsqls in #5522
fix: Ensure custom HuggingFace base URL ends with a trailing slash by @thswlsqls in #5534
fix: Map model download exceptions for all Jlama models by @thswlsqls in #5536
fix: mask apiKey in JinaScoringModel and JinaClient builder toString by @thswlsqls in #5539
Forward enableEnhancedCivicAnswers to the Gemini generation config by @subhashpolisetti in #5547
Fix NPE in OpenAiOfficialChatModel/StreamingChatModel with user-supplied OpenAIClient by @PSchmitz-Valckenberg in #5548
OpenAiImageModel: implement edits by @dliubarskyi in #5549
docs: add Javadoc to AgentBuilder methods by @vjayakumarvjk-art in #5543
Update Azure SDK BOM to 1.3.7 and migrate to azure-search-documents 12.0.0 by @jdubois in #5486
fix: run tool loop before re-validating output guardrails on reprompt by @PSchmitz-Valckenberg in #5082
fix: Map ContainsString filter to regex in MongoDB Atlas metadata filter mapper by @thswlsqls in #5553
fix: Add space separator in chat model observation span contextual name by @thswlsqls in #5557
fix: mask apiKey in NomicEmbeddingModel builder toString by @thswlsqls in #5559
fix: Populate logProbs in OpenAI streaming response metadata by @thswlsqls in #5561
fix: Preserve BigInteger values when converting MCP structured content by @thswlsqls in #5572
fix: skip recording token usage metric when token count is null by @thswlsqls in #5574
fix: Add dockerTlsVerify builder method and deprecate misspelled dockerTslVerify by @thswlsqls in #5575
fix: Escape backslashes in Milvus metadata filter values by @thswlsqls in #5577
fix: Parse Ollama timestamps with variable-length fractional seconds by @thswlsqls in #5579
fix: Guard against null content in Mistral FIM streaming event listener by @thswlsqls in #5581
fix: Honor strictJsonSchema option in MistralAiStreamingChatModel by @thswlsqls in #5583
Add Oracle chat memory store integration link by @psilberk in #5555
Allow to programmatically set the A2AService implementation by @mariofusco in #5567
fix: Escape double quotes and backslashes in Cosmos DB NoSQL filter values by @thswlsqls in #5501
test: add unit tests for Google AI Gemini FinishReasonMapper by @gaoxiaolei-s59 in #5492
http-client-jdk: set Content-Type for multipart/form-data requests by @mohit-twelvelabs in #5566
fix: Generate native IN clause for single-type IN/NOT IN filters in Oracle store by @thswlsqls in #5563
chore(deps): bump dompurify from 3.4.10 to 3.4.11 in /docs by @dependabot[bot] in #5490
docs: add Javadoc to GoogleGenAiChatModel and GoogleGenAiStreamingCha… by @vjayakumarvjk-art in #5374
test: add HTTP response verification for Ollama thinking mode by @RuleViz in #5389
feat(bedrock): add enableAdaptiveReasoning for Claude Opus 4.7+ by @Aditya-Pimpalkar in #5358
fix(anthropic): gracefully skip [DONE] and unknown SSE frames (GH-5384) by @anuragg-saxenaa in #5398
fix(anthropic): support replaying malformed JSON in tool_use arguments by @Baqirrizvidev in #5335
fix(gemini): add IMAGE_RECITATION to GeminiFinishReason enum by @Pahkho in #5256
fix: throw on unsupported Azure OpenAI service version instead of silently falling back by @PSchmitz-Valckenberg in #5260
fix(qdrant): use Query RPC instead of legacy Search RPC to retrieve vectors by @sam-hey in #5314
Onnxruntime.dll: Dynamic Link Library (DLL) initialization routine failed by @moaedy in #5242
fix(vespa): rethrow exception in VespaEmbeddingStoreIT#deployVespaApp by @serelli in #5266
fix(gpullama3): replace System.err.println with SLF4J logger by @serelli in #5265
fix(deps): update hibernate-orm monorepo to v7.4.2.final - autoclosed by @renovate[bot] in #5254
(docs) Support to SQLServer's half-precision float support in vector data type by @odelpozo-denodo in #5418
fix: Escape single quotes in Infinispan metadata filter Ickle queries by @thswlsqls in #5540
Bound to an upper limit the number of entries retained by the AgentMonitor by @mariofusco in #5587
fix: Set required input_audio format from audio mime type in OpenAI official chat model by @thswlsqls in #5591
chore(deps): update actions/checkout digest to df4cb1c by @renovate[bot] in #5586
Escape LIKE wildcards in Milvus containsString filter (match #5522/#5553) by @greymoth-jp in #5600
fix: Validate ids/embeddings/textSegments size in PineconeEmbeddingStore.addAll by @thswlsqls in #5593
fix: match ContainsString as a literal substring in PgVector filter by @thswlsqls in #5595
fix: support Float and Double values in Qdrant equality metadata filters by @thswlsqls in #5598
Support input_image format for OpenAI-compatible images by @smf-h in #5564
Allow specifying only a subset of MCP clients considered in the tool provider by @jmartisk in #5602

New Contributors

@SJvaca30 made their first contribution in #5387
@Q1Xuan made their first contribution in #5405
@mdproctor made their first contribution in #5394
@fw-coder-tl made their first contribution in #5425
@angus-guo made their first contribution in #5460
@aswego123 made their first contribution in #5438
@Demonese made their first contribution in #5422
@RuleViz made their first contribution in #5388
@arodionov made their first contribution in #5449
@subhashpolisetti made their first contribution in #5465
@imyash2004 made their first contribution in #5390
@gaoxiaolei-s59 made their first contribution in #5492
@mohit-twelvelabs made their first contribution in #5566
@Aditya-Pimpalkar made their first contribution in #5358
@anuragg-saxenaa made their first contribution in #5398
@Baqirrizvidev made their first contribution in #5335
@Pahkho made their first contribution in #5256
@sam-hey made their first contribution in #5314
@moaedy made their first contribution in #5242
@serelli made their first contribution in #5266
@greymoth-jp made their first contribution in #5600
@smf-h made their first contribution in #5564

Full Changelog: langchain4j/langchain4j@1.16.3...1.17.0

JetBrains/java-annotations (org.jetbrains:annotations)

`v26.1.0`

Compare Source

@NotNullByDefault is not experimental anymore.

`v26.0.2-1`

Compare Source

A technical release using the new Sonatype publication mechanism, see https://central.sonatype.org/publish/publish-portal-guide/

raphw/byte-buddy (net.bytebuddy:byte-buddy-agent)

`v1.18.9`

Disable use of Unsafe by default when Java 25or newer is discovered.
Check for escape when creating folders in Plugin.Engine.
Improve OpenJ9 attachment.
Avoid null pointer on missing annotation types.
Improve diagnostics for external agent attachment.
Improve on Gradle context discovery.
Support Android libraries on AGP9 or newer.
Update ASM.

`v1.18.8`

Improve support for repeatable builds.
Fix reordering of exception table in type initializers when instrumenting.

ben-manes/caffeine (com.github.ben-manes.caffeine:caffeine)

`v3.2.4`: 3.2.4

Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update
Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)
Fixed various minor issues found using AI audits
Added ObjectInputFilter support to JCache

Configuration

📅 Schedule: (UTC)

Branch creation
- Every minute (* * * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot

janhoy · 2026-07-02T16:26:18Z

Pushed a commit that makes this bundle build-clean on JDK 21. AI assisted of course... Summary of what changed:

🐞 Excluded errorprone from this renovate group

As errorprone upgrades often require fixes, I exclude it from this PR branch as well as make a renovate rule for it to be handled separately in the future.

🔻 Reverted the RAT upgrade

apache-rat 0.18 → 0.15. RAT 0.18 removes/relocates org.apache.rat.document.impl.FileDocument, which gradle/validation/validate-source-patterns.gradle imports, breaking the build at configuration time. Leaving the RAT upgrade to already-in-progress #4569 . Question @dsmiley: Should RAT be given its own solrbot PR just as errorprone?

🔧 Fixed breakage from ECJ 3.46

ECJ 3.46 tightened nested generic-method inference and rejected SolrMatchers.subListMatches(...) when fed Matchers.contains(...) / containsInAnyOrder(...) in TestRecovery (javac still accepts it). Fixed in one place by changing the matcher parameter from Matcher<? super List<? super T>> to Matcher<Iterable<? extends T>> — which is both inference-friendly for javac and ECJ and the semantically-correct bound (Hamcrest's contains/containsInAnyOrder return Matcher<Iterable<? extends E>>). subListMatches has no other callers.

📝 Changelog

Title now lists each concrete dependency bump (RAT excluded since reverted).

…icenses - Revert apache-rat 0.18 -> 0.15 (rat 0.18 removes FileDocument API used by validate-source-patterns.gradle); to be handled separately - Fix SolrMatchers.subListMatches signature for stricter ECJ 3.46 generic inference (Matcher<Iterable<? extends T>>), unblocking TestRecovery - Regenerate gradle.lockfile + license sha1s (missing from the original bot PR) - List concrete dependency bumps in the changelog title

The error-prone 2.50.0 NotJavadoc check flags Javadoc comments on methods inside local/anonymous classes, which cannot be documented with Javadoc. Convert the two /** */ comments to regular /* */ comments in SolrDocument.java.

Use URLEncoder.encode(String, Charset) instead of the deprecated charset-name overload, removing the now-unnecessary UnsupportedEncodingException handling.

Error Prone 2.50.0 introduced new/stricter bug patterns (ReferenceEquality, JdkObsolete, NotJavadoc) that require source-level follow-up, which does not belong in the bulk "all non-major dependencies" PR. Downgrade error_prone back to the main-branch version (2.41.0), revert the source fixes that were only needed for 2.50.0 (SolrParams, SolrDocument), and refresh lockfiles/licenses. Add a dedicated "Error Prone" Renovate group (com.google.errorprone) so future compiler-check upgrades land in their own PR for dedicated review. Restore the monthly Renovate schedule ("before 9am on the first day of the month"). The 2.50.0 upgrade plus all source fixes is preserved on branch errorprone-2.50.0-upgrade for a future dedicated PR.

randomizedtesting 2.9.1 changed the test name format from "testFoo {seed=[...]}" to "testFoo[seed=[...]]" (no space). getSaferTestName only stripped at the first space, so the seed leaked into collection names derived from it, failing TestPullReplica/TestTlogReplica.testCreateDelete with invalid collection names. Cut at the first space or '[', matching the branch_9x fix (c566e61).

…#4591

Copilot

Pull request overview

This PR updates a set of non-major Gradle-managed dependencies across Solr modules by bumping version catalog entries, regenerating per-module Gradle lockfiles, and updating corresponding solr/licenses/*.jar.sha1 tracking files. It also adjusts Renovate grouping/scheduling and makes small test-framework tweaks related to Hamcrest matcher typing and randomizedtesting test-name formatting.

Changes:

Bump multiple dependency versions in gradle/libs.versions.toml (e.g., caffeine, byte-buddy, randomizedtesting-runner, langchain4j BOM, JetBrains annotations, ecj, spotless, spotbugs) and regenerate impacted lockfiles.
Refresh solr/licenses/*.jar.sha1 files for updated artifacts (randomizedtesting-runner, langchain4j artifacts, caffeine, byte-buddy, carrot2-core, JetBrains annotations).
Update Renovate config (add dedicated Error Prone grouping; adjust schedule) and tweak test-framework utilities (SolrMatchers, SolrTestCaseJ4).

Reviewed changes

Copilot reviewed 59 out of 59 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
solr/webapp/gradle.lockfile	Regenerated dependency locks (incl. caffeine bump; error_prone_annotations split).
solr/ui/gradle.lockfile	Updates locked JetBrains annotations version to 26.1.0 for UI classpaths.
solr/test-framework/src/java/org/apache/solr/util/SolrMatchers.java	Changes matcher generic types for sub-list matching helper.
solr/test-framework/src/java/org/apache/solr/SolrTestCaseJ4.java	Adjusts test-name sanitization to handle newer randomizedtesting name formats.
solr/test-framework/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, spotbugs-annotations, error_prone_annotations split).
solr/solrj/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, error_prone_annotations split).
solr/solrj-zookeeper/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, spotbugs-annotations, error_prone_annotations split).
solr/solrj-streaming/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/solrj-jetty/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/solr-ref-guide/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/server/gradle.lockfile	Regenerated locks (caffeine; error_prone_annotations split across configurations).
solr/modules/sql/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/modules/scripting/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/modules/s3-repository/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, JetBrains annotations, error_prone_annotations split).
solr/modules/opentelemetry/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, JetBrains annotations, error_prone_annotations split).
solr/modules/ltr/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, error_prone_annotations split).
solr/modules/language-models/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, langchain4j 1.17.0, JetBrains annotations, error_prone_annotations split).
solr/modules/langid/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/modules/jwt-auth/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, JetBrains annotations, error_prone_annotations split).
solr/modules/gcs-repository/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/modules/extraction/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, JetBrains annotations, error_prone_annotations split).
solr/modules/cuvs/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/modules/cross-dc/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, error_prone_annotations split).
solr/modules/clustering/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, carrot2-core, error_prone_annotations split).
solr/modules/analysis-extras/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, error_prone_annotations split).
solr/cross-dc-manager/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, byte-buddy, JetBrains annotations, error_prone_annotations split).
solr/core/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, spotbugs-annotations, byte-buddy; error_prone_annotations split).
solr/benchmark/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
solr/api/gradle.lockfile	Regenerated locks (randomizedtesting-runner, caffeine, error_prone_annotations split).
gradle/libs.versions.toml	Updates dependency/plugin version pins (caffeine, byte-buddy, carrot2, randomizedtesting, spotless, ecj, JetBrains annotations, langchain4j BOM, spotbugs, owasp dependency-check).
gradle.lockfile	Updates root-level lock (ecj bump).
.github/renovate.json	Adds Error Prone grouping and changes Renovate update schedule.
changelog/unreleased/PR#4591-update-all-non-major-dependencies.yml	Adds dependency-update changelog entry for this PR.
solr/licenses/randomizedtesting-runner-2.9.1.jar.sha1	Adds SHA1 tracking for updated randomizedtesting-runner.
solr/licenses/randomizedtesting-runner-2.8.4.jar.sha1	Removes SHA1 tracking for prior randomizedtesting-runner.
solr/licenses/langchain4j-open-ai-1.17.0.jar.sha1	Adds SHA1 tracking for updated langchain4j-open-ai.
solr/licenses/langchain4j-open-ai-1.16.3.jar.sha1	Removes SHA1 tracking for prior langchain4j-open-ai.
solr/licenses/langchain4j-mistral-ai-1.17.0.jar.sha1	Adds SHA1 tracking for updated langchain4j-mistral-ai.
solr/licenses/langchain4j-mistral-ai-1.16.3.jar.sha1	Removes SHA1 tracking for prior langchain4j-mistral-ai.
solr/licenses/langchain4j-hugging-face-1.17.0-beta27.jar.sha1	Adds SHA1 tracking for updated langchain4j-hugging-face.
solr/licenses/langchain4j-hugging-face-1.16.3-beta26.jar.sha1	Removes SHA1 tracking for prior langchain4j-hugging-face.
solr/licenses/langchain4j-http-client-jdk-1.17.0.jar.sha1	Adds SHA1 tracking for updated langchain4j-http-client-jdk.
solr/licenses/langchain4j-http-client-jdk-1.16.3.jar.sha1	Removes SHA1 tracking for prior langchain4j-http-client-jdk.
solr/licenses/langchain4j-http-client-1.17.0.jar.sha1	Adds SHA1 tracking for updated langchain4j-http-client.
solr/licenses/langchain4j-http-client-1.16.3.jar.sha1	Removes SHA1 tracking for prior langchain4j-http-client.
solr/licenses/langchain4j-core-1.17.0.jar.sha1	Adds SHA1 tracking for updated langchain4j-core.
solr/licenses/langchain4j-core-1.16.3.jar.sha1	Removes SHA1 tracking for prior langchain4j-core.
solr/licenses/langchain4j-cohere-1.17.0-beta27.jar.sha1	Adds SHA1 tracking for updated langchain4j-cohere.
solr/licenses/langchain4j-cohere-1.16.3-beta26.jar.sha1	Removes SHA1 tracking for prior langchain4j-cohere.
solr/licenses/carrot2-core-4.8.6.jar.sha1	Adds SHA1 tracking for updated carrot2-core.
solr/licenses/carrot2-core-4.8.1.jar.sha1	Removes SHA1 tracking for prior carrot2-core.
solr/licenses/caffeine-3.2.4.jar.sha1	Adds SHA1 tracking for updated caffeine.
solr/licenses/caffeine-3.2.3.jar.sha1	Removes SHA1 tracking for prior caffeine.
solr/licenses/byte-buddy-agent-1.18.9.jar.sha1	Adds SHA1 tracking for updated byte-buddy-agent.
solr/licenses/byte-buddy-agent-1.18.8-jdk5.jar.sha1	Removes SHA1 tracking for prior byte-buddy-agent.
solr/licenses/byte-buddy-1.18.9.jar.sha1	Adds SHA1 tracking for updated byte-buddy.
solr/licenses/byte-buddy-1.18.8-jdk5.jar.sha1	Removes SHA1 tracking for prior byte-buddy.
solr/licenses/annotations-26.1.0.jar.sha1	Adds SHA1 tracking for updated JetBrains annotations jar.
solr/licenses/annotations-26.0.2.jar.sha1	Removes SHA1 tracking for prior JetBrains annotations jar.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

epugh

How come none of our automated GHA checks failed on the licnse issues that copilot surfaced? seems like if Copilot surfaced them, one of our checks should have failed too?

This is moving right along, and once those questions are answered I would approve!

janhoy · 2026-07-03T16:48:22Z

How come none of our automated GHA checks failed on the licnse issues that copilot surfaced?

