Bump the gradle group across 7 directories with 21 updates

[dependabot]

Bumps the gradle group with 13 updates in the /elixir-to-java/java-grpc-elixir-server directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	2.24.3	2.25.4
org.apache.logging.log4j:log4j-to-slf4j	2.24.3	2.25.4
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
jakarta.validation:jakarta.validation-api	3.1.0	3.1.1
org.apache.tomcat:tomcat-annotations-api	11.0.2	11.0.21
com.fasterxml.jackson.datatype:jackson-datatype-joda	2.18.2	2.21.3
jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	4.0.5
org.springframework.boot	3.4.1	4.0.6
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0

Bumps the gradle group with 13 updates in the /java-to-elixir/elixir-grpc-java directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	2.24.3	2.25.4
org.apache.logging.log4j:log4j-to-slf4j	2.24.3	2.25.4
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
jakarta.validation:jakarta.validation-api	3.1.0	3.1.1
org.apache.tomcat:tomcat-annotations-api	11.0.2	11.0.21
com.fasterxml.jackson.datatype:jackson-datatype-joda	2.18.2	2.21.3
jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	4.0.5
org.springframework.boot	3.4.1	4.0.6
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0

Bumps the gradle group with 13 updates in the /java-to-java/java-api-server directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	2.24.3	2.25.4
org.apache.logging.log4j:log4j-to-slf4j	2.24.3	2.25.4
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
jakarta.validation:jakarta.validation-api	3.1.0	3.1.1
org.apache.tomcat:tomcat-annotations-api	11.0.2	11.0.21
com.fasterxml.jackson.datatype:jackson-datatype-joda	2.18.2	2.21.3
jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	4.0.5
org.springframework.boot	3.4.1	4.0.6
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0

Bumps the gradle group with 14 updates in the /java-to-java/java-grpc-server directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	2.24.3	2.25.4
org.apache.logging.log4j:log4j-to-slf4j	2.24.3	2.25.4
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
jakarta.validation:jakarta.validation-api	3.1.0	3.1.1
org.apache.tomcat:tomcat-annotations-api	11.0.2	11.0.21
com.fasterxml.jackson.datatype:jackson-datatype-joda	2.18.2	2.21.3
jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	4.0.5
org.springframework.boot:spring-boot-gradle-plugin	3.4.1	4.0.6
org.springframework.boot	3.4.1	4.0.6
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0

Bumps the gradle group with 13 updates in the /java-to-rust/java-grpc-example directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	2.24.3	2.25.4
org.apache.logging.log4j:log4j-to-slf4j	2.24.3	2.25.4
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
jakarta.validation:jakarta.validation-api	3.1.0	3.1.1
org.apache.tomcat:tomcat-annotations-api	11.0.2	11.0.21
com.fasterxml.jackson.datatype:jackson-datatype-joda	2.18.2	2.21.3
jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	4.0.5
org.springframework.boot	3.4.1	4.0.6
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0

Bumps the gradle group with 14 updates in the /micronaut-to-springboot/java-micronaut-grpc-server directory:

Package	From	To
org.apache.logging.log4j:log4j-bom	2.24.3	2.25.4
org.apache.logging.log4j:log4j-to-slf4j	2.24.3	2.25.4
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
org.apache.tomcat:tomcat-annotations-api	11.0.2	11.0.21
com.fasterxml.jackson.datatype:jackson-datatype-joda	2.18.2	2.21.3
jakarta.xml.bind:jakarta.xml.bind-api	4.0.2	4.0.5
org.springframework.boot	3.4.1	4.0.6
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0
org.apache.tomcat:tomcat-jdbc	11.0.2	11.0.21
com.mysql:mysql-connector-j	9.1.0	9.7.0

Bumps the gradle group with 11 updates in the /micronaut-to-springboot/micronaut-grpc-api directory:

Package	From	To
com.google.protobuf:protobuf-bom	4.29.2	4.34.1
com.google.protobuf:protoc	4.29.2	4.34.1
io.grpc:grpc-bom	1.69.0	1.80.0
io.grpc:protoc-gen-grpc-java	1.69.0	1.80.0
com.google.protobuf	0.9.4	0.10.0
gradle-wrapper	8.11.1	9.5.0
io.micronaut:micronaut-bom	3.10.4	3.10.6
ch.qos.logback:logback-classic	1.5.15	1.5.32
org.junit.jupiter:junit-jupiter-api	5.11.4	6.0.3
org.junit.jupiter:junit-jupiter-engine	5.11.4	6.0.3
io.micronaut.test:micronaut-test-junit5	4.6.2	4.10.3

Updates org.apache.logging.log4j:log4j-bom from 2.24.3 to 2.25.4

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.25.4

This patch release delivers fixes for configuration inconsistencies and formatting issues across several layouts.

• Restores alignment between documented and actual configuration attributes.
• Fixes formatting and sanitization issues in XML and RFC5424 layouts.
• Improves handling of invalid characters and non-standard values.

The authoritative list of recognized configuration attributes is available in the PluginReference.

Fixed

• Don't issue warnings if extra argument in parameterized logging is null. (#3975, #4014)
• Restore support for documented Rfc5424Layout parameter names. (#4022, #4074)
• Take Throwable#toString() into account while rendering stack traces in Pattern Layout. (#3623, #4033)
• Added debug level logs for successful resource loading in Loader class. (#4058, #4060)
• Align SslConfiguration factory method usage with Log4j 2.12+ API. The verifyHostname attribute is now correctly recognized. (#4061, #4075)
• Fix sanitization of structured data parameter names in RFC5424 layout. (#4073)
• Replace invalid characters in XmlLayout output with the Unicode replacement character (U+FFFD). (#4077)
• Replace invalid characters in Log4j1XmlLayout output with the Unicode replacement character (U+FFFD). (#4078)
• Replace invalid characters in MapMessage.asXml() output with the Unicode replacement character (U+FFFD). (#4079)
• Write non-finite floating-point numbers as strings in JsonWriter. (#4080)

2.25.3

This patch release addresses issues detailed in the changelog below. In particular, it includes an important fix for the host name verification in SSL/TLS configuration. This is used by Socket Appender.

Changed

• Optimize DefaultThreadContextMap.getCopy() performance by avoiding megamorphic calls in HashMap constructor (#3935, #3939)

Fixed

• Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996)
• Fix failures caused by null SslConfiguration (#3947, #3953)
• Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)

Removed

• Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)

2.25.2

This patch release addresses certain minor issues detailed in the changelog.

Fixed

• Fix potential memory leak involving LogBuilder in Log4j API to Logback bridge (#3819, #3824)
• Prevent unnecessary warnings in AbstractDriverManagerConnectionSource (#3828, #3831)
• Fix missing newlines in default logging configuration for log4j-core (#3835, #3851)
• Fix missing default Target value in Console Appender (#3852)
• Discard the sub-second part while obtaining the initial time (i.e., creation time) of a file in RollingFileManager (#3068, #3872)
• Fix Pattern Layout exception stack trace converters to no longer prepend newlines based on context (#3873, #3919)

... (truncated)

Commits

• 0628e53 Update the project.build.outputTimestamp property
• a2590b4 Add debug logs for successful resource loading in Loader (#4060)
• b788154 Changelog for additional fixes
• 59bd6b3 Avoid referring to PluginBuilderAttribute.class in PluginProcessor (#4041)
• 79568db Take Throwable#toString() into account while rendering stack traces in Patt...
• 0881bc5 Add versioning and support policy information (#3341)
• 0543b52 docs: recommend use of appropriately scoped trust roots (#4006)
• 7a1e0ad Fix warning when last argument is null (#4014)
• 5286148 Remove Log4j Jakarta EE link from navigation file (#4025)
• adcda32 Retire Log4j Scala (#4030)
• Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.24.3 to 2.25.4

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.24.3 to 2.25.4

Updates com.google.protobuf:protobuf-bom from 4.29.2 to 4.34.1

Commits

• See full diff in compare view

Updates com.google.protobuf:protoc from 4.29.2 to 4.34.1

Commits

• See full diff in compare view

Updates io.grpc:grpc-bom from 1.69.0 to 1.80.0

Release notes

Sourced from io.grpc:grpc-bom's releases.

V1.80.0

API Changes

• core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

Bug Fixes

• core: Fixed the retry backoff jitter range to [0.8, 1.2] to align with the gRPC A6 specification. Retries will now occur more consistently around the calculated backoff interval. (#12639) (024fdd0ea) core: Fixed a race condition in RetriableStream where inFlightSubStreams counting could become inconsistent during concurrent retry and deadline events. This ensures that client calls (such as blockingUnaryCall) do not hang indefinitely and correctly receive a close signal. (#12649) (73abb4854)

Improvements

• api: Trigger R8's ServiceLoader optimization to reduce necessary configuration when using R8 Full Mode (470219f9c). This allows gRPC to avoid reflection, and the need to specify -keeps for various class’s constructors. Upgrade to protobuf 33.4 (#12615) (50c18f183)
• cronet: Introduced CRONET_READ_BUFFER_SIZE_KEY to allow customizing the read buffer size per-stream via CallOptions. Increasing the buffer size from the 4KB default can significantly improve performance for large messages by reducing JNI and context-switching overhead. (31fdb6c22)
• api: Moved FlagResetRule to api/testFixtures and updated ManagedChannelRegistry to honor the GRPC_ENABLE_RFC3986_URIS feature flag. This ensures that target parsing is consistent across the library when the new URI parser is enabled. (#12608)
• api: Updated NameResolverRegistry to natively support io.grpc.Uri. This is a foundational change that allows gRPC's name resolution system to handle URIs parsed with the new RFC 3986-compliant parser, ensuring more robust target handling. (#12609) (990348876)
• xds: Removed the GRPC_EXPERIMENTAL_XDS_SNI feature flag. SNI determination via xDS is now always enabled and follows gRFC A101, where SNI is derived from xDS configurations like auto_host_sni or UpstreamTlsContext.sni. This ensures that no SNI is sent if not explicitly configured, unless the legacy channel authority fallback is enabled. (#12625) (ac44e9681)

New Features

• core: pick_first shuffling now a weighted shuffle and observes weights from EDS (34dd29042). This finishes the gRFC A113 pick_first: Weighted Random Shuffling support
• netty: Added RFC 3986 support to the unix: name resolver. This enables proper parsing of Unix domain socket URIs, including correct handling of query and fragment components in both hierarchical (e.g., unix:///path) and opaque (e.g., unix:/path) formats. (#12659)

Thanks to

• @​becomeStar
• @​aymanm-google
• @​PetitBaguette
• @​stagegrowth
• @​wcchoi
• @​Gyuhyeok99

v1.79.0

API Changes

• core: Delete the never-used io.grpc.internal.ReadableBuffer.readBytes(ByteBuffer) (#12580) (738782fb0). This is deeply internal and not accessible, so shouldn’t impact anything. However, Apache Arrow Java uses reflection to access private fields; GH-939: Remove reflection for gRPC buffers is swapping to gRPC’s public zero-copy APIs

• opentelemetry: Add target attribute filter for metrics (#12587). Introduce an optional Predicate targetAttributeFilter to control how grpc.target is recorded in OpenTelemetry client metrics. When a filter is provided, targets rejected by the predicate are normalized to "other" to reduce grpc.target metric cardinality, while accepted targets are recorded as-is. If no filter is set, existing behavior is preserved. This change adds a new Builder API on GrpcOpenTelemetry to allow applications to configure the filter. 

Behavior Changes

• core: Convert AutoConfiguredLB to an actual LB (4bbf8eee5). This is an internal refactoring, but it does improve how errors are handled for broken binaries. Previously, not being able to load pick_first would result in a channel panic. Now it is handled as a regular load balancing error

• okhttp: Assert no pending streams before transport READY (#12566) (ed6d175fc). No pending streams should exist when the transport transitions to READY. This PR adds an assertion to help verify this invariant.

Bug Fixes

• core: PickFirstLB should not return a subchannel during CONNECTING (228fc8ecd). Pick-first in grpc-java has behaved this way since it was created, and it was of no consequence. However, now there are some load balancing policies (mainly RLS) that will do a pick() and hope the result to be reasonably accurate for metrics.

• xds: Endpoint weights are now normalized within localities, so that when using rish_hash the locality weights are preserved (f6d140f87). Previously, localities with many endpoints or high endpoint weights could receive excess traffic. This is one part of gRFC A113 pick_first: Weighted Random Shuffle

... (truncated)

Commits

• 6c231b4 Bump version to 1.80.0
• daf7a6c Update README etc to reference 1.80.0
• b7f9074 Revert "fix(xds): Allow and normalize trailing dot (FQDN) in matchHostName (#...
• 09a6e2e Revert "netty: Preserve early server handshake failure cause in logs"
• 31fdb6c Add CRONET_READ_BUFFER_SIZE_KEY API to CronetClientStream
• 470219f Trigger R8's ServiceLoader optimization
• 50ead96 netty: Preserve early server handshake failure cause in logs
• eae16b2 unwrap ForwardingSubchannel during Picks (#12658)
• d9320ee netty: Add RFC 3986 support to the 'unix:' name resolver.
• d5536b3 netty: factor out some duplicated code into a helper method
• Additional commits viewable in compare view

Updates io.grpc:protoc-gen-grpc-java from 1.69.0 to 1.80.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

V1.80.0

API Changes

• core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

Bug Fixes

• core: Fixed the retry backoff jitter range to [0.8, 1.2] to align with the gRPC A6 specification. Retries will now occur more consistently around the calculated backoff interval. (#12639) (024fdd0ea) core: Fixed a race condition in RetriableStream where inFlightSubStreams counting could become inconsistent during concurrent retry and deadline events. This ensures that client calls (such as blockingUnaryCall) do not hang indefinitely and correctly receive a close signal. (#12649) (73abb4854)

Improvements

• api: Trigger R8's ServiceLoader optimization to reduce necessary configuration when using R8 Full Mode (470219f9c). This allows gRPC to avoid reflection, and the need to specify -keeps for various class’s constructors. Upgrade to protobuf 33.4 (#12615) (50c18f183)
• cronet: Introduced CRONET_READ_BUFFER_SIZE_KEY to allow customizing the read buffer size per-stream via CallOptions. Increasing the buffer size from the 4KB default can significantly improve performance for large messages by reducing JNI and context-switching overhead. (31fdb6c22)
• api: Moved FlagResetRule to api/testFixtures and updated ManagedChannelRegistry to honor the GRPC_ENABLE_RFC3986_URIS feature flag. This ensures that target parsing is consistent across the library when the new URI parser is enabled. (#12608)
• api: Updated NameResolverRegistry to natively support io.grpc.Uri. This is a foundational change that allows gRPC's name resolution system to handle URIs parsed with the new RFC 3986-compliant parser, ensuring more robust target handling. (#12609) (990348876)
• xds: Removed the GRPC_EXPERIMENTAL_XDS_SNI feature flag. SNI determination via xDS is now always enabled and follows gRFC A101, where SNI is derived from xDS configurations like auto_host_sni or UpstreamTlsContext.sni. This ensures that no SNI is sent if not explicitly configured, unless the legacy channel authority fallback is enabled. (#12625) (ac44e9681)

New Features

• core: pick_first shuffling now a weighted shuffle and observes weights from EDS (34dd29042). This finishes the gRFC A113 pick_first: Weighted Random Shuffling support
• netty: Added RFC 3986 support to the unix: name resolver. This enables proper parsing of Unix domain socket URIs, including correct handling of query and fragment components in both hierarchical (e.g., unix:///path) and opaque (e.g., unix:/path) formats. (#12659)

Thanks to

• @​becomeStar
• @​aymanm-google
• @​PetitBaguette
• @​stagegrowth
• @​wcchoi
• @​Gyuhyeok99

v1.79.0

API Changes

• core: Delete the never-used io.grpc.internal.ReadableBuffer.readBytes(ByteBuffer) (#12580) (738782fb0). This is deeply internal and not accessible, so shouldn’t impact anything. However, Apache Arrow Java uses reflection to access private fields; GH-939: Remove reflection for gRPC buffers is swapping to gRPC’s public zero-copy APIs

• opentelemetry: Add target attribute filter for metrics (#12587). Introduce an optional Predicate targetAttributeFilter to control how grpc.target is recorded in OpenTelemetry client metrics. When a filter is provided, targets rejected by the predicate are normalized to "other" to reduce grpc.target metric cardinality, while accepted targets are recorded as-is. If no filter is set, existing behavior is preserved. This change adds a new Builder API on GrpcOpenTelemetry to allow applications to configure the filter. 

Behavior Changes

• core: Convert AutoConfiguredLB to an actual LB (4bbf8eee5). This is an internal refactoring, but it does improve how errors are handled for broken binaries. Previously, not being able to load pick_first would result in a channel panic. Now it is handled as a regular load balancing error

• okhttp: Assert no pending streams before transport READY (#12566) (ed6d175fc). No pending streams should exist when the transport transitions to READY. This PR adds an assertion to help verify this invariant.

Bug Fixes

• core: PickFirstLB should not return a subchannel during CONNECTING (228fc8ecd). Pick-first in grpc-java has behaved this way since it was created, and it was of no consequence. However, now there are some load balancing policies (mainly RLS) that will do a pick() and hope the result to be reasonably accurate for metrics.

• xds: Endpoint weights are now normalized within localities, so that when using rish_hash the locality weights are preserved (f6d140f87). Previously, localities with many endpoints or high endpoint weights could receive excess traffic. This is one part of gRFC A113 pick_first: Weighted Random Shuffle

... (truncated)

Commits

• 6c231b4 Bump version to 1.80.0
• daf7a6c Update README etc to reference 1.80.0
• b7f9074 Revert "fix(xds): Allow and normalize trailing dot (FQDN) in matchHostName (#...
• 09a6e2e Revert "netty: Preserve early server handshake failure cause in logs"
• 31fdb6c Add CRONET_READ_BUFFER_SIZE_KEY API to CronetClientStream
• 470219f Trigger R8's ServiceLoader optimization
• 50ead96 netty: Preserve early server handshake failure cause in logs
• eae16b2 unwrap ForwardingSubchannel during Picks (#12658)
• d9320ee netty: Add RFC 3986 support to the 'unix:' name resolver.
• d5536b3 netty: factor out some duplicated code into a helper method
• Additional commits viewable in compare view

Updates jakarta.validation:jakarta.validation-api from 3.1.0 to 3.1.1

Release notes

Sourced from jakarta.validation:jakarta.validation-api's releases.

3.1.1

What's Changed

• Add Jakarta Validation 3.1 XSDs by @​marko-bekhta in jakartaee/validation#221

New Contributors

• @​marko-bekhta made their first contribution in jakartaee/validation#221

Full Changelog: jakartaee/validation@3.1.0...3.1.1

Commits

• a188798 Prepare a 3.1.1 service release
• d93abee Include the xsd files in the api jar
• 1b6f29f Add Jakarta Validation 3.1 XSDs (#221)
• See full diff in compare view

Updates org.apache.tomcat:tomcat-annotations-api from 11.0.2 to 11.0.21

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.18.2 to 2.21.3

Commits

• a64fbe0 [maven-release-plugin] prepare release jackson-datatype-joda-2.21.3
• 3009642 Prep for 2.21.3 release
• fc02f6e Post-release dep version bump
• da7bc3e [maven-release-plugin] prepare for next development iteration
• 6dcb5d0 [maven-release-plugin] prepare release jackson-datatype-joda-2.21.2
• a2e409c Prep for 2.21.2 release
• 600fca6 Post-release dep version bump
• 1787940 [maven-release-plugin] prepare for next development iteration
• a723256 [maven-release-plugin] prepare release jackson-datatype-joda-2.21.1
• 93414d9 Prep for 2.21.1 release
• Additional commits viewable in compare view

Updates jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.5

Release notes

Sourced from jakarta.xml.bind:jakarta.xml.bind-api's releases.

Jakarta XML Binding API 4.0.5

What's Changed

• 4.0.4 release by @​lukasj in jakartaee/jaxb-api#324
• #325 restore permissive base64 decoding by @​laurentschoelens in jakartaee/jaxb-api#326
• #330 fixes documentation by @​laurentschoelens in jakartaee/jaxb-api#331
• add dependabot by @​lukasj in jakartaee/jaxb-api#332
• move dependabot config to the right location by @​lukasj in jakartaee/jaxb-api#333
• Bump the actions-dependencies group with 2 updates by @​dependabot[bot] in jakartaee/jaxb-api#334
• Bump the dependencies group across 1 directory with 2 updates by @​dependabot[bot] in jakartaee/jaxb-api#336
• Bump the maven-plugins group across 2 directories with 15 updates by @​dependabot[bot] in jakartaee/jaxb-api#335

Full Changelog: jakartaee/jaxb-api@4.0.4...4.0.5

Jakarta XML Binding API 4.0.4

What's Changed

• 4.0.3 release by @​lukasj in jakartaee/jaxb-api#322
• Create TCK Challenge Template by @​Pandrex247 in jakartaee/jaxb-api#319
• activation-api 2.1.4 by @​lukasj in jakartaee/jaxb-api#321
• fix #315 by @​antoniosanct in jakartaee/jaxb-api#320

New Contributors

• @​Pandrex247 made their first contribution in jakartaee/jaxb-api#319

Full Changelog: jakartaee/jaxb-api@4.0.3...4.0.4

Jakarta XML Binding API 4.0.3

What's Changed

• 4.0.2 release by @​lukasj in jakartaee/jaxb-api#307
• Handle empty string input for parseBase64Binary instead of throwing IllegalArgumentException by @​SanderHestvik in jakartaee/jaxb-api#309
• Fix #316, Unable to override JAXBContextFactory through properties by @​blutorange in jakartaee/jaxb-api#317
• fix: Unmarshalling hexBinary with leading whitespaces yields null by @​netmikey in jakartaee/jaxb-api#313

New Contributors

• @​SanderHestvik made their first contribution in jakartaee/jaxb-api#309
• @​blutorange made their first contribution in jakartaee/jaxb-api#317
• @​netmikey made their first contribution in jakartaee/jaxb-api#313

Full Changelog: jakartaee/jaxb-api@4.0.2...4.0.3

Commits

• 33af600 Update API version of : to 4.0.5
• e8bc066 Bump the maven-plugins group across 2 directories with 15 updates
• 5884465 Bump the dependencies group across 1 directory with 2 updates
• a12f7b7 Bump the actions-dependencies group with 2 updates
• 1375104 move dependabot config to the right location
• 7680773 add dependabot
• cd71d76 #330 fixes documentation
• 4d531bd #325 restore permissive base64 decoding
• 31505d0 Merge pull request #324 from jakartaee/4.0.4-RELEASE
• c3f3109 Update API version of : to 4.0.5-SNAPSHOT
• Additional commits viewable in compare view

Updates com.google.protobuf:protoc from 4.29.2 to 4.34.1

Commits

• See full diff in compare view

Updates io.grpc:protoc-gen-grpc-java from 1.69.0 to 1.80.0

Release notes

Sourced from io.grpc:protoc-gen-grpc-java's releases.

V1.80.0

API Changes

• core: Added PickResult.copyWithSubchannel() and PickResult.copyWithStreamTracerFactory() to simplify updating PickResult while preserving metadata. Load balancing policies should now ensure ForwardingSubchannel decorators are unwrapped before being returned in a pick result. (#12658) (eae16b251)

Bug Fixes

• core: Fixed the retry backoff jitter range to [0.8, 1.2] to align with the gRPC A6 specification. Retries will now occur more consistently around the calculated backoff interval. (#12639) (024fdd0ea) core: Fixed a race condition in RetriableStream where inFlightSubStreams counting could become inconsistent during concurrent retry and deadline events. This ensures that client calls (such as blockingUnaryCall) do not hang indefinitely and correctly receive a close signal. (#12649) (73abb4854)

Improvements

• api: Trigger R8's ServiceLoader optimization to reduce necessary configuration when using R8 Full Mode (470219f9c). This allows gRPC to avoid reflection, and the need to specify -keeps for various class’s constructors. Upgrade to protobuf 33.4 (#12615) (50c18f183)
• cronet: Introduced CRONET_READ_BUFFER_SIZE_KEY to allow customizing the read buffer size per-stream via CallOptions. Increasing the buffer size from the 4KB default can significantly improve performance for large messages by reducing JNI and context-switching overhead. (31fdb6c22)
• api: Moved FlagResetRule to api/testFixtures and updated ManagedChannelRegistry to honor the GRPC_ENABLE_RFC3986_URIS feature flag. This ensures that target parsing is consistent across the library when the new URI parser is enabled. (#12608)
• api: Updated NameResolverRegistry to natively support io.grpc.Uri. This is a foundational change that allows gRPC's name resolution system to handle URIs parsed with the new RFC 3986-compliant parser, ensuring more robust target handling. (#12609) (990348876)
• xds: Removed the GRPC_EXPERIMENTAL_XDS_SNI feature flag. SNI determination via xDS is now always enabled and follows gRFC A101, where SNI is derived from xDS configurations like auto_host_sni or UpstreamTlsContext.sni. This ensures that no SNI is sent if not explicitly configured, unless the legacy channel authority fallback is enabled. (#12625) (ac44e9681)

New Features

• core: pick_first shuffling now a weighted shuffle and observes weights from EDS (34dd29042). This finishes the gRFC A113 pick_first: Weighted Random Shuffling support
• netty: Added RFC 3986 support to the unix: name resolver. This enables proper parsing of Unix domain socket URIs, including correct handling of query and fragment components in both hierarchical (e.g., unix:///path) and opaque (e.g., unix:/path) formats. (#12659)

Thanks to

• @​becomeStar
• @​aymanm-google
• @​PetitBaguette
• @​stagegrowth
• @​wcchoi
• @​Gyuhyeok99

v1.79.0

API Changes

• core: Delete the never-used io.grpc.internal.ReadableBuffer.readBytes(ByteBuffer) (#12580) (738782fb0). This is deeply internal and not accessible, so shouldn’t impact anything. However, Apache Arrow Java uses reflection to access private fields; GH-939: Remove reflection for gRPC buffers is swapping to gRPC’s public zero-copy APIs

• opentelemetry: Add target attribute filter for metrics (#12587). Introduce an optional Predicate targetAttributeFilter to control how grpc.target is recorded in OpenTelemetry client metrics. When a filter is provided, targets rejected by the predicate are normalized to "other" to reduce grpc.target metric cardinality, while accepted targets are recorded as-is. If no filter is set, existing behavior is preserved. This change adds a new Builder API on GrpcOpenTelemetry to allow applications to configure the filter. 

Behavior Changes

• core: Convert AutoConfiguredLB to an actual LB (4bbf8eee5). This is an internal refactoring, but it does improve how errors are handled for broken binaries. Previously, not being able to load pick_first would result in a channel panic. Now it is handled as a regular load balancing error

• okhttp: Assert no pending streams before transport READY (#12566) (ed6d175fc). No pending streams should exist when the transport transitions to READY. This PR adds an assertion to help verify this invariant.

Bug Fixes

• core: PickFirstLB should not return a subchannel during CONNECTING (228fc8ecd). Pick-first in grpc-java has behaved this way since it was created, and it was of no consequence. However, now there are some load balancing policies (mainly RLS) that will do a pick() and hope the result to be reasonably accurate for metrics.

• xds: Endpoint weights are now normalized within localities, so that when using rish_hash the locality weights are preserved (f6d140f87). Previously, localities with many endpoints or high endpoint weights could receive excess traffic. This is one part of gRFC A113 pick_first: Weighted Random Shuffle

... (truncated)

Commits

• 6c231b4 Bump version to 1.80.0
• daf7a6c Update README etc to reference 1.80.0
• b7f9074 Revert "fix(xds): Allow and normalize trailing dot (FQDN) in matchHostName (#...
• 09a6e2e Revert "netty: Preserve early server handshake failure cause in logs"
• 31fdb6c Add CRONET_READ_BUFFER_SIZE_KEY API to CronetClientStream
• 470219f Trigger R8's ServiceLoader optimization
• 50ead96 netty: Preserve early server handshake failure cause in logs
• eae16b2 unwrap ForwardingSubchannel during Picks (#12658)
• d9320ee netty: Add RFC 3986 support to the 'unix:' name resolver.
• d5536b3 netty: factor out some duplicated code into a helper method
• Additional commits viewable in compare view

Updates org.springframework.boot from 3.4.1 to 4.0.6

Release notes

Sourced from org.springframework.boot's releases.

v4.0.6

🐞 Bug Fixes

• Default security is misconfigured when spring-boot-actuator-autoconfigure is present and spring-boot-health is not #50188
• Elasticsearch Rest5Client auto-configuration misconfigures underlying HTTP client #50187
• ApplicationPidFileWriter does not handle symlinks correctly #50185
• RandomValuePropertySource is not suitable for secrets #50183
• Cassandra auto-configuration misconfigures CqlSessionBuilder #50180
• ApplicationTemp does not handle symlinks correctly #50178
• Remote DevTools performs comparison incorrectly #50176
• spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50174
• Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50077
• Classic starters are missing several modules #50071
• Module spring-boot-resttestclient is missing from spring-boot-starter-test-classic #50069
• Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50064
• EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50039
• WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50017
• Imports on a containing test class are ignored when a nested class has imports #50012
• With spring.jackson.use-jackson2-defaults set to true, FAIL_ON_UNKNOWN_PROPERTIES is enabled #49951
• 500 response from env endpoint when supplied pattern is invalid #49946
• Reactive MongoDB starter has a transitive dependency on the synchronous MongoDB driver #49945
• HTTP method is lost when configuring excludes in EndpointRequest #49943
• Honor HttpMethod for reactive additional endpoint paths #49880
• Docker Compose support doesn't work with apache/artemis image #49869
• Docker Compose support doesn't work with apache/activemq image #49866
• Spring Security's PathPatternRequestMatcher.Builder is not auto-configured when using WebMvcTest and spring-boot-security-test #49854
• API versioning path strategy should be applied path last as it is not meant to yield #49800

📔 Documentation

• Update docs to encourage Java fundamentals for beginners that prefer to learn that way #50146
• HTTP Service Interface Clients still document that API versioning can be configured via properties #50126
• Link to the observability section of the Lettuce documentation is broken #50097
• Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50085
• MySamlRelyingPartyConfiguration is missing a Kotlin sample #50024
• Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50019
• Link to the Kubernetes documentation when discussing startup probes #50015
• Typo in JdbcSessionAutoConfiguration Javadoc #49873
• Clarify that configuration property default values are not available through the Environment #49851
• Document the need for Liquibase and Flyway starters