[dependabot]

Bumps the all group with 7 updates:

Package	From	To
gradle-wrapper	9.8.1	9.8.2
org.commonmark:commonmark	0.30.1	0.31.0
org.flywaydb:flyway-database-postgresql	13.10.3	13.11.1
org.jetbrains.kotlinx:kotlinx-serialization-json	1.11.0	1.12.0
org.jetbrains.kotlinx:kotlinx-serialization-hocon	1.11.0	1.12.0
io.micrometer:micrometer-registry-prometheus	1.17.1	1.17.2
com.openai:openai-java	4.82.0	4.91.0

Updates gradle-wrapper from 9.8.1 to 9.8.2

Release notes

Sourced from gradle-wrapper's releases.

9.8.2

The Gradle team is excited to announce Gradle 9.8.2.

Here are the highlights of this release:

• Java 27 support
• Maven mirror settings reuse
• Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.2 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.2 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

Commits

• 8de7bcf Speed up the AllVersionsCrossVersion flaky quarantine (#39494)
• 66805db Run all cross-version targets in flaky quarantine
• cdd4c8f Skip empty test tasks in the flaky test quarantine
• 6badb77 Split the AllVersionsCrossVersion quarantine across agents
• 1655e44 Prepare for 9.8.2 (#39492)
• 6702214 Prepare for 9.8.2
• 688c0c1 Fix false warning about unstable graph (#39479)
• 3601d4f Clarify selector reuse comments in SelectorState
• 6e836fd Fix false warning about unstable graph
• a0790e5 Fix hidden artifact cleanup pattern in CheckProject (#39451)
• Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.30.1 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark's releases.

v0.31.0

Changed

• To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

• Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
• Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
• Make list loose for blank line after HTML block or indented code (#463)
• Allow info string of fenced code to start with the other fence character (#464)
• Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
• Fix quadratic runtime for parsing deeply nested image brackets

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.31.0] - 2026-10-22

Changed

• To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

• Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
• Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
• Make list loose for blank line after HTML block or indented code (#463)
• Allow info string of fenced code to start with the other fence character (#464)
• Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
• Fix quadratic runtime for parsing deeply nested image brackets

Commits

• 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
• b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
• 9ed1e0a Prepare CHANGELOG for version 0.31.0
• db9a549 Fix quadratic runtime for parsing deeply nested image brackets
• a78b400 Fix for large number of lines starting with block opening characters
• 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
• cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
• 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
• e4589e6 Merge pull request #465 from commonmark/issue-460
• 0982a26 Fix title/source spans for link reference definitions with unclosed titles
• Additional commits viewable in compare view

Updates org.flywaydb:flyway-database-postgresql from 13.10.3 to 13.11.1

Updates org.jetbrains.kotlinx:kotlinx-serialization-json from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

• Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#3195)
• Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-json's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see [#3261](Kotlin/kotlinx.serialization#3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

... (truncated)

Commits

• 4c28c3e 1.12.0 release (#3295)
• abe8a96 Merge remote-tracking branch 'origin/master' into dev
• 952d17a Added Gradle task to prepare release (#3279)
• 6f30025 Remove Play verification files (#3266)
• 89b23ca Workaround watchosArm32 removal (#3291)
• 53932a0 Update links to Okio site and its docs (#3292)
• 3a5db3b Reduce the number of input fields for bug report
• 9ede0e2 Added templates to the issue creation wizard
• 5d3f884 Update Dokka to version 2.3.0-Beta (#3286)
• 1fe9a49 Suppress deprecation of nodejs in wasmWasi configuration (#3287)
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-hocon from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-hocon's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

• Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#3195)
• Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-hocon's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see [#3261](Kotlin/kotlinx.serialization#3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

... (truncated)

Commits

• 4c28c3e 1.12.0 release (#3295)
• abe8a96 Merge remote-tracking branch 'origin/master' into dev
• 952d17a Added Gradle task to prepare release (#3279)
• 6f30025 Remove Play verification files (#3266)
• 89b23ca Workaround watchosArm32 removal (#3291)
• 53932a0 Update links to Okio site and its docs (#3292)
• 3a5db3b Reduce the number of input fields for bug report
• 9ede0e2 Added templates to the issue creation wizard
• 5d3f884 Update Dokka to version 2.3.0-Beta (#3286)
• 1fe9a49 Suppress deprecation of nodejs in wasmWasi configuration (#3287)
• Additional commits viewable in compare view

Updates org.jetbrains.kotlinx:kotlinx-serialization-hocon from 1.11.0 to 1.12.0

Release notes

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-hocon's releases.

v1.12.0

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see #3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

The others include:

• Encode unsigned integer types as positive integers (#3194) (thanks to Eyüp Can Akman)
• Correctly decode CborLabel values (#3195)
• Include actual tag info into CborDecodingException (#3197)

Protobuf improvements

Protocol buffers format received a big new feature: support for unknown fields. Using a new ProtoUnknownFieldHolder class, you can now decode and store unknown fields in Protobuf messages to retransmit them back later. See documentation updates and #2860 for details.

... (truncated)

Changelog

Sourced from org.jetbrains.kotlinx:kotlinx-serialization-hocon's changelog.

1.12.0 / 2026-10-19

This release is based on Kotlin 2.4.10 and contains all of the changes from 1.12.0-RC.

Additionally, it includes a fix removing unnecessary leading whitespaces from Proguard rules (#3270), and two changes stabilizing kotlin.uuid.Uuid serializer (#3263) and kotlin.time.Instant serializers (#3261).

For your convenience, the changelog for 1.12.0-RC is duplicated below:

API stabilization and deprecations

A big portion of the Json and Core APIs has been stabilized. Most important ones include: @KeepGeneratedSerializer and @SerialInfo annotations, JsonNamingStrategy, and ContextualSerializer. Additionally, various descriptor builders such as listDescriptor and JsonElementBuilder's addAll functions are also stable and can be freely used. There is also one deprecation: ChunkedDecoder interface. Since there is no demand for it, we plan to remove it in the future. See details in the #3238, #3239, and #3216.

Also, kotlin.time.Instant and kotlin.uuid.Uuid serializers are no longer annotated with experimental annotations from the Kotlin standard library (see [#3261](Kotlin/kotlinx.serialization#3261 and #3263)

Performance improvements

We also improved performance in various areas. ASCII-specific parser (#3225) brings performance of decoding from Okio and kotlinx-io sources closer to decoding performance from String. #3220 makes decoding significantly faster in case JsonElement present in your serializable classes. And #3248 should bring overall performance improvements (up to 30%) on large strings.

Exceptions rework

We continue to improve exception handling in Json encoders and decoders. #3235 makes a big change around custom serializers and @Serializable classes constructors: from now on, every exception thrown during deserialization is wrapped by decoder into a JsonException. This way, it is more predictable to write a catch and it is easier to understand what went wrong: JsonDecodingException also includes context information such as Json path and input. Besides that, #3246 limits maximum nesting depth of Json document, so you will get a proper JsonDecodingException instead of a random stack overflow error.

CBOR improvements

CBOR format also gets many improvements in this release. The most important one is memory optimization for definitely-sized collections (#3191, #3192).

... (truncated)

Commits

• 4c28c3e 1.12.0 release (#3295)
• abe8a96 Merge remote-tracking branch 'origin/master' into dev
• 952d17a Added Gradle task to prepare release (#3279)
• 6f30025 Remove Play verification files (#3266)
• 89b23ca Workaround watchosArm32 removal (#3291)
• 53932a0 Update links to Okio site and its docs (#3292)
• 3a5db3b Reduce the number of input fields for bug report
• 9ede0e2 Added templates to the issue creation wizard
• 5d3f884 Update Dokka to version 2.3.0-Beta (#3286)
• 1fe9a49 Suppress deprecation of nodejs in wasmWasi configuration (#3287)
• Additional commits viewable in compare view

Updates io.micrometer:micrometer-registry-prometheus from 1.17.1 to 1.17.2

Release notes

Sourced from io.micrometer:micrometer-registry-prometheus's releases.

1.17.2

🐞 Bug Fixes

• Preserve whitespace in HTTP Basic authentication passwords #8015
• Missing reflection hint for getProcessCpuTime #7911
• Proxy JMS session results using the method's declared return type #7896
• Kotlin interoperability for CaffeineCacheMetrics broken/requires unchecked cast to work #7582
• Registering/Updating a MultiGauge while a Prometheus scrape occurs can lead to DuplicateLabelsException #6851
• OTLP histogram bucket count does not equal count intermittently #6006
• Statsd UDP epoll warn logs are verbose when statsd is down #2624

📔 Documentation

• Fix typos in docs #8000
• Add docs for @MeterTag when used on a method #7829
• Document best practice about configuring registries on a composite #7367
• Documentation on SpelValueExpressionResolver is unclear #6465
• Document how to customize tags in micrometer-java11 HttpClient instrumentation #4962

🔨 Dependency Upgrades

• Bump io.netty:netty-bom from 4.2.18.Final to 4.2.19.Final #8042

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Gaurav1112, @​LindseyZ1205, @​bogdandrutu, @​pchesneau, @​cfcromn, @​schiemon, @​officialasishkumar, @​AzazelSensei, @​nick-montana, @​ghdtjdwn, @​ninadsutrave

Commits

• b52db89 Merge branch '1.16.x' into 1.17.x
• 3bf1fd5 Avoid logging a warning for every packet when the StatsD UDP server is down (...
• 801094f Merge branch '1.16.x' into 1.17.x
• 40aa268 Preserve whitespace in HTTP Basic authentication passwords (#8015)
• c61adef Bump org.apache.httpcomponents.client5:httpclient5 from 5.6.4 to 5.6.5 (#8068)
• 328e98f Resolve compiler warnings and deprecations on 1.17.x (#8055)
• d31e871 Merge branch '1.16.x' into 1.17.x
• 4835582 Exclude web fonts from generated documentation only for JDK 23+
• be2a0e4 Disable build cache in release train build action
• b196978 Upgrade github-actions-workflow-generator to 0.0.7
• Additional commits viewable in compare view

Updates com.openai:openai-java from 4.82.0 to 4.91.0

Release notes

Sourced from com.openai:openai-java's releases.

v4.91.0

4.91.0 (2026-10-23)

Features

• api: Breaking change in a minor release. Live Decisions question instructions() now returns an Instructions union containing a string or a list of text, image, or JSON parts. Code such as question.instructions().trim() no longer compiles; check instructions.isString() and use instructions.asString(), or handle instructions.asDecisionQuestionInputParts(). String inputs still work with instructions(String). Decisions request inputs also support additional message roles and tool-history items; update code that assumes a fixed set of input types. DecisionInputMessage.builder(), DecisionInputMessage.Type, and DecisionInputMessage.Content were removed. Build a role-specific message, wrap it with DecisionInputMessage.ofUser(...) for user messages, and pass it through DecisionInputItem.ofDecisionInputMessage(...). (f7607c8)

Chores

• api: align initial policy-pin review with active main (#1271) (1599b41)
• refresh custom-code enforcement tooling (#1270) (d865378)

Build System

• bump actions/download-artifact from 8.0.1 to 8.0.2 (#1232) (65bd9e4)

v4.90.0

4.90.0 (2026-10-22)

Features

• api: add voice deletion (#1263) (dcc7b18)

Performance Improvements

• reuse Kotlin compiler classloaders for in-process builds (#1266) (8e52b99)

Chores

• api: clarify service-account API key deletion (#1265) (c73a262)

Build System

• isolate authenticator changes from model compilation (#1264) (6ab4a33)

v4.89.0

4.89.0 (2026-10-21)

Features

• add Vertex AI support for the Responses API (#1256) (dc3546f)

... (truncated)

Changelog

Sourced from com.openai:openai-java's changelog.

4.91.0 (2026-10-23)

Features

• api: Breaking change in a minor release. Live Decisions question instructions() now returns an Instructions union containing a string or a list of text, image, or JSON parts. Code such as question.instructions().trim() no longer compiles; check instructions.isString() and use instructions.asString(), or handle instructions.asDecisionQuestionInputParts(). String inputs still work with instructions(String). Decisions request inputs also support additional message roles and tool-history items; update code that assumes a fixed set of input types. DecisionInputMessage.builder(), DecisionInputMessage.Type, and DecisionInputMessage.Content were removed. Build a role-specific message, wrap it with DecisionInputMessage.ofUser(...) for user messages, and pass it through DecisionInputItem.ofDecisionInputMessage(...). (f7607c8)

Chores

• api: align initial policy-pin review with active main (#1271) (1599b41)
• refresh custom-code enforcement tooling (#1270) (d865378)

Build System

• bump actions/download-artifact from 8.0.1 to 8.0.2 (#1232) (65bd9e4)

4.90.0 (2026-10-22)

Features

• api: add voice deletion (#1263) (dcc7b18)

Performance Improvements

• reuse Kotlin compiler classloaders for in-process builds (#1266) (8e52b99)

Chores

• api: clarify service-account API key deletion (#1265) (c73a262)

Build System

• isolate authenticator changes from model compilation (#1264) (6ab4a33)

4.89.0 (2026-10-21)

Features

• add Vertex AI support for the Responses API (#1256) (dc3546f)

Chores

... (truncated)

Commits

• 0ce5f3f release: 4.91.0 (#1269)
• f7607c8 feat(api): expand Decisions input and question types (#1268)
• 1599b41 chore(api): align initial policy-pin review with active main (#1271)
• d865378 chore: refresh custom-code enforcement tooling (#1270)
• 65bd9e4 build: bump actions/download-artifact from 8.0.1 to 8.0.2 (#1232)
• f0e7b0e test: allow accepted Decisions beta compatibility break (#1267)
• 679329f release: 4.90.0 (#1262)
• 8e52b99 perf: reuse Kotlin compiler classloaders for in-process builds (#1266)
• c73a262 chore(api): clarify service-account API key deletion (#1265)
• dcc7b18 feat(api): add voice deletion (#1263)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop D...

Description has been truncated