[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.velocitypowered:velocity-api (source)	4.3.0 → 4.3.1
com.konghq:unirest-modules-gson	4.11.2 → 4.11.4
com.konghq:unirest-java-core	4.11.2 → 4.11.4
software.amazon.awssdk:s3	2.57.3 → 2.57.11
com.github.oshi:oshi-core-ffm	7.7.2 → 7.7.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

PaperMC/Velocity (com.velocitypowered:velocity-api)

v4.3.1: Velocity v4.3.1

What's Changed

• Improve buffer handling for legacy plugin messages and rejected packets

This release improves the handling of invalid packets and is a recommended security update for all users.

Full Changelog: PaperMC/Velocity@v4.3.0...v4.3.1
Download: papermc.io/downloads/velocity

Kong/unirest-java (com.konghq:unirest-modules-gson)

v4.11.4

• reject TLS config changes once the client is built

v4.11.3

• include the body in the cache calculation. Does not include files or streams.
• reject cookie domains that only share a suffix with the request host

oshi/oshi (com.github.oshi:oshi-core-ffm)

v7.7.3

New Features

• #​3745: The FFM implementation now reads NetBSD natively, through sysctl, getloadavg, _lwp_self and getrlimit, where it previously ran commands and parsed their output - @​dbwiddis.
• #​3709,
  #​3757: Display.getCurrentMode() returns the mode a display is driven in: its logical and pixel resolution, refresh rate, rotation, and position on the desktop. Display.isBuiltIn() reports whether it is a built-in panel, and Display.isPrimary() whether it is the primary display. All three are available on Windows, macOS, and on Linux and the other UNIX platforms through X11 - @​ayonization, @​dbwiddis.

Bug Fixes and Improvements

• #​3723: Windows Sensors now reads CPU temperature, fan speed and voltage from the ROOT\LibreHardwareMonitor WMI namespace when the LibreHardwareMonitor application is running, in addition to the ROOT\OpenHardwareMonitor namespace it already read. Users running the maintained LibreHardwareMonitor previously got its GPU metrics but no CPU sensor data - @​dbwiddis.
• #​3727: The oshi.os.windows.ohm.disabled and oshi.os.windows.lhm.disabled configuration properties now skip the Open Hardware Monitor and Libre Hardware Monitor WMI namespaces, which OSHI otherwise queries on each sensor read until one returns data. The latter also covers GPU metrics - @​dbwiddis.
• #​3730: Fixed Sensors.getCpuVoltage() on Windows when using the voltage published by Open Hardware Monitor or LibreHardwareMonitor - @​dbwiddis.
• #​3742: NetworkParams.getRoutes() on NetBSD now reads the routing table from the kernel where the JNA native library is available - @​dbwiddis.
• #​3743: Fixed three HWDiskStore faults on NetBSD: read and write byte totals that could decrease between readings, a doubled getTransferTime(), and a 1-byte disk or 512-byte partition size where the size is unknown, which also affected OpenBSD - @​dbwiddis.
• #​3744: Fixed OSProcess naming on NetBSD: getPath() and getName() were truncated to seven characters, and where the kernel withholds a process's arguments, getCommandLine() returned ps's (command) placeholder and getName() kept its parentheses - @​dbwiddis.
• #​3754: OperatingSystem.getProcessId() and getThreadId() return 0 when the ID is unknown on every platform. On NetBSD without JNA, getThreadId() returned a Java thread ID, and on failure some implementations returned -1, which led getCurrentProcess() to return an arbitrary process on the BSDs, Solaris and AIX. getProcess() with a negative PID now returns null on Solaris and AIX - @​dbwiddis.
• #​3763: Standardizes connection reporting from InternetProtocolStats.getConnections() on the UNIX platforms. It now includes listening and unconnected sockets, as on Linux, and returns connections on Solaris, where it returned none. A tcp6 or udp6 connection to an IPv4 peer now has a 16-byte IPv4-mapped address rather than a 4-byte one - @​dbwiddis.
• #​3771: Fixed Firmware.getManufacturer() on Linux, which never read the BIOS vendor from sysfs - @​dbwiddis.
• #​3774: LogicalVolumeGroup.getPhysicalVolumes() on Linux now runs pvs through the oshi.os.linux.privileged.prefix when pvs is in oshi.os.linux.privileged.allowlist, so physical volumes that hold no logical volume can be listed without running the application as root - @​dbwiddis.
• #​3777: Fixed the heap corruption behind intermittent JVM crashes on Solaris and illumos - @​dbwiddis.
• #​3781: Sensors.getCpuTemperature() now returns a 0.0 sentinel on all platforms when the temperature is unavailable. FreeBSD previously returned NaN - @​dbwiddis.
• #​3776,
  #​3782: Fixed intermittent JVM crashes on Solaris (illumos), OpenBSD and DragonFly BSD when libcups is not installed - @​dbwiddis.
• #​3785: Fixed DragonFly BSD reporting 0 total swap, and the FFM implementation failing every sysctl read there - @​dbwiddis.
• #​3785,
  #​3795,
  #​3800,
  #​3801,
  #​3803,
  #​3822,
  #​3831: Fixed the TCP and UDP statistics from InternetProtocolStats on Linux, macOS, AIX, FreeBSD, OpenBSD, NetBSD and DragonFly BSD, where many counters were read from the wrong field or at the wrong width. Counters a platform does not keep now report 0, including IPv6 UDP on FreeBSD and macOS, and connection failures and UDP receive errors on AIX - @​dbwiddis.
• #​3787,
  #​3816: ComputerSystem, Firmware and Baseboard now report SMBIOS values without root on FreeBSD and DragonFly BSD, and at all on NetBSD, where every value was unknown; NetBSD's serial numbers and UUID still need root. Firmware.getReleaseDate() is no longer garbled on any platform when the firmware does not write the date as MM/DD/YYYY - @​dbwiddis.
• #​3788,
  #​3807,
  #​3814,
  #​3824: Fixed NetworkIF on the BSDs: traffic statistics were 0 on OpenBSD and DragonFly BSD, and on NetBSD for interfaces without a link-level address, and getSpeed() was always 0 on FreeBSD, OpenBSD and NetBSD. NetworkParams now reports DragonFly BSD's default gateways and reads NetBSD's routing table from the kernel - @​dbwiddis.
• #​3789,
  #​3792,
  #​3799,
  #​3812,
  #​3818: Fixed CentralProcessor on FreeBSD, NetBSD and DragonFly BSD, which miscounted cores, packages or logical processors and left identification and caches unknown, and on NetBSD ARM threw a StackOverflowError. AMD processors of family 16 and later now get the right family on OpenBSD and the right ProcessorID where OSHI builds one. FreeBSD context switch and interrupt counts no longer wrap at 2^32 - @​dbwiddis.
• #​3791,
  #​3798,
  #​3819,
  #​3833: Fixed getDiskStores() on the BSDs: DragonFly BSD returned no disks, FreeBSD listed each disk as a partition of the next, and NetBSD listed each wedge as a separate disk. Partitions now sit under their disk with their mount points, and on OpenBSD and NetBSD without root they no longer include another disk's or misread their size when BLOCKSIZE is set - @​dbwiddis.
• #​3793,
  #​3810,
  #​3817,
  #​3821,
  #​3827,
  #​3829,
  #​3832: Fixed OSProcess on the BSDs. getPath() now returns the executable's full path from the kernel on FreeBSD and NetBSD, as does getCurrentWorkingDirectory() on NetBSD. DragonFly BSD now reports bitness and affinity, FreeBSD other processes' open-file limits, and NetBSD every thread of a process and only real descriptors in getOpenFiles(). getServices() skips rcorder placeholders - @​dbwiddis.
• #​3797,
  #​3805,
  #​3826: Fixed getPowerSources() on FreeBSD and DragonFly BSD, which reported a battery on machines with none and only one of several, with units and signs now matching other platforms; getGraphicsCards() on current FreeBSD, which reported the wrong vendor and no device ID; and getUsbDevices() on FreeBSD, which was empty - @​dbwiddis.
• #​3808,
  #​3820,
  #​3823,
  #​3825: Fixed FileSystem and OSFileStore on the BSDs. getMaxFileDescriptorsPerProcess() returns the per-process limit, NetBSD's getOpenFileDescriptors() is no longer 0, FreeBSD's getUUID() is found for every volume, and mount points with spaces and NetBSD and OpenBSD inode counts are read correctly - @​dbwiddis.
• #​3837: Reject IPv6 address text with a dotted IPv4 component before compressed zero groups - @​PHJ2000.
• #​3843: HWDiskStore.getDiskType() on Windows now reports SSD, HDD, Removable or Virtual, read from the storage driver and falling back to MSFT_PhysicalDisk - @​dbwiddis.
• #​3848: Fixed listing processes on DragonFly BSD, which could panic the kernel since 7.7.2. OSProcess.getPath() there now reads the full path from the kernel for the current process only, and argv[0] or the command name for others - @​dbwiddis.
• #​3852: Fixed IPv4 and IPv6 addresses reported byte-reversed on big-endian Linux, such as s390x, in NetworkParams.getRoutes() and InternetProtocolStats.getConnections() - @​dbwiddis.
• #​3853: NetworkParams.getIpv4DefaultGateway() and getIpv6DefaultGateway() on Linux now read the kernel routing table, so they no longer return an empty string when the route command is missing or not on the PATH - @​dbwiddis.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Test Results

 56 files  ±0   56 suites  ±0   3m 39s ⏱️ -8s
572 tests ±0  572 ✅ ±0  0 💤 ±0  0 ❌ ±0 
939 runs  ±0  939 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 46ff58a. ± Comparison against base commit 978357f.

This pull request removes 32 and adds 32 tests. Note that renamed tests count towards both.

eu.cloudnetservice.driver.impl.document.DocumentSerialisationTest ‑ [4] {"b":1,"s":2,"i":3,"l":4,"f":5.0,"d":6.0,"c":"/","string":"Hello, World!","bol":true,"cloud":["Ben?","Yes","No","HoHoHoHo"],"world":{"this":"is","insane":"!","hello":"world"}}, PRETTY
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [14] 2026-11-04
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [23] 17:48:58.361272578
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [28] 17:48:58.361359349Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [29] 17:48:58.361373751Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [30] 17:48:58.361379730+05:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [31] 17:48:58.361408203-03:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [34] 2026-11-04T17:48:58.367019947
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [39] 2026-11-04T17:48:58.367158526Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [4] 2026-11-04T17:48:58.351970858Z
…

eu.cloudnetservice.driver.impl.document.DocumentSerialisationTest ‑ [4] {"b":1,"s":2,"i":3,"l":4,"f":5.0,"d":6.0,"c":"/","string":"Hello, World!","bol":true,"cloud":["Ben?","Yes","No","HoHoHoHo"],"world":{"this":"is","hello":"world","insane":"!"}}, PRETTY
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [14] 2026-11-07
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [23] 19:22:28.027502142
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [28] 19:22:28.027610763Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [29] 19:22:28.027631532Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [30] 19:22:28.027640248+05:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [31] 19:22:28.027661037-03:00
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [34] 2026-11-07T19:22:28.027782362
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [39] 2026-11-07T19:22:28.027915008Z
eu.cloudnetservice.driver.impl.document.gson.JavaTimeSerializerTest ‑ [4] 2026-11-07T19:22:28.017983542Z
…

♻️ This comment has been updated with latest results.