From cd6caeda00262b2558815ae22cfc726c0638122a Mon Sep 17 00:00:00 2001
From: HKWinterhalter <HansWinterhalter@gmail.com>
Date: Mon, 17 Mar 2025 14:58:32 -0700
Subject: [PATCH 01/22] chore: remove all assignees from blunderbuss.yml (#329)

---
 .github/blunderbuss.yml | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/.github/blunderbuss.yml b/.github/blunderbuss.yml
index dcd61b31..8b137891 100644
--- a/.github/blunderbuss.yml
+++ b/.github/blunderbuss.yml
@@ -1,12 +1 @@
-assign_prs:
-  - HKwinterhalter
-  - dixuswe
-  - janell-chen
-  - mayv
 
-assign_issues:
-  - HKwinterhalter
-  - dixuswe
-  - janell-chen
-  - mayv
-  

From d979b7dc86b348721546a81b454868ef2ca51852 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Fri, 3 Oct 2025 18:22:44 -0700
Subject: [PATCH 02/22] chore: update java version for java formatter (#336)

---
 .github/workflows/lint.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index ab57ead9..bda7755d 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -46,7 +46,7 @@ jobs:
       - name: Set up JDK
         uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
-          java-version: 17.x
+          java-version: 21.x
           distribution: temurin
       - name: Run formatter
         id: formatter

From 49f60f86dfa883f80a316a1fd09177edf1cb1b46 Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot@renovateapp.com>
Date: Sat, 4 Oct 2025 02:29:37 +0100
Subject: [PATCH 03/22] chore(deps): update actions/setup-go action to v6
 (#335)

Co-authored-by: Andras Kerekes <akerekes@users.noreply.github.com>
---
 .github/workflows/conformance.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 82e50d85..81fe0f31 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -39,7 +39,7 @@ jobs:
         distribution: temurin
 
     - name: Setup Go
-      uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
+      uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
         go-version: '1.21'
 

From 15be91d8d6503a45e32eaf501cbdae195a814562 Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot@renovateapp.com>
Date: Sat, 4 Oct 2025 02:34:37 +0100
Subject: [PATCH 04/22] chore(deps): update actions/checkout action to v5
 (#334)

Co-authored-by: Andras Kerekes <akerekes@users.noreply.github.com>
---
 .github/workflows/codeql.yml       | 2 +-
 .github/workflows/conformance.yaml | 2 +-
 .github/workflows/lint.yaml        | 4 ++--
 .github/workflows/scorecard.yml    | 2 +-
 .github/workflows/unit.yaml        | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c28404fd..5ff23715 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -42,7 +42,7 @@ jobs:
           uploads.github.com:443
           
     - name: Checkout repository
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 81fe0f31..33d05f71 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -30,7 +30,7 @@ jobs:
           repo.maven.apache.org:443
           storage.googleapis.com:443
 
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
     - name: Set up JDK ${{ matrix.java }}
       uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index bda7755d..6f445acf 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -20,7 +20,7 @@ jobs:
         allowed-endpoints: >
           github.com:443
           repo.maven.apache.org:443
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Set up JDK
       uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:
@@ -42,7 +42,7 @@ jobs:
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 # v2 minimum required
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # v2 minimum required
       - name: Set up JDK
         uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
         with:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 752afbf3..11679d87 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -45,7 +45,7 @@ jobs:
             *.github.com:443
           
       - name: "Checkout code"
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/unit.yaml b/.github/workflows/unit.yaml
index 01522215..6781915c 100644
--- a/.github/workflows/unit.yaml
+++ b/.github/workflows/unit.yaml
@@ -28,7 +28,7 @@ jobs:
           repo.maven.apache.org:443
           api.adoptium.net:443
           *.githubusercontent.com:443
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Set up JDK ${{ matrix.java }}
       uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
       with:

From 1d42e96b97bd3b14123d2e60b093a06502dbc3d2 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 6 Oct 2025 10:26:51 -0700
Subject: [PATCH 05/22] chore: add release-assets.githubusercontent.com to
 allowed sites for harden runner (#337)

---
 .github/workflows/codeql.yml    | 9 ++++-----
 .github/workflows/scorecard.yml | 2 +-
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5ff23715..134120d7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -14,7 +14,7 @@ jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
-    
+
     permissions:
       actions: read
       contents: read
@@ -22,7 +22,7 @@ jobs:
 
     strategy:
       fail-fast: false
-      matrix: 
+      matrix:
         # Autobuild each of these seperate maven projects
         working-directory: ['invoker', 'functions-framework-api', 'function-maven-plugin']
 
@@ -37,10 +37,11 @@ jobs:
           github.com:443
           objects.githubusercontent.com:443
           proxy.golang.org:443
+          release-assets.githubusercontent.com:443
           repo.maven.apache.org:443
           storage.googleapis.com:443
           uploads.github.com:443
-          
+
     - name: Checkout repository
       uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
@@ -57,8 +58,6 @@ jobs:
         # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
         # queries: security-extended,security-and-quality
 
-
-    
     - name: Build
       run: |
         (cd functions-framework-api/ && mvn install)
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 11679d87..80ffb070 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -43,7 +43,7 @@ jobs:
             www.bestpractices.dev:443
             *.sigstore.dev:443
             *.github.com:443
-          
+
       - name: "Checkout code"
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:

From 177f1d92e41f6db3596dffb19e66dcf941e02819 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 6 Oct 2025 11:14:00 -0700
Subject: [PATCH 06/22] chore: add release-assets.githubusercontent.com to
 allowed sites for harden runner (#338)

* chore: add release-assets.githubusercontent.com to allowed sites for harden runner

* chore: add release-assets.githubusercontent.com to allowed sites for harden runner
---
 .github/workflows/conformance.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 33d05f71..21745f56 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -27,6 +27,7 @@ jobs:
           github.com:443
           objects.githubusercontent.com:443
           proxy.golang.org:443
+          release-assets.githubusercontent.com:443
           repo.maven.apache.org:443
           storage.googleapis.com:443
 
@@ -94,4 +95,4 @@ jobs:
         useBuildpacks: false
         validateConcurrency: true
         cmd: "'mvn -f invoker/conformance/pom.xml function:run -Drun.functionTarget=com.google.cloud.functions.conformance.ConcurrentHttpConformanceFunction'"
-        startDelay: 10
\ No newline at end of file
+        startDelay: 10

From 88e3f96fdc7edc854a032807120b6268a36e63be Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot@renovateapp.com>
Date: Mon, 6 Oct 2025 19:22:00 +0100
Subject: [PATCH 07/22] chore(deps): update all non-major dependencies (#331)

Co-authored-by: Andras Kerekes <akerekes@users.noreply.github.com>
---
 .github/workflows/codeql.yml       |  6 +++---
 .github/workflows/conformance.yaml |  6 +++---
 .github/workflows/lint.yaml        |  8 ++++----
 .github/workflows/scorecard.yml    |  6 +++---
 .github/workflows/unit.yaml        |  4 ++--
 function-maven-plugin/pom.xml      | 12 ++++++------
 functions-framework-api/pom.xml    |  6 +++---
 invoker/conformance/pom.xml        |  2 +-
 invoker/core/pom.xml               | 16 ++++++++--------
 invoker/pom.xml                    |  4 ++--
 invoker/testfunction/pom.xml       |  4 ++--
 11 files changed, 37 insertions(+), 37 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 134120d7..32d7e54e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -28,7 +28,7 @@ jobs:
 
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
+      uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
       with:
         disable-sudo: true
         egress-policy: block
@@ -47,7 +47,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+      uses: github/codeql-action/init@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
       with:
         # Learn more about CodeQL language support at https://aka.ms/codeql-docs/language-support
         languages: java
@@ -65,6 +65,6 @@ jobs:
         (cd function-maven-plugin && mvn install)
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+      uses: github/codeql-action/analyze@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
       with:
         category: ${{ matrix.working-directory }}
diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 21745f56..88e5d8d9 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -18,7 +18,7 @@ jobs:
         ]
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
+      uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
       with:
         disable-sudo: true
         egress-policy: block
@@ -34,7 +34,7 @@ jobs:
     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
       with:
         java-version: ${{ matrix.java }}
         distribution: temurin
@@ -42,7 +42,7 @@ jobs:
     - name: Setup Go
       uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
       with:
-        go-version: '1.21'
+        go-version: '1.25'
 
     - name: Build API with Maven
       run: (cd functions-framework-api/ && mvn install)
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 6f445acf..6cc5a37b 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
+      uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
       with:
         disable-sudo: true
         egress-policy: block
@@ -22,7 +22,7 @@ jobs:
           repo.maven.apache.org:443
     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Set up JDK
-      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
       with:
         java-version: 11.x
         distribution: temurin
@@ -38,13 +38,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 # v2 minimum required
       - name: Set up JDK
-        uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
           java-version: 21.x
           distribution: temurin
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 80ffb070..a6b8e986 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
+        uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
         with:
           disable-sudo: true
           egress-policy: block
@@ -50,7 +50,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -62,6 +62,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/upload-sarif@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/unit.yaml b/.github/workflows/unit.yaml
index 6781915c..2826605a 100644
--- a/.github/workflows/unit.yaml
+++ b/.github/workflows/unit.yaml
@@ -19,7 +19,7 @@ jobs:
         ]
     steps:
     - name: Harden Runner
-      uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
+      uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
       with:
         disable-sudo: true
         egress-policy: block
@@ -30,7 +30,7 @@ jobs:
           *.githubusercontent.com:443
     - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Set up JDK ${{ matrix.java }}
-      uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # v4.7.0
+      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
       with:
         java-version: ${{ matrix.java }}
         distribution: temurin
diff --git a/function-maven-plugin/pom.xml b/function-maven-plugin/pom.xml
index 76de071a..4ddebd00 100644
--- a/function-maven-plugin/pom.xml
+++ b/function-maven-plugin/pom.xml
@@ -41,12 +41,12 @@
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-plugin-api</artifactId>
-      <version>3.9.9</version>
+      <version>3.9.11</version>
     </dependency>
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-core</artifactId>
-      <version>3.9.9</version>
+      <version>3.9.11</version>
     </dependency>
     <dependency>
       <groupId>org.apache.maven.plugin-tools</groupId>
@@ -58,7 +58,7 @@
     <dependency>
       <groupId>com.google.cloud.functions.invoker</groupId>
       <artifactId>java-function-invoker</artifactId>
-      <version>1.4.0</version>
+      <version>1.4.1</version>
     </dependency>
 
     <dependency>
@@ -71,7 +71,7 @@
     <dependency>
       <groupId>com.google.truth</groupId>
       <artifactId>truth</artifactId>
-      <version>1.4.4</version>
+      <version>1.4.5</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -132,7 +132,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-javadoc-plugin</artifactId>
-            <version>3.11.2</version>
+            <version>3.12.0</version>
             <executions>
               <execution>
                 <id>attach-javadocs</id>
@@ -145,7 +145,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
-            <version>3.2.7</version>
+            <version>3.2.8</version>
             <executions>
               <execution>
                 <id>sign-artifacts</id>
diff --git a/functions-framework-api/pom.xml b/functions-framework-api/pom.xml
index 438f2898..3d6226c7 100644
--- a/functions-framework-api/pom.xml
+++ b/functions-framework-api/pom.xml
@@ -28,8 +28,8 @@
 
   <properties>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-    <maven-compiler-plugin.version>3.14.0</maven-compiler-plugin.version>
-    <maven-javadoc-plugin.version>3.11.2</maven-javadoc-plugin.version>
+    <maven-compiler-plugin.version>3.14.1</maven-compiler-plugin.version>
+    <maven-javadoc-plugin.version>3.12.0</maven-javadoc-plugin.version>
     <junit.jupiter.version>5.3.2</junit.jupiter.version>
   </properties>
 
@@ -177,7 +177,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
-            <version>3.2.7</version>
+            <version>3.2.8</version>
             <executions>
               <execution>
                 <id>sign-artifacts</id>
diff --git a/invoker/conformance/pom.xml b/invoker/conformance/pom.xml
index 61ef6c47..9b008ae9 100644
--- a/invoker/conformance/pom.xml
+++ b/invoker/conformance/pom.xml
@@ -33,7 +33,7 @@
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.12.1</version>
+      <version>2.13.2</version>
     </dependency>
     <dependency>
       <groupId>io.cloudevents</groupId>
diff --git a/invoker/core/pom.xml b/invoker/core/pom.xml
index dc17c779..45d9ceda 100644
--- a/invoker/core/pom.xml
+++ b/invoker/core/pom.xml
@@ -69,7 +69,7 @@
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.12.1</version>
+      <version>2.13.2</version>
     </dependency>
     <dependency>
       <groupId>com.ryanharter.auto.value</groupId>
@@ -98,12 +98,12 @@
     <dependency>
       <groupId>org.eclipse.jetty</groupId>
       <artifactId>jetty-servlet</artifactId>
-      <version>9.4.57.v20241219</version>
+      <version>9.4.58.v20250814</version>
     </dependency>
     <dependency>
       <groupId>org.eclipse.jetty</groupId>
       <artifactId>jetty-server</artifactId>
-      <version>9.4.57.v20241219</version>
+      <version>9.4.58.v20250814</version>
     </dependency>
     <dependency>
       <groupId>com.beust</groupId>
@@ -122,7 +122,7 @@
     <dependency>
       <groupId>org.mockito</groupId>
       <artifactId>mockito-core</artifactId>
-      <version>5.16.0</version>
+      <version>5.20.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -139,19 +139,19 @@
     <dependency>
       <groupId>com.google.truth</groupId>
       <artifactId>truth</artifactId>
-      <version>1.4.4</version>
+      <version>1.4.5</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>com.google.truth.extensions</groupId>
       <artifactId>truth-java8-extension</artifactId>
-      <version>1.4.4</version>
+      <version>1.4.5</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.eclipse.jetty</groupId>
       <artifactId>jetty-client</artifactId>
-      <version>9.4.57.v20241219</version>
+      <version>9.4.58.v20250814</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
@@ -174,7 +174,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-shade-plugin</artifactId>
-        <version>3.6.0</version>
+        <version>3.6.1</version>
         <executions>
           <execution>
             <phase>package</phase>
diff --git a/invoker/pom.xml b/invoker/pom.xml
index f5a92d6e..c7db44cb 100644
--- a/invoker/pom.xml
+++ b/invoker/pom.xml
@@ -80,7 +80,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-javadoc-plugin</artifactId>
-            <version>3.11.2</version>
+            <version>3.12.0</version>
             <executions>
               <execution>
                 <id>attach-javadocs</id>
@@ -93,7 +93,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
-            <version>3.2.7</version>
+            <version>3.2.8</version>
             <executions>
               <execution>
                 <id>sign-artifacts</id>
diff --git a/invoker/testfunction/pom.xml b/invoker/testfunction/pom.xml
index 00f65f19..b6a18a5f 100644
--- a/invoker/testfunction/pom.xml
+++ b/invoker/testfunction/pom.xml
@@ -31,12 +31,12 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>33.4.0-jre</version>
+      <version>33.5.0-jre</version>
     </dependency>
     <dependency>
       <groupId>com.google.code.gson</groupId>
       <artifactId>gson</artifactId>
-      <version>2.12.1</version>
+      <version>2.13.2</version>
     </dependency>
   </dependencies>
 

From b2f7ed083338e24681214745b002d34ecce32a6b Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot@renovateapp.com>
Date: Mon, 6 Oct 2025 21:23:24 +0100
Subject: [PATCH 08/22] chore(deps): update
 googlecloudplatform/functions-framework-conformance digest to 6ae50bd (#325)

Co-authored-by: Andras Kerekes <akerekes@users.noreply.github.com>
---
 .github/workflows/conformance.yaml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/conformance.yaml b/.github/workflows/conformance.yaml
index 88e5d8d9..9b03a3c6 100644
--- a/.github/workflows/conformance.yaml
+++ b/.github/workflows/conformance.yaml
@@ -54,7 +54,7 @@ jobs:
       run: (cd function-maven-plugin/ && mvn install)
 
     - name: Run HTTP conformance tests
-      uses: GoogleCloudPlatform/functions-framework-conformance/action@1041a97e93a463d9efb17dda821f3ddc0bf0024f # main
+      uses: GoogleCloudPlatform/functions-framework-conformance/action@6ae50bd9db5ed980c5ceff3cf7b200f705be94fc # main
       with:
         functionType: 'http'
         useBuildpacks: false
@@ -62,7 +62,7 @@ jobs:
         startDelay: 10
 
     - name: Run Typed conformance tests
-      uses: GoogleCloudPlatform/functions-framework-conformance/action@1041a97e93a463d9efb17dda821f3ddc0bf0024f # main
+      uses: GoogleCloudPlatform/functions-framework-conformance/action@6ae50bd9db5ed980c5ceff3cf7b200f705be94fc # main
       with:
         functionType: 'http'
         declarativeType: 'typed'
@@ -71,7 +71,7 @@ jobs:
         startDelay: 10
 
     - name: Run background event conformance tests
-      uses: GoogleCloudPlatform/functions-framework-conformance/action@1041a97e93a463d9efb17dda821f3ddc0bf0024f # main
+      uses: GoogleCloudPlatform/functions-framework-conformance/action@6ae50bd9db5ed980c5ceff3cf7b200f705be94fc # main
       with:
         functionType: 'legacyevent'
         useBuildpacks: false
@@ -80,7 +80,7 @@ jobs:
         startDelay: 10
 
     - name: Run cloudevent conformance tests
-      uses: GoogleCloudPlatform/functions-framework-conformance/action@1041a97e93a463d9efb17dda821f3ddc0bf0024f # main
+      uses: GoogleCloudPlatform/functions-framework-conformance/action@6ae50bd9db5ed980c5ceff3cf7b200f705be94fc # main
       with:
         functionType: 'cloudevent'
         useBuildpacks: false
@@ -89,7 +89,7 @@ jobs:
         startDelay: 10
 
     - name: Run HTTP concurrency conformance tests
-      uses: GoogleCloudPlatform/functions-framework-conformance/action@1041a97e93a463d9efb17dda821f3ddc0bf0024f # main
+      uses: GoogleCloudPlatform/functions-framework-conformance/action@6ae50bd9db5ed980c5ceff3cf7b200f705be94fc # main
       with:
         functionType: 'http'
         useBuildpacks: false

From e4d8e677043bac5f0310f4a6744bf9caa36410f0 Mon Sep 17 00:00:00 2001
From: "release-please[bot]"
 <55107282+release-please[bot]@users.noreply.github.com>
Date: Mon, 6 Oct 2025 13:47:11 -0700
Subject: [PATCH 09/22] chore(main): release java-function-invoker
 1.4.2-SNAPSHOT (#328)

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
---
 invoker/conformance/pom.xml  | 4 ++--
 invoker/core/pom.xml         | 6 +++---
 invoker/pom.xml              | 2 +-
 invoker/testfunction/pom.xml | 4 ++--
 4 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/invoker/conformance/pom.xml b/invoker/conformance/pom.xml
index 9b008ae9..f882d4ad 100644
--- a/invoker/conformance/pom.xml
+++ b/invoker/conformance/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <artifactId>java-function-invoker-parent</artifactId>
     <groupId>com.google.cloud.functions.invoker</groupId>
-    <version>1.4.1</version>
+    <version>1.4.2-SNAPSHOT</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>conformance</artifactId>
-  <version>1.4.1</version>
+  <version>1.4.2-SNAPSHOT</version>
 
   <name>GCF Confromance Tests</name>
   <description>
diff --git a/invoker/core/pom.xml b/invoker/core/pom.xml
index 45d9ceda..28eaf73d 100644
--- a/invoker/core/pom.xml
+++ b/invoker/core/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <groupId>com.google.cloud.functions.invoker</groupId>
     <artifactId>java-function-invoker-parent</artifactId>
-    <version>1.4.1</version>
+    <version>1.4.2-SNAPSHOT</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker</artifactId>
-  <version>1.4.1</version>
+  <version>1.4.2-SNAPSHOT</version>
   <name>GCF Java Invoker</name>
   <description>
     Application that invokes a GCF Java function. This application is a
@@ -115,7 +115,7 @@
     <dependency>
       <groupId>com.google.cloud.functions.invoker</groupId>
       <artifactId>java-function-invoker-testfunction</artifactId>
-      <version>1.4.1</version>
+      <version>1.4.2-SNAPSHOT</version>
       <type>test-jar</type>
       <scope>test</scope>
     </dependency>
diff --git a/invoker/pom.xml b/invoker/pom.xml
index c7db44cb..0800eb37 100644
--- a/invoker/pom.xml
+++ b/invoker/pom.xml
@@ -8,7 +8,7 @@
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker-parent</artifactId>
-  <version>1.4.1</version>
+  <version>1.4.2-SNAPSHOT</version>
   <packaging>pom</packaging>
   <name>GCF Java Invoker Parent</name>
   <description>
diff --git a/invoker/testfunction/pom.xml b/invoker/testfunction/pom.xml
index b6a18a5f..78df65aa 100644
--- a/invoker/testfunction/pom.xml
+++ b/invoker/testfunction/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <groupId>com.google.cloud.functions.invoker</groupId>
     <artifactId>java-function-invoker-parent</artifactId>
-    <version>1.4.1</version>
+    <version>1.4.2-SNAPSHOT</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker-testfunction</artifactId>
-  <