chore(deps): bump the gradle-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the gradle-dependencies group with 4 updates in the / directory: org.jetbrains.kotlinx:kotlinx-datetime, io.github.oshai:kotlin-logging-jvm, ch.qos.logback:logback-classic and com.networknt:json-schema-validator.

Updates org.jetbrains.kotlinx:kotlinx-datetime from 0.6.2 to 0.8.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-datetime's releases.

v0.8.0

Breaking changes:

• Deprecate TimeZone serialization (#576).

Additions:

• Add orNull functions for non-throwing construction of datetime entities (#68).
• Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
• Introduce LocalIsoWeekDate for representing ISO week dates (#603).
• Introduce functions for finding the next or previous date with the given day-of-week (#129).

Tweaks and fixes:

• Fix bugs in Instant.until and Instant.periodUntil (#534).
• Always output seconds in the DateTimeComponents.Formats.RFC_1123 format (#608).
• On Kotlin/Native for Windows, whenever DST transitions are turned off by the user, the current system time zone is now fixed-offset (#575).

Changelog relative to version 0.8.0-rc02

No changes, only the version is increased.

v0.8.0-rc02

Equivalent to rc01, but published without Instant and Clock. A separate compatibility artifact contains them for binary compatibility. Please see https://github.com/Kotlin/kotlinx-datetime/#deprecation-of-instant for details.

v0.8.0-rc01

Breaking changes:

• Deprecate TimeZone serialization (#576).

Additions:

• Add orNull functions for non-throwing construction of datetime entities (#68).
• Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
• Introduce LocalIsoWeekDate for representing ISO week dates (#603).
• Introduce functions for finding the next or previous date with the given day-of-week (#129).

Tweaks and fixes:

• Fix bugs in Instant.until and Instant.periodUntil (#534).
• Always output seconds in the DateTimeComponents.Formats.RFC_1123 format (#608).
• On Kotlin/Native for Windows, whenever DST transitions are turned off by the user, the current system time zone is now fixed-offset (#575).

v0.7.1

• Add kotlinx.datetime.Instant and kotlinx.datetime.Clock type aliases to, respectively, kotlin.time.Instant and kotlin.time.Clock to make migration more convenient.
• Add a fallback timezone database implementation for Darwin that uses the Foundation framework if the timezone database is unavailable on the filesystem (#485).
• Restore binary compatibility in string format definitions utilizing dates on the JVM (#545).

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-datetime's changelog.

0.8.0

Breaking changes:

• Deprecate TimeZone serialization (#576).

Additions:

• Add orNull functions for non-throwing construction of datetime entities (#68).
• Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
• Introduce LocalIsoWeekDate for representing ISO week dates (#603).
• Introduce functions for finding the next or previous date with the given day-of-week (#129).

Tweaks and fixes:

• Fix bugs in Instant.until and Instant.periodUntil (#534).
• Always output seconds in the DateTimeComponents.Formats.RFC_1123 format (#608).
• On Kotlin/Native for Windows, whenever DST transitions are turned off by the user, the current system time zone is now fixed-offset (#575).

Changelog relative to version 0.8.0-rc02

No changes, only the version is increased.

0.8.0-rc02

Equivalent to rc01, but published without Instant and Clock. A separate compatibility artifact contains them for binary compatibility. Please see https://github.com/Kotlin/kotlinx-datetime/#deprecation-of-instant for details.

0.8.0-rc01

Breaking changes:

• Deprecate TimeZone serialization (#576).

Additions:

• Add orNull functions for non-throwing construction of datetime entities (#68).
• Add parseOrNull extension functions for non-throwing attempts at parsing (#508).
• Introduce LocalIsoWeekDate for representing ISO week dates (#603).
• Introduce functions for finding the next or previous date with the given day-of-week (#129).

Tweaks and fixes:

• Fix bugs in Instant.until and Instant.periodUntil (#534).
• Always output seconds in the DateTimeComponents.Formats.RFC_1123 format (#608).
• On Kotlin/Native for Windows, whenever DST transitions are turned off by the user, the current system time zone is now fixed-offset (#575).

0.7.1

... (truncated)

Commits

• 591ce9b Merge branch 'dkhalanskyjb/remove-deprecated-instant' into version-0.8.0-normal
• a2eb074 Version 0.8.0
• f487af4 Describe the release procedures (#562)
• edc1183 Add contribution guidelines (#587)
• 4b485b7 Added templates to the issue creation wizard (#616)
• c2854bd Updated kotlinx.team.infra plugin and regenerated publication pipeline (#619)
• ef03b19 Version 0.8.0-rc02
• a1ac46e Use IANA tzdb 2026b (#620)
• c006a0f Version 0.8.0-rc01
• 4ae47ef Small improvements to various docs (#578)
• Additional commits viewable in compare view

Updates io.github.oshai:kotlin-logging-jvm from 8.0.03 to 8.0.4

Release notes

Sourced from io.github.oshai:kotlin-logging-jvm's releases.

8.0.4

Align to semver.

Full Changelog: oshai/kotlin-logging@8.0.03...8.0.4

Commits

• 0aaa57c bump to semver 8.0.5
• bf60363 change to semver 8.0.4
• See full diff in compare view

Updates ch.qos.logback:logback-classic from 1.5.32 to 1.5.33

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.33

2026-05-27 Release of logback version 1.5.33

• PropertiesConfiguratorModelHandler now registers properties file URLs to the ConfigurationWatchList when scan is enabled (via local scan="true" attribute or top-level configuration scan), ensuring changes are detected and reconfiguration occurs. This problem was reported in issues/1034.

• When processing <conversionRule> elements and both class and converterClass attributes are specified, silently use the class attribute without issuing a warning. However, if the attribute values differ, a warning will be issued. This change was requested in issues/1031.

• HardenedModelInputStream will no longer accept to deserialize all classes located under the "java.lang" and "java.util" packages but a limited number of explicitly authorized classes in those packages. This potential deserialization whitelist bypass vulnerability was reported by York Shen and registered as CVE-2026-9828.

• SSL parameters for SSLSocketAppender now enable hostname verification by default. Moreover, the default protocol is now "TLSv1.2". This potential vulnerability was reported by York Shen.

• When printing the status message field, ViewStatusMessagesServletBase now escapes special characters such as "&" as character entities. This potential vulnerability was reported by York Shen.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 124e8b49b55ac34d08743a0646bd463410192647 associated with the tag v_1.5.33. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 124e8b4 prepare release 1.5.33
• d8fd6f2 escapeTags in message field when printing status messages
• 95edbeb hostnameVerification default to true in SSLParametersConfiguration, SSL.DEFAU...
• b768a96 remove spurious java.swing.* import
• 12cf2c5 classes in java.lang and java.util are now whitelisted individually
• e9133ed fix typo
• 47089a2 added Filip Egeric icla
• 85735f7 Modified ConversionRuleAction.java: Updated validPreconditions() to
• 614f7a7 the official name for initial instructions file foe coding agents is AGENTS.md
• fe50bb5 fix: do not warn when both converterClass and class attributes are specified ...
• Additional commits viewable in compare view

Updates com.networknt:json-schema-validator from 3.0.2 to 3.0.3

Release notes

Sourced from com.networknt:json-schema-validator's releases.

3.0.3- 2026-05-27

Added

Changed

• fixes #1246 Coercion bug (#1247)
• Cleanup of IOException leftovers after update to jackson3 (#1244) Thanks @​afiluba

Changelog

Sourced from com.networknt:json-schema-validator's changelog.

Change Log

All notable changes to this project will be documented in this file.

This format is based on Keep a Changelog.

This project does not adhere to Semantic Versioning and minor version changes can have incompatible API changes. These incompatible API changes will largely affect those who have custom validator or walker implementations. Those who just use the library to validate using the standard JSON Schema Draft specifications may not need changes.

[Unreleased]

Added

Changed

Changed

3.0.3- 2026-05-27

Added

Changed

• fixes #1246 Coercion bug (#1247)
• Cleanup of IOException leftovers after update to jackson3 (#1244) Thanks @​afiluba

3.0.2- 2026-04-14

Added

Changed

• Upgrade Jackson from 3.1.0 to 3.1.1 to fix CWE-770 (#1236) Thanks @​cjun-coveo
• Support handling of non-finite numbers if present (#1241) Thanks @​justin-tay

3.0.1- 2026-03-10

Added

Changed

• Upgrade Jackson from 3.0.3 to 3.1.0 to fix CVE-2026-29062 (#1236) Thanks @​AhsanSheraz
• Fix minimum maximum validators with type array (#1227) Thanks @​justin-tay
• Add method to SpecificationVersion to determine from schema node (#1221) Thanks @​justin-tay
• update contributor list in README.md

3.0.0- 2025-12-13

Added

Changed

... (truncated)

Commits

• 7407ddd upgrade to 3.0.3 and update changelog
• 07b694b fixes #1246 Coercion bug (#1247)
• 9df7d32 Merge branch 'master' of github.com:networknt/json-schema-validator
• 2686725 add gitignore
• 331ced5 Cleanup of IOException leftovers after update to jackson3 (#1244)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.