Skip to content

Bump the gradle-dependencies group in /functional-tests with 3 updates - #140

Merged
chadlwilson merged 1 commit into
masterfrom
dependabot/gradle/functional-tests/gradle-dependencies-052efb2e36
Aug 2, 2026
Merged

Bump the gradle-dependencies group in /functional-tests with 3 updates#140
chadlwilson merged 1 commit into
masterfrom
dependabot/gradle/functional-tests/gradle-dependencies-052efb2e36

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-dependencies group in /functional-tests with 3 updates: org.htmlunit:htmlunit, org.json:json and org.gauge.

Updates org.htmlunit:htmlunit from 5.2.0 to 5.3.0

Release notes

Sourced from org.htmlunit:htmlunit's releases.

HtmlUnit 5.3.0

Highlights

  • Chrome/Edge 150
  • CanvasRenderingContext2D got major improvements
  • Update TransformerFactory and DocumentBuilderFactory configuration with FEATURE_SECURE_PROCESSING and restrict external DTD and stylesheet references to mitigate remote resource loading during XSLT transformation.
  • javadoc updated and links migrated from msdn to mdn
  • tons of small fixes and improvements

Please have a look at the full release notes for details about this release.

💕 Thank you to all who have contributed and to the sponsors (more sponsoring is welcome https://github.com/sponsors/rbri).

Full Changelog: HtmlUnit/htmlunit@5.2.0...5.3.0

Commits

Updates org.json:json from 20260522 to 20260719

Release notes

Sourced from org.json:json's releases.

20260719

Pull Request Description
#1069 pre-release-20260719 prep for next release
#1068 Max number length config for BigInteger and BigDecimal
#1067 bound BigDecimal→BigInteger expansion in objectToBigInteger (completes CVE-2026-59171 fix)
#1065 Fixes CVE-2026-59171
#1062 Refactor CDL row serialization for readability
#1061 Restore lenient jsonarray allow consecutive commas and insert null
#1058 Docs and warnings cleanup
Changelog

Sourced from org.json:json's changelog.

20260719 Fixes CVE-2026-59171 very large BigInteger, BigDecimal

Commits
  • 1795e8c Merge pull request #1069 from stleary/pre-release-20260719
  • da757c6 pre-release-20260719 oops forgot to update new unit tests for strict mode
  • d24bc9e pre-release-20260719 initial commit
  • 80efb52 Merge pull request #1068 from stleary/max-number-length-config
  • 9953b76 max-number-length-config sonarqube fixes
  • a28328c Merge pull request #1067 from mechko/1063-biginteger-exponent-dos
  • 703ac34 #1063: add JSONParserConfiguration overloads for getBigInteger/optBigInteger
  • e40d933 #1063: add comment to expected-exception catch block (SonarCloud java:S108)
  • fce83c9 #1063: bound BigDecimal->BigInteger expansion in objectToBigInteger
  • 90563eb 1063-option-3 parserConfig set max len
  • Additional commits viewable in compare view

Updates org.gauge from 3.0.0 to 3.1.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-dependencies group in /functional-tests with 3 updates: [org.htmlunit:htmlunit](https://github.com/HtmlUnit/htmlunit), [org.json:json](https://github.com/douglascrockford/JSON-java) and org.gauge.


Updates `org.htmlunit:htmlunit` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/HtmlUnit/htmlunit/releases)
- [Commits](HtmlUnit/htmlunit@5.2.0...5.3.0)

Updates `org.json:json` from 20260522 to 20260719
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2026052...2026071)

Updates `org.gauge` from 3.0.0 to 3.1.0

---
updated-dependencies:
- dependency-name: org.htmlunit:htmlunit
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.json:json
  dependency-version: '20260719'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-dependencies
- dependency-name: org.gauge
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 1, 2026
@chadlwilson
chadlwilson merged commit 0fd8ac9 into master Aug 2, 2026
6 checks passed
@chadlwilson
chadlwilson deleted the dependabot/gradle/functional-tests/gradle-dependencies-052efb2e36 branch August 2, 2026 05:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Development

Successfully merging this pull request may close these issues.

1 participant