[dependabot]

Bumps the production-dependencies group with 4 updates: tools.jackson.core:jackson-databind, tools.jackson.module:jackson-module-kotlin, org.jetbrains.kotlinx:kotlinx-serialization-json and org.apache.maven.plugins:maven-surefire-plugin.

Updates tools.jackson.core:jackson-databind from 3.2.3 to 3.2.4

Commits

• 461f8ec [maven-release-plugin] prepare release jackson-databind-3.2.4
• 2a502c9 Prep for 3.2.4 release
• 64a4813 Merge branch '3.1' into 3.2
• 5d64697 Post-release dep version bump
• 9b5fe86 [maven-release-plugin] prepare for next development iteration
• 893c391 [maven-release-plugin] prepare release jackson-databind-3.1.8
• 22442d0 Prep for 3.1.8 release
• df230c1 Merge branch '2.x' into 3.1
• 69ddc80 Merge branch '2.22' into 2.x
• 72bb78e Post-release dep version bump
• Additional commits viewable in compare view

Updates tools.jackson.module:jackson-module-kotlin from 3.2.3 to 3.2.4

Commits

• f061a8e [maven-release-plugin] prepare release jackson-module-kotlin-3.2.4
• eac7d98 Prep for 3.2.4 release
• 241f0e3 Merge branch '3.1' into 3.2
• ee7aa7c Post-release dep version bump
• 57910c6 [maven-release-plugin] prepare for next development iteration
• bc7aac8 [maven-release-plugin] prepare release jackson-module-kotlin-3.1.8
• a686e11 Prep for 3.1.8 release
• 255c929 Merge branch '2.x' into 3.1
• 478d6b4 Merge branch '2.22' into 2.x
• a3730d7 Post-release dep version bump
• Additional commits viewable in compare view

Updates tools.jackson.module:jackson-module-kotlin from 3.2.3 to 3.2.4

Commits

• f061a8e [maven-release-plugin] prepare release jackson-module-kotlin-3.2.4
• eac7d98 Prep for 3.2.4 release
• 241f0e3 Merge branch '3.1' into 3.2
• ee7aa7c Post-release dep version bump
• 57910c6 [maven-release-plugin] prepare for next development iteration
• bc7aac8 [maven-release-plugin] prepare release jackson-module-kotlin-3.1.8
• a686e11 Prep for 3.1.8 release
• 255c929 Merge branch '2.x' into 3.1
• 478d6b4 Merge branch '2.22' into 2.x
• a3730d7 Post-release dep version bump
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

• Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#3195)
• Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see [#3261](Kotlin/kotlinx.serialization#3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

... (truncated)

Commits

• 4c28c3e 1.12.0 release (#3295)
• abe8a96 Merge remote-tracking branch 'origin/master' into dev
• 952d17a Added Gradle task to prepare release (#3279)
• 6f30025 Remove Play verification files (#3266)
• 89b23ca Workaround watchosArm32 removal (#3291)
• 53932a0 Update links to Okio site and its docs (#3292)
• 3a5db3b Reduce the number of input fields for bug report
• 9ede0e2 Added templates to the issue creation wizard
• 5d3f884 Update Dokka to version 2.3.0-Beta (#3286)
• 1fe9a49 Suppress deprecation of nodejs in wasmWasi configuration (#3287)
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

• Group module path heuristics in a single class ModulePathJpmsArguments (#3541) @​olamy
• Fix out of memory errors with big JUnit 4 suites (#3511) (#3515) @​olamy
• [SUREFIRE-3459] - Allow opting out of StackWalker stack capture (#3493) @​goutamadwant

🐛 Bug Fixes

• Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538) @​olamy
• Fix groups and excludedGroups being ignored when TestNG is on the classpath (#3534) @​olamy
• Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530) @​olamy
• Fix groups and excludedGroups for Spock and Jupiter tests when JUnit 4 is on the classpath (#3468) (#3503) (#3517) @​olamy
• Issue #3462 TestNG extension onStart/onFinish called too many times (#3470) @​olamy
• Fix forked JVM hanging forever when the exit timeout fires (#3500), Possible NPE if a thread ends while building the thread dump (#3506) @​olamy
• Stop rewriting the class report for every nested suite (#3511) (#3514) @​olamy
• Fix IllegalAccessError in the forked JVM on Java 8 and 11 (#3511) (#3513) @​olamy
• [SUREFIRE-3460] - Don't NPE when StackWalkerStrategy inits with a null TCCL (#3464) @​kalayciburak
• [SUREFIRE-3465] - Match includes/excludes the way the scanner does (#3466) @​orion0616
• [Issue-3456] Apply systemPropertyVariables before the fork initializes networking (#3467) @​joseluisll
• Fix inverted filter predicate in ForkStarter#readTestClassNames (#3453) @​slachiewicz

📝 Documentation updates

• Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
• Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
• Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

• Use push for PR Automation (#3536) @​slawekjaranowski
• Use workflow_run for PR check (#3531) @​slawekjaranowski
• Add project metadata for ATR (#3522) @​slawekjaranowski
• Add PR check workflow (#3507) @​slawekjaranowski
• Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @​olamy
• Fix ITs for Maven 3.10.0 (#3508) @​slawekjaranowski
• Migrate surefire-its fixture from maven-verifier to maven-executor (#3484) @​slachiewicz
• Port the IT scripts from BeanShell to Groovy (#3480) @​slachiewicz
• Drop the Source Xref menu items (#3479) @​slachiewicz
• Implement getOutputPath() and deprecate getOutputName() (#3469) @​slachiewicz

🔧 Build

• Drop the Maven 3.9.0 CI job (#3525) @​slachiewicz
• Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @​olamy
• fix test due to uneven Maven API migration, Maven 4 build (#3502) @​sebtiem
• Keep Dependabot off JUnit 6 (#3497) @​slachiewicz
• Verify the plugin on Maven 3.9.0 (#3478) @​slachiewicz

... (truncated)

Commits

• 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
• 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
• ab7ce2f Bump org.testng:testng (#3539)
• ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
• a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
• 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
• cc69b3c Use push for PR Automation
• b119019 Install the JUnit Platform provider for the ITs (#3535)
• 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
• 1e4f6b9 Use workflow_run for PR check (#3531)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 4ccf83de-f12e-46b7-810f-8ca7d05820e9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}