From 86229b05731ae2022a9d859f7f68ab1a18295991 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 22:52:59 +0000
Subject: [PATCH] Bump the maven group across 3 directories with 5 updates

Bumps the maven group with 5 updates in the /java directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.guava:guava](https://github.com/google/guava) | `30.1.1-jre` | `32.0.0-jre` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.19.4` | `3.25.5` |
| commons-io:commons-io | `2.7` | `2.14.0` |
| [io.netty:netty-handler](https://github.com/netty/netty) | `4.1.72.Final` | `4.1.118.Final` |
| org.apache.logging.log4j:log4j-core | `2.17.1` | `2.25.3` |

Bumps the maven group with 5 updates in the /java/example directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.guava:guava](https://github.com/google/guava) | `30.1.1-jre` | `32.0.0-jre` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.19.4` | `3.25.5` |
| commons-io:commons-io | `2.7` | `2.14.0` |
| [io.netty:netty-handler](https://github.com/netty/netty) | `4.1.72.Final` | `4.1.118.Final` |
| org.apache.logging.log4j:log4j-core | `2.17.1` | `2.25.3` |

Bumps the maven group with 5 updates in the /java/jdbc directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.guava:guava](https://github.com/google/guava) | `30.1.1-jre` | `32.0.0-jre` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.19.4` | `3.25.5` |
| commons-io:commons-io | `2.7` | `2.14.0` |
| [io.netty:netty-handler](https://github.com/netty/netty) | `4.1.72.Final` | `4.1.118.Final` |
| org.apache.logging.log4j:log4j-core | `2.17.1` | `2.25.3` |



Updates `com.google.guava:guava` from 30.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.protobuf:protobuf-java` from 3.19.4 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.19.4...v3.25.5)

Updates `commons-io:commons-io` from 2.7 to 2.14.0

Updates `io.netty:netty-handler` from 4.1.72.Final to 4.1.118.Final
- [Commits](https://github.com/netty/netty/compare/netty-4.1.72.Final...netty-4.1.118.Final)

Updates `org.apache.logging.log4j:log4j-core` from 2.17.1 to 2.25.3

Updates `com.google.guava:guava` from 30.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.protobuf:protobuf-java` from 3.19.4 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.19.4...v3.25.5)

Updates `commons-io:commons-io` from 2.7 to 2.14.0

Updates `io.netty:netty-handler` from 4.1.72.Final to 4.1.118.Final
- [Commits](https://github.com/netty/netty/compare/netty-4.1.72.Final...netty-4.1.118.Final)

Updates `org.apache.logging.log4j:log4j-core` from 2.17.1 to 2.25.3

Updates `com.google.guava:guava` from 30.1.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.protobuf:protobuf-java` from 3.19.4 to 3.25.5
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/compare/v3.19.4...v3.25.5)

Updates `commons-io:commons-io` from 2.7 to 2.14.0

Updates `io.netty:netty-handler` from 4.1.72.Final to 4.1.118.Final
- [Commits](https://github.com/netty/netty/compare/netty-4.1.72.Final...netty-4.1.118.Final)

Updates `org.apache.logging.log4j:log4j-core` from 2.17.1 to 2.25.3

---
updated-dependencies:
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: io.netty:netty-handler
  dependency-version: 4.1.118.Final
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: io.netty:netty-handler
  dependency-version: 4.1.118.Final
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 3.25.5
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: io.netty:netty-handler
  dependency-version: 4.1.118.Final
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 java/pom.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/java/pom.xml b/java/pom.xml
index 0db16d2b375..29912e9a722 100644
--- a/java/pom.xml
+++ b/java/pom.xml
@@ -69,13 +69,13 @@
     <grpc.version>1.44.0</grpc.version>
     <!-- NOTE Netty handler and boring SSL must be kept compatible with grpc
       https://github.com/grpc/grpc-java/blob/master/SECURITY.md#netty -->
-    <netty.handler.version>4.1.72.Final</netty.handler.version>
+    <netty.handler.version>4.1.118.Final</netty.handler.version>
     <tcnative.boring.ssl.version>2.0.46.Final</tcnative.boring.ssl.version>
 
-    <protobuf.java.version>3.19.4</protobuf.java.version>
+    <protobuf.java.version>3.25.5</protobuf.java.version>
     <protobuf.protoc.version>3.19.4</protobuf.protoc.version>
     <checkstyle.plugin.version>3.0.0</checkstyle.plugin.version>
-    <log4j2.version>2.17.1</log4j2.version>
+    <log4j2.version>2.25.3</log4j2.version>
   </properties>
 
   <!-- Add new dependencies here and then add it below or in your module. -->
@@ -94,7 +94,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>30.1.1-jre</version>
+        <version>32.0.0-jre</version>
       </dependency>
       <dependency>
         <groupId>com.google.protobuf</groupId>
@@ -109,7 +109,7 @@
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.7</version>
+        <version>2.14.0</version>
       </dependency>
 
       <dependency>