Update all non-major dependencies (branch_9x)

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change
org.apache.tika:tika-langdetect-tika (source)	dependencies	patch	3.3.1 → 3.3.2
org.apache.tika:tika-core (source)	dependencies	patch	3.3.1 → 3.3.2
org.apache.hadoop:hadoop-common	dependencies	patch	3.4.1 → 3.4.3
org.apache.hadoop:hadoop-client-runtime	dependencies	patch	3.4.1 → 3.4.3
org.apache.hadoop:hadoop-client-api	dependencies	patch	3.4.1 → 3.4.3
org.apache.hadoop:hadoop-auth	dependencies	patch	3.4.1 → 3.4.3
org.apache.hadoop:hadoop-annotations	dependencies	patch	3.4.1 → 3.4.3
org.apache.commons:commons-collections4 (source)	dependencies	minor	4.5.0 → 4.6.0
io.swagger.core.v3:swagger-annotations-jakarta	dependencies	patch	2.2.52 → 2.2.53
commons-codec:commons-codec (source)	dependencies	patch	1.22.0 → 1.22.1
com.palantir.consistent-versions	plugin	minor	2.32.0 → 2.37.0
com.github.spotbugs:spotbugs-annotations (source)	dependencies	patch	4.10.2 → 4.10.3
com.carrotsearch:hppc	dependencies	minor	0.10.0 → 0.11.1

---

Release Notes

apache/tika (org.apache.tika:tika-langdetect-tika)

v3.3.2

Compare Source

swagger-api/swagger-core (io.swagger.core.v3:swagger-annotations-jakarta)

v2.2.53: Swagger-core 2.2.53 released!

• chore: update Jackson to 2.22.1 (#​5258)
• refactor: replace writer(new DefaultPrettyPrinter()) with writerWithDefaultPrettyPrinter() (#​5252)
• fix: Stabilize CI Maven and Gradle builds (#​5238)
• test: remove system.out.println from tests (#​5236)
• chore: bump dependencies (#​5229)
• refactor: simplify type handling in ModelDeserializer (#​5227)
• Revert "hotfix: temporarily allow Release workflow to skip mvn deploy to recover 2.2.52 (#​5220)" (#​5223)
• chore(deps-dev): bump org.codehaus.groovy:groovy from 3.0.23 to 3.0.25 (#​5216)
• chore(deps): bump commons-cli:commons-cli from 1.9.0 to 1.11.0 (#​5209)
• chore(deps-dev): bump commons-codec:commons-codec from 1.17.2 to 1.22.0 (#​5208)
• fix: emit $ref for array items when cycle guard suppresses implementation processing (#​5205)
• Restore inner property name from map key in handleUnwrapped (#​5193)
• Honor PropertyNamingStrategy for get/is-prefixed property names (#​5192)
• fix: let explicit @​Schema(format) override type-derived format (#​5185) (#​5186)
• docs: update format of javadoc to produce a functional link (#​5182)
• fix: exclude overridable annotation values when parsing composed annotations (#​5179)
• fix: negative and positive validation annotations uses relevant OAS 3.1 syntax ( #​5170) (#​5171)

apache/commons-codec (commons-codec:commons-codec)

v1.22.1

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.

The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

spotbugs/spotbugs (com.github.spotbugs:spotbugs-annotations)

v4.10.3

Compare Source

Fixed

• Fix LI_LAZY_INIT_STATIC false negative when the null guard is written in yoda-style (null == field) (#​4144)
• Fix DC_DOUBLECHECK, NP_SYNC_AND_NULL_CHECK_FIELD and SP_SPIN_ON_FIELD false negatives when the null guard is written in yoda-style (null == field) (#​4144)
• Fix message for UNS_UNSAFE_CALL bug pattern
• Restore CLI plugin loading by fixing DetectorFactoryCollection bootstrap ordering (#​4191)
• Fix UWF_NULL_FIELD false negative for fields initialized with cast null values (#​4034)
• Fix UMAC_UNCALLABLE_METHOD_OF_ANONYMOUS_CLASS false positive for methods reached only through method references (#​4059)

Changed

• Ant FindBugsViewerTask: use default look and feel by default. (#​4165)

Refactor

• Ant FindBugsViewerTask: extend AbstractFindBugsTask to reduce duplicate code. (#​4165)

carrotsearch/hppc (com.carrotsearch:hppc)

v0.11.1

Compare Source

v0.11.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Every minute (* * * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot

[epugh]

Claude says that we can do this: Fix: bump the default in .github/actions/prepare-for-build/action.yml on branch_9x from "11" to "17" (or "21" to match main). This won't change what bytecode Solr compiles to — javac --release 11 still applies — it only changes the JVM Gradle itself boots on.

However, I don't really want to get into fussing around with GHA, so backing out the palantir change, to see if we can get the meaningful updates in...

[epugh]

@janhoy would it be possible to have Renovate not update dependencies that bump Java versions?

[solrbot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[janhoy]

@janhoy would it be possible to have Renovate not update dependencies that bump Java versions?

Unfortunately when libraries do not respect the rules of SemVer and do such breaking upgrades in a minor version, all bets are off for anything automatic. But we can add manual rules of max-ver for certain packages, I think we have a few already.

[epugh]

I am going to run the tests locally, (there may be a failing bats test?) and then merge. We may need to tweak our solrbot for the 9x to keep it from proposing upgradding hppc and the palantir plugins....

[epugh]

I am going to run the tests locally, (there may be a failing bats test?) and then merge. We may need to tweak our solrbot for the 9x to keep it from proposing upgradding hppc and the palantir plugins....

Never mind, it was some sort of local thing causing the bats test to fail. an errant ZK running!