Skip to content

Update dependencies#375

Merged
kingthorin merged 1 commit into
mainfrom
dependabot/gradle/gradle-975ba79929
Jul 1, 2026
Merged

Update dependencies#375
kingthorin merged 1 commit into
mainfrom
dependabot/gradle/gradle-975ba79929

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle group with 5 updates in the / directory:

Package From To
org.graalvm.js:js-community 25.0.3 25.1.3
org.graalvm.js:js-scriptengine 25.0.3 25.1.3
org.junit.jupiter:junit-jupiter 6.1.0 6.1.1
org.junit.platform:junit-platform-launcher 6.1.0 6.1.1
org.seleniumhq.selenium:selenium-java 4.44.0 4.45.0

Updates org.graalvm.js:js-community from 25.0.3 to 25.1.3

Commits

Updates org.graalvm.js:js-scriptengine from 25.0.3 to 25.1.3

Release notes

Sourced from org.graalvm.js:js-scriptengine's releases.

GraalJS 25 Innovation 1 (25.1.3)

GraalJS is an ECMAScript-compliant runtime to execute JavaScript and Node.js applications. It is fully standard-compliant, executes applications with high performance, and provides all benefits from the GraalVM stack, including language interoperability and common tooling.

You can download GraalJS as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalJS and how to get started on the website at https://www.graalvm.org/javascript/.

Changelog

Sourced from org.graalvm.js:js-scriptengine's changelog.

Version 25.1.3

  • ECMAScript 2026 mode/features enabled by default.
  • Removed support and builds for macOS x86-64 (darwin-amd64).
  • Added an experimental option js.crypto that provides getRandomValues() and randomUUID() from the Web Crypto API.
  • Added stable option js.performance that provides performance.now(), timeOrigin, and toJSON() from the Web High Resolution Time API.
  • Finished support for Temporal. It is available in ECMAScript 2027 mode (--js.ecmascript-version=2027).
  • Implemented the Immutable ArrayBuffers proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Explicit Resource Management proposal. It is available behind the experimental option (--js.explicit-resource-management).
  • Updated Node.js to version 24.14.1.
  • Limited Chrome inspector remote debugging to localhost.
  • Implemented the Joint Iteration proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Import Text proposal. It is available behind the experimental option (--js.import-text).
  • Implemented the Import Bytes proposal. It is available behind the experimental option (--js.import-bytes).
  • Implemented the Error Stack Accessor proposal. It is available behind the experimental option (--js.error-stack-accessor).
  • Removed support for legacy import assertions (import ... assert {type: "..."}) and the --js.import-assertions option; use import attributes (import ... with {type: "..."}, option --js.import-attributes) instead.

Version 25.0.0

  • ECMAScript 2025 mode/features enabled by default.
  • Updated Node.js to version 22.17.1.
  • Implemented the Intl.DurationFormat proposal.
  • Made option js.text-encoding stable and allowed in SandboxPolicy.CONSTRAINED.
  • Implemented the import defer proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Upsert proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Enabled source phase imports from WebAssembly modules (import source mod from "./mod.wasm") by default if the js.webassembly option is enabled and the js.source-phase-imports option is not explicitly set to false.

Version 24.2.0

  • Updated Node.js to version 22.13.1.
  • Implemented the Error.isError proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Math.sumPrecise proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Promise.try proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Atomics.pause proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Uint8Array to/from base64 and hex proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Source Phase Imports proposal. It is available behind the experimental option (--js.source-phase-imports).
  • Implemented the WebAssembly/ES Module Integration proposal, allowing .wasm modules to be loaded via import statements.
  • Implemented basic Worker API (resembling the API available in d8). It is available behind the experimental option --js.worker.
  • Added option js.stack-trace-api that enables/disables Error.captureStackTrace, Error.prepareStackTrace and Error.stackTraceLimit. These non-standard extensions are disabled by default (unless js.v8-compat or js.nashorn-compat is used).
  • Made option js.webassembly stable.
  • Made options js.load, js.print, and js.graal-builtin stable and allowed in SandboxPolicy.UNTRUSTED.
  • Made option js.locale stable and allowed in SandboxPolicy.UNTRUSTED. Its value, if non-empty, must be a well-formed Unicode BCP 47 locale identifier and is now validated.
  • Added an experimental java.util.concurrent.Executor that can be used to post tasks into the event loop thread in graal-nodejs. It is available as require('node:graal').eventLoopExecutor.
  • Implemented the TextDecoder and TextEncoder APIs of the WHATWG Encoding Standard. They are available behind the experimental option (--js.text-encoding).
  • Implemented the RegExp.escape proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Regular Expression Pattern Modifiers proposal.
  • Implemented the Iterator Sequencing proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).

Version 24.1.0

  • ECMAScript 2024 mode/features enabled by default.
  • Implemented the Make eval-introduced global vars redeclarable proposal.
  • Implemented the Float16Array proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Array.fromAsync proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).

... (truncated)

Commits
  • b86c15a [GR-76671] Update GraalVM version number to 25.1.3 in GraalJS.
  • 2102735 Update GraalVM version number to 25.1.3 in GraalJS.
  • 004cb07 [GR-76641] Date constructor should process the first 7 arguments only.
  • ccaf4d9 Regression test for Date constructor processing arguments beyond its seven fo...
  • bc79e0c Date constructor should process the first 7 arguments only.
  • f5a6d64 [GR-23997] Periodic update of the graal import (2026-06-14).
  • db4dfd5 Updating the status of TestV8 test-suite.
  • 90e47ce Update graal import.
  • 614f9da [GR-76553] Separating typed-array copyWithin from the array one.
  • 693b8ae Testing that Float[32|16]Array.p.copyWithin keep NaN payloads.
  • Additional commits viewable in compare view

Updates org.graalvm.js:js-scriptengine from 25.0.3 to 25.1.3

Release notes

Sourced from org.graalvm.js:js-scriptengine's releases.

GraalJS 25 Innovation 1 (25.1.3)

GraalJS is an ECMAScript-compliant runtime to execute JavaScript and Node.js applications. It is fully standard-compliant, executes applications with high performance, and provides all benefits from the GraalVM stack, including language interoperability and common tooling.

You can download GraalJS as a Native Standalone distribution for Oracle GraalVM or GraalVM Community Edition. Native Standalone contains a Native Image compiled launcher.

Starting with 25.0.3, JVM Standalone artifacts are no longer supported and are not included in this release.

To distinguish between Oracle GraalVM and GraalVM Community Edition, the Community Edition distribution has the suffix -community in its name.

Learn more about GraalJS and how to get started on the website at https://www.graalvm.org/javascript/.

Changelog

Sourced from org.graalvm.js:js-scriptengine's changelog.

Version 25.1.3

  • ECMAScript 2026 mode/features enabled by default.
  • Removed support and builds for macOS x86-64 (darwin-amd64).
  • Added an experimental option js.crypto that provides getRandomValues() and randomUUID() from the Web Crypto API.
  • Added stable option js.performance that provides performance.now(), timeOrigin, and toJSON() from the Web High Resolution Time API.
  • Finished support for Temporal. It is available in ECMAScript 2027 mode (--js.ecmascript-version=2027).
  • Implemented the Immutable ArrayBuffers proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Explicit Resource Management proposal. It is available behind the experimental option (--js.explicit-resource-management).
  • Updated Node.js to version 24.14.1.
  • Limited Chrome inspector remote debugging to localhost.
  • Implemented the Joint Iteration proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Import Text proposal. It is available behind the experimental option (--js.import-text).
  • Implemented the Import Bytes proposal. It is available behind the experimental option (--js.import-bytes).
  • Implemented the Error Stack Accessor proposal. It is available behind the experimental option (--js.error-stack-accessor).
  • Removed support for legacy import assertions (import ... assert {type: "..."}) and the --js.import-assertions option; use import attributes (import ... with {type: "..."}, option --js.import-attributes) instead.

Version 25.0.0

  • ECMAScript 2025 mode/features enabled by default.
  • Updated Node.js to version 22.17.1.
  • Implemented the Intl.DurationFormat proposal.
  • Made option js.text-encoding stable and allowed in SandboxPolicy.CONSTRAINED.
  • Implemented the import defer proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Upsert proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Enabled source phase imports from WebAssembly modules (import source mod from "./mod.wasm") by default if the js.webassembly option is enabled and the js.source-phase-imports option is not explicitly set to false.

Version 24.2.0

  • Updated Node.js to version 22.13.1.
  • Implemented the Error.isError proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Math.sumPrecise proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Promise.try proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Atomics.pause proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Uint8Array to/from base64 and hex proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Source Phase Imports proposal. It is available behind the experimental option (--js.source-phase-imports).
  • Implemented the WebAssembly/ES Module Integration proposal, allowing .wasm modules to be loaded via import statements.
  • Implemented basic Worker API (resembling the API available in d8). It is available behind the experimental option --js.worker.
  • Added option js.stack-trace-api that enables/disables Error.captureStackTrace, Error.prepareStackTrace and Error.stackTraceLimit. These non-standard extensions are disabled by default (unless js.v8-compat or js.nashorn-compat is used).
  • Made option js.webassembly stable.
  • Made options js.load, js.print, and js.graal-builtin stable and allowed in SandboxPolicy.UNTRUSTED.
  • Made option js.locale stable and allowed in SandboxPolicy.UNTRUSTED. Its value, if non-empty, must be a well-formed Unicode BCP 47 locale identifier and is now validated.
  • Added an experimental java.util.concurrent.Executor that can be used to post tasks into the event loop thread in graal-nodejs. It is available as require('node:graal').eventLoopExecutor.
  • Implemented the TextDecoder and TextEncoder APIs of the WHATWG Encoding Standard. They are available behind the experimental option (--js.text-encoding).
  • Implemented the RegExp.escape proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Regular Expression Pattern Modifiers proposal.
  • Implemented the Iterator Sequencing proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).

Version 24.1.0

  • ECMAScript 2024 mode/features enabled by default.
  • Implemented the Make eval-introduced global vars redeclarable proposal.
  • Implemented the Float16Array proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).
  • Implemented the Array.fromAsync proposal. It is available in ECMAScript staging mode (--js.ecmascript-version=staging).

... (truncated)

Commits
  • b86c15a [GR-76671] Update GraalVM version number to 25.1.3 in GraalJS.
  • 2102735 Update GraalVM version number to 25.1.3 in GraalJS.
  • 004cb07 [GR-76641] Date constructor should process the first 7 arguments only.
  • ccaf4d9 Regression test for Date constructor processing arguments beyond its seven fo...
  • bc79e0c Date constructor should process the first 7 arguments only.
  • f5a6d64 [GR-23997] Periodic update of the graal import (2026-06-14).
  • db4dfd5 Updating the status of TestV8 test-suite.
  • 90e47ce Update graal import.
  • 614f9da [GR-76553] Separating typed-array copyWithin from the array one.
  • 693b8ae Testing that Float[32|16]Array.p.copyWithin keep NaN payloads.
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits
  • 0d85889 Release 6.1.1
  • 0363eee Finalize 6.1.1 release notes
  • a6d540a Move entry to 6.1.1 release notes
  • 69339d5 Only pass timeout when publishing to avoid failure in nmcp plugin
  • dec2eb9 Allow excluding engines from memory cleanup mode (#5786)
  • a5f4270 Publish sha256/sha512 checksums again but filter out signature ones (#5796)
  • 8213012 Update plugin nmcp-settings to v1.6.0 (#5787)
  • d1bf847 Generate Javadoc for aggregator modules
  • d721de5 Pass --no-fonts to javadoc convention
  • d289ec6 Restore original SetSystemProperty values in a ParameterizedTest (#5720)
  • Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-launcher from 6.1.0 to 6.1.1

Release notes

Sourced from org.junit.platform:junit-platform-launcher's releases.

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits
  • 0d85889 Release 6.1.1
  • 0363eee Finalize 6.1.1 release notes
  • a6d540a Move entry to 6.1.1 release notes
  • 69339d5 Only pass timeout when publishing to avoid failure in nmcp plugin
  • dec2eb9 Allow excluding engines from memory cleanup mode (#5786)
  • a5f4270 Publish sha256/sha512 checksums again but filter out signature ones (#5796)
  • 8213012 Update plugin nmcp-settings to v1.6.0 (#5787)
  • d1bf847 Generate Javadoc for aggregator modules
  • d721de5 Pass --no-fonts to javadoc convention
  • d289ec6 Restore original SetSystemProperty values in a ParameterizedTest (#5720)
  • Additional commits viewable in compare view

Updates org.seleniumhq.selenium:selenium-java from 4.44.0 to 4.45.0

Release notes

Sourced from org.seleniumhq.selenium:selenium-java's releases.

Selenium 4.45.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Commits
  • cd6a3cd [build] Prepare for release of selenium-4.45.0 (#17680)
  • 15fad06 [build] Automated Browser Version Update (#17679)
  • cb9b6fd [grid] Add support Redis-backed for SessionQueue (#17678)
  • 18bb1d9 [py] terminate driver service process when start() fails to connect (#17651)
  • b3164ef [grid] add HtmlUnit browser logo to Grid UI (#17656)
  • bb741bd [build] Automated Browser Version Update (#17658)
  • 887237c [py] translate continue_request/continue_response kwargs to BiDi wire format ...
  • f53de51 [rb] run minimize test on linux now that #17644 fixed fluxbox startup
  • 3f37cce [rb] set window state before each window test instead of resetting driver
  • 2bfb990 [rb] skip Safari double_click action tests
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the gradle group across 1 directory with 5 updates
9e8c23c 
Bumps the gradle group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.graalvm.js:js-community](https://github.com/oracle/graal) | `25.0.3` | `25.1.3` |
| [org.graalvm.js:js-scriptengine](https://github.com/graalvm/graaljs) | `25.0.3` | `25.1.3` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.1` |
| [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.1` |
| [org.seleniumhq.selenium:selenium-java](https://github.com/SeleniumHQ/selenium) | `4.44.0` | `4.45.0` |



Updates `org.graalvm.js:js-community` from 25.0.3 to 25.1.3
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](https://github.com/oracle/graal/commits)

Updates `org.graalvm.js:js-scriptengine` from 25.0.3 to 25.1.3
- [Release notes](https://github.com/graalvm/graaljs/releases)
- [Changelog](https://github.com/oracle/graaljs/blob/master/CHANGELOG.md)
- [Commits](oracle/graaljs@vm-25.0.3...vm-25.1.3)

Updates `org.graalvm.js:js-scriptengine` from 25.0.3 to 25.1.3
- [Release notes](https://github.com/graalvm/graaljs/releases)
- [Changelog](https://github.com/oracle/graaljs/blob/master/CHANGELOG.md)
- [Commits](oracle/graaljs@vm-25.0.3...vm-25.1.3)

Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.1)

Updates `org.junit.platform:junit-platform-launcher` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.1)

Updates `org.seleniumhq.selenium:selenium-java` from 4.44.0 to 4.45.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.44.0...selenium-4.45.0)

---
updated-dependencies:
- dependency-name: org.graalvm.js:js-community
  dependency-version: 25.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.graalvm.js:js-scriptengine
  dependency-version: 25.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.graalvm.js:js-scriptengine
  dependency-version: 25.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.junit.platform:junit-platform-launcher
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.seleniumhq.selenium:selenium-java
  dependency-version: 4.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 1, 2026
@psiinon

psiinon commented Jul 1, 2026

Copy link
Copy Markdown
Member

Logo
Checkmarx One – Scan Summary & Details – b6531318-dd95-44eb-b54a-099279e7e7ee

Fixed Issues (3) Great job! The following issues were fixed in this Pull Request
Severity Issue Source File / Package
MEDIUM CVE-2020-13697 Maven-org.nanohttpd:nanohttpd-2.3.1
MEDIUM CVE-2022-21230 Maven-org.nanohttpd:nanohttpd-2.3.1
LOW Cxeb68d52e-5509 Maven-commons-codec:commons-codec-1.11

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@thc202 thc202 changed the title Bump the gradle group across 1 directory with 5 updates Update dependencies Jul 1, 2026
@kingthorin
kingthorin merged commit 9fc17d5 into main Jul 1, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/gradle/gradle-975ba79929 branch July 1, 2026 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@thc202 thc202 thc202 approved these changes
@kingthorin kingthorin kingthorin approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@psiinon @thc202 @kingthorin