Skip to content

chore(deps): update gradle high security fixes minor-patch - #1409

Open
dd-octo-sts[bot] wants to merge 2 commits into
mainfrom
engraver-auto-version-upgrade/renovate/gradle-high-security-fixes-minor-patch
Open

dd-octo-sts[bot] wants to merge 2 commits into
mainfrom
engraver-auto-version-upgrade/renovate/gradle-high-security-fixes-minor-patch

Conversation

@dd-octo-sts

@dd-octo-sts dd-octo-sts Bot commented Oct 5, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
gradle (source) minor 6.1.1 → 6.9.4
com.amazonaws:aws-lambda-java-events (source) dependencies minor 3.7.0 → 3.16.1
com.amazonaws:aws-lambda-java-log4j2 (source) dependencies minor 1.3.0 → 1.6.5
com.amazonaws:aws-lambda-java-core (source) dependencies minor 1.2.1 → 1.4.0

🚨 Gradle Security Update (Non-Major) - CRITICAL

This PR addresses critical severity security vulnerabilities in Gradle dependencies.


🤖 Generated by ADMS (Automated Dependency Management System)

🚨 Gradle Security Update (Non-Major) - HIGH

This PR addresses high severity security vulnerabilities in Gradle dependencies.

@datadog-prod-us1-6

datadog-prod-us1-6 Bot commented Oct 5, 2026 •

Copy link
Copy Markdown

Pipelines

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 2 Pipeline jobs failed

Bottlecap (Rust) | Lockfile Scan — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

Bottlecap (Rust) | Audit

View more details · View in GitHub Actions

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 109ed82 | Docs | View more details | Give us feedback!

@duncanista
duncanista marked this pull request as ready for review October 28, 2026 17:20
Copilot AI balanced review requested due to automatic review settings October 28, 2026 17:20
@duncanista
duncanista requested a review from a team as a code owner October 28, 2026 17:21
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review 🔄 Running since 2026-10-28T17:21:08.416755Z 109ed82 Draft marked ready
🔒 Security Review ✅ Completed 2026-10-28T17:23:14.330728Z 109ed82 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

No active review issues remain for the Gradle and AWS Lambda dependency updates.

No open issues 🎉

What changed in this PR

Updates Gradle and AWS Lambda Java dependencies used by the extension’s local Java test project as part of a non-major security dependency refresh.

Changes:

  • Bumps the Gradle wrapper from 6.1.1 to 6.9.4.
  • Updates AWS Lambda Java core, Log4j2, and events libraries to 1.4.0, 1.6.5, and 3.16.1, respectively.
File Description
local_tests/​java/​gradle/​wrapper/​gradle-wrapper.properties Updates the Gradle wrapper distribution to 6.9.4.
local_tests/​java/​build.gradle Updates three AWS Lambda Java dependencies.

Review effort: Balanced

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants