From 7227724caaf0dc529aa6142f5357e693c7898412 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 May 2026 05:26:05 +0000 Subject: [PATCH 1/2] Bump org.testcontainers:testcontainers-bom from 1.20.4 to 2.0.5 Bumps [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) from 1.20.4 to 2.0.5. - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](https://github.com/testcontainers/testcontainers-java/compare/1.20.4...2.0.5) --- updated-dependencies: - dependency-name: org.testcontainers:testcontainers-bom dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index cf86bf7..b621530 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -38,7 +38,7 @@ dependencies { testImplementation("org.assertj:assertj-core:3.27.7") testRuntimeOnly("org.slf4j:slf4j-simple:2.0.18") - "integrationTestImplementation"(platform("org.testcontainers:testcontainers-bom:1.20.4")) + "integrationTestImplementation"(platform("org.testcontainers:testcontainers-bom:2.0.5")) "integrationTestImplementation"("org.testcontainers:junit-jupiter") "integrationTestImplementation"("org.testcontainers:postgresql") "integrationTestImplementation"("org.testcontainers:mysql") From 87b0cfc405f01e4168ad7bd9ae80c88254a7cd62 Mon Sep 17 00:00:00 2001 From: Richard Wooding Date: Sat, 23 May 2026 07:27:55 +0200 Subject: [PATCH 2/2] Adopt testcontainers 2.0 artifact prefix and drop now-unneeded commons-compress override MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Testcontainers 2.0 renamed every module artifactId to add a `testcontainers-` prefix (e.g. `org.testcontainers:postgresql` → `org.testcontainers:testcontainers-postgresql`). Without this rename Gradle resolves the dependencies to an empty version because the 2.0 BOM only manages the new artifact IDs. The commons-compress 1.28.0 override is dropped because testcontainers-core 2.0.5 already pulls the patched 1.28.0 directly, so the constraint is redundant. Container imports (`org.testcontainers.containers.PostgreSQLContainer`, etc.) remain valid — 2.0.5 keeps backward-compat classes in the old packages. Co-Authored-By: Claude Opus 4.7 (1M context) --- build.gradle.kts | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/build.gradle.kts b/build.gradle.kts index b621530..11ce682 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -39,19 +39,13 @@ dependencies { testRuntimeOnly("org.slf4j:slf4j-simple:2.0.18") "integrationTestImplementation"(platform("org.testcontainers:testcontainers-bom:2.0.5")) - "integrationTestImplementation"("org.testcontainers:junit-jupiter") - "integrationTestImplementation"("org.testcontainers:postgresql") - "integrationTestImplementation"("org.testcontainers:mysql") + "integrationTestImplementation"("org.testcontainers:testcontainers-junit-jupiter") + "integrationTestImplementation"("org.testcontainers:testcontainers-postgresql") + "integrationTestImplementation"("org.testcontainers:testcontainers-mysql") "integrationTestImplementation"("org.postgresql:postgresql:42.7.11") "integrationTestImplementation"("com.mysql:mysql-connector-j:9.7.0") "integrationTestImplementation"("org.xerial:sqlite-jdbc:3.53.1.0") "integrationTestImplementation"("org.duckdb:duckdb_jdbc:1.5.2.1") - - constraints { - "integrationTestImplementation"("org.apache.commons:commons-compress:1.28.0") { - because("CVE-2024-25710 / CVE-2024-26308 — testcontainers 1.20.4 pulls 1.24.0; patched in 1.26.0") - } - } } tasks.test {