Skip to content

Bump com.google.zxing:javase from 3.2.1 to 3.5.4 #12544

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump com.google.zxing:javase from 3.2.1 to 3.5.4 #12544

dependabot wants to merge 1 commit into from
+1 −1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 29, 2026

Bumps com.google.zxing:javase from 3.2.1 to 3.5.4.

Release notes

Sourced from com.google.zxing:javase's releases.

ZXing 3.5.4

What's Changed

Full Changelog: zxing/zxing@zxing-3.5.3...zxing-3.5.4

ZXing 3.5.3

What's Changed

New Contributors

Full Changelog: zxing/zxing@zxing-3.5.2...zxing-3.5.3

ZXing 3.5.2

ZXing 3.5.1

  • Various minor bug fixes, including more from oss-fuzz
  • Avoid very long detection of QR codes in two types of pathological cases
  • Don't fail QR code decoding if GB2312 not supported by JDK

See https://github.com/zxing/zxing/milestone/14?closed=1

ZXing 3.5.0

... (truncated)

Changelog

Sourced from com.google.zxing:javase's changelog.

0.1 (09 Nov 2007)

  • Initial release

0.1.1 (11 Nov 2007)

  • Fixed bug decoding version 0 QR Codes
  • Now default zoom is 2.5x in Java ME client

0.1.2 (28 Nov 2007)

  • Issue 11 fixed: Build problems on Windows
  • Can now build "ZXingReaderBasic" which does not require JSR-234
  • Issue 14 fixed: release .zip builds into one directory

0.1.3 (7 Dec 2007)

  • Unit test for QR Code decoding
  • Added EAN-13 support
  • Now builds with class file format version 1.2 -- may solve some compatibility issues?
  • Fixed obfuscation step bug causing NoClassDefFoundError

0.1.4 (13 Dec 2007)

  • Added Blackberry client build script -- does not yet work
  • Big change to handling of content of barcodes:
    • com.google.zxing.client.result moved from core-ext to core
    • Rewritten for J2ME
    • core-ext removed
    • J2ME client now uses this code for better parsing/handling of results

0.2 (07 Jan 2008)

  • Few small bug fixes in AlignmentPatternFinder, MultiFormatReader (thank K. Kakima, Andreas)
  • LCDUIImageMonochromeBitmapSource now public
  • Notably improved decoding for Basic version -- Regular version still your best bet if you can run it though

0.2.1 (16 Jan 2008)

  • Slight tweaks and enhancements to decode and runtime performance of UPCDecoder
  • Added black-box test suites against a known set of images (Thanks to Enrique G. S. for additional images)

0.2.2 (22 Jan 2008)

  • Now includes junit locally to build tests
  • Fixed "MIDlet" name in MANIFEST.MF, which may solve some problems
  • Friendlier error message when barcode can't be found

0.3 (04 Feb 2008)

  • Major refactoring of 1D barcode decoding
  • Added support for UPC-E, EAN-8
  • Also added Code 39, Code 128 support -- may need refinement
  • Now any "game" key triggers photo capture
  • Workaround implemented for Nokias that use "capture://image" in MMAPI
  • UPC codes now trigger lookup to upcdatabase.com

... (truncated)

Commits
  • f651b0a [maven-release-plugin] prepare release zxing-3.5.4
  • 6d66bd9 Restore 3.5.4-SNAPSHOT
  • c65c550 [maven-release-plugin] prepare release zxing-3.5.4
  • 00ff3cb Add new Sonatype repo
  • 4a16098 [maven-release-plugin] rollback the release of zxing-3.5.4
  • 7c58665 [maven-release-plugin] prepare for next development iteration
  • b36e149 [maven-release-plugin] prepare release zxing-3.5.4
  • 8536950 [maven-release-plugin] rollback the release of zxing-3.5.4
  • 1fe940f [maven-release-plugin] prepare release zxing-3.5.4
  • 6cf1062 Manually update secondary packages to 3.5.4. parent
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 29, 2026
@DaanHoogland
Copy link
Contributor

DaanHoogland commented Jan 29, 2026

@blueorangutan package

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 16617

@dependabot @DaanHoogland
Bump com.google.zxing:javase from 3.2.1 to 3.5.4
3f51760 
Bumps [com.google.zxing:javase](https://github.com/zxing/zxing) from 3.2.1 to 3.5.4.
- [Release notes](https://github.com/zxing/zxing/releases)
- [Changelog](https://github.com/zxing/zxing/blob/master/CHANGES)
- [Commits](zxing/zxing@zxing-3.2.1...zxing-3.5.4)

---
updated-dependencies:
- dependency-name: com.google.zxing:javase
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@DaanHoogland DaanHoogland force-pushed the dependabot/maven/com.google.zxing-javase-3.5.4 branch from 1099c7e to 3f51760 Compare January 29, 2026 10:33
@codecov
Copy link

codecov bot commented Jan 29, 2026 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 17.87%. Comparing base (a55f85a) to head (3f51760).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files 
@@             Coverage Diff              @@
##              main   #12544       +/-   ##
============================================
+ Coverage     3.57%   17.87%   +14.30%     
- Complexity       0    16059    +16059     
============================================
  Files          451     5934     +5483     
  Lines        38156   532088   +493932     
  Branches      7044    65065    +58021     
============================================
+ Hits          1363    95136    +93773     
- Misses       36627   426308   +389681     
- Partials       166    10644    +10478
Flag Coverage Δ
uitests 3.57% <ø> (ø)
unittests 18.98% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 29, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@DaanHoogland
Copy link
Contributor

DaanHoogland commented Jan 29, 2026

@blueorangutan package

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✔️ debian ✔️ suse15. SL-JID 16629

@DaanHoogland
Copy link
Contributor

DaanHoogland commented Jan 29, 2026

@blueorangutan test

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

@DaanHoogland a [SL] Trillian-Jenkins test job (ol8 mgmt + kvm-ol8) has been kicked to run smoke tests

@blueorangutan
Copy link

blueorangutan commented Jan 29, 2026

[SF] Trillian Build Failed (tid-15338)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

component:build dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@DaanHoogland @blueorangutan