Skip to content

fix(deps): update dependency org.apache.ant:ant to v1.10.17#1051

Open
elastic-renovate-prod[bot] wants to merge 1 commit intomainfrom
renovate/org.apache.ant-ant-1.x
Open

fix(deps): update dependency org.apache.ant:ant to v1.10.17#1051
elastic-renovate-prod[bot] wants to merge 1 commit intomainfrom
renovate/org.apache.ant-ant-1.x

Conversation

@elastic-renovate-prod
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
org.apache.ant:ant (source) dependencies patch 1.10.16 -> 1.10.17

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod bot added changelog:skip dependencies Pull requests that update a dependency file labels Apr 10, 2026
@elastic-renovate-prod elastic-renovate-prod bot requested a review from a team as a code owner April 10, 2026 16:26
@elastic-renovate-prod elastic-renovate-prod bot added dependencies Pull requests that update a dependency file changelog:skip labels Apr 10, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 10, 2026

📝 Walkthrough

Walkthrough

The Apache Ant library dependency version was incremented from 1.10.16 to 1.10.17 in the gradle/libs.versions.toml configuration file. This patch-level version update modifies the resolved dependency wherever the ant library is declared, affecting a single versioned library entry without changes to additional configuration or implementation code.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/org.apache.ant-ant-1.x
  • 🛠️ Update Documentation: Commit on current branch
  • 🛠️ Update Documentation: Create PR

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@gradle/libs.versions.toml`:
- Line 79: Update the toml entry for the Ant dependency named "ant" to use
version 1.10.15 instead of 1.10.17 so it matches the Shadow plugin 9.4.1
dependency; locate the "ant" key in the libs.versions.toml and change its value
to "org.apache.ant:ant:1.10.15".
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ed60642b-ecdb-4ac5-9d12-1820f7cb9e8d

📥 Commits

Reviewing files that changed from the base of the PR and between b100c12 and 982d64b.

📒 Files selected for processing (1)
  • gradle/libs.versions.toml

muzzleGenerationPlugin = { group = "io.opentelemetry.instrumentation.muzzle-generation", name = "io.opentelemetry.instrumentation.muzzle-generation.gradle.plugin", version.ref = "opentelemetryJavaagentAlpha" }
# Ant should be kept in sync with the version used in the shadow plugin
ant = "org.apache.ant:ant:1.10.16"
ant = "org.apache.ant:ant:1.10.17"
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify shadow plugin 9.4.1's Ant dependency version

# Check shadow plugin's declared Ant dependency
curl -s https://repo1.maven.org/maven2/com/gradleup/shadow/shadow-gradle-plugin/9.4.1/shadow-gradle-plugin-9.4.1.pom | grep -A 2 "org.apache.ant"

Repository: elastic/elastic-otel-java

Length of output: 176


🌐 Web query:

What version of Apache Ant does Gradle Shadow Plugin 9.4.1 depend on?

💡 Result:

Web search failed: Server error: no LLM provider could handle the message


🌐 Web query:

Does Apache Ant version 1.10.17 have any known security vulnerabilities or CVEs?

💡 Result:

No, Apache Ant version 1.10.17 does not have any known security vulnerabilities or CVEs. The official Apache Ant security reports page lists all fixed vulnerabilities up to the latest releases, with the most recent CVEs (CVE-2021-36373 and CVE-2021-36374) fixed in 1.10.11. No vulnerabilities are reported for versions 1.10.11 and later, including hypothetical 1.10.17. Note that as of 2026-04-10, the latest released version is 1.10.15 (August 2024), and version 1.10.17 does not appear to exist in official records.

Citations:


Update Ant to 1.10.15 to match shadow plugin 9.4.1 dependency.

Ant 1.10.17 does not exist (latest release is 1.10.15). Shadow plugin 9.4.1 declares Ant 1.10.15 as its dependency. Line 78 requires Ant to stay in sync with the shadow plugin version, so update Ant to 1.10.15 instead.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@gradle/libs.versions.toml` at line 79, Update the toml entry for the Ant
dependency named "ant" to use version 1.10.15 instead of 1.10.17 so it matches
the Shadow plugin 9.4.1 dependency; locate the "ant" key in the
libs.versions.toml and change its value to "org.apache.ant:ant:1.10.15".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

agent-java changelog:skip dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants