Skip to content

Bump ch.qos.logback:logback-classic from 1.2.3 to 1.2.13 - #1901

Closed
dependabot[bot] wants to merge 1 commit into
4.xfrom
dependabot/maven/ch.qos.logback-logback-classic-1.2.13
Closed

dependabot[bot] wants to merge 1 commit into
4.xfrom
dependabot/maven/ch.qos.logback-logback-classic-1.2.13

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 5, 2023 •

Copy link
Copy Markdown
Contributor

Bumps ch.qos.logback:logback-classic from 1.2.3 to 1.2.13.

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.2.3 to 1.2.13.
- [Commits](qos-ch/logback@v_1.2.3...v_1.2.13)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Dec 5, 2023
@bschoening

Copy link
Copy Markdown
Contributor

@absurdfarce +1 on this, but could probably be bumped to the current 1.5.18

@absurdfarce

absurdfarce commented Aug 14, 2025 •

Copy link
Copy Markdown
Contributor

Hey @bschoening, I'm afraid we can't go all the way to 1.5.18; based on the Github docs it looks like 1.5.x requires Java11 and even the 4.x Java driver still supports Java8.

@absurdfarce

Copy link
Copy Markdown
Contributor

Based on the current news from the project site it looks like 1.4.x also requires Java11... which means we're stuck with 1.3.x for now.

@absurdfarce

Copy link
Copy Markdown
Contributor

Will hopefully be replaced in it's entirety by #2051

@bschoening

Copy link
Copy Markdown
Contributor

@absurdfarce ok, I see. #2051 looks like a great fix.

@absurdfarce

Copy link
Copy Markdown
Contributor

We've made good headway with #2051 so there's no obvious reason to keep this around.

@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2025

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/maven/ch.qos.logback-logback-classic-1.2.13 branch August 21, 2025 03:22
absurdfarce added a commit to absurdfarce/cassandra-java-driver that referenced this pull request May 15, 2026
… of the original PR (apache#1901).

The change that was actually merged attempted to bump us up to the most recent Java8-compatible
logback impl.  This moved us from 1.2.x to 1.3.x which in turn brought some dependency changes
that were excessive, especially for a patch release.

patch by Bret McGuire; reviewed by Andy Tolbert and Abe Ratnofsky
reference: apache#2088
absurdfarce added a commit that referenced this pull request May 15, 2026
…e original PR (#1901).

The change that was actually merged attempted to bump us up to the most recent Java8-compatible
logback impl.  This moved us from 1.2.x to 1.3.x which in turn brought some dependency changes
that were excessive, especially for a patch release.

patch by Bret McGuire; reviewed by Andy Tolbert and Abe Ratnofsky
reference: #2088
nikagra added a commit to nikagra/java-driver that referenced this pull request Oct 20, 2026
* [maven-release-plugin] prepare for next development iteration

* Removing interface to Travis CI

Patch by Bret McGuire; reviewed by Andy Tolbert and Bret McGuire
reference: apache#2066

* Replace outdated link in README

patch by April Murphy; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2064

* ninja-fix: Remove ASF donation message

* Update LZ4 and Netty dependencies for CVE response

The primary goal here is to address CVE-2025-12183. Netty includes a
dependency on vulnerable versions of lz4-java, so update to a fixed
version of Netty as well. On the C* server side, we opted to move to the
new community fork of lz4-java, so match that decision here
(CASSANDRA-21052).

patch by Abe Ratnofsky; reviewed by Francisco Guerrero for CASSJAVA-113

* Bump logback to most recent Java8-compatible version

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2051

* ninja-fix - adding an extra space to render the page correctly with mkdocs

I've been looking into details on custom codes and noticed that the there is an issue with rendering bullet points on the following page: https://apache.github.io/cassandra-java-driver/4.19.0/core/custom_codecs/

* ninja-fix Updating a few indented lists that were observed to not render correctly while working on the previous ninja-fix

* Re-work ordering clause support in query builder behind a single OrderingClause abstraction.  This allows for
custom impls to define their own logic for managing "ORDER BY" clauses.

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2047

* ninja-fix We apparently had some unformatted files slip in in the last commit

* CASSJAVA-122 Fix OSGi LZ4 test

patch by Lukasz Antoniak; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2075

* Bump Jackson to 2.20.1

patch by Bret McGuire: reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2076

* CASSJAVA-108 Update ESRI (and remove org.json) dependencies

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2052

* ninja-fix Update Jenkins label to Jammy

* Revert "ninja-fix Update Jenkins label to Jammy"

This reverts commit de96ce8.

* Fix race condition in ClockSeqAndNodeContainer

patch by Jason Koch; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2050

* CASSJAVA-3: Fix ordering of LIMIT and PER PARTITION LIMIT clauses

patch by David Stringer; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2022

* CASSJAVA-30: Update CONTRIBUTING.md
patch by Jane He; reviewed by Bret McGuire and Andy Tolbert

* CASSJAVA-104: Fix Flaky tests
patch by Jane He; review by
Bret McGuire and Andy Tolbert

* CASSJAVA-109, CASSJAVA-117: Manual and API References after donation, Build CI for Java Driver Doc
Patch by Jane He and
Łukasz Antoniak; Reviewed by Bret McGuire

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Revert "[maven-release-plugin] prepare for next development iteration"

This reverts commit 342088c.

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 375e4b5.

* Revert apache#2051 and replace it with something closer to the intent of the original PR (apache#1901).

The change that was actually merged attempted to bump us up to the most recent Java8-compatible
logback impl.  This moved us from 1.2.x to 1.3.x which in turn brought some dependency changes
that were excessive, especially for a patch release.

patch by Bret McGuire; reviewed by Andy Tolbert and Abe Ratnofsky
reference: apache#2088

* Add changelog for 4.19.3

* [maven-release-plugin] prepare release 4.19.3

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 8e2e70c.

* [maven-release-plugin] prepare release 4.19.3

---------

Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: April I. Murphy <[email protected]>
Co-authored-by: Lukasz Antoniak <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: Mikhail Laptev <[email protected]>
Co-authored-by: jasonk000 <[email protected]>
Co-authored-by: David Stringer <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
dkropachev pushed a commit to scylladb/java-driver that referenced this pull request Oct 28, 2026
* [maven-release-plugin] prepare for next development iteration

* Removing interface to Travis CI

Patch by Bret McGuire; reviewed by Andy Tolbert and Bret McGuire
reference: apache#2066

* Replace outdated link in README

patch by April Murphy; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2064

* ninja-fix: Remove ASF donation message

* Update LZ4 and Netty dependencies for CVE response

The primary goal here is to address CVE-2025-12183. Netty includes a
dependency on vulnerable versions of lz4-java, so update to a fixed
version of Netty as well. On the C* server side, we opted to move to the
new community fork of lz4-java, so match that decision here
(CASSANDRA-21052).

patch by Abe Ratnofsky; reviewed by Francisco Guerrero for CASSJAVA-113

* Bump logback to most recent Java8-compatible version

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2051

* ninja-fix - adding an extra space to render the page correctly with mkdocs

I've been looking into details on custom codes and noticed that the there is an issue with rendering bullet points on the following page: https://apache.github.io/cassandra-java-driver/4.19.0/core/custom_codecs/

* ninja-fix Updating a few indented lists that were observed to not render correctly while working on the previous ninja-fix

* Re-work ordering clause support in query builder behind a single OrderingClause abstraction.  This allows for
custom impls to define their own logic for managing "ORDER BY" clauses.

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2047

* ninja-fix We apparently had some unformatted files slip in in the last commit

* CASSJAVA-122 Fix OSGi LZ4 test

patch by Lukasz Antoniak; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2075

* Bump Jackson to 2.20.1

patch by Bret McGuire: reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2076

* CASSJAVA-108 Update ESRI (and remove org.json) dependencies

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2052

* ninja-fix Update Jenkins label to Jammy

* Revert "ninja-fix Update Jenkins label to Jammy"

This reverts commit de96ce8.

* Fix race condition in ClockSeqAndNodeContainer

patch by Jason Koch; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2050

* CASSJAVA-3: Fix ordering of LIMIT and PER PARTITION LIMIT clauses

patch by David Stringer; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2022

* CASSJAVA-30: Update CONTRIBUTING.md
patch by Jane He; reviewed by Bret McGuire and Andy Tolbert

* CASSJAVA-104: Fix Flaky tests
patch by Jane He; review by
Bret McGuire and Andy Tolbert

* CASSJAVA-109, CASSJAVA-117: Manual and API References after donation, Build CI for Java Driver Doc
Patch by Jane He and
Łukasz Antoniak; Reviewed by Bret McGuire

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Revert "[maven-release-plugin] prepare for next development iteration"

This reverts commit 342088c.

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 375e4b5.

* Revert apache#2051 and replace it with something closer to the intent of the original PR (apache#1901).

The change that was actually merged attempted to bump us up to the most recent Java8-compatible
logback impl.  This moved us from 1.2.x to 1.3.x which in turn brought some dependency changes
that were excessive, especially for a patch release.

patch by Bret McGuire; reviewed by Andy Tolbert and Abe Ratnofsky
reference: apache#2088

* Add changelog for 4.19.3

* [maven-release-plugin] prepare release 4.19.3

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 8e2e70c.

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Add security-model discoverability (AGENTS.md -> SECURITY.md -> security model)

Wires the conventional AGENTS.md -> SECURITY.md -> security model chain so automated tooling can mechanically discover the project's security model. No model content is changed.

Generated-by: Claude Opus 4.8 (1M context)

patch by Jarek Potiuk; reviewed by Bret McGuire
reference: apache#2092

* ninja-fix Fix equality operation for Geometry subclasses

* CASSJAVA-131: Add Retention Requirement to Jenkinsfile-asf
patch by Jane He; reviewed by Michael Semb Wever

* CASSJAVA-136 Ninja fix to correct geometry equality actually broke geometry equality

patch by Bret McGuire; reviewed by Jane He

* CASSJAVA-137 Bump Netty to 4.1.138

patch by Bret McGuire; reviewed by Andy Tolbert

* ninja-fix Changelog entries for 4.19.4

* ninja-fix Update scm entry in root pom.xml to match what was done for 3.x

* ninja-fix XML formatting fix for pom.xml

* [maven-release-plugin] prepare release 4.19.4

* docs: restore Sphinx link style in merged manual pages

Upstream rewrote manual links to mkdocs' dir/README.md form, and the
lines without conflicts merged that way. Put them back to our ../dir/
form: the docs hook rewrites both forms and GitHub renders both, so
this is source consistency rather than a build requirement. Record the
rule in CONTRIBUTING so the next sync does not rediscover it.
Upstream's anchor and typo fixes stay.

Refs: DRIVER-1126
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* build: keep the mapper-runtime revapi baseline

Upstream 4.19.3 reset its revapi baselines after its release; the
other modules kept ours through conflicts, but mapper-runtime merged
cleanly and lost its entries. They are DataStax-era ignores (JAVA-2369,
JAVA-2633, JAVA-2792), inert against the 4.19.2.3 baseline revapi
resolves, so this only keeps the file identical to the line.

Refs: DRIVER-1126
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* docs: fix anchors, nesting and a stale version from the merge

Upstream's link to #inflighthandler was dead because the fork had
renamed the heading to match its own broken link; restore upstream's
heading. Re-indent the custom codecs list so the runtime snippet stays
inside its item, and lift the lz4-java example to the pinned version.

Refs: DRIVER-1126
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* fix: compare geometries by the wrapped ESRI geometry

Since 4.19.3 equals() bound to OGCGeometry.equals(Object), which ESRI
1.x does not declare, so an application still on 1.x silently fell
back to identity comparison. Compare what that method compares, the
wrapped com.esri.core.geometry.Geometry and the spatial reference,
through API both 1.x and 2.x have; hashCode() already hashes the
geometry. The upgrade note no longer needs the 2.2.4 requirement.

Refs: DRIVER-1126
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* test: restore the OSGi bundle provisioning the merge broke

Two slips in BundleOptions. The shaded guava bundle kept the
org.apache.cassandra groupId from #895, which versionAsInProject()
cannot resolve through our dependencies.properties. The 4.19.3 merge
resolved the lz4Bundle() conflict to our side and dropped upstream's
CASSJAVA-122 sun.misc extension bundle, which lz4-java imports. Every
Osgi*IT is @ignore'd and no lane runs them (#1293), so neither showed.

Refs: DRIVER-1126
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* test: drop the prepared-cache retention the merge made redundant

Upstream 4.19.3 moved weakValues() from the protected constructor's
base builder into the public constructor's decorator, so a subclass
that passes its own decorator now gets a strong cache. Our
TestCqlPrepareAsyncProcessor only retained the cached futures to stop
them being collected mid-test. Take upstream's comment, drop the
retention set and the process() override, and require the removal
event again instead of checking it only when present.

Refs: DRIVER-1126
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* docs: correct the ordering javadoc taken from upstream

Select.orderBy() still promises to append to the current list, but
since the OrderingClause rework an ANN ordering is replaced instead,
and orderByAnnOf() replaces any column ordering; say so. ANN stands
for approximate, not adjacent, nearest neighbor.

Refs: DRIVER-1126
Co-Authored-By: Claude Fable 5.1 <[email protected]>

* docs: drop fork entries from the upstream changelog

changelog/README.md tracks upstream releases only. The 4.19.2.3 section
came in with feature PRs; the same changes are described in the upgrade
guide and the GitHub release notes.

Refs: DRIVER-1126
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

* build: bump version to 4.19.4.0-SNAPSHOT

The line now carries upstream 4.19.4, so the next fork release
restarts the fourth component at 4.19.4.0, as 4.19.2.0 did after the
4.19.2 sync.

Refs: DRIVER-1126
Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

* test: await the prepared-cache removal event

Guava lowers the cache size before it calls the removal listener, so the
size wait alone left the removed-query-id assertion racing the event.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* fix: keep ANN ordering on an empty orderByIds map

The ordering-clause rework made orderByIds(emptyMap) replace an ANN
ordering with nothing; 4.19.2.x kept it. Document the map overloads'
replace behaviour and fix a typo in CqlPrepareAsyncProcessor.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: April I. Murphy <[email protected]>
Co-authored-by: Lukasz Antoniak <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: Mikhail Laptev <[email protected]>
Co-authored-by: jasonk000 <[email protected]>
Co-authored-by: David Stringer <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Jarek Potiuk <[email protected]>
Co-authored-by: Jane He <[email protected]>
Co-authored-by: Claude Opus 5.5 (1M context) <[email protected]>
dkropachev pushed a commit to scylladb/java-driver that referenced this pull request Oct 30, 2026
* [maven-release-plugin] prepare for next development iteration

* Removing interface to Travis CI

Patch by Bret McGuire; reviewed by Andy Tolbert and Bret McGuire
reference: apache#2066

* Replace outdated link in README

patch by April Murphy; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2064

* ninja-fix: Remove ASF donation message

* Update LZ4 and Netty dependencies for CVE response

The primary goal here is to address CVE-2025-12183. Netty includes a
dependency on vulnerable versions of lz4-java, so update to a fixed
version of Netty as well. On the C* server side, we opted to move to the
new community fork of lz4-java, so match that decision here
(CASSANDRA-21052).

patch by Abe Ratnofsky; reviewed by Francisco Guerrero for CASSJAVA-113

* Bump logback to most recent Java8-compatible version

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2051

* ninja-fix - adding an extra space to render the page correctly with mkdocs

I've been looking into details on custom codes and noticed that the there is an issue with rendering bullet points on the following page: https://apache.github.io/cassandra-java-driver/4.19.0/core/custom_codecs/

* ninja-fix Updating a few indented lists that were observed to not render correctly while working on the previous ninja-fix

* Re-work ordering clause support in query builder behind a single OrderingClause abstraction.  This allows for
custom impls to define their own logic for managing "ORDER BY" clauses.

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2047

* ninja-fix We apparently had some unformatted files slip in in the last commit

* CASSJAVA-122 Fix OSGi LZ4 test

patch by Lukasz Antoniak; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2075

* Bump Jackson to 2.20.1

patch by Bret McGuire: reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2076

* CASSJAVA-108 Update ESRI (and remove org.json) dependencies

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2052

* ninja-fix Update Jenkins label to Jammy

* Revert "ninja-fix Update Jenkins label to Jammy"

This reverts commit de96ce8.

* Fix race condition in ClockSeqAndNodeContainer

patch by Jason Koch; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2050

* CASSJAVA-3: Fix ordering of LIMIT and PER PARTITION LIMIT clauses

patch by David Stringer; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2022

* CASSJAVA-30: Update CONTRIBUTING.md
patch by Jane He; reviewed by Bret McGuire and Andy Tolbert

* CASSJAVA-104: Fix Flaky tests
patch by Jane He; review by
Bret McGuire and Andy Tolbert

* CASSJAVA-109, CASSJAVA-117: Manual and API References after donation, Build CI for Java Driver Doc
Patch by Jane He and
Łukasz Antoniak; Reviewed by Bret McGuire

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Revert "[maven-release-plugin] prepare for next development iteration"

This reverts commit 342088c.

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 375e4b5.

* Revert apache#2051 and replace it with something closer to the intent of the original PR (apache#1901).

The change that was actually merged attempted to bump us up to the most recent Java8-compatible
logback impl.  This moved us from 1.2.x to 1.3.x which in turn brought some dependency changes
that were excessive, especially for a patch release.

patch by Bret McGuire; reviewed by Andy Tolbert and Abe Ratnofsky
reference: apache#2088

* Add changelog for 4.19.3

* [maven-release-plugin] prepare release 4.19.3

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 8e2e70c.

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Add security-model discoverability (AGENTS.md -> SECURITY.md -> security model)

Wires the conventional AGENTS.md -> SECURITY.md -> security model chain so automated tooling can mechanically discover the project's security model. No model content is changed.

Generated-by: Claude Opus 4.8 (1M context)

patch by Jarek Potiuk; reviewed by Bret McGuire
reference: apache#2092

* ninja-fix Fix equality operation for Geometry subclasses

* CASSJAVA-131: Add Retention Requirement to Jenkinsfile-asf
patch by Jane He; reviewed by Michael Semb Wever

* CASSJAVA-136 Ninja fix to correct geometry equality actually broke geometry equality

patch by Bret McGuire; reviewed by Jane He

* CASSJAVA-137 Bump Netty to 4.1.138

patch by Bret McGuire; reviewed by Andy Tolbert

* ninja-fix Changelog entries for 4.19.4

* ninja-fix Update scm entry in root pom.xml to match what was done for 3.x

* ninja-fix XML formatting fix for pom.xml

* [maven-release-plugin] prepare release 4.19.4

---------

Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: April I. Murphy <[email protected]>
Co-authored-by: Lukasz Antoniak <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: Mikhail Laptev <[email protected]>
Co-authored-by: jasonk000 <[email protected]>
Co-authored-by: David Stringer <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Jarek Potiuk <[email protected]>
Co-authored-by: Jane He <[email protected]>
Co-authored-by: Claude Opus 5.5 <[email protected]>
nikagra added a commit to scylladb/java-driver that referenced this pull request Oct 30, 2026
* [maven-release-plugin] prepare for next development iteration

* Removing interface to Travis CI

Patch by Bret McGuire; reviewed by Andy Tolbert and Bret McGuire
reference: apache#2066

* Replace outdated link in README

patch by April Murphy; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2064

* ninja-fix: Remove ASF donation message

* Update LZ4 and Netty dependencies for CVE response

The primary goal here is to address CVE-2025-12183. Netty includes a
dependency on vulnerable versions of lz4-java, so update to a fixed
version of Netty as well. On the C* server side, we opted to move to the
new community fork of lz4-java, so match that decision here
(CASSANDRA-21052).

patch by Abe Ratnofsky; reviewed by Francisco Guerrero for CASSJAVA-113

* Bump logback to most recent Java8-compatible version

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2051

* ninja-fix - adding an extra space to render the page correctly with mkdocs

I've been looking into details on custom codes and noticed that the there is an issue with rendering bullet points on the following page: https://apache.github.io/cassandra-java-driver/4.19.0/core/custom_codecs/

* ninja-fix Updating a few indented lists that were observed to not render correctly while working on the previous ninja-fix

* Re-work ordering clause support in query builder behind a single OrderingClause abstraction.  This allows for
custom impls to define their own logic for managing "ORDER BY" clauses.

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2047

* ninja-fix We apparently had some unformatted files slip in in the last commit

* CASSJAVA-122 Fix OSGi LZ4 test

patch by Lukasz Antoniak; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2075

* Bump Jackson to 2.20.1

patch by Bret McGuire: reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2076

* CASSJAVA-108 Update ESRI (and remove org.json) dependencies

patch by Bret McGuire; reviewed by Bret McGuire and Lukasz Antoniak
reference: apache#2052

* ninja-fix Update Jenkins label to Jammy

* Revert "ninja-fix Update Jenkins label to Jammy"

This reverts commit de96ce8.

* Fix race condition in ClockSeqAndNodeContainer

patch by Jason Koch; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2050

* CASSJAVA-3: Fix ordering of LIMIT and PER PARTITION LIMIT clauses

patch by David Stringer; reviewed by Lukasz Antoniak and Bret McGuire
reference: apache#2022

* CASSJAVA-30: Update CONTRIBUTING.md
patch by Jane He; reviewed by Bret McGuire and Andy Tolbert

* CASSJAVA-104: Fix Flaky tests
patch by Jane He; review by
Bret McGuire and Andy Tolbert

* CASSJAVA-109, CASSJAVA-117: Manual and API References after donation, Build CI for Java Driver Doc
Patch by Jane He and
Łukasz Antoniak; Reviewed by Bret McGuire

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Revert "[maven-release-plugin] prepare for next development iteration"

This reverts commit 342088c.

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 375e4b5.

* Revert apache#2051 and replace it with something closer to the intent of the original PR (apache#1901).

The change that was actually merged attempted to bump us up to the most recent Java8-compatible
logback impl.  This moved us from 1.2.x to 1.3.x which in turn brought some dependency changes
that were excessive, especially for a patch release.

patch by Bret McGuire; reviewed by Andy Tolbert and Abe Ratnofsky
reference: apache#2088

* Add changelog for 4.19.3

* [maven-release-plugin] prepare release 4.19.3

* Revert "[maven-release-plugin] prepare release 4.19.3"

This reverts commit 8e2e70c.

* [maven-release-plugin] prepare release 4.19.3

* [maven-release-plugin] prepare for next development iteration

* Add security-model discoverability (AGENTS.md -> SECURITY.md -> security model)

Wires the conventional AGENTS.md -> SECURITY.md -> security model chain so automated tooling can mechanically discover the project's security model. No model content is changed.

Generated-by: Claude Opus 4.8 (1M context)

patch by Jarek Potiuk; reviewed by Bret McGuire
reference: apache#2092

* ninja-fix Fix equality operation for Geometry subclasses

* CASSJAVA-131: Add Retention Requirement to Jenkinsfile-asf
patch by Jane He; reviewed by Michael Semb Wever

* CASSJAVA-136 Ninja fix to correct geometry equality actually broke geometry equality

patch by Bret McGuire; reviewed by Jane He

* CASSJAVA-137 Bump Netty to 4.1.138

patch by Bret McGuire; reviewed by Andy Tolbert

* ninja-fix Changelog entries for 4.19.4

* ninja-fix Update scm entry in root pom.xml to match what was done for 3.x

* ninja-fix XML formatting fix for pom.xml

* [maven-release-plugin] prepare release 4.19.4

---------

Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: April I. Murphy <[email protected]>
Co-authored-by: Lukasz Antoniak <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: absurdfarce <[email protected]>
Co-authored-by: Mikhail Laptev <[email protected]>
Co-authored-by: jasonk000 <[email protected]>
Co-authored-by: David Stringer <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: janehe <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Abe Ratnofsky <[email protected]>
Co-authored-by: Jarek Potiuk <[email protected]>
Co-authored-by: Jane He <[email protected]>
Co-authored-by: Claude Opus 5.5 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants