ZXing/zxing.git, branch dependabot/github_actions/actions/setup-java-6

Bump actions/setup-java from 5 to 6

2026-08-31T06:52:37+00:00

Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5 to 6. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot]

Bump com.google.guava:guava from 33.6.0-android to 33.7.1-android (#2135)

2026-08-24T15:35:39+00:00

Bumps [com.google.guava:guava](https://github.com/google/guava) from 33.6.0-android to 33.7.1-android. - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) --- updated-dependencies: - dependency-name: com.google.guava:guava dependency-version: 33.7.1-android dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump spring.version from 7.0.7 to 7.0.9 (#2136)

2026-08-24T12:11:33+00:00

Bumps `spring.version` from 7.0.7 to 7.0.9. Updates `org.springframework:spring-test` from 7.0.7 to 7.0.9 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.9) Updates `org.springframework:spring-web` from 7.0.7 to 7.0.9 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.7...v7.0.9) --- updated-dependencies: - dependency-name: org.springframework:spring-test dependency-version: 7.0.9 dependency-type: direct:development update-type: version-update:semver-patch - dependency-name: org.springframework:spring-web dependency-version: 7.0.9 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#2127)

2026-07-28T13:28:45+00:00

Bumps [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 3.5.0 to 3.5.1. - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](https://github.com/apache/maven-jar-plugin/compare/maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fix PDF infinite loop (#2128)

2026-07-28T13:28:07+00:00

Port of https://github.com/zxing-cpp/zxing-cpp/pull/320

fix: upgrade http:// to https:// in README.md (#2119)

2026-07-18T14:04:22+00:00

reject bit matrix not matching layer count in aztec extractBits (#2117)

2026-07-12T00:40:42+00:00

Address Issue #2115, Aztec grid (#2116)

2026-07-09T14:08:11+00:00

reject non-positive datablock count in aztec correctBits (#2114)

2026-07-07T12:41:08+00:00

reject negative and overflowing crop in core LuminanceSource classes (#2112)

2026-06-26T15:50:33+00:00

the crop constructors in PlanarYUVLuminanceSource and GrayscaleLuminanceSource did not reject negative offsets or sizes and overflowed when checking left+width and top+height, letting an out-of-bounds crop reach getRow and getMatrix; validate the rectangle the same way as BufferedImageLuminanceSource.