build: bump jvm in / by dependabot[bot] · Pull Request #1140 · openai/openai-java

dependabot · 2026-10-05T09:22:29Z

Bumps jvm in / from 2.2.21 to 2.4.21.

Updates jvm from 2.2.21 to 2.4.21

Release notes

Kotlin 2.4.21

Changelog

Backend. Wasm

KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class

KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

KT-89449 Kotlin/JS: Member names no longer minified in production

KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

KT-89285 SwiftPM import results in flooded log

KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script

KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls

KT-88458 Audit closeable resource usage

KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

Kotlin 2.4.21-RC

Changelog

Backend. Wasm

KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class

KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

KT-89449 Kotlin/JS: Member names no longer minified in production

KT-89363 KJS. Regular class with companion can't extend external class

... (truncated)

Changelog

Sourced from jvm's changelog.

2.4.21

Backend. Wasm

KT-89267 K/Wasm: calling a (T) -> R lambda with an argument that isn't a T traps instead of throwing ClassCastException

JVM. Reflection

KT-89280 NoSuchElementException in argumentsMakeSenseOnlyForMutableContainer for Java non-static inner class of generic outer class

KT-80710 Reflection: change KCallable representation to avoid dependency on K1

JavaScript

KT-89449 Kotlin/JS: Member names no longer minified in production

KT-89363 KJS. Regular class with companion can't extend external class

Tools. Compiler plugins. Serialization

KT-89275 Kotlin/Wasm: Invalid Wasm is emitted for a @Serializable generic class with a class upper bound

Tools. Gradle. Native

KT-89285 SwiftPM import results in flooded log

KT-86251 K/N: Flaky linkDebugTestLinuxX64 failure with "truncated or malformed archive" on libstdlib-cache.a

Tools. Scripts

KT-89247 Kotlin Script: NoClassDefFoundError on 2nd execution with transitive dependency from imported script

KT-89220 JSR-223: generic Java bindings break all subsequent eval() calls

KT-88458 Audit closeable resource usage

KT-88453 VirtualFileScriptSource.text leaks an unclosed file stream — script source file handle held until GC, blocks file deletion on Windows

2.4.20

Analysis API

KT-86546 Check suspicious when over ConeKotlinType in ConeTypeCompatibilityChecker

KT-85418 Implement an API for accessing deserialized file annotations in Analysis API

KT-74448 K2. False positive MISSING_DEPENDENCY_SUPERCLASS in LinkedListTest.kt, kotlinx.coroutines

KT-85856 containingSymbol of constructor property differs for local and non-local classes

KT-65417 K2 IDE: KTOR false positive expect-actual matching error on enum class because of implicit clone() in non-JVM source sets

Analysis API. Code Compilation

KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm

Analysis API. FIR

KT-70552 No expects for actual

... (truncated)

Commits

9180ce6 Add changelog for 2.4.21-RC
851077b [Serialization] Copy type parameter bounds onto generated serializers (#8421)
1b6b624 [Wasm]: Generate a Kotlin-level cast for bridged lambda functions. (#8404)
3c223c2 Rrr/2.4.20/core docs (#8322)
c681c2e [2.4.20] [KT-89285] Stop the xcodebuild logs being output by default (#8277)
f0645d1 [2.4.20] [JS] Reorder CompilerConfiguration properties initialization (#8282)
f507ecd [JS] Don't try to initialize an external class's companion object
c60d7d8 Reflection: fix NoSuchElementException in ConvertFromJava.kt
05d1cde REPL: render correct reflected binding type
5acec47 Scripting: store collected dependencies recursively
Additional commits viewable in compare view

openai-sdks · 2026-10-05T09:23:12Z

OkTest Summary

✅ 236/236 SDK tests passed in 13.454s for Java SDK PR #1140.

Test results — 42 files

Test	Result	Time
`tests/chat-completions-complex-body.test.ts`	✅ Passed	217ms
`tests/chat-completions-create.test.ts`	✅ Passed	619ms
`tests/chat-completions-stream.test.ts`	✅ Passed	392ms
`tests/files-content-binary.test.ts`	✅ Passed	236ms
`tests/files-create-multipart.test.ts`	✅ Passed	432ms
`tests/files-list-pagination.test.ts`	✅ Passed	363ms
`tests/initialize-config.test.ts`	✅ Passed	142ms
`tests/instance-isolation.test.ts`	✅ Passed	124ms
`tests/models-list.test.ts`	✅ Passed	240ms
`tests/responses-background-lifecycle.test.ts`	✅ Passed	625ms
`tests/responses-body-method-errors.test.ts`	✅ Passed	467ms
`tests/responses-cancel-timeout.test.ts`	✅ Passed	203ms
`tests/responses-cancel.test.ts`	✅ Passed	365ms
`tests/responses-compact-retries.test.ts`	✅ Passed	340ms
`tests/responses-compact.test.ts`	✅ Passed	184ms
`tests/responses-create-advanced-stream.test.ts`	✅ Passed	265ms
`tests/responses-create-advanced.test.ts`	✅ Passed	1.05s
`tests/responses-create-disconnect.test.ts`	✅ Passed	1.147s
`tests/responses-create-errors.test.ts`	✅ Passed	318ms
`tests/responses-create-malformed-api-responses.test.ts`	✅ Passed	692ms
`tests/responses-create-retries.test.ts`	✅ Passed	280ms
`tests/responses-create-stream-failures.test.ts`	✅ Passed	285ms
`tests/responses-create-stream-timeout.test.ts`	✅ Passed	210ms
`tests/responses-create-stream-wire.test.ts`	✅ Passed	4.297s
`tests/responses-create-stream.test.ts`	✅ Passed	437ms
`tests/responses-create-terminal-states.test.ts`	✅ Passed	362ms
`tests/responses-create-timeout.test.ts`	✅ Passed	253ms
`tests/responses-create.test.ts`	✅ Passed	248ms
`tests/responses-delete.test.ts`	✅ Passed	338ms
`tests/responses-input-items-errors.test.ts`	✅ Passed	256ms
`tests/responses-input-items-list.test.ts`	✅ Passed	242ms
`tests/responses-input-items-options.test.ts`	✅ Passed	170ms
`tests/responses-input-tokens-count-timeout.test.ts`	✅ Passed	278ms
`tests/responses-input-tokens-count.test.ts`	✅ Passed	349ms
`tests/responses-malformed-inputs.test.ts`	✅ Passed	3.457s
`tests/responses-not-found-errors.test.ts`	✅ Passed	368ms
`tests/responses-parse.test.ts`	✅ Passed	356ms
`tests/responses-retrieve-retries.test.ts`	✅ Passed	279ms
`tests/responses-retrieve.test.ts`	✅ Passed	401ms
`tests/responses-stored-method-errors.test.ts`	✅ Passed	928ms
`tests/retry-behavior.test.ts`	✅ Passed	3.352s
`tests/sdk-error-shape.test.ts`	✅ Passed	450ms

View OkTest run #38795499704

_{SDK merge (3e59e932ffa8) · head (a76728b1a59a) · base (0b3dcaaad10b) · OkTest (63b471b22245)}

github-actions · 2026-10-05T09:23:42Z

Castiron custom code

Evaluated main: 014f4a2dbb1f2b13655589fe83ba6ef5af4e18b5.

Trusted main policy: 014f4a2dbb1f2b13655589fe83ba6ef5af4e18b5.

✅ No new custom-code files detected.

0 mixed files remain; 0 existing customizations changed.

Compared 014f4a2dbb1f → a9c3184fc26a. Generated baselines verified.

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 40531012209 --repo openai/openai-java \
  --name castiron-custom-code-40531012209-1 --dir /tmp/castiron-custom-code-40531012209-1
git apply --stat /tmp/castiron-custom-code-40531012209-1/custom-code.patch
cat /tmp/castiron-custom-code-40531012209-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 014f4a2dbb1f2b13655589fe83ba6ef5af4e18b5 a9c3184fc26afd70b2cea3b11e752aca245aa53b
python3 scripts/castiron/custom_code_report.py report \
  --base 014f4a2dbb1f2b13655589fe83ba6ef5af4e18b5 \
  --head a9c3184fc26afd70b2cea3b11e752aca245aa53b --target-branch main --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-a9c3184fc26a
cat /tmp/castiron-custom-code-a9c3184fc26a/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1b187c784b

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-10-05T09:27:38Z

 plugins {
    `kotlin-dsl`
-    kotlin("jvm") version "2.2.21"
+    kotlin("jvm") version "2.4.20"


Upgrade the other Kotlin Gradle plugin declaration

Updating only the plugin-DSL version leaves implementation("org.jetbrains.kotlin:kotlin-gradle-plugin:2.2.21") in the buildSrc runtime classpath. The repository's security model identifies that plugin version as affected and explicitly requires upgrading both buildSrc Kotlin plugin declarations to a stable 2.4.20-or-later release (docs/architecture/security-model.md:119-126), so this change does not complete the intended remediation.

AGENTS.md reference: AGENTS.md:L34-L36

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-10-05T09:27:39Z

 plugins {
    `kotlin-dsl`
-    kotlin("jvm") version "2.2.21"
+    kotlin("jvm") version "2.4.20"


Preserve the configured Kotlin 1.8 language level

With Kotlin 2.4.20, every SDK module applying openai.kotlin will fail to compile because that convention sets languageVersion to KOTLIN_1_8 (buildSrc/src/main/kotlin/openai.kotlin.gradle.kts:35), and Kotlin 2.3+ rejects -language-version=1.8 as an error. Either retain a Kotlin Gradle plugin that supports the repository's current language contract or migrate that contract in a coordinated compatibility change. Kotlin compatibility guide

AGENTS.md reference: AGENTS.md:L34-L36

Useful? React with 👍 / 👎.

chatgpt-codex-connector · 2026-10-14T20:40:41Z

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-27T15:26:47.899882Z	`a9c3184`	New commits
🔒 Security Review	✅ Completed 2026-10-27T15:26:54.730746Z	`a9c3184`	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

Bumps [jvm](https://github.com/JetBrains/kotlin) in `/` from 2.2.21 to 2.4.21. Updates `jvm` from 2.2.21 to 2.4.21 - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v2.2.21...v2.4.21) --- updated-dependencies: - dependency-name: jvm dependency-version: 2.4.20 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: sdk-dependencies/jvm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 5, 2026

dependabot Bot requested a review from a team as a code owner October 5, 2026 09:22

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 5, 2026

chatgpt-codex-connector Bot reviewed Oct 5, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/gradle/gradle-69558dd875 branch from 1b187c7 to f82f4ea Compare October 14, 2026 20:40

dependabot Bot changed the title ~~build(deps): bump jvm in /~~ build: bump jvm in / Oct 15, 2026

dependabot Bot force-pushed the dependabot/gradle/gradle-69558dd875 branch from f82f4ea to a76728b Compare October 15, 2026 19:38

dependabot Bot force-pushed the dependabot/gradle/gradle-69558dd875 branch from a76728b to a9c3184 Compare October 27, 2026 15:25

Navigation Menu

Repository navigation

build: bump jvm in / - #1140

build: bump jvm in /#1140
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-69558dd875

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

Uh oh!

openai-sdks Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 5, 2026 •

edited

Loading

Uh oh!

chatgpt-codex-connector Bot left a comment

Uh oh!

chatgpt-codex-connector Bot Oct 5, 2026

Uh oh!

chatgpt-codex-connector Bot Oct 5, 2026

Uh oh!

chatgpt-codex-connector Bot commented Oct 14, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Kotlin 2.4.21

Changelog

Backend. Wasm

JVM. Reflection

JavaScript

Tools. Compiler plugins. Serialization

Tools. Gradle. Native

Tools. Scripts

Kotlin 2.4.21-RC

Changelog

Backend. Wasm

JVM. Reflection

JavaScript

2.4.21

Backend. Wasm

JVM. Reflection

JavaScript

Tools. Compiler plugins. Serialization

Tools. Gradle. Native

Tools. Scripts

2.4.20

Analysis API

Analysis API. Code Compilation

Analysis API. FIR

Uh oh!

openai-sdks Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

OkTest Summary

Uh oh!

github-actions Bot commented Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Castiron custom code

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Oct 5, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Oct 5, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot commented Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codex Review Summary

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

openai-sdks Bot commented Oct 5, 2026 •

edited

Loading

github-actions Bot commented Oct 5, 2026 •

edited

Loading

chatgpt-codex-connector Bot commented Oct 14, 2026 •

edited

Loading