Skip to content

Update tracked third-party dependency versions#1430

Closed
labkey-martyp wants to merge 2 commits into
developfrom
fb_dep_updates_06_2026
Closed

Update tracked third-party dependency versions#1430
labkey-martyp wants to merge 2 commits into
developfrom
fb_dep_updates_06_2026

Conversation

@labkey-martyp

Copy link
Copy Markdown
Contributor

Rationale

Routine upkeep of the third-party dependency versions catalogued in the Core Infrastructure "Upgrade Dependencies" doc, keeping us current for security and bug fixes. Scope is limited to doc-tracked dependencies with clean, low-risk upgrades; forced-for-consistency transitives and caveated upgrades were deliberately excluded and left for separate, individually-tested changes.

Related Pull Requests

None.

Changes

  • Bump 14 doc-tracked dependency versions in gradle.properties: apacheDirectory 2.1.7→2.1.8, apacheMina 2.2.7→2.2.9, azureIdentity 1.18.3→1.18.4, commonmark 0.28.0→0.29.0, commonsLogging 1.3.6→1.4.0, datadog 1.62.0→1.63.2, googleErrorProneAnnotations 2.49.0→2.50.0, googleHttpClient 2.1.0→2.1.1, grpc 1.81.0→1.82.1, httpcore5 5.4.2→5.4.3, jaxb 4.0.8→4.0.9, lucene 10.4.0→10.5.0, postgresqlDriver 42.7.11→42.7.12, sqliteJdbc 3.53.1.0→3.53.2.0.

Bump the dependency versions tracked in the Core Infrastructure upgrade doc to their latest releases: apacheDirectory 2.1.8, apacheMina 2.2.9, azureIdentity 1.18.4, commonmark 0.29.0, commonsLogging 1.4.0, datadog 1.63.2, googleErrorProneAnnotations 2.50.0, googleHttpClient 2.1.1, grpc 1.82.1, httpcore5 5.4.3, jaxb 4.0.9, lucene 10.5.0, postgresqlDriver 42.7.12, and sqliteJdbc 3.53.2.0.

Scope limited to doc-tracked dependencies; forced-for-consistency transitives and caveated upgrades (httpclient5/RStudio, xmlbeans/Issue 505, protobuf/TargetedMS) are excluded.
@labkey-martyp labkey-martyp requested a review from labkey-adam July 1, 2026 15:09

@labkey-adam labkey-adam left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we merge to 26.7 instead?

@labkey-martyp labkey-martyp deleted the fb_dep_updates_06_2026 branch July 2, 2026 01:04
@labkey-martyp

Copy link
Copy Markdown
Contributor Author

Superseded by #1434, which targets release26.7-SNAPSHOT from the renamed branch 26.7_fb_dep_updates_06_2026 (GitHub closed this PR permanently when the head branch was renamed, so it could not be retargeted in place).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants