➔ Kubernetes Java Client Keeps AWS SDK and Bazel in Sync
The kubernetes-client/java project, the Java client library for Kubernetes, had a small dependency refresh this week that is still worth reading if you ship it inside services. The headline change is an AWS SDK for Java 2 patch bump from 2.46.18 to 2.46.20, followed by a Bazel sync so Maven and Bazel builds resolve the same artifacts.
➔ Kubernetes Java Client Fixes Path Traversal in Copy Utility
The kubernetes-client/java project recently shipped a critical security fix to prevent path traversal when copying files from pods using a non-tar fallback mechanism. This update also brings better build consistency through Bazel dependency synchronization and several mandatory library bumps for security auditing.
➔ Selenium Trunk This Week: Bazel Test Gating, Grid Redis Bundle, and Atoms Migration
Selenium trunk took 71 commits in the past week. The activity falls into four themes plus a pile of smaller fixes: a build refactor that switches IE and Safari test gating to bazel’s target_compatible_with, a Grid default flip that bundles the Redis backed SessionMap, a cross language move of internal atoms to TypeScript, and a long stream of Ruby binding cleanups around pinned browsers. If you build Selenium from source or operate Selenium Grid, this week is worth a look. Full repo: SeleniumHQ/selenium on GitHub.
➔ OpenTofu Ships SSH and S3 Fixes while kubernetes-client/java Moves CI to Bazel
Quick scan of the last week in two open source repos: OpenTofu shipped real bugfixes plus a CLI argument refactor, while the kubernetes-client/java repo spent the week migrating its Java build from Maven to Bazel under a copilot bot.
➔ Bazel CI and Dependabot Sync in kubernetes-client/java This Week
The kubernetes-client/java repo had a busy seven days, with 24 commits and 28 files touched. Almost all of it is build and CI infrastructure: a new auto sync workflow that keeps MODULE.bazel aligned when Dependabot bumps pom.xml, a cross OS Bazel repository cache, and a stack of small fixes to make the Bazel pipeline behave the same on Linux, macOS, and Windows. If you ship the Java client into production or maintain a fork, this is the kind of week that quietly removes a class of merge headaches.