Skip to content

Bump com.google.zxing:javase from 3.2.1 to 3.5.4#12544

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/com.google.zxing-javase-3.5.4
Open

Bump com.google.zxing:javase from 3.2.1 to 3.5.4#12544
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/com.google.zxing-javase-3.5.4

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 29, 2026

Bumps com.google.zxing:javase from 3.2.1 to 3.5.4.

Release notes

Sourced from com.google.zxing:javase's releases.

ZXing 3.5.4

What's Changed

Full Changelog: zxing/zxing@zxing-3.5.3...zxing-3.5.4

ZXing 3.5.3

What's Changed

New Contributors

Full Changelog: zxing/zxing@zxing-3.5.2...zxing-3.5.3

ZXing 3.5.2

ZXing 3.5.1

  • Various minor bug fixes, including more from oss-fuzz
  • Avoid very long detection of QR codes in two types of pathological cases
  • Don't fail QR code decoding if GB2312 not supported by JDK

See https://github.com/zxing/zxing/milestone/14?closed=1

ZXing 3.5.0

... (truncated)

Changelog

Sourced from com.google.zxing:javase's changelog.

0.1 (09 Nov 2007)

  • Initial release

0.1.1 (11 Nov 2007)

  • Fixed bug decoding version 0 QR Codes
  • Now default zoom is 2.5x in Java ME client

0.1.2 (28 Nov 2007)

  • Issue 11 fixed: Build problems on Windows
  • Can now build "ZXingReaderBasic" which does not require JSR-234
  • Issue 14 fixed: release .zip builds into one directory

0.1.3 (7 Dec 2007)

  • Unit test for QR Code decoding
  • Added EAN-13 support
  • Now builds with class file format version 1.2 -- may solve some compatibility issues?
  • Fixed obfuscation step bug causing NoClassDefFoundError

0.1.4 (13 Dec 2007)

  • Added Blackberry client build script -- does not yet work
  • Big change to handling of content of barcodes:
    • com.google.zxing.client.result moved from core-ext to core
    • Rewritten for J2ME
    • core-ext removed
    • J2ME client now uses this code for better parsing/handling of results

0.2 (07 Jan 2008)

  • Few small bug fixes in AlignmentPatternFinder, MultiFormatReader (thank K. Kakima, Andreas)
  • LCDUIImageMonochromeBitmapSource now public
  • Notably improved decoding for Basic version -- Regular version still your best bet if you can run it though

0.2.1 (16 Jan 2008)

  • Slight tweaks and enhancements to decode and runtime performance of UPCDecoder
  • Added black-box test suites against a known set of images (Thanks to Enrique G. S. for additional images)

0.2.2 (22 Jan 2008)

  • Now includes junit locally to build tests
  • Fixed "MIDlet" name in MANIFEST.MF, which may solve some problems
  • Friendlier error message when barcode can't be found

0.3 (04 Feb 2008)

  • Major refactoring of 1D barcode decoding
  • Added support for UPC-E, EAN-8
  • Also added Code 39, Code 128 support -- may need refinement
  • Now any "game" key triggers photo capture
  • Workaround implemented for Nokias that use "capture://image" in MMAPI
  • UPC codes now trigger lookup to upcdatabase.com

... (truncated)

Commits
  • f651b0a [maven-release-plugin] prepare release zxing-3.5.4
  • 6d66bd9 Restore 3.5.4-SNAPSHOT
  • c65c550 [maven-release-plugin] prepare release zxing-3.5.4
  • 00ff3cb Add new Sonatype repo
  • 4a16098 [maven-release-plugin] rollback the release of zxing-3.5.4
  • 7c58665 [maven-release-plugin] prepare for next development iteration
  • b36e149 [maven-release-plugin] prepare release zxing-3.5.4
  • 8536950 [maven-release-plugin] rollback the release of zxing-3.5.4
  • 1fe940f [maven-release-plugin] prepare release zxing-3.5.4
  • 6cf1062 Manually update secondary packages to 3.5.4. parent
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 29, 2026
@DaanHoogland
Copy link
Contributor

DaanHoogland commented Jan 29, 2026

@blueorangutan package

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 16617

@dependabot @DaanHoogland
Bump com.google.zxing:javase from 3.2.1 to 3.5.4
3f51760 
Bumps [com.google.zxing:javase](https://github.com/zxing/zxing) from 3.2.1 to 3.5.4.
- [Release notes](https://github.com/zxing/zxing/releases)
- [Changelog](https://github.com/zxing/zxing/blob/master/CHANGES)
- [Commits](zxing/zxing@zxing-3.2.1...zxing-3.5.4)

---
updated-dependencies:
- dependency-name: com.google.zxing:javase
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@DaanHoogland DaanHoogland force-pushed the dependabot/maven/com.google.zxing-javase-3.5.4 branch from 1099c7e to 3f51760 Compare January 29, 2026 10:33
@codecov
Copy link

codecov bot commented Jan 29, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 17.87%. Comparing base (a55f85a) to head (3f51760).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@             Coverage Diff              @@
##              main   #12544       +/-   ##
============================================
+ Coverage     3.57%   17.87%   +14.30%     
- Complexity       0    16059    +16059     
============================================
  Files          451     5934     +5483     
  Lines        38156   532088   +493932     
  Branches      7044    65065    +58021     
============================================
+ Hits          1363    95136    +93773     
- Misses       36627   426308   +389681     
- Partials       166    10644    +10478
Flag Coverage Δ
uitests 3.57% <ø> (ø)
unittests 18.98% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 29, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@DaanHoogland
Copy link
Contributor

DaanHoogland commented Jan 29, 2026

@blueorangutan package

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 16629

@DaanHoogland
Copy link
Contributor

DaanHoogland commented Jan 29, 2026

@blueorangutan test

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

@DaanHoogland a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

[SF] Trillian Build Failed (tid-15338)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

component:build dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@DaanHoogland @blueorangutan