Skip to content

chore(deps): bump javax.servlet:javax.servlet-api from 3.1.0 to 4.0.1 - #6475

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/javax.servlet-javax.servlet-api-4.0.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/javax.servlet-javax.servlet-api-4.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026 •

Copy link
Copy Markdown
Contributor

Bumps javax.servlet:javax.servlet-api from 3.1.0 to 4.0.1.

Commits
  • 5574e9b [maven-release-plugin] prepare release 4.0.1
  • 6430ada Update pom with latest copyright plugin version
  • 7265df0 Copyright changes. (#192)
  • 9a27193 [maven-release-plugin] prepare for next development iteration
  • ef2740a [maven-release-plugin] prepare release 4.0.0
  • 62e5c39 update the version to 4.0.0-SNAPSHOT
  • 10f86f3 Update Bundle-License MANIFEST.MF property
  • 779f324 fix typo in skip test
  • 8ecb128 Remove watermark, and add preposition where needed
  • 8c36bee Fix typo. Insert preposition "to" after "corresponding" as necessary.
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested review from a team and adinauer as code owners November 6, 2026 04:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file Java SDK labels Nov 6, 2026
@dependabot
dependabot Bot requested review from 0xadam-brown and runningcode and removed request for a team November 6, 2026 04:13
@sentry

sentry Bot commented Nov 6, 2026 •

Copy link
Copy Markdown

📲 Install Builds

Android

🔗 App Name App ID Version Configuration
SDK Size io.sentry.tests.size 8.64.0 (1) release

⚙️ sentry-android Build Distribution Settings

@runningcode

Copy link
Copy Markdown
Contributor

@adinauer could you take a look?

Bumps [javax.servlet:javax.servlet-api](https://github.com/javaee/servlet-spec) from 3.1.0 to 4.0.1.
- [Commits](javaee/servlet-spec@3.1.0...4.0.1)

---
updated-dependencies:
- dependency-name: javax.servlet:javax.servlet-api
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/javax.servlet-javax.servlet-api-4.0.1 branch from c08ccfc to c7d7307 Compare November 13, 2026 12:36

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit c7d7307. Configure here.

Comment thread gradle/libs.versions.toml
sentry-native-ndk = { module = "io.sentry:sentry-native-ndk", version = "0.17.6" }
sentry-native-ndk-outproc = { module = "io.sentry:sentry-native-ndk-outproc", version = "1.0.0-beta.1" }
servlet-api = { module = "javax.servlet:javax.servlet-api", version = "3.1.0" }
servlet-api = { module = "javax.servlet:javax.servlet-api", version = "4.0.1" }

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unintentional Servlet 4.0 SDK bump

Medium Severity

This Dependabot bump raises the SDK compile-time javax.servlet API from 3.1.0 to 4.0.1, duplicating sample-only servlet4-api. sentry-servlet and sentry-spring compile against servlet-api to stay compatible with Servlet 3.1; compiling against 4.0 previously allowed 4.0-only APIs that failed on 3.1 containers. Raising a supported framework version has no callout, and the bump is not an intentional matrix update.

Fix in Cursor Fix in Web

Triggered by project rule: PR Review Guidelines for Cursor Bugbot

Reviewed by Cursor Bugbot for commit c7d7307. Configure here.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Java SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant