Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 11, 2025

Bumps org.apache.dubbo:dubbo-bom from 3.3.5 to 3.3.6.

Release notes

Sourced from org.apache.dubbo:dubbo-bom's releases.

dubbo-3.3.6

Highlights

Apache Dubbo 3.3.6 introduces several important enhancements and stability improvements. This release adds new reactive and routing features, strengthens HTTP/2 support, and enhances configuration and metrics capabilities. It also includes a range of bug fixes and dependency upgrades to improve overall reliability and security.


What's Changed

Feature

Bugfix

Code Enhancement

Dependency Upgrade

  • grpc.version: 1.72.0 → 1.73.0 (#15418, #15550)
  • protobuf-java: 3.25.5 → 3.25.8 (#15424)
  • netty4_version: 4.2.1.Final → 4.2.2.Final (#15443)
  • io.micrometer:micrometer-bom: 1.15.0 → 1.15.1 (#15462)
  • io.micrometer:micrometer-tracing-bom: 1.5.0 → 1.5.1 (#15461)

... (truncated)

Commits
  • f158588 Prepare 3.3.6 release (#15722)
  • aa3262f Add dubbo package to serialize allow list for SpringXmlConfigTest to avoid Il...
  • a7b641f [3.3] Optimize TriRpcStatus by adding http status code to its description (#1...
  • 2170f0f fix thread safety issue of ConsumerConfigurationListener (#15707)
  • 5c0bd7f fixed the issue that the file name of message.proto is not supported (#15655)
  • 8f2b4de End the 'read/write' combination operation early to improve performance (#15666)
  • f6b78d2 remove some not running test case. (#15654)
  • 8202597 Fix zookeeper download url (#15697)
  • bc543b6 Support method level TPS in DefaultTPSLimiter (#15679)
  • 956a47b Fixed flaky test: org.apache.dubbo.common.bytecode.WrapperTest.est_getMethodN...
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Dec 11, 2025
Bumps [org.apache.dubbo:dubbo-bom](https://github.com/apache/dubbo) from 3.3.5 to 3.3.6.
- [Release notes](https://github.com/apache/dubbo/releases)
- [Changelog](https://github.com/apache/dubbo/blob/3.3/CHANGES.md)
- [Commits](apache/dubbo@dubbo-3.3.5...dubbo-3.3.6)

---
updated-dependencies:
- dependency-name: org.apache.dubbo:dubbo-bom
  dependency-version: 3.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/org.apache.dubbo-dubbo-bom-3.3.6 branch from 7366f68 to f408641 Compare December 17, 2025 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant