[dependabot]

Bumps the gradle-minor group with 3 updates: gradle-wrapper, at.yawk.lz4:lz4-java and org.ow2.asm:asm.

Updates gradle-wrapper from 9.8.1 to 9.8.2

Release notes

Sourced from gradle-wrapper's releases.

9.8.2

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits

• 8de7bcf Speed up the AllVersionsCrossVersion flaky quarantine (#39494)
• 66805db Run all cross-version targets in flaky quarantine
• cdd4c8f Skip empty test tasks in the flaky test quarantine
• 6badb77 Split the AllVersionsCrossVersion quarantine across agents
• 1655e44 Prepare for 9.8.2 (#39492)
• 6702214 Prepare for 9.8.2
• 688c0c1 Fix false warning about unstable graph (#39479)
• 3601d4f Clarify selector reuse comments in SelectorState
• 6e836fd Fix false warning about unstable graph
• a0790e5 Fix hidden artifact cleanup pattern in CheckProject (#39451)
• Additional commits viewable in compare view

Updates at.yawk.lz4:lz4-java from 1.12.0 to 1.12.1

Release notes

Sourced from at.yawk.lz4:lz4-java's releases.

lz4-java v1.12.1

Security release for GHSA-48mj-8f7c-7qfm.

What's Changed

• Update dependency me.qoomon:maven-git-versioning-extension to v9.12.3 by @​renovate[bot] in yawkat/lz4-java#152
• Update dependency maven to v3.10.0 by @​renovate[bot] in yawkat/lz4-java#153
• Update github/codeql-action action to v4.38.3 by @​renovate[bot] in yawkat/lz4-java#156
• Update dependency org.sonatype.central:central-publishing-maven-plugin to v0.12.0 by @​renovate[bot] in yawkat/lz4-java#159
• Update ossf/scorecard-action action to v2.5.0 by @​renovate[bot] in yawkat/lz4-java#158
• Update astral-sh/setup-uv action to v10.3.0 by @​renovate[bot] in yawkat/lz4-java#157
• Update actions/upload-artifact digest to cf430e0 by @​renovate[bot] in yawkat/lz4-java#155
• Update actions/setup-java action to v6 by @​renovate[bot] in yawkat/lz4-java#87
• Update actions/download-artifact digest to 9000827 by @​renovate[bot] in yawkat/lz4-java#154
• Throw LZ4Exception for input shorter than the length prefix by @​yawkat in yawkat/lz4-java#160
• Bound the compressed length of oversized LZ4 blocks by @​yawkat in yawkat/lz4-java#162
• Update github/codeql-action action to v4.39.0 by @​renovate[bot] in yawkat/lz4-java#163
• Use the buffer limit for the safe decompress(ByteBuffer, int, ByteBuffer, int) by @​yawkat in yawkat/lz4-java#161
• Allocate stream block buffers only as block data arrives by @​yawkat in yawkat/lz4-java#167
• Update astral-sh/setup-uv action to v10.3.1 by @​renovate[bot] in yawkat/lz4-java#166
• Update github/codeql-action action to v4.39.1 by @​renovate[bot] in yawkat/lz4-java#165
• Update dependency org.mvel:mvel2 to v2.6.0.Final by @​renovate[bot] in yawkat/lz4-java#164

Full Changelog: yawkat/lz4-java@v1.12.0...v1.12.1

Commits

• 3245a84 Update dependency org.mvel:mvel2 to v2.6.0.Final (#164)
• 26511f9 Update github/codeql-action action to v4.39.1 (#165)
• 625a848 Update astral-sh/setup-uv action to v10.3.1 (#166)
• e6bec4c Allocate stream block buffers only as block data arrives (#167)
• f46a762 Use the buffer limit for the safe decompress(ByteBuffer, int, ByteBuffer, int...
• ae0126b Update github/codeql-action action to v4.39.0 (#163)
• f83ee9c Bound the compressed length of oversized LZ4 blocks (#162)
• 096cb51 Throw LZ4Exception for input shorter than the length prefix (#160)
• bd09183 Update actions/download-artifact digest to 9000827 (#154)
• ce3c7a7 Update actions/setup-java action to v6 (#87)
• Additional commits viewable in compare view

Updates org.ow2.asm:asm from 9.11 to 9.11.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-26T00:58:04.668958Z	7be94bd	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[datadog-datadog-prod-us1-2]

More details

The completed static review identified no compatibility concern with the dependency updates. Build and runtime compatibility remain unverified because tests were not run and the specialist’s CI-status request returned HTTP 403.

Was this helpful? React 👍 or 👎

_{Open Bits AI session}

_{🤖 Bits Code Review · Commit 7be94bd}

[dd-octo-sts]

CI Test Results

Run: #40251678550 | Commit: 0389ef5 | Duration: 18m 50s (longest job)

✅ All 32 test jobs passed

Status Overview

JDK	glibc-aarch64/debug	glibc-amd64/debug	musl-aarch64/debug	musl-amd64/debug
8	-	✅	-	-
8-ibm	-	✅	-	-
8-j9	✅	✅	-	-
8-librca	-	-	✅	✅
8-orcl	-	✅	-	-
11	-	✅	-	-
11-j9	✅	✅	-	-
11-librca	-	-	✅	✅
17	✅	✅	-	-
17-graal	✅	✅	-	-
17-j9	✅	✅	-	-
17-librca	-	-	✅	✅
21	✅	✅	-	-
21-graal	✅	✅	-	-
21-librca	-	-	✅	✅
25	✅	✅	-	-
25-graal	✅	✅	-	-
25-librca	-	-	✅	✅

Legend: ✅ passed | ❌ failed | ⚪ skipped | 🚫 cancelled

Summary: Total: 32 | Passed: 32 | Failed: 0

---

Updated: 2026-10-26 01:26:34 UTC

[dd-octo-sts]

✅ All 40 integration tests passed

📊 Dashboard · 👷 Pipeline · 📦 7be94bda

[kaahos]

Backported to release/1.52._ via #906