From 59b44a30e4ab816bc4658cfab3be69b90bf76063 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Jun 2026 13:59:56 +0200 Subject: [PATCH] chore(deps): bump the other-dependencies group across 5 directories with 4 updates (#789) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the other-dependencies group with 2 updates in the /samples/kotlin-mcp-client directory: [com.anthropic:anthropic-java](https://github.com/anthropics/anthropic-sdk-java) and [com.gradleup.shadow](https://github.com/GradleUp/shadow). Bumps the other-dependencies group with 1 update in the /samples/kotlin-mcp-server directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow). Bumps the other-dependencies group with 2 updates in the /samples/kotlinlang-mcp-server directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow) and [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback). Bumps the other-dependencies group with 1 update in the /samples/simple-streamable-server directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow). Bumps the other-dependencies group with 2 updates in the /samples/weather-stdio-server directory: [com.gradleup.shadow](https://github.com/GradleUp/shadow) and [io.github.oshai:kotlin-logging-jvm](https://github.com/oshai/kotlin-logging). Updates `com.anthropic:anthropic-java` from 2.34.0 to 2.35.0
Release notes

Sourced from com.anthropic:anthropic-java's releases.

v2.35.0

2.35.0 (2026-05-28)

Full Changelog: v2.34.1...v2.35.0

Features

v2.34.1

2.34.1 (2026-05-27)

Full Changelog: v2.34.0...v2.34.1

Bug Fixes

Documentation

Changelog

Sourced from com.anthropic:anthropic-java's changelog.

2.35.0 (2026-05-28)

Full Changelog: v2.34.1...v2.35.0

Features

2.34.1 (2026-05-27)

Full Changelog: v2.34.0...v2.34.1

Bug Fixes

Documentation

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `ch.qos.logback:logback-classic` from 1.5.32 to 1.5.34
Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.34

2026-06-01 Release of logback version 1.5.34

• In case certain StackTraceElement values returned by the Throwable.getStackTrace method are null, StackTraceElementProxy substitutes a dummy instance instead of throwing an IllegalArgumentException. This resolves [issues #1040](qos-ch/logback#1040), reported by Naotsugu Kobayashi.

• HardenedObjectInputStream will now throw an InvalidClassException during deserialization attempts of Proxy classes. This change addresses potential deserialization whitelist bypass vulnerability reported by York Shen and registered as CVE-2026-10532.

• A bitwise identical binary of this version can be reproduced by building from source code at commit e62272ac152469aec1ede056c3c7d0d7314e7bfe associated with the tag v_1.5.34. This release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.33

2026-05-27 Release of logback version 1.5.33

• PropertiesConfiguratorModelHandler now registers properties file URLs to the ConfigurationWatchList when scan is enabled (via local scan="true" attribute or top-level configuration scan), ensuring changes are detected and reconfiguration occurs. This problem was reported in issues/1034.

• When processing <conversionRule> elements and both class and converterClass attributes are specified, silently use the class attribute without issuing a warning. However, if the attribute values differ, a warning will be issued. This change was requested in issues/1031.

• HardenedModelInputStream will no longer accept to deserialize all classes located under the "java.lang" and "java.util" packages but a limited number of explicitly authorized classes in those packages. This potential deserialization whitelist bypass vulnerability was reported by York Shen and registered as CVE-2026-9828.

• SSL parameters for SSLSocketAppender now enable hostname verification by default. Moreover, the default protocol is now "TLSv1.2". This potential vulnerability was reported by York Shen.

• When printing the status message field, ViewStatusMessagesServletBase now escapes special characters such as "&" as character entities. This potential vulnerability was reported by York Shen.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 124e8b49b55ac34d08743a0646bd463410192647 associated with the tag v_1.5.33. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Updates `io.github.oshai:kotlin-logging-jvm` from 8.0.03 to 8.0.4
Release notes

Sourced from io.github.oshai:kotlin-logging-jvm's releases.

8.0.4

Align to semver.

Full Changelog: https://github.com/oshai/kotlin-logging/compare/8.0.03...8.0.4

Commits

Updates `com.gradleup.shadow` from 9.4.1 to 9.4.2
Release notes

Sourced from com.gradleup.shadow's releases.

9.4.2

Changed

Commits

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- samples/kotlin-mcp-client/gradle/libs.versions.toml | 4 ++-- samples/kotlin-mcp-server/gradle/libs.versions.toml | 2 +- samples/kotlinlang-mcp-server/gradle/libs.versions.toml | 4 ++-- samples/simple-streamable-server/gradle/libs.versions.toml | 2 +- samples/weather-stdio-server/gradle/libs.versions.toml | 4 ++-- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/samples/kotlin-mcp-client/gradle/libs.versions.toml b/samples/kotlin-mcp-client/gradle/libs.versions.toml index c263c59..42d700e 100644 --- a/samples/kotlin-mcp-client/gradle/libs.versions.toml +++ b/samples/kotlin-mcp-client/gradle/libs.versions.toml @@ -1,9 +1,9 @@ [versions] -anthropic = "2.34.0" +anthropic = "2.35.0" kotlin = "2.3.21" ktor = "3.3.3" mcp-kotlin = "0.12.0" -shadow = "9.4.1" +shadow = "9.4.2" slf4j = "2.0.18" [libraries] diff --git a/samples/kotlin-mcp-server/gradle/libs.versions.toml b/samples/kotlin-mcp-server/gradle/libs.versions.toml index 91d7878..165d096 100644 --- a/samples/kotlin-mcp-server/gradle/libs.versions.toml +++ b/samples/kotlin-mcp-server/gradle/libs.versions.toml @@ -3,7 +3,7 @@ kotlin = "2.3.21" ktor = "3.3.3" mcp-kotlin = "0.12.0" slf4j = "2.0.18" -shadow = "9.4.1" +shadow = "9.4.2" [libraries] ktor-bom = { group = "io.ktor", name = "ktor-bom", version.ref = "ktor" } diff --git a/samples/kotlinlang-mcp-server/gradle/libs.versions.toml b/samples/kotlinlang-mcp-server/gradle/libs.versions.toml index 5b7988e..9a68e31 100644 --- a/samples/kotlinlang-mcp-server/gradle/libs.versions.toml +++ b/samples/kotlinlang-mcp-server/gradle/libs.versions.toml @@ -4,8 +4,8 @@ ktor = "3.3.3" mcp-kotlin = "0.12.0" serialization = "1.11.0" coroutines = "1.11.0" -logback = "1.5.32" -shadow = "9.4.1" +logback = "1.5.34" +shadow = "9.4.2" [libraries] ktor-bom = { group = "io.ktor", name = "ktor-bom", version.ref = "ktor" } diff --git a/samples/simple-streamable-server/gradle/libs.versions.toml b/samples/simple-streamable-server/gradle/libs.versions.toml index b607a1c..07bdac1 100644 --- a/samples/simple-streamable-server/gradle/libs.versions.toml +++ b/samples/simple-streamable-server/gradle/libs.versions.toml @@ -4,7 +4,7 @@ ktor = "3.3.3" junit = "6.1.0" mcp-kotlin = "0.12.0" slf4j = "2.0.18" -shadow = "9.4.1" +shadow = "9.4.2" [libraries] ktor-bom = { group = "io.ktor", name = "ktor-bom", version.ref = "ktor" } diff --git a/samples/weather-stdio-server/gradle/libs.versions.toml b/samples/weather-stdio-server/gradle/libs.versions.toml index daf5fc1..d7a6fcb 100644 --- a/samples/weather-stdio-server/gradle/libs.versions.toml +++ b/samples/weather-stdio-server/gradle/libs.versions.toml @@ -2,9 +2,9 @@ coroutines = "1.11.0" kotlin = "2.3.21" ktor = "3.3.3" -logging = "8.0.03" +logging = "8.0.4" mcp-kotlin = "0.12.0" -shadow = "9.4.1" +shadow = "9.4.2" slf4j = "2.0.18" [libraries]