Skip to content

Build(deps): bump io.github.classgraph:classgraph from 5.0.0 to 5.0.1 - #3330

Merged
FlowCryptRobot merged 2 commits into
masterfrom
dependabot/gradle/io.github.classgraph-classgraph-5.0.1
Nov 6, 2026
Merged

FlowCryptRobot merged 2 commits into
masterfrom
dependabot/gradle/io.github.classgraph-classgraph-5.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps io.github.classgraph:classgraph from 5.0.0 to 5.0.1.

Release notes

Sourced from io.github.classgraph:classgraph's releases.

ClassGraph 5.0.1

ClassGraph 5 is an interim release, only intended to support the use of ClassGraph on JDK 17 to 24. Upgrade to ClassGraph 6 as soon as you can run your code on JDK 25 or newer. ClassGraph 5.0.1 has the same changes as ClassGraph 6.0.1.

Changes since 5.0.0

  • A WAR that bundles ClassGraph now deploys on WildFly (#952). Each jar's Dependencies manifest header named the other ClassGraph libraries. WildFly requires every module named there to be installed in the server, so a WAR with the jars in WEB-INF/lib failed to deploy with ModuleNotFoundException. The header now lists only the JDK modules that each library requires. Nothing changes when ClassGraph is installed as WildFly server modules, since WildFly then takes the links between modules from module.xml.
  • New classgraph-bom bill of materials (#949). It pins the five ClassGraph artifacts to one version, for import into <dependencyManagement> or as a Gradle platform(). A project that depends on a single ClassGraph artifact already gets matching versions of the others, so the BOM is only needed by a project that depends directly on several ClassGraph artifacts, or whose other dependencies bring in a ClassGraph artifact at another version.
  • Kotlin now warns when code tries to modify a returned list (#948). The lists that ClassGraph returns were always unmodifiable, but Kotlin sees them as MutableList. Every mutator of the result lists is now @Deprecated, which Kotlin reports as a warning, and collection return types are annotated with JetBrains @Unmodifiable. reversed() on a result list now returns an unmodifiable copy: the default List.reversed() view silently returned false for some no-op mutations instead of throwing UnsupportedOperationException.
  • Faster direct annotation queries (#947, contributed by @​freya022). getDirectAnnotationInfo() and ClassInfo.getDirectAnnotations() no longer find all meta-annotations and inherited annotations first and then filter them out. The results and their order are unchanged.
  • The Javadoc was revised throughout for clarity.

Getting it

<dependency>
    <groupId>io.github.classgraph</groupId>
    <artifactId>classgraph</artifactId>
    <version>5.0.1</version>
</dependency>
Commits
  • 213499f [maven-release-plugin] prepare release classgraph-5.0.1
  • 5ed7608 Let a WAR that bundles the jars deploy on WildFly (#952)
  • b297569 Succinctness, clarity, and relevancy pass over all Javadoc
  • dcba751 Reject no-op mutations through reversed(); annotate the views (#948)
  • 7613d50 Deprecate the mutators of the result lists (#948)
  • 1580dee Fix the CI exports check, broken since #948
  • 016751b Add a classgraph-bom bill of materials (#949)
  • 3c25bbf Annotate collection return types with @​Unmodifiable (#948)
  • 4c6e62f Get direct annotations without finding meta-annotations (#947)
  • 751646b Assert that the copied class file exists in Issue420Test
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
io.github.classgraph:classgraph [>= 6.a, < 7]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 1, 2026
FlowCryptRobot
FlowCryptRobot previously approved these changes Nov 1, 2026
@FlowCryptRobot
FlowCryptRobot enabled auto-merge (squash) November 1, 2026 20:05
Bumps [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-5.0.0...classgraph-5.0.1)

---
updated-dependencies:
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/io.github.classgraph-classgraph-5.0.1 branch from 3a0ce5d to 8bcdb96 Compare November 5, 2026 14:11
@FlowCryptRobot
FlowCryptRobot merged commit e6918fa into master Nov 6, 2026
8 checks passed
@FlowCryptRobot
FlowCryptRobot deleted the dependabot/gradle/io.github.classgraph-classgraph-5.0.1 branch November 6, 2026 20:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants