Skip to content

chore(deps): bump the production group with 8 updates - #121

Merged
endrju19 merged 2 commits into
mainfrom
dependabot/gradle/production-a3fd6e6a8e
Oct 2, 2026
Merged

chore(deps): bump the production group with 8 updates#121
endrju19 merged 2 commits into
mainfrom
dependabot/gradle/production-a3fd6e6a8e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited by endrju19
Loading

Copy link
Copy Markdown
Contributor

This dependency update also replaces the flaky HTTP batch concurrency test with a server-side request barrier. It verifies that all requests are in flight before any response completes, without wall-clock performance thresholds. A temporary sequential-delivery mutation fails the test; the production implementation is unchanged. ./gradlew build ktlintCheck passed locally after the fix.

Bumps the production group with 8 updates:

Package From To
org.slf4j:slf4j-simple 2.0.19 2.0.20
org.slf4j:slf4j-api 2.0.19 2.0.20
gradle-wrapper 9.7.1 9.8.0
com.fasterxml.jackson.module:jackson-module-kotlin 2.22.2 2.22.3
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.22.2 2.22.3
org.hibernate.orm:hibernate-core 7.4.10.Final 7.4.11.Final
ch.qos.logback:logback-classic 1.6.3 1.6.4
com.h2database:h2 2.5.250 2.5.252

Updates org.slf4j:slf4j-simple from 2.0.19 to 2.0.20

Updates org.slf4j:slf4j-api from 2.0.19 to 2.0.20

Updates gradle-wrapper from 9.7.1 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits
  • a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
  • eaee500 Add the Develocity plugin back to the Android smoke tests
  • 189b672 Route everything still hitting Maven Central through the mirror (#39257)
  • 36b1814 Add back mavenCentral to doc snippets
  • 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
  • 2099383 Update Gradle wrapper to version 9.8.0-rc-3
  • c80202f Route everything still hitting Maven Central through the mirror
  • 3f6a534 Fix when a best practice was introduced (#39253)
  • 9efc9ed Fix when a best practice was introduced
  • 459e143 Route integration test dependencies through the repository mirror (#39239)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.22.2 to 2.22.3

Commits
  • 31f1e96 [maven-release-plugin] prepare release jackson-module-kotlin-2.22.3
  • a0a52ec Prep for 2.22.3 release
  • 1dd753f Merge branch '2.21' into 2.22
  • 670befc Post-release dep version bump
  • 9aa44a6 [maven-release-plugin] prepare for next development iteration
  • f6b6e34 [maven-release-plugin] prepare release jackson-module-kotlin-2.21.7
  • 9f61f63 Prep for 2.21.7 release
  • 28fa8a3 Merge remote-tracking branch 'FasterXML/2.21' into 2.22
  • a3d408a Merge pull request #1230 from k163377/wrongwrong/2.21-ci-kotlin-2.4.20
  • 62201b5 Update CI Kotlin version 2.4.20-RC3 -> 2.4.20
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.22.2 to 2.22.3

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.22.2 to 2.22.3

Updates org.hibernate.orm:hibernate-core from 7.4.10.Final to 7.4.11.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.11

Hibernate ORM 7.4.11.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.11.Final.

You can find the full list of 7.4.11.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.11.Final (September 27, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40453

** Bug * HHH-20894 StatelessSession upsert and upsertMultiple concurrency problem * HHH-20876 StatelessSession: Interceptor#onLoad isn't called * HHH-20826 Emit MERGE for on conflict do nothing on H2, Oracle, and SQL Server instead of silently dropping the conflict clause * HHH-17020 Can't use enum as string in join column when field is part of composite primary key

Commits
  • a95dd44 [Jenkins release job] Preparing release 7.4.11.Final
  • bb72fdf [Jenkins release job] changelog.txt updated by release build 7.4.11.Final
  • 7134c72 Switch maven-plugin intTest logging from logback to log4j2
  • 97efe59 Fix Maven plugin integration tests not falling back to Maven Central
  • dd4001e Fix Informix nightly failures
  • 58e974a HHH-17020 Test and fix issues with enum in id-class not copying type related ...
  • bc7d0fb HHH-18910/HHH-17020 Test and fix issues with binding discriminator through pr...
  • 3cdebc0 HHH-20826 Prefer merge for conflict do-nothing to reduce constraint violation...
  • 4555ed0 HHH-20894 Ensure upsert/insert-or-update really is executed and retry batch p...
  • 57c59cf HHH-20894 Make Sybase behave like a sane SQL database
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.19 to 2.0.20

Updates ch.qos.logback:logback-classic from 1.6.3 to 1.6.4

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.4

2026-09-24 Release of logback version 1.6.4

• Variable substitution is again applied to the scan attribute of the <configuration> element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of <propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.

• OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.

• Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.

• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.

• TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. See TimeBasedRollingPolicy.

• If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.

• The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Full Changelog: qos-ch/logback@v_1.6.3...v_1.6.4

Commits
  • 07d291c preapre release 1.6.4
  • 9627daf revert to Collections.unmodifiableMap instead of
  • aa42fb5 disabled RollingCalendarTest#testVaryingNumberOfHalfDailyPeriods to shave off...
  • ddc7459 Support HALF_DAY periodicity for AM/PM date patterns
  • 42d75d7 disable LoggerContextTest#concurrentGetLoggerKeepsSizeConsistent to shave exe...
  • bffd55e add warnings about missing jline.jansi classes
  • 8de0b9b Fix data race on LoggerContext.size (#1038)
  • 76c73d1 add MinimalUnmodifiableMap and return it in LogbackMDCAdapter#getPropertyMap
  • a2c416a Fix formatting of email instruction in README
  • 2c89727 mailing lists have been deactivated
  • Additional commits viewable in compare view

Updates com.h2database:h2 from 2.5.250 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

Commits
  • f986838 in preparation for a release
  • 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
  • 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
  • 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
  • 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
  • 6ec30b6 #4395 disallow constraints between temporary and permanent tables
  • 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
  • f718b76 #4405 SecureFileStore.readFully() may skip decryption
  • e231ff7 #4405 SecureFileStore.readFully() may skip
  • 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the production group with 8 updates
4e7e0c7 
Bumps the production group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| org.slf4j:slf4j-simple | `2.0.19` | `2.0.20` |
| org.slf4j:slf4j-api | `2.0.19` | `2.0.20` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.7.1` | `9.8.0` |
| [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.22.2` | `2.22.3` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.22.2` | `2.22.3` |
| [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `7.4.10.Final` | `7.4.11.Final` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.3` | `1.6.4` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `2.5.250` | `2.5.252` |


Updates `org.slf4j:slf4j-simple` from 2.0.19 to 2.0.20

Updates `org.slf4j:slf4j-api` from 2.0.19 to 2.0.20

Updates `gradle-wrapper` from 9.7.1 to 9.8.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.7.1...v9.8.0)

Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.22.2 to 2.22.3
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.22.2...jackson-module-kotlin-2.22.3)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.22.2 to 2.22.3

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.22.2 to 2.22.3

Updates `org.hibernate.orm:hibernate-core` from 7.4.10.Final to 7.4.11.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.11/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.4.10...7.4.11)

Updates `org.slf4j:slf4j-api` from 2.0.19 to 2.0.20

Updates `ch.qos.logback:logback-classic` from 1.6.3 to 1.6.4
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.3...v_1.6.4)

Updates `com.h2database:h2` from 2.5.250 to 2.5.252
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-2.5.250...version-2.5.252)

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: gradle-wrapper
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 7.4.11.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: com.h2database:h2
  dependency-version: 2.5.252
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the automerge Auto-merge after CI passes label Sep 30, 2026
@endrju19 endrju19 removed the automerge Auto-merge after CI passes label Oct 2, 2026
@endrju19 endrju19 mentioned this pull request Oct 2, 2026
Merged
@endrju19
endrju19 merged commit a1a1eed into main Oct 2, 2026
8 checks passed
@endrju19
endrju19 deleted the dependabot/gradle/production-a3fd6e6a8e branch October 2, 2026 11:11
rawo added a commit that referenced this pull request Nov 3, 2026
@endrju19 @rawo @claude
Claim only delivery types supported by each worker (#120)
4c90bb5 
## Summary

Workers now claim only `PENDING` entries for their registered delivery
types. The processor rotates its starting type and uses at most two
claim queries per batch, independent of the number of types: one for the
starting type and, when needed, one `IN` query for the rest. A
mismatched entry is also rejected before delivery.

PostgreSQL gets a partial `(delivery_type, created_at, id) WHERE status
= 'PENDING'` index; MySQL gets `(status, delivery_type, created_at, id)`
plus an exact, binary type check (`CAST(... AS BINARY)`) for
case-insensitive collations. The unrestricted
`OutboxStore.claimPending(limit)` remains available to direct callers
and keeps its existing index. Custom stores used by Okapi's processor
must implement `RouteAwareOutboxStore`, and so must hand-written
wrappers around a built-in store. Spring autoconfiguration rejects an
unsafe store at startup and names its class in the error.

## Behaviour changes (see CHANGELOG)

- **BREAKING:** `OutboxProcessor` requires a `RouteAwareOutboxStore`.
- **BREAKING:** `OutboxEntryProcessor.process`/`processBatch` throw
`IllegalStateException` for an entry with no registered deliverer.
Previously such an entry was marked `FAILED`. Inside the processor the
transaction rolls back and the row stays `PENDING`.
- **BREAKING:** new migration `002__route_aware_claim_index`.
- Cross-type claim order is no longer globally oldest first. When the
starting type doesn't fill the batch, the leftover capacity goes to the
other types alphabetically. Every type is still claimed first at least
once every N batches, so none is starved. This keeps each claim a cheap
ordered index range.

## Verification

- `./gradlew ktlintCheck build test` passes on top of current main.
- The HTTP batch concurrency test now uses a server-side request
barrier. Every request must arrive before any successful response is
sent; intentionally switching delivery to sequential makes the test
fail. Both PR #120 and #121 include the same test fix.
- Core, Spring Boot and integration tests passed locally on PostgreSQL
and MySQL Docker containers, including migrations, concurrent
heterogeneous workers, exact type matching, HTTP and Kafka.
- `MysqlOutboxStoreTest` asserts that the route-aware claim raises no
server warnings. The deprecated `BINARY` operator raised warning 1287 on
every claim.
- On a 1,000,000-row outbox with 900,000 older unsupported rows, a
100-type absent `IN` claim used the route index and took about 0.16 ms
on PostgreSQL and 0.21 ms on MySQL in local measurements. The previous
full PostgreSQL index produced a 165 ms scan for that case. Scripts and
context are in `benchmarks/route-aware-claim/`.
- There is a write cost from the additional index. In exploratory
repeated local runs, PostgreSQL insert/update medians were 1.47×/1.07×
versus the legacy index alone; MySQL medians were 1.18×/1.29×. These are
workload-specific measurements, not throughput guarantees.

## Rollout

The branch includes the current main, preserving #119 startup validation
and #115 outbox-id headers. For manually managed schemas, the README
links both migrations: apply 001 and 002 in order for a new
installation, or apply 002 before starting updated workers on an
existing schema.

Run PostgreSQL migration 002 outside a transaction because it creates
the index concurrently. It first drops any `INVALID` index left by an
interrupted earlier attempt. `CREATE INDEX CONCURRENTLY` waits for every
older transaction in the database, so run it when no long transactions
are open, or apply it ahead of the rollout.

Older workers can still claim unsupported types, so publish a new type
only after all old processors are upgraded or stopped. Previously
`FAILED` rows need separate recovery.

Closes #116

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Rafał Wokacz <rafal.wokacz@gmail.com>
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@endrju19