Skip to content

chore(deps): Bump io.undertow:undertow-core from 2.4.0.Alpha1 to 2.4.0.RC1#21828

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/io.undertow-undertow-core-2.4.0.RC1
Closed

chore(deps): Bump io.undertow:undertow-core from 2.4.0.Alpha1 to 2.4.0.RC1#21828
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/io.undertow-undertow-core-2.4.0.RC1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps io.undertow:undertow-core from 2.4.0.Alpha1 to 2.4.0.RC1.

Release notes

Sourced from io.undertow:undertow-core's releases.

v.2.4.0.Beta1

Release 2.4.0.Beta1 Fixes CVE-2024-3884 CVE-2024-4027 CVE-2025-12543 Full list of Jiras: view in Jira

    Release Notes - Undertow - Version 2.4.0.Beta1

... (truncated)

Commits
  • b7cdd70 Prepare 2.4.0.RC1
  • 007f218 Merge pull request #1932 from fl4via/dep-upgrade_2.4.x
  • f86e6db [UNDERTOW-2735] Upgrade http components client to 4.5.14, and remove the URL ...
  • f337ac8 Upgrade spotbugs to 4.7.3.6
  • 8ca8b3e [UNDERTOW-2728] Upgrade Apache Felix Bundle plugin to 6.0.2
  • 4cd1729 Upgrade jacoco to 0.8.14
  • 9bd4c51 [UNDERTOW-2733] Add dependency to smallrye
  • 69449bf [UNDERTOW-2733] Upgrade wildfly common to 2.0.1
  • c6230a5 [UNDERTOW-2725] Upgrade jboss threads to 3.9.2
  • a5d7b50 [UNDERTOW-2732] Upgrade jboss log manager to 3.1.2.Final
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.undertow:undertow-core](https://github.com/undertow-io/undertow) from 2.4.0.Alpha1 to 2.4.0.RC1.
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.4.0.Alpha1...2.4.0.RC1)

---
updated-dependencies:
- dependency-name: io.undertow:undertow-core
  dependency-version: 2.4.0.RC1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 9, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Mar 9, 2026

🌟 Thank you for your contribution to the Apache Camel project! 🌟
🤖 CI automation will test this PR automatically.

🐫 Apache Camel Committers, please review the following items:

  • First-time contributors require MANUAL approval for the GitHub Actions to run
  • You can use the command /component-test (camel-)component-name1 (camel-)component-name2.. to request a test from the test bot although they are normally detected and executed by CI.
  • You can label PRs using build-all, build-dependents, skip-tests and test-dependents to fine-tune the checks executed by this PR.
  • Build and test logs are available in the summary page. Only Apache Camel committers have access to the summary.

⚠️ Be careful when sharing logs. Review their contents before sharing them publicly.

@oscerd
Copy link
Contributor

oscerd commented Mar 9, 2026

Needs to be investigated manually

@apupier
Copy link
Contributor

apupier commented Mar 9, 2026

see #21750 (comment) for the investigation already done on previous version

@gnodet
Copy link
Contributor

gnodet commented Mar 9, 2026

Superseded by #21869 which bumps both undertow-core and undertow-ee together to RC1.

@gnodet gnodet closed this Mar 9, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 9, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/maven/io.undertow-undertow-core-2.4.0.RC1 branch March 9, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

core-build-and-dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants