Skip to content

chore(deps): bump the kestra-gradle-plugins group with 4 updates - #786

Merged
Malaydewangan09 merged 1 commit into
mainfrom
dependabot/gradle/kestra-gradle-plugins-ef3111a0f5
Aug 31, 2026
Merged

chore(deps): bump the kestra-gradle-plugins group with 4 updates#786
Malaydewangan09 merged 1 commit into
mainfrom
dependabot/gradle/kestra-gradle-plugins-ef3111a0f5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the kestra-gradle-plugins group with 4 updates: io.kestra.gradle.repository-conventions, io.kestra.gradle.spotless-conventions, io.kestra.gradle.inject-bom-versions and io.kestra.gradle.plugin-doc-lint.

Updates io.kestra.gradle.repository-conventions from 1.2.6 to 1.2.8

Release notes

Sourced from io.kestra.gradle.repository-conventions's releases.

v1.2.8

Changelog

🐛 Bug Fixes

  • 17d7795 prioritise via execution-plan reordering, not shouldRunAfter
  • df5d4df update to version 'v1.2.8'.
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON

v1.2.7

Changelog

🚀 Features

  • 5fbbcc6 add io.kestra.gradle.test-scheduling plugin
  • e0c49c5 update to version 'v1.2.7'.
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON, YannC.

Commits
  • df5d4df update to version 'v1.2.8'.
  • 17d7795 fix: prioritise via execution-plan reordering, not shouldRunAfter
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.
  • e0c49c5 update to version 'v1.2.7'.
  • 5fbbcc6 feat: add io.kestra.gradle.test-scheduling plugin
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.
  • See full diff in compare view

Updates io.kestra.gradle.spotless-conventions from 1.2.6 to 1.2.8

Release notes

Sourced from io.kestra.gradle.spotless-conventions's releases.

v1.2.8

Changelog

🐛 Bug Fixes

  • 17d7795 prioritise via execution-plan reordering, not shouldRunAfter
  • df5d4df update to version 'v1.2.8'.
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON

v1.2.7

Changelog

🚀 Features

  • 5fbbcc6 add io.kestra.gradle.test-scheduling plugin
  • e0c49c5 update to version 'v1.2.7'.
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON, YannC.

Commits
  • df5d4df update to version 'v1.2.8'.
  • 17d7795 fix: prioritise via execution-plan reordering, not shouldRunAfter
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.
  • e0c49c5 update to version 'v1.2.7'.
  • 5fbbcc6 feat: add io.kestra.gradle.test-scheduling plugin
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.
  • See full diff in compare view

Updates io.kestra.gradle.inject-bom-versions from 1.2.6 to 1.2.8

Release notes

Sourced from io.kestra.gradle.inject-bom-versions's releases.

v1.2.8

Changelog

🐛 Bug Fixes

  • 17d7795 prioritise via execution-plan reordering, not shouldRunAfter
  • df5d4df update to version 'v1.2.8'.
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON

v1.2.7

Changelog

🚀 Features

  • 5fbbcc6 add io.kestra.gradle.test-scheduling plugin
  • e0c49c5 update to version 'v1.2.7'.
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON, YannC.

Commits
  • df5d4df update to version 'v1.2.8'.
  • 17d7795 fix: prioritise via execution-plan reordering, not shouldRunAfter
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.
  • e0c49c5 update to version 'v1.2.7'.
  • 5fbbcc6 feat: add io.kestra.gradle.test-scheduling plugin
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.
  • See full diff in compare view

Updates io.kestra.gradle.plugin-doc-lint from 1.2.6 to 1.2.8

Release notes

Sourced from io.kestra.gradle.plugin-doc-lint's releases.

v1.2.8

Changelog

🐛 Bug Fixes

  • 17d7795 prioritise via execution-plan reordering, not shouldRunAfter
  • df5d4df update to version 'v1.2.8'.
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON

v1.2.7

Changelog

🚀 Features

  • 5fbbcc6 add io.kestra.gradle.test-scheduling plugin
  • e0c49c5 update to version 'v1.2.7'.
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.

Contributors

We'd like to thank the following people for their contributions: Ludovic DEHON, YannC.

Commits
  • df5d4df update to version 'v1.2.8'.
  • 17d7795 fix: prioritise via execution-plan reordering, not shouldRunAfter
  • 70a7ed7 update snapshot version 'v1.2.8-SNAPSHOT'.
  • e0c49c5 update to version 'v1.2.7'.
  • 5fbbcc6 feat: add io.kestra.gradle.test-scheduling plugin
  • d7c1d88 update snapshot version 'v1.2.7-SNAPSHOT'.
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the kestra-gradle-plugins group with 4 updates
02970e9 
Bumps the kestra-gradle-plugins group with 4 updates: [io.kestra.gradle.repository-conventions](https://github.com/kestra-io/gradle-plugin), [io.kestra.gradle.spotless-conventions](https://github.com/kestra-io/gradle-plugin), [io.kestra.gradle.inject-bom-versions](https://github.com/kestra-io/gradle-plugin) and [io.kestra.gradle.plugin-doc-lint](https://github.com/kestra-io/gradle-plugin).


Updates `io.kestra.gradle.repository-conventions` from 1.2.6 to 1.2.8
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.6...v1.2.8)

Updates `io.kestra.gradle.spotless-conventions` from 1.2.6 to 1.2.8
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.6...v1.2.8)

Updates `io.kestra.gradle.inject-bom-versions` from 1.2.6 to 1.2.8
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.6...v1.2.8)

Updates `io.kestra.gradle.plugin-doc-lint` from 1.2.6 to 1.2.8
- [Release notes](https://github.com/kestra-io/gradle-plugin/releases)
- [Commits](kestra-io/gradle-plugin@v1.2.6...v1.2.8)

---
updated-dependencies:
- dependency-name: io.kestra.gradle.repository-conventions
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
- dependency-name: io.kestra.gradle.spotless-conventions
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
- dependency-name: io.kestra.gradle.inject-bom-versions
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
- dependency-name: io.kestra.gradle.plugin-doc-lint
  dependency-version: 1.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: kestra-gradle-plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependency-upgrade Dependency upgrade is needed label Aug 29, 2026
@github-project-automation github-project-automation Bot moved this to To review in Pull Requests Aug 29, 2026
@github-actions

github-actions Bot commented Aug 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

📦 Artifacts

Name Size Updated Expiration
jar 68.61 MB Aug 29, 26, 1:25:11 AM UTC Sep 5, 26, 1:25:08 AM UTC

🛡 Trivy

Vulnerability in: Java

Vulnerability Severity Package Installed Version Fixed Version
CVE-2026-42583 HIGH io.netty:netty-codec-compression 4.2.12.Final 4.2.13.Final
CVE-2026-59901 HIGH io.netty:netty-codec-compression 4.2.12.Final 4.2.16.Final
CVE-2026-42584 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-42587 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-55831 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-55833 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-56745 HIGH io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-41417 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.1.133.Final, 4.2.13.Final
CVE-2026-42580 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-42581 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-42585 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-50020 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-56746 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-59898 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-59899 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-59903 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.17.Final, 4.1.137.Final
CVE-2026-59921 MEDIUM io.netty:netty-codec-http 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-42587 HIGH io.netty:netty-codec-http2 4.2.12.Final 4.2.13.Final, 4.1.133.Final
CVE-2026-56819 HIGH io.netty:netty-codec-http2 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-47244 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-48043 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.1.135.Final, 4.2.15.Final
CVE-2026-50560 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-59900 MEDIUM io.netty:netty-codec-http2 4.2.12.Final 4.2.16.Final, 4.1.136.Final
CVE-2026-44249 HIGH io.netty:netty-handler 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-45416 HIGH io.netty:netty-handler 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-50010 HIGH io.netty:netty-handler 4.2.12.Final 4.2.15.Final, 4.1.135.Final
CVE-2026-42577 HIGH io.netty:netty-transport-classes-epoll 4.2.12.Final 4.2.13.Final

🧪 Java Unit Tests

TestsPassed ✅Skipped ⚠️FailedTime ⏱
Java Tests Report169 ran167 ✅2 ⚠️0 ❌3m 24s 545ms

🔁 Unreleased Commits

1 commits since v2.8.3

SHA Title Author Date
f580004 chore(deps): move from test-logger to kestra logger Ludovic DEHON Aug 28, 26, 4:23:20 PM UTC

@github-actions

github-actions Bot commented Aug 29, 2026

Copy link
Copy Markdown
Contributor

Tests report quick summary:

success ✅ > tests: 169, success: 167, skipped: 2, failed: 0

unfold for details
Project Status Success Skipped Failed
plugin-aws success ✅ 167 2 0

@Malaydewangan09
Malaydewangan09 merged commit bb53df4 into main Aug 31, 2026
6 checks passed
@Malaydewangan09
Malaydewangan09 deleted the dependabot/gradle/kestra-gradle-plugins-ef3111a0f5 branch August 31, 2026 08:05
@github-project-automation github-project-automation Bot moved this from To review to Done in Pull Requests Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Malaydewangan09 Malaydewangan09 Malaydewangan09 approved these changes

Assignees

No one assigned

Labels

dependency-upgrade Dependency upgrade is needed

Projects

Pull Requests
Status: Done

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Malaydewangan09