[dependabot]

Bumps the gradle-dependencies group with 5 updates:

Package	From	To
net.dv8tion:JDA	6.4.2	6.5.0
dev.arbjerg:lavaplayer	2.2.6	2.2.7
dev.lavalink.youtube:v2	1.18.1	1.18.2
com.fasterxml.jackson.core:jackson-databind	2.22.0	2.22.1
ch.qos.logback:logback-classic	1.5.37	1.6.1

Updates net.dv8tion:JDA from 6.4.2 to 6.5.0

Release notes

Sourced from net.dv8tion:JDA's releases.

v6.5.0 | Message Search API

Overview

This release adds support for the Message Search API, which allows bots to search messages in a guild. See Guild#searchMessages and MessageSearchAction for detailed documentation.

Example:

guild.searchMessages()
     .attachmentFilenames("cat.png")
     .includeAuthorTypes(MessageSearchAction.AuthorType.USER)
     .queue(response -> {
         if (response.isNotReady()) {
             int retryAfter = response.asNotReady().getRetryAfter();
             event.reply("The server is still indexing messages, try again later").queue();
             return;
         }
     List<Message> messages = response.asResults().getMessages();
     event.reply("Found %s messages of cats!".formatted(messages.size())).queue();
 });

Additionally, we made a minor change in the handling for received messages. For messages received in guilds JDA now handles events with missing member objects, which is necessary to handle messages that arrive shortly after a user is banned from the guild. These messages will contain members which are not added to cache and have no roles.

New Features

• Add message search by @​freya022 in discord-jda/JDA#3052
• Add attachment flags by @​MinnDevelopment in discord-jda/JDA#3109
• Add support for image descriptions in embeds by @​MinnDevelopment in discord-jda/JDA#310

Changes

• Handle messages received after ban by @​MinnDevelopment in discord-jda/JDA#3103

Full Changelog: discord-jda/JDA@v6.4.2...v6.5.0

Installation

Gradle

repositories {
    mavenCentral()
}
dependencies {
    implementation("net.dv8tion:JDA:6.5.0")
}

... (truncated)

Commits

• d89f24a Migrate to nmcp for publishing (#3122)
• 847c767 Bump version to 6.5.0 (#3121)
• 393a9f2 Update dependencies (#3120)
• e7dd4d8 Fix invalid code in snippet for EntitlementPaginationAction (#3119)
• e7ff18f Enable error on warn (#3118)
• abb303e Add message search (#3052)
• 66f9630 Bump the github-actions group with 2 updates (#3117)
• 5410b27 Handle messages received after ban (#3103)
• b980536 Add attachment flags (#3109)
• 8ea4e34 Update dependencies (#3111)
• Additional commits viewable in compare view

Updates dev.arbjerg:lavaplayer from 2.2.6 to 2.2.7

Release notes

Sourced from dev.arbjerg:lavaplayer's releases.

2.2.7

What's Changed

• Fixed Ogg playback position being set to 0 on seek in lavalink-devs/lavaplayer@94f9d57
• Fixed AAC per-frame decode errors being treated as fatal in lavalink-devs/lavaplayer#192
• Fixed MP4 probing of invalid files causing excessive CPU usage in lavalink-devs/lavaplayer#192
• Fixed the incorrect sha256Hash in TwitchAudioSourceManager in lavalink-devs/lavaplayer#190
• Changed the SoundCloudAudioSourceManager search prefix public in lavalink-devs/lavaplayer#188

Full Changelog: lavalink-devs/lavaplayer@2.2.6...2.2.7

Changelog

Sourced from dev.arbjerg:lavaplayer's changelog.

[2.2.7] -- 2026-07-03

• Fixed Ogg playback position being set to 0 on seek in lavalink-devs/lavaplayer@94f9d57
• Fixed AAC per-frame decode errors being treated as fatal in lavalink-devs/lavaplayer#192
• Fixed MP4 probing of invalid files causing excessive CPU usage in lavalink-devs/lavaplayer#192
• Fixed the incorrect sha256Hash in TwitchAudioSourceManager in lavalink-devs/lavaplayer#190
• Changed the SoundCloudAudioSourceManager search prefix public in lavalink-devs/lavaplayer#188

Commits

• 9431946 Update CHANGELOG
• 94f9d57 Fix Ogg playback position being set to 0 on seek
• 0c04302 Fix a few MP4 decoding/probing bugs (#192)
• d2e2949 fix: update twitch StreamMetadata persistedQuery sha256Hash (#190)
• 217f8dc Update SoundCloudAudioSourceManager.java (#188)
• See full diff in compare view

Updates dev.lavalink.youtube:v2 from 1.18.1 to 1.18.2

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1

Commits

• See full diff in compare view

Updates ch.qos.logback:logback-classic from 1.5.37 to 1.6.1

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.1

2026-07-28 Release of logback version 1.6.1

• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. .gz, .zip, .xz). Previously it used a nanotime-based .tmp suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)

• On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact.

• ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. This issue was reported in issues/1043 by seonwoo_jung who also provided the relevant PR.

• LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. This issue was reported in issues/1046 by seonwoo_jung who also provided the relevant PR.

• FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. This enhancement was contributed in [PR #1041](qos-ch/logback#1041) by seonwoo_jung.

• More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 57759f433000a133088ef0441038963134437fbd associated with the tag v_1.6.1. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

• See https://logback.qos.ch/news.html#1.6.1 for the original text.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 57759f4 prepare release 1.6.1
• 175f99f fix imports
• 4b8773e add compressionFailureLeavesOriginalFileIntact test for XZ compression
• cafaf11 do not delete original file if compression fails
• ee50125 let the temporary file before compression be target file without the .gz or ....
• 5626acc minor refactoring
• d97da4f minor refactoring
• 159c045 more defensive coding in SyslogOutputStream and in SyslogAppenderBase
• 9427d6b slight refactoring for clarity
• 79c4179 slight refactoring
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions