chore(deps): bump org.kill-bill.billing:killbill-oss-parent from 0.146.63 to 0.147.18 - #18
Conversation
Bumps [org.kill-bill.billing:killbill-oss-parent](https://github.com/killbill/killbill-oss-parent) from 0.146.63 to 0.147.18. - [Changelog](https://github.com/killbill/killbill-oss-parent/blob/master/NEWS) - [Commits](killbill/killbill-oss-parent@killbill-oss-parent-0.146.63...killbill-oss-parent-0.147.18) --- updated-dependencies: - dependency-name: org.kill-bill.billing:killbill-oss-parent dependency-version: 0.147.18 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit fe25977. Configure here.
| <groupId>org.kill-bill.billing</groupId> | ||
| <artifactId>killbill-oss-parent</artifactId> | ||
| <version>0.146.63</version> | ||
| <version>0.147.18</version> |
There was a problem hiding this comment.
Incompatible parent POM upgrade
High Severity
killbill-oss-parent 0.147.18 is a Java 21 / Jakarta line that removes org.jooby for killbill-jooby and migrates servlet APIs. This plugin still targets Kill Bill 0.24.x with JDK 11, javax.servlet, and an unversioned org.jooby:jooby dependency, so the bump alone breaks Maven resolution and stack compatibility.
Reviewed by Cursor Bugbot for commit fe25977. Configure here.
|
Superseded by #19. |
Bumps org.kill-bill.billing:killbill-oss-parent from 0.146.63 to 0.147.18.
Commits
7a9edc9[maven-release-plugin] prepare release killbill-oss-parent-0.147.189b6ea60Merge pull request #1002 from killbill/jackson-2.22.1c01491cupdate to jackson:2.22.138febb7[maven-release-plugin] prepare for next development iteration965db99[maven-release-plugin] prepare release killbill-oss-parent-0.147.17e07a0f8pom.xml: update killbill-client to 1.5.2cf0dcd1[maven-release-plugin] prepare for next development iteration285d9fd[maven-release-plugin] prepare release killbill-oss-parent-0.147.165360d61pom.xml: update killbill-platform to 0.42.244ea190[maven-release-plugin] prepare for next development iterationDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Medium Risk
Parent POM bumps can change transitive dependency versions, plugin configs, and build behavior across the Kill Bill ecosystem; validate with
mvn verifyand watch for Jackson version skew against explicit 2.18.6 pins.Overview
Bumps the Maven parent
killbill-oss-parentfrom 0.146.63 to 0.147.18 inpom.xml. No plugin source or test code changes.The new parent revision pulls in upstream Kill Bill stack updates (e.g. Jackson 2.22.1, killbill-client 1.5.2, killbill-platform 0.42.2 per the parent changelog). This repo still pins Jackson 2.18.6 explicitly in dependencies, so runtime Jackson versions may not fully align with the parent until those overrides are updated or removed.
Reviewed by Cursor Bugbot for commit fe25977. Bugbot is set up for automated code reviews on this repo. Configure here.