Skip to content

Bump Jackson, LogCaptor, pitest, central-publishing and the shared Claude/Gradle pins - #394

Merged
bernardladenthin merged 1 commit into
mainfrom
claude/determined-feynman-97mrit
Oct 20, 2026
Merged

bernardladenthin merged 1 commit into
mainfrom
claude/determined-feynman-97mrit

Conversation

@bernardladenthin

Copy link
Copy Markdown
Owner

Summary

Part of the 2026-10-20 cross-repo dependency sweep (one PR each in java-llama.cpp, srcmorph, streambuffer, BroomCabinet and workspace).

  • Jackson 2.22.3 → 2.22.4; LogCaptor 2.12.7 → 2.13.0 (test scope; 2.13.0 still requests log4j 2.26.1, so the log4j floor guard is unchanged, only its comment now names both versions)
  • pitest-maven 1.30.0 → 1.30.1 and central-publishing-maven-plugin 0.11.0 → 0.12.0. The other three repos already had both.
  • anthropics/claude-code-action → v1.0.255 (e4a6faa). The shared claude.yml / claude-code-review.yml had drifted to three different pins across the four repos (v1.0.250 here, v1.0.251, v1.0.252). After this sweep they are byte-identical again.
  • Gradle 9.8.1 → 9.8.2 in the shared verify-signing-key-gradle job
  • shared-files.sha256 rewritten. Besides the files above, it still carried the old hashes of scorecard.yml and osv-scanner.yml: Dependabot's scorecard-action 2.5.0 / osv-scanner-action 2.7.0 PRs (build(deps): Bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.6.0 to 2.7.0 #391, build(deps): Bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.6.0 to 2.7.0 #392) changed the workflows but not the manifest.
  • CLAUDE.md dependency table: jackson 2.22.4, commons-codec 1.23.0 (it still said 1.22.1)

Deliberately unchanged: jqwik 1.9.3 (policy), log4j 2.26.1 (floor guard).

Test plan

  • Affected unit / integration tests pass locally: the 11 classes that use LogCaptor or bind config via Jackson (MainTest, ConsumerJavaTest, AbstractProducerTest, ConfigFixturesParseTest, …). 205 tests, 0 failures; LMDB tests disabled locally.
  • check-shared-files.py is clean for this repo. It warns about the siblings until their PRs merge.
  • CI is green on this branch
  • Docs / CHANGELOG updated where applicable

Related issues / PRs

Sibling PRs of the same sweep in java-llama.cpp, srcmorph, streambuffer, BroomCabinet and workspace (crossrepostatus.md).

Checklist

  • I have read CONTRIBUTING.md and CODE_OF_CONDUCT.md
  • My commits follow Conventional Commits
  • No security-sensitive changes (if there are, I have notified the maintainer privately per SECURITY.md)

Generated by Claude Code

- Jackson 2.22.3 -> 2.22.4, LogCaptor 2.12.7 -> 2.13.0 (test; it still
  requests log4j 2.26.1, so the log4j floor guard is unchanged)
- pitest-maven 1.30.0 -> 1.30.1 and central-publishing-maven-plugin
  0.11.0 -> 0.12.0, in step with the sibling repositories
- anthropics/claude-code-action v1.0.250 -> v1.0.255, now the same commit
  in all four repositories (claude.yml / claude-code-review.yml were out
  of step: v1.0.250/251/252)
- Gradle 9.8.1 -> 9.8.2 in the shared verify-signing-key-gradle job
- shared-files.sha256 rewritten: it still carried the hashes of
  scorecard.yml and osv-scanner.yml from before Dependabot's
  scorecard-action 2.5.0 / osv-scanner-action 2.7.0 bumps
- CLAUDE.md dependency table: jackson 2.22.4, commons-codec 1.23.0

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011CYhRUUCqwrHXPuEhS9W4M
@bernardladenthin
bernardladenthin merged commit c15923c into main Oct 20, 2026
9 of 12 checks passed
@bernardladenthin
bernardladenthin deleted the claude/determined-feynman-97mrit branch October 20, 2026 22:54
@sonarqubecloud

Copy link
Copy Markdown

This branch had an error being deployed

1 failed deployment
startgate — 00934a20 Deployed Oct 20, 2026 by bernardladenthin via Start gate (abort window) #546
maven-central — 00934a20 Deployed Oct 20, 2026 by bernardladenthin via Verify GPG signing key (no secrets printed) #546
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants