Skip to content

Bump the prod-deps group across 1 directory with 27 updates#516

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/prod-deps-862aebddef
Open

Bump the prod-deps group across 1 directory with 27 updates#516
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/prod-deps-862aebddef

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 15, 2026 •
edited
Loading

Bumps the prod-deps group with 27 updates in the / directory:

Package From To
org.graalvm.polyglot:polyglot 24.2.2 25.0.2
org.graalvm.python:python-language 24.2.2 25.0.2
org.graalvm.python:python-resources 24.2.2 25.0.2
org.graalvm.truffle:truffle-runtime 24.2.2 25.0.2
org.graalvm.truffle:truffle-api 24.2.2 25.0.2
com.google.protobuf:protobuf-java 3.25.8 3.25.9
com.squareup.wire:wire-schema-jvm 5.2.0 6.2.0
com.squareup.wire:wire-schema 5.2.0 6.2.0
org.glassfish.jersey.containers:jersey-container-grizzly2-servlet 4.0.1 4.0.2
org.glassfish.jersey.core:jersey-common 4.0.1 4.0.2
org.glassfish.jersey.core:jersey-client 4.0.1 4.0.2
org.glassfish.jersey.inject:jersey-hk2 4.0.1 4.0.2
org.glassfish.jersey.media:jersey-media-json-jackson 4.0.1 4.0.2
ch.qos.logback:logback-classic 1.5.26 1.5.32
net.logstash.logback:logstash-logback-encoder 8.1 9.0
com.google.guava:guava 33.5.0-jre 33.6.0-jre
io.prometheus:prometheus-metrics-instrumentation-jvm 1.4.3 1.5.1
org.junit:junit-bom 6.0.2 6.0.3
org.mockito:mockito-core 5.21.0 5.23.0
org.mockito:mockito-junit-jupiter 5.19.0 5.23.0
org.apache.maven.plugins:maven-dependency-plugin 3.9.0 3.10.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.5
org.apache.maven.plugins:maven-failsafe-plugin 3.5.4 3.5.5
org.assertj:assertj-core 3.26.3 3.27.7
com.github.victools:jsonschema-generator 4.38.0 5.0.0
com.github.victools:jsonschema-module-jackson 4.38.0 5.0.0
com.github.victools:jsonschema-module-jakarta-validation 4.38.0 5.0.0

Updates org.graalvm.polyglot:polyglot from 24.2.2 to 25.0.2

Commits
  • 981ecb6 [GR-72395] Release GraalVM 25.0.2
  • 811aa54 release GraalVM 25.0.2
  • aeff345 [GR-70219] Backport to 25.0: Induction variable overflow detection: iv have r...
  • 58ec3b9 [GR-71786] Backport to 25.0: In-place copySwap in JavaMemoryUtil is a no-op.
  • 3df0577 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • ee11ac4 [GR-68985] Backport to 25.0: Fix the reachability-metadata schema and include...
  • ee7da6d [GR-72185] Update labsjdk to 25.0.2+10-jvmci-b01
  • c9260ad [GR-70097] Backport to 25.0: Fix constructor accessor checks.
  • 182c6d5 [GR-71881] Drop RSSTracker from disabled trackers for barista.
  • 0c0e816 [GR-71488] Backport to 25.0: Converting values injected by instruments.
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-language from 24.2.2 to 25.0.2

Release notes

Sourced from org.graalvm.python:python-language's releases.

GraalPy 25.0.2

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-language's changelog.

Python Changelog

This changelog summarizes major changes between GraalVM versions of the Python language runtime. The main focus is on user-observable behavior of the engine.

Version 25.1.0

  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.

... (truncated)

Commits
  • bb83cb4 release GraalVM 25.0.2
  • 5b7d4a9 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • 6212005 [GR-71025] Backport to 25.0: Fix missing descriptor for hash in slots
  • bb36f50 [GR-69166] Backport to 25.0: Fix loading delvewheel wheels
  • 731dcbf Adapt fix
  • 58f5960 Add few missing error specializations
  • d753f77 Remove deprecated getDefaultLanguages
  • 5a2b444 Fix specialization consistency issue in complex.format
  • 83659cb Run test subprocesses without JIT
  • ec7e2dc Log worker ID when running tests
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-resources from 24.2.2 to 25.0.2

Release notes

Sourced from org.graalvm.python:python-resources's releases.

GraalPy 25.0.2

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-resources's changelog.

Python Changelog

This changelog summarizes major changes between GraalVM versions of the Python language runtime. The main focus is on user-observable behavior of the engine.

Version 25.1.0

  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.

... (truncated)

Commits
  • bb83cb4 release GraalVM 25.0.2
  • 5b7d4a9 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • 6212005 [GR-71025] Backport to 25.0: Fix missing descriptor for hash in slots
  • bb36f50 [GR-69166] Backport to 25.0: Fix loading delvewheel wheels
  • 731dcbf Adapt fix
  • 58f5960 Add few missing error specializations
  • d753f77 Remove deprecated getDefaultLanguages
  • 5a2b444 Fix specialization consistency issue in complex.format
  • 83659cb Run test subprocesses without JIT
  • ec7e2dc Log worker ID when running tests
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-runtime from 24.2.2 to 25.0.2

Commits
  • 981ecb6 [GR-72395] Release GraalVM 25.0.2
  • 811aa54 release GraalVM 25.0.2
  • aeff345 [GR-70219] Backport to 25.0: Induction variable overflow detection: iv have r...
  • 58ec3b9 [GR-71786] Backport to 25.0: In-place copySwap in JavaMemoryUtil is a no-op.
  • 3df0577 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • ee11ac4 [GR-68985] Backport to 25.0: Fix the reachability-metadata schema and include...
  • ee7da6d [GR-72185] Update labsjdk to 25.0.2+10-jvmci-b01
  • c9260ad [GR-70097] Backport to 25.0: Fix constructor accessor checks.
  • 182c6d5 [GR-71881] Drop RSSTracker from disabled trackers for barista.
  • 0c0e816 [GR-71488] Backport to 25.0: Converting values injected by instruments.
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-api from 24.2.2 to 25.0.2

Commits
  • 981ecb6 [GR-72395] Release GraalVM 25.0.2
  • 811aa54 release GraalVM 25.0.2
  • aeff345 [GR-70219] Backport to 25.0: Induction variable overflow detection: iv have r...
  • 58ec3b9 [GR-71786] Backport to 25.0: In-place copySwap in JavaMemoryUtil is a no-op.
  • 3df0577 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • ee11ac4 [GR-68985] Backport to 25.0: Fix the reachability-metadata schema and include...
  • ee7da6d [GR-72185] Update labsjdk to 25.0.2+10-jvmci-b01
  • c9260ad [GR-70097] Backport to 25.0: Fix constructor accessor checks.
  • 182c6d5 [GR-71881] Drop RSSTracker from disabled trackers for barista.
  • 0c0e816 [GR-71488] Backport to 25.0: Converting values injected by instruments.
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-language from 24.2.2 to 25.0.2

Release notes

Sourced from org.graalvm.python:python-language's releases.

GraalPy 25.0.2

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-language's changelog.

Python Changelog

This changelog summarizes major changes between GraalVM versions of the Python language runtime. The main focus is on user-observable behavior of the engine.

Version 25.1.0

  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.

... (truncated)

Commits
  • bb83cb4 release GraalVM 25.0.2
  • 5b7d4a9 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • 6212005 [GR-71025] Backport to 25.0: Fix missing descriptor for hash in slots
  • bb36f50 [GR-69166] Backport to 25.0: Fix loading delvewheel wheels
  • 731dcbf Adapt fix
  • 58f5960 Add few missing error specializations
  • d753f77 Remove deprecated getDefaultLanguages
  • 5a2b444 Fix specialization consistency issue in complex.format
  • 83659cb Run test subprocesses without JIT
  • ec7e2dc Log worker ID when running tests
  • Additional commits viewable in compare view

Updates org.graalvm.python:python-resources from 24.2.2 to 25.0.2

Release notes

Sourced from org.graalvm.python:python-resources's releases.

GraalPy 25.0.2

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

GraalPy 25.0.1

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

† Support for macOS x64 is deprecated. Version 25.0.1 is the last release that supports this hardware architecture. In future, GraalVM will only support macOS on AArch64 (Apple Silicon).

GraalPy 25.0.0

GraalPy is a Python 3.12-compliant runtime on top of GraalVM.

You can download GraalPy as a standalone distribution for Oracle GraalVM or GraalVM Community Edition. There are two standalone types to choose from:

  • Native Standalone: This contains a Native Image compiled launcher
  • JVM Standalone: This contains Python in the JVM configuration

To distinguish between them, the GraalVM Community Edition version has the suffix -community in its name. A JVM standalone has a -jvm suffix in its name.

Learn more about GraalPy and how to get started on the website: https://www.graalvm.org/python/.

Changelog

Sourced from org.graalvm.python:python-resources's changelog.

Python Changelog

This changelog summarizes major changes between GraalVM versions of the Python language runtime. The main focus is on user-observable behavior of the engine.

Version 25.1.0

  • Treat foreign buffer objects as Python buffer-compatible binary objects, so APIs like memoryview, bytes, bytearray, binascii.hexlify, and io.BytesIO work naturally on them when embedding GraalPy in Java. This allows passing binary data between Python and Java's ByteBuffer and ByteSequence types with minimal (sometimes zero) copies.
  • Add support for Truffle source options:
    • The python.Optimize option can be used to specify the optimization level, like the -O (level 1) and -OO (level 2) commandline options.
    • The python.NewGlobals option can be used to run a source with a fresh globals dictionary instead of the main module globals, which is useful for embeddings that want isolated top-level execution.
  • Intern string literals in source files
  • Allocation reporting via Truffle has been removed. Python object sizes were never reported correctly, so the data was misleading and there was a non-neglible overhead for object allocations even when reporting was inactive.
  • Better readline support via JLine. Autocompletion and history now works in pdb
  • Remove the intrinsified _ctypes module in favor of the native CPython version. This makes GraalPy's ctypes implementation more compatible and reduces the memory footprint of using ctypes.
  • Add a new, more natural style of subclassing Java classes from Python by passing the new_style=True keyword. Multiple levels of inheritance are supported, and super() calls both in the constructor override via __new__ as well as in Java method overrides work as expected.
  • Add polyglot.gil_locked_during_interop context manager. By default, the global interpreter lock (GIL) is unlocked when interacting with objects from another language, to give other Python threads a chance to run in parallel. While this avoids potential deadlocks, repeated unlocking and locking of the GIL can decrease performance, so this context manager can be used to keep the lock held around short-running interop.
  • Add Github workflows that run our gates from the same job definitions as our internal CI. This will make it easier for contributors opening PRs on Github to ensure code contributions pass the same tests that we are running internally.
  • Added support for specifying generics on foreign classes, and inheriting from such classes. Especially when using Java classes that support generics, this allows expressing the generic types in Python type annotations as well.
  • Added a new java backend for the pyexpat module that uses a Java XML parser instead of the native expat library. It can be useful when running without native access or multiple-context scenarios. This backend is the default when embedding and can be switched back to native expat by setting python.PyExpatModuleBackend option to native. Standalone distribution still defaults to native expat backend.
  • Add a new context option python.UnicodeCharacterDatabaseNativeFallback to control whether the ICU database may fall back to the native unicode character database from CPython for features and characters not supported by ICU. This requires native access to be enabled and is disabled by default for embeddings.
  • Foreign temporal objects (dates, times, and timezones) are now given a Python class corresponding to their interop traits, i.e., date, time, datetime, or tzinfo. This allows any foreign objects with these traits to be used in place of the native Python types and Python methods available on these types work on the foreign types.

Version 25.0.1

  • Allow users to keep going on unsupported JDK/OS/ARCH combinations at their own risk by opting out of early failure using -Dtruffle.UseFallbackRuntime=true, -Dpolyglot.engine.userResourceCache=/set/to/a/writeable/dir, -Dpolyglot.engine.allowUnsupportedPlatform=true, and -Dpolyglot.python.UnsupportedPlatformEmulates=[linux|macos|windows] and -Dorg.graalvm.python.resources.exclude=native.files.

Version 25.0.0

  • sys.implementation.version now returns the GraalPy version instead of the Python version it implements. Also available as sys.graalpy_version_info for better discoverability by people already familiar with PyPy and its sys.pypy_version_info.
  • GRAALPY_VERSION_NUM C macro now inlcudes the release level and serial number at the end to conform to the hexversion format. This shouldn't break any existing comparisons.
  • dir(foreign_object) now returns both foreign methods and Python methods (it used to return only foreign methods).
  • Support __name__, __doc__, __text_signature__ fields on foreign executables to serve as their proper counterparts on the Python side. This is useful to, for example, use Java functional interfaces in lieu of Python functions for things like LangChain's @tool annotation that want to inspect the underlying function.
  • Remove support for running C extensions as LLVM bitcode. This also removes the related options python.UseSystemToolchain and python.NativeModules. Isolation of native code when embedding GraalPy into Java projects is now provided via the GraalVM enterprise edition polyglot isolate feature, which can launch in a separate external sub-process by setting the --engine.IsolateMode=external option.
  • Remove built-in HPy module. HPy can now be installed and used from the upstream sources.
  • Update Python standard library and core to 3.12.8.
  • Implement faulthandler.dump_traceback_later to better support testing frameworks that implement resilience to crashes.
  • Fix various issues affecting cibuildwheels on Windows, to make it easier for Python projects to provide native extensions for GraalPy on all supported platforms.
  • Add support for sharing Arrow arrays and tables between Java, PyArrow, and Pandas to avoid data copying when embedding those libraries into a Java project.
  • Enable FTS3, FTS4, FTS5, RTREE, and math function features in the bundled sqlite3 library.
  • Add support patches for Torch 2.7.0, PyGObject 3.52.3, xmlschema 4.0.0, lxml < 5.4.0, SciPy 1.15, jq 1.8.0, NumPy < 2.3, ormsgpack < 1.9.1, pandas 2.2.3, PyArrow 19.0, PyMuPDF 1.25.4.
  • The GraalPy Native standalone on Linux now uses the G1 garbage collector which is much faster.
  • The GraalPy Native standalone on Linux now uses a lower-footprint Native Image garbage collection configuration. This reduces resident set size (RSS) for many workloads, but may increase startup time and warmup time, and can slow down some workloads.
  • The full-featured Python REPL is now available on GraalPy standalone builds for Windows.

Version 24.2.0

  • Updated developer metadata of Maven artifacts.
  • Added gradle plugin for polyglot embedding of Python packages into Java.
  • When calling a method on a foreign object in Python code, Python methods are now prioritized over foreign members.
  • Added polyglot.register_interop_type and @polyglot.interop_type to define custom Python methods for a given foreign class/type. See the documentation for more information.
  • Foreign objects are now given a Python class corresponding to their interop traits.
    • Foreign lists now inherit from Python list, foreign dictionaries from dict, foreign strings from str, foreign iterators from iterator, foreign exceptions from BaseException, foreign numbers from polyglot.ForeignNumber, foreign booleans from polyglot.ForeignBoolean, and foreign null values from NoneType.
    • This means all Python methods of these types are available on the corresponding foreign objects, which behave as close as possible as if they were Python objects.

... (truncated)

Commits
  • bb83cb4 release GraalVM 25.0.2
  • 5b7d4a9 [GR-71011] Backport to 25.0: Make native slot wrappers context-specific. Fixe...
  • 6212005 [GR-71025] Backport to 25.0: Fix missing descriptor for hash in slots
  • bb36f50 [GR-69166] Backport to 25.0: Fix loading delvewheel wheels
  • 731dcbf Adapt fix
  • 58f5960 Add few missing error specializations
  • d753f77 Remove deprecated getDefaultLanguages
  • 5a2b444 Fix specialization consistency issue in complex.format
  • 83659cb Run test subprocesses without JIT
  • ec7e2dc Log worker ID when running tests
  • Additional commits viewable in compare view

Updates org.graalvm.truffle:truffle-runtime from 24.2.2 to 25.0.2

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 15, 2026
@dependabot
Bump the prod-deps group across 1 directory with 27 updates
be16ec8 
Bumps the prod-deps group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.graalvm.polyglot:polyglot](https://github.com/oracle/graal) | `24.2.2` | `25.0.2` |
| [org.graalvm.python:python-language](https://github.com/graalvm/graalpython) | `24.2.2` | `25.0.2` |
| [org.graalvm.python:python-resources](https://github.com/graalvm/graalpython) | `24.2.2` | `25.0.2` |
| [org.graalvm.truffle:truffle-runtime](https://github.com/oracle/graal) | `24.2.2` | `25.0.2` |
| [org.graalvm.truffle:truffle-api](https://github.com/oracle/graal) | `24.2.2` | `25.0.2` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.8` | `3.25.9` |
| [com.squareup.wire:wire-schema-jvm](https://github.com/square/wire) | `5.2.0` | `6.2.0` |
| [com.squareup.wire:wire-schema](https://github.com/square/wire) | `5.2.0` | `6.2.0` |
| org.glassfish.jersey.containers:jersey-container-grizzly2-servlet | `4.0.1` | `4.0.2` |
| org.glassfish.jersey.core:jersey-common | `4.0.1` | `4.0.2` |
| org.glassfish.jersey.core:jersey-client | `4.0.1` | `4.0.2` |
| org.glassfish.jersey.inject:jersey-hk2 | `4.0.1` | `4.0.2` |
| org.glassfish.jersey.media:jersey-media-json-jackson | `4.0.1` | `4.0.2` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.26` | `1.5.32` |
| [net.logstash.logback:logstash-logback-encoder](https://github.com/logfellow/logstash-logback-encoder) | `8.1` | `9.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| io.prometheus:prometheus-metrics-instrumentation-jvm | `1.4.3` | `1.5.1` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.2` | `6.0.3` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.21.0` | `5.23.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.19.0` | `5.23.0` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.9.0` | `3.10.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.5` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.5` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.7` |
| [com.github.victools:jsonschema-generator](https://github.com/victools/jsonschema-generator) | `4.38.0` | `5.0.0` |
| [com.github.victools:jsonschema-module-jackson](https://github.com/victools/jsonschema-generator) | `4.38.0` | `5.0.0` |
| [com.github.victools:jsonschema-module-jakarta-validation](https://github.com/victools/jsonschema-generator) | `4.38.0` | `5.0.0` |



Updates `org.graalvm.polyglot:polyglot` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.python:python-language` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.python:python-resources` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.truffle:truffle-runtime` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.truffle:truffle-api` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.python:python-language` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.python:python-resources` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/graalvm/graalpython/releases)
- [Changelog](https://github.com/oracle/graalpython/blob/master/CHANGELOG.md)
- [Commits](oracle/graalpython@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.truffle:truffle-runtime` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.2)

Updates `org.graalvm.truffle:truffle-api` from 24.2.2 to 25.0.2
- [Release notes](https://github.com/oracle/graal/releases)
- [Commits](oracle/graal@vm-24.2.2...vm-25.0.2)

Updates `com.google.protobuf:protobuf-java` from 3.25.8 to 3.25.9
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.squareup.wire:wire-schema-jvm` from 5.2.0 to 6.2.0
- [Changelog](https://github.com/square/wire/blob/master/CHANGELOG.md)
- [Commits](square/wire@5.2.0...6.2.0)