Copilot misunderstood. The error_prone_annotations deps are bumped transitively by other libs, and several can co-exist. But errorprone current version will only ever use the ones that it knows about, so no harm. Thus I just muted those complaints from Copilot.

Renovate: handle errorprone separately, change schedule to monthly Co-authored-by: Jan Høydahl <janhoy@apache.org> (cherry picked from commit 22d9acd)

solrbot added the exempt-stale Prevent a PR from going stale label Jul 2, 2026

This comment was marked as outdated.

Sign in to view

janhoy force-pushed the renovate/all-non-major-dependencies branch from 4556b6b to 1e93702 Compare July 2, 2026 16:58

solrbot and others added 6 commits July 2, 2026 19:41

Update all non-major dependencies

104547a

Add changelog entry for PR#4591

1753986

Add changelog entry for PR#4591

4684672

lockfiles

fa5eece

janhoy force-pushed the renovate/all-non-major-dependencies branch from 1e93702 to fa5eece Compare July 2, 2026 17:42

janhoy added 2 commits July 2, 2026 20:40

Fix JdkObsolete errorprone error in SolrParams.toQueryString

76ca501

Use URLEncoder.encode(String, Charset) instead of the deprecated charset-name overload, removing the now-unnecessary UnsupportedEncodingException handling.

janhoy and others added 6 commits July 2, 2026 23:46

Changelog: list all upgraded dependencies for PR#4591

b80a1bd

Changelog: plain comma-separated dependency list with artifact names

b833231

Add changelog entry for PR#4591

dfb3eb9

Changelog: list upgraded dependencies with old -> new versions for PR…

d1e469c

…#4591

Add changelog entry for PR#4591

de87442

janhoy requested review from Copilot, dsmiley and epugh July 3, 2026 10:52

Copilot started reviewing on behalf of janhoy July 3, 2026 10:53 View session

Copilot AI reviewed Jul 3, 2026

View reviewed changes

epugh reviewed Jul 3, 2026

View reviewed changes

Comment thread changelog/unreleased/PR#4591-update-all-non-major-dependencies.yml Outdated

janhoy added the no-changelog label Jul 3, 2026

janhoy and others added 6 commits July 3, 2026 13:42

Update changelog (again)

40b1210

Add changelog entry for PR#4591

52a0f9f

Change pr generation workflow to allow human edit of changelog

0d097ba

Manually edit changelog yml

554d9b9

Copilot review response

6f7e90d

Merge branch 'main' into renovate/all-non-major-dependencies

560fcdf

janhoy reviewed Jul 3, 2026

View reviewed changes

Comment thread changelog/unreleased/PR#4591-update-all-non-major-dependencies.yml

janhoy merged commit 22d9acd into apache:main Jul 3, 2026
7 of 8 checks passed

janhoy pushed a commit that referenced this pull request Jul 3, 2026

Bulk update several dependencies (#4591)

cc3174f

Renovate: handle errorprone separately, change schedule to monthly Co-authored-by: Jan Høydahl <janhoy@apache.org> (cherry picked from commit 22d9acd)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update all non-major dependencies#4591

Update all non-major dependencies#4591
janhoy merged 20 commits into
apache:mainfrom
solrbot:renovate/all-non-major-dependencies

solrbot commented Jul 2, 2026 •

edited by janhoy

Loading

Uh oh!

This comment was marked as outdated.

janhoy commented Jul 2, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

epugh left a comment

Uh oh!

Uh oh!

janhoy commented Jul 3, 2026

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

solrbot commented Jul 2, 2026 • edited by janhoy Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v4.10.2

Build

v4.10.1

Build

v1.17.0: and 1.17.0-beta27

Notable Changes

Other Changes

New Contributors

v26.1.0

v26.0.2-1

v1.18.9

v1.18.8

v3.2.4: 3.2.4

Configuration

Uh oh!

This comment was marked as outdated.

janhoy commented Jul 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🐞 Excluded errorprone from this renovate group

🔻 Reverted the RAT upgrade

🔧 Fixed breakage from ECJ 3.46

📝 Changelog

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

epugh left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

janhoy commented Jul 3, 2026

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

solrbot commented Jul 2, 2026 •

edited by janhoy

Loading

`v4.10.2`

`v4.10.1`

`v1.17.0`: and 1.17.0-beta27

`v26.1.0`

`v26.0.2-1`

`v1.18.9`

`v1.18.8`

`v3.2.4`: 3.2.4

janhoy commented Jul 2, 2026 •

edited

Loading