chore(deps): bump com.gradleup.shadow from 9.4.3 to 9.5.1 by dependabot[bot] · Pull Request #961 · kestra-io/plugin-jdbc

dependabot · 2026-07-11T23:53:39Z

Bumps com.gradleup.shadow from 9.4.3 to 9.5.1.

Release notes

Sourced from com.gradleup.shadow's releases.

9.5.1

Fixed

Fix eager calls for toolchainSpec in Kotlin DSL. (#2087)

9.5.0

Added

Check DuplicatesStrategy for merging transformers. (#2026)
This will log warnings when an incompatible DuplicatesStrategy (e.g., EXCLUDE) is applied in Gradle configuration for built-in ResourceTransformers.

Add KotlinModuleMetadataTransformer. (#2073)

Add R8 as an opt-in minimize { r8 { ... } } tool for shrinking the final shadowed JAR. (#2077)

Changed

Bump min Gradle requirement to 9.2.0. (#2057)

Remove afterEvaluate when adding variants. (#2056)

Deprecate enableKotlinModuleRemapping for ShadowJar. (#2073)
Apply KotlinModuleMetadataTransformer explicitly to support relocating inside Kotlin module metadata files.

Deprecate everything under ShadowCopyAction. (#2083)

Fixed

Fix the conflicts when using afterEvaluate with other plugins. (#2055)

Commits

c33612d Prepare version 9.5.1
485e412 Fix eager calls for toolchainSpec in Kotlin DSL (#2087)
d062fa2 Fix DuplicatesStrategyCheckerTest resource loading on Windows (#2085)
e71a2c1 Add description for shadow configuration (#2084)
7ba43b0 Prepare next development version
6e00cb7 Prepare version 9.5.0
ca03909 Deprecate everything under ShadowCopyAction (#2083)
7d7da27 Revert "Mark CONSTANT_TIME_FOR_ZIP_ENTRIES as const (#2074)"
da18cc0 Deprecate enableKotlinModuleRemapping for ShadowJar (#2073)
ec6e55a Replace system properties with buildConfig consts (#2082)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.gradleup.shadow](https://github.com/GradleUp/shadow) from 9.4.3 to 9.5.1. - [Release notes](https://github.com/GradleUp/shadow/releases) - [Commits](GradleUp/shadow@9.4.3...9.5.1) --- updated-dependencies: - dependency-name: com.gradleup.shadow dependency-version: 9.5.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-12T00:07:51Z

📦 Artifacts

Name	Size	Updated	Expiration
	406.64 MB	Jul 12, 26, 12:07:51 AM UTC	Jul 19, 26, 12:07:36 AM UTC

🛡 Trivy

Vulnerability in: `Java`

Vulnerability	Severity	Package	Installed Version	Fixed Version
GHSA-72hv-8253-57qq	MEDIUM	com.fasterxml.jackson.core:jackson-core	2.21.0	2.21.1, 2.18.6
CVE-2026-54512	HIGH	com.fasterxml.jackson.core:jackson-databind	2.21.0	2.18.8, 3.1.4, 2.21.4
CVE-2026-54513	HIGH	com.fasterxml.jackson.core:jackson-databind	2.21.0	2.18.8, 2.21.4, 3.1.4
CVE-2026-54514	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.0	2.18.8, 2.21.4, 3.1.4
CVE-2026-54515	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.0	3.1.4, 2.18.9, 2.21.5, 2.22.1
CVE-2026-54516	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.0	2.21.4, 3.1.4
CVE-2026-54517	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.0	2.21.4, 3.1.4
CVE-2026-54518	MEDIUM	com.fasterxml.jackson.core:jackson-databind	2.21.0	2.21.4
CVE-2025-53864	MEDIUM	com.nimbusds:nimbus-jose-jwt	9.40	10.0.2, 9.37.4
CVE-2025-48924	MEDIUM	commons-lang:commons-lang	2.4
CVE-2026-42583	HIGH	io.netty:netty-codec-compression	4.2.12.Final	4.2.13.Final
CVE-2026-42583	HIGH	io.netty:netty-codec-compression	4.2.9.Final	4.2.13.Final
CVE-2026-42579	HIGH	io.netty:netty-codec-dns	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42584	HIGH	io.netty:netty-codec-http	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42587	HIGH	io.netty:netty-codec-http	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-41417	MEDIUM	io.netty:netty-codec-http	4.2.12.Final	4.1.133.Final, 4.2.13.Final
CVE-2026-42580	MEDIUM	io.netty:netty-codec-http	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42581	MEDIUM	io.netty:netty-codec-http	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42585	MEDIUM	io.netty:netty-codec-http	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-50020	MEDIUM	io.netty:netty-codec-http	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-50020	MEDIUM	io.netty:netty-codec-http	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-33870	HIGH	io.netty:netty-codec-http	4.2.9.Final	4.1.132.Final, 4.2.10.Final
CVE-2026-42584	HIGH	io.netty:netty-codec-http	4.2.9.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42587	HIGH	io.netty:netty-codec-http	4.2.9.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-41417	MEDIUM	io.netty:netty-codec-http	4.2.9.Final	4.1.133.Final, 4.2.13.Final
CVE-2026-42580	MEDIUM	io.netty:netty-codec-http	4.2.9.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42581	MEDIUM	io.netty:netty-codec-http	4.2.9.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-42585	MEDIUM	io.netty:netty-codec-http	4.2.9.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-50020	MEDIUM	io.netty:netty-codec-http	4.2.9.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-42587	HIGH	io.netty:netty-codec-http2	4.2.12.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-47244	MEDIUM	io.netty:netty-codec-http2	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-48043	MEDIUM	io.netty:netty-codec-http2	4.2.12.Final	4.1.135.Final, 4.2.15.Final
CVE-2026-50560	MEDIUM	io.netty:netty-codec-http2	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-47244	MEDIUM	io.netty:netty-codec-http2	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-48043	MEDIUM	io.netty:netty-codec-http2	4.2.13.Final	4.1.135.Final, 4.2.15.Final
CVE-2026-50560	MEDIUM	io.netty:netty-codec-http2	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-33871	HIGH	io.netty:netty-codec-http2	4.2.9.Final	4.1.132.Final, 4.2.11.Final
CVE-2026-42587	HIGH	io.netty:netty-codec-http2	4.2.9.Final	4.2.13.Final, 4.1.133.Final
CVE-2026-47244	MEDIUM	io.netty:netty-codec-http2	4.2.9.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-48043	MEDIUM	io.netty:netty-codec-http2	4.2.9.Final	4.1.135.Final, 4.2.15.Final
CVE-2026-50560	MEDIUM	io.netty:netty-codec-http2	4.2.9.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-44249	HIGH	io.netty:netty-handler	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45416	HIGH	io.netty:netty-handler	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-50010	HIGH	io.netty:netty-handler	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-44249	HIGH	io.netty:netty-handler	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45416	HIGH	io.netty:netty-handler	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-50010	HIGH	io.netty:netty-handler	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-44249	HIGH	io.netty:netty-handler	4.2.9.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45416	HIGH	io.netty:netty-handler	4.2.9.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-50010	HIGH	io.netty:netty-handler	4.2.9.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-42578	LOW	io.netty:netty-handler-proxy	4.2.12.Final	4.1.133.Final, 4.2.13.Final
CVE-2026-42578	LOW	io.netty:netty-handler-proxy	4.2.9.Final	4.1.133.Final, 4.2.13.Final
CVE-2026-45674	HIGH	io.netty:netty-resolver-dns	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-47691	HIGH	io.netty:netty-resolver-dns	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45673	MEDIUM	io.netty:netty-resolver-dns	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45674	HIGH	io.netty:netty-resolver-dns	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-47691	HIGH	io.netty:netty-resolver-dns	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45673	MEDIUM	io.netty:netty-resolver-dns	4.2.13.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-42577	HIGH	io.netty:netty-transport-native-epoll	4.2.12.Final	4.2.13.Final
CVE-2026-42577	HIGH	io.netty:netty-transport-native-epoll	4.2.12.Final	4.2.13.Final
CVE-2026-45536	MEDIUM	io.netty:netty-transport-native-epoll	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45536	MEDIUM	io.netty:netty-transport-native-epoll	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2026-45536	MEDIUM	io.netty:netty-transport-native-kqueue	4.2.12.Final	4.2.15.Final, 4.1.135.Final
CVE-2024-57699	HIGH	net.minidev:json-smart	2.5.1	2.5.2

🧪 Java Unit Tests

	Tests	Passed ✅	Skipped ⚠️	Failed	Time ⏱
Java Tests Report	318 ran	265 ✅	53 ⚠️	0 ❌	9m 50s 939ms

🔁 Unreleased Commits

✅ No unreleased commits found.

github-actions · 2026-07-12T00:08:56Z

Tests report quick summary:

success ✅ > tests: 318, success: 265, skipped: 53, failed: 0

unfold for details

Project	Status	Success	Skipped
plugin-jdbc	success ✅	41	0
plugin-jdbc-access	success ✅	9	0
plugin-jdbc-actianvector	skipped ⏭️	0	7
plugin-jdbc-as400	success ✅	1	0
plugin-jdbc-clickhouse	success ✅	16	1
plugin-jdbc-db2	success ✅	1	9
plugin-jdbc-druid	skipped ⏭️	0	4
plugin-jdbc-duckdb	success ✅	26	2
plugin-jdbc-hana	skipped ⏭️	0	3
plugin-jdbc-mariadb	success ✅	18	0
plugin-jdbc-mysql	success ✅	34	0
plugin-jdbc-oracle	success ✅	25	1
plugin-jdbc-pinot	success ✅	5	0
plugin-jdbc-postgres	success ✅	30	1
plugin-jdbc-redshift	skipped ⏭️	0	4
plugin-jdbc-snowflake	success ✅	12	5
plugin-jdbc-sqlite	success ✅	18	0
plugin-jdbc-sqlserver	success ✅	24	1
plugin-jdbc-sybase	success ✅	1	5
plugin-jdbc-trino	success ✅	4	0
plugin-jdbc-vertica	skipped ⏭️	0	10

dependabot Bot added the dependency-upgrade Dependency upgrade is needed label Jul 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump com.gradleup.shadow from 9.4.3 to 9.5.1#961

chore(deps): bump com.gradleup.shadow from 9.4.3 to 9.5.1#961
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.gradleup.shadow-9.5.1

dependabot Bot commented on behalf of github Jul 11, 2026

Uh oh!

github-actions Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 11, 2026

9.5.1

Fixed

9.5.0

Added

Changed

Fixed

Uh oh!

github-actions Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

📦 Artifacts

🛡 Trivy

Vulnerability in: Java

🧪 Java Unit Tests

🔁 Unreleased Commits

Uh oh!

github-actions Bot commented Jul 12, 2026

Tests report quick summary:

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

github-actions Bot commented Jul 12, 2026 •

edited

Loading

Vulnerability in: `Java`