Updates `com.squareup.wire:wire-schema` from 5.2.0 to 6.2.0
- [Changelog](https://github.com/square/wire/blob/master/CHANGELOG.md)
- [Commits](square/wire@5.2.0...6.2.0)

Updates `com.squareup.wire:wire-schema` from 5.2.0 to 6.2.0
- [Changelog](https://github.com/square/wire/blob/master/CHANGELOG.md)
- [Commits](square/wire@5.2.0...6.2.0)

Updates `org.glassfish.jersey.containers:jersey-container-grizzly2-servlet` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.core:jersey-common` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.core:jersey-client` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.inject:jersey-hk2` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.media:jersey-media-json-jackson` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.core:jersey-common` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.core:jersey-client` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.inject:jersey-hk2` from 4.0.1 to 4.0.2

Updates `org.glassfish.jersey.media:jersey-media-json-jackson` from 4.0.1 to 4.0.2

Updates `ch.qos.logback:logback-classic` from 1.5.26 to 1.5.32
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.26...v_1.5.32)

Updates `net.logstash.logback:logstash-logback-encoder` from 8.1 to 9.0
- [Release notes](https://github.com/logfellow/logstash-logback-encoder/releases)
- [Commits](logfellow/logstash-logback-encoder@logstash-logback-encoder-8.1...logstash-logback-encoder-9.0)

Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `io.prometheus:prometheus-metrics-instrumentation-jvm` from 1.4.3 to 1.5.1

Updates `org.junit:junit-bom` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.2...r6.0.3)

Updates `org.mockito:mockito-core` from 5.21.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.21.0...v5.23.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.19.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.19.0...v5.23.0)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.9.0 to 3.10.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.9.0...maven-dependency-plugin-3.10.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.assertj:assertj-core` from 3.26.3 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.26.3...assertj-build-3.27.7)

Updates `com.github.victools:jsonschema-generator` from 4.38.0 to 5.0.0
- [Release notes](https://github.com/victools/jsonschema-generator/releases)
- [Changelog](https://github.com/victools/jsonschema-generator/blob/main/CHANGELOG.md)
- [Commits](victools/jsonschema-generator@v4.38.0...v5.0.0)

Updates `com.github.victools:jsonschema-module-jackson` from 4.38.0 to 5.0.0
- [Release notes](https://github.com/victools/jsonschema-generator/releases)
- [Changelog](https://github.com/victools/jsonschema-generator/blob/main/CHANGELOG.md)
- [Commits](victools/jsonschema-generator@v4.38.0...v5.0.0)

Updates `com.github.victools:jsonschema-module-jakarta-validation` from 4.38.0 to 5.0.0
- [Release notes](https://github.com/victools/jsonschema-generator/releases)
- [Changelog](https://github.com/victools/jsonschema-generator/blob/main/CHANGELOG.md)
- [Commits](victools/jsonschema-generator@v4.38.0...v5.0.0)

---
updated-dependencies:
- dependency-name: org.graalvm.polyglot:polyglot
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-language
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-resources
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-runtime
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-api
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-language
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.python:python-resources
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-runtime
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.graalvm.truffle:truffle-api
  dependency-version: 25.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.squareup.wire:wire-schema-jvm
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: com.squareup.wire:wire-schema
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: com.squareup.wire:wire-schema
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.containers:jersey-container-grizzly2-servlet
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-common
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-client
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.inject:jersey-hk2
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.media:jersey-media-json-jackson
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-common
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.core:jersey-client
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.inject:jersey-hk2
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.glassfish.jersey.media:jersey-media-json-jackson
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: net.logstash.logback:logstash-logback-encoder
  dependency-version: '9.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.prometheus:prometheus-metrics-instrumentation-jvm
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: com.github.victools:jsonschema-generator
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: com.github.victools:jsonschema-module-jackson
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: com.github.victools:jsonschema-module-jakarta-validation
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-862aebddef branch from fe8a3ce to be16ec8 Compare April 16, 2026 07:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants