Skip to content

Bump the identity-libraries group across 1 directory with 3 updates - #1890

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/identity-libraries-d6187572d9
Open

Bump the identity-libraries group across 1 directory with 3 updates#1890
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/identity-libraries-d6187572d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the identity-libraries group with 3 updates in the / directory: software.amazon.msk:aws-msk-iam-auth, com.azure:azure-identity and com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler.

Updates software.amazon.msk:aws-msk-iam-auth from 2.3.0 to 2.3.7

Release notes

Sourced from software.amazon.msk:aws-msk-iam-auth's releases.

2.3.7

Upgrade AWS SDK BOM to 2.44.12 to address Netty CVEs (CVE-2026-42581, CVE-2026-33870, and 9 others)

2.3.6

What's New

  • Configurable Signing Region: New awsMskRegionProvider JAAS config parameter for custom region resolution when broker hostnames don't contain region info (e.g., custom DNS/Route53 endpoints)
  • Route53RegionProvider: Built-in provider that resolves region via DNS TXT record lookup
  • Fix: Use public SignerConstant API path

2.3.5

  • Upgrade AWS SDK version to address CVE-2025-58056 and CVE-2025-58057
  • Updated dependencies to address build issues. It's now recommended to build the package using Gradle 8.0+ and JDK 17+.

2.3.4

  • Skip credential providers chain
  • Upgrade AWS SDK version

2.3.3

  • Upgrade AWS SDK version

2.3.2

  • Fix unreleased file lock issue in Gradle
  • Enable FIPS endpoint support

2.3.1

  • Upgrade Jackson Databind version
Commits
  • 8ffb503 Merge pull request #243 from aws/fix/bump-sdk-bom-netty-cve
  • cee34d8 fix: Bump AWS SDK BOM to 2.44.12 to resolve Netty CVEs (v2.3.7)
  • 3258f32 Merge pull request #241 from aws/release_2.3.6
  • df40102 fix: use public SignerConstant API path
  • 830716d Revert "Merge pull request #240 from aws/revert-238-feat/custom-region-provider"
  • e5795df Merge pull request #240 from aws/revert-238-feat/custom-region-provider
  • b6e3095 Revert "Feat/custom region provider"
  • 1db5478 Merge pull request #238 from bdesert/feat/custom-region-provider
  • b3e1cde docs update
  • d11c5d0 refresh interval for region provider
  • Additional commits viewable in compare view

Updates com.azure:azure-identity from 1.15.4 to 1.18.4

Commits
  • 0df233b Updating SDK dependencies for azure-identity-broker
  • cd57fce Updating the SDK dependencies for azure-identity
  • e6db36e Reset changes to the patch version.
  • 71680b8 Added auth and CFS step to partner release pipeline (#49452)
  • df3114f [Automation] Generate SDK based on TypeSpec 0.45.3 (#49467)
  • c995ad5 Increment package versions for cloudhealth releases (#49462)
  • 4b547c9 Validate iss and aud claims on AAD/B2C OIDC login ID token decoders (#49423)
  • ff8a3bf eng, remove code generation for swagger/autorest (#49438)
  • 3bc83be Update helper function to print nested exception details. (#49447)
  • 4f8efdd Update the skills in tools repo to match specs repo (#49444)
  • Additional commits viewable in compare view

Updates com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler from 1.0.5 to 1.0.6

Release notes

Sourced from com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler's releases.

v1.0.6-java

What's Changed

New Contributors

Full Changelog: googleapis/managedkafka@v1.0.5...v1.0.6

Commits
  • 8f1dd1c upgrade: Update version with the release of 1.0.6 (#39)
  • 9f549f6 Feat: Add ErrorMessage class for Schema Registry client. (#38)
  • 226eae9 fix: Change GcpBearerAuthCredentalProvider alias (#35)
  • 7204e3c feat: Add segmentio/kafka-go Mechanism implementation for SASL/Plain with GCP...
  • See full diff in compare view

@dependabot dependabot Bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Jun 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 22, 2026 09:05
@kapybro kapybro Bot added status/triage/manual Manual triage in progress and removed status/triage/manual Manual triage in progress labels Jun 22, 2026
@dependabot dependabot Bot changed the title Bump the identity-libraries group with 3 updates Bump the identity-libraries group across 1 directory with 3 updates Jun 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/identity-libraries-d6187572d9 branch 2 times, most recently from 890cae5 to ac59789 Compare July 6, 2026 09:05
@dependabot
dependabot Bot force-pushed the dependabot/gradle/identity-libraries-d6187572d9 branch from ac59789 to 9d95559 Compare July 13, 2026 09:06
Bumps the identity-libraries group with 3 updates in the / directory: [software.amazon.msk:aws-msk-iam-auth](https://github.com/aws/aws-msk-iam-auth), [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) and [com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler](https://github.com/googleapis/managedkafka).


Updates `software.amazon.msk:aws-msk-iam-auth` from 2.3.0 to 2.3.7
- [Release notes](https://github.com/aws/aws-msk-iam-auth/releases)
- [Commits](aws/aws-msk-iam-auth@v2.3.0...v2.3.7)

Updates `com.azure:azure-identity` from 1.15.4 to 1.18.4
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-identity_1.15.4...com.azure+azure-identity_1.18.4)

Updates `com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/googleapis/managedkafka/releases)
- [Commits](googleapis/managedkafka@v1.0.5...v1.0.6)

---
updated-dependencies:
- dependency-name: com.azure:azure-identity
  dependency-version: 1.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: identity-libraries
- dependency-name: com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: identity-libraries
- dependency-name: software.amazon.msk:aws-msk-iam-auth
  dependency-version: 2.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: identity-libraries
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/identity-libraries-d6187572d9 branch from 9d95559 to 8824a47 Compare August 3, 2026 09:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants