fix(deps): update dependency org.apache.ant:ant to v1.10.17#1051
fix(deps): update dependency org.apache.ant:ant to v1.10.17#1051elastic-renovate-prod[bot] wants to merge 1 commit intomainfrom
Conversation
📝 WalkthroughWalkthroughThe Apache Ant library dependency version was incremented from 1.10.16 to 1.10.17 in the ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@gradle/libs.versions.toml`:
- Line 79: Update the toml entry for the Ant dependency named "ant" to use
version 1.10.15 instead of 1.10.17 so it matches the Shadow plugin 9.4.1
dependency; locate the "ant" key in the libs.versions.toml and change its value
to "org.apache.ant:ant:1.10.15".
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: ed60642b-ecdb-4ac5-9d12-1820f7cb9e8d
📒 Files selected for processing (1)
gradle/libs.versions.toml
| muzzleGenerationPlugin = { group = "io.opentelemetry.instrumentation.muzzle-generation", name = "io.opentelemetry.instrumentation.muzzle-generation.gradle.plugin", version.ref = "opentelemetryJavaagentAlpha" } | ||
| # Ant should be kept in sync with the version used in the shadow plugin | ||
| ant = "org.apache.ant:ant:1.10.16" | ||
| ant = "org.apache.ant:ant:1.10.17" |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Verify shadow plugin 9.4.1's Ant dependency version
# Check shadow plugin's declared Ant dependency
curl -s https://repo1.maven.org/maven2/com/gradleup/shadow/shadow-gradle-plugin/9.4.1/shadow-gradle-plugin-9.4.1.pom | grep -A 2 "org.apache.ant"Repository: elastic/elastic-otel-java
Length of output: 176
🌐 Web query:
What version of Apache Ant does Gradle Shadow Plugin 9.4.1 depend on?
💡 Result:
Web search failed: Server error: no LLM provider could handle the message
🌐 Web query:
Does Apache Ant version 1.10.17 have any known security vulnerabilities or CVEs?
💡 Result:
No, Apache Ant version 1.10.17 does not have any known security vulnerabilities or CVEs. The official Apache Ant security reports page lists all fixed vulnerabilities up to the latest releases, with the most recent CVEs (CVE-2021-36373 and CVE-2021-36374) fixed in 1.10.11. No vulnerabilities are reported for versions 1.10.11 and later, including hypothetical 1.10.17. Note that as of 2026-04-10, the latest released version is 1.10.15 (August 2024), and version 1.10.17 does not appear to exist in official records.
Citations:
- 1: https://ant.apache.org/security.html
- 2: https://ant.apache.org/security
- 3: https://ant.apache.org/bindownload
- 4: https://ant.apache.org/antnews.html
Update Ant to 1.10.15 to match shadow plugin 9.4.1 dependency.
Ant 1.10.17 does not exist (latest release is 1.10.15). Shadow plugin 9.4.1 declares Ant 1.10.15 as its dependency. Line 78 requires Ant to stay in sync with the shadow plugin version, so update Ant to 1.10.15 instead.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@gradle/libs.versions.toml` at line 79, Update the toml entry for the Ant
dependency named "ant" to use version 1.10.15 instead of 1.10.17 so it matches
the Shadow plugin 9.4.1 dependency; locate the "ant" key in the
libs.versions.toml and change its value to "org.apache.ant:ant:1.10.15".
This PR contains the following updates:
1.10.16->1.10.17Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.