dependabot[bot] opened a new pull request, #2585: URL: https://github.com/apache/karaf/pull/2585
Bumps [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) from 1.17.5 to 1.18.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.8</h2> <ul> <li>Improve support for repeatable builds.</li> <li>Fix reordering of exception table in type initializers when instrumenting.</li> </ul> <h2>Byte Buddy 1.18.7</h2> <ul> <li>Introduce new versioning concept with <em>-jdk5</em> suffix for backwards-compatible jar and Java 8 baseline for regular jar.</li> </ul> <h2>Byte Buddy 1.18.5</h2> <ul> <li>Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.</li> <li>Add super classes to hash code / equals computation in <code>Advice</code> that were missing.</li> </ul> <h2>Byte Buddy 1.18.4</h2> <ul> <li>Add support for new build description in Android 9.</li> </ul> <h2>Byte Buddy 1.18.3</h2> <ul> <li>Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.</li> <li>Add additional safety when processing class files with illegally formed parameters.</li> <li>Update to latest ASM.</li> </ul> <h2>Byte Buddy 1.18.2</h2> <ul> <li>Support modifiers for value classes in Valhalla builds.</li> <li>Improve use of build cache in Gradle.</li> </ul> <h2>Byte Buddy 1.18.1</h2> <ul> <li>Fix generated module-info to include new package.</li> </ul> <h2>Byte Buddy 1.18.0</h2> <ul> <li>Add support for <code>module-info</code> class files and <code>ModuleDescription</code>s.</li> <li>Allow for manipulating module information using the <code>ByteBuddy</code> API.</li> </ul> <h2>Byte Buddy 1.17.8</h2> <ul> <li>Avoid use of types that are deprecated as of Java 26.</li> <li>Include ASM 9.9 that offers ASM support for Java 26.</li> <li>Make sure that generated code internal to Byte Buddy supports CDS if available.</li> <li>Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.</li> </ul> <h2>Byte Buddy 1.17.7</h2> <ul> <li>Specify correct JVM environment for Android builds when using the Gradle plugin.</li> <li>Avoid recomputing the size of a parameter list for performance reasons after measuring the significant impact.</li> <li>Correct validation of JVM names to avoid breaking when Java names are not allowed while JVM names are, with Kotlin and others.</li> </ul> <h2>Byte Buddy 1.17.6</h2> <ul> <li>Add convenience wrapper for <code>ResettableClassFileTransformer</code> that implicitly delegates to correct transformer method.</li> <li>Add filter for deduplicate fields and methods in class file.</li> <li>Add missing static requirement of Spotbugs annotations to module descriptors.</li> <li>Add <code>LazinessMode</code> for <code>TypePool</code> and add convenience support to <code>AgentBuilder</code>.</li> <li>Fix source jars for multi-version release to contain duplicated source.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy's changelog</a>.</em></p> <blockquote> <h3>1. April 2026: version 1.18.8</h3> <ul> <li>Improve support for repeatable builds.</li> <li>Fix reordering of exception table in type initializers when instrumenting.</li> </ul> <h3>1. March 2026: version 1.18.7</h3> <ul> <li>Introduce new versioning concept with <em>-jdk5</em> suffix for backwards-compatible jar and Java 8 baseline for regular jar.</li> </ul> <h3>27. February 2026: version 1.18.6</h3> <p><em>Accidental release during rework of release pipeline. Functional, but with incorrect suffices.</em></p> <h3>15. February 2026: version 1.18.5</h3> <ul> <li>Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted.</li> <li>Add super classes to hash code / equals computation in <code>Advice</code> that were missing.</li> </ul> <h3>16. January 2026: version 1.18.4</h3> <ul> <li>Add support for new build description in Android 9.</li> </ul> <h3>26. November 2025: version 1.18.3</h3> <ul> <li>Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.</li> <li>Add additional safety when processing class files with illegally formed parameters.</li> <li>Update to latest ASM.</li> </ul> <h3>26. November 2025: version 1.18.2</h3> <ul> <li>Support modifiers for value classes in Valhalla builds.</li> <li>Improve use of build cache in Gradle.</li> </ul> <h3>12. November 2025: version 1.18.1</h3> <ul> <li>Fix generated module-info to include new package.</li> </ul> <h3>11. November 2025: version 1.18.0</h3> <ul> <li>Add support for <code>module-info</code> class files and <code>ModuleDescription</code>s.</li> <li>Allow for manipulating module information using the <code>ByteBuddy</code> API.</li> </ul> <h3>8. October 2025: version 1.17.8</h3> <ul> <li>Avoid use of types that are deprecated as of Java 26.</li> <li>Include ASM 9.9 that offers ASM support for Java 26.</li> <li>Make sure that generated code internal to Byte Buddy supports CDS if available.</li> <li>Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.</li> </ul> <h3>17. August 2025: version 1.17.7</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/b71379ab8a807993174924c5204d9cac17cc47d3";><code>b71379a</code></a> [publish] Releasing Byte Buddy 1.18.8</li> <li><a href="https://github.com/raphw/byte-buddy/commit/31cce02181d8d2573f8aa8c38d7d2045cdb560ad";><code>31cce02</code></a> [release] Release new version.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/a30791fbd4d4d6992038c5b389124e17a6b63682";><code>a30791f</code></a> Add nullability annotations.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/b9ed5b9494eacbd324dbef48a780cc3b6c9d85bd";><code>b9ed5b9</code></a> Avoid that type initializer extension adjusts exception handlers by prependin...</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7d35c666558e7173e225fa62cdaf07ff5ac8fa52";><code>7d35c66</code></a> Fix test.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/9b4690956dd049373a0c9fa548f74a16557cf3c0";><code>9b46909</code></a> Support reproducible builds.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/9a1e34e9a5efb5faa4ddcb3ddd174f5386baa1e0";><code>9a1e34e</code></a> Use GitHub HTTP URL as Maven <code>scm</code> <code>url</code> (<a href="https://redirect.github.com/raphw/byte-buddy/issues/1887";>#1887</a>)</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2b8cadd45a6d781f9493f6717f403c6be3e2c617";><code>2b8cadd</code></a> Flip release order to attempt making Maven release a different "latest" version.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/bf025594a469913a1e49e439e59bedf94b2c22cb";><code>bf02559</code></a> Move to jdk5 versions.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/ad0abe4637bfa26f88dfc450e15b21ed17633917";><code>ad0abe4</code></a> Update checksums.</li> <li>Additional commits viewable in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.17.5...byte-buddy-1.18.8";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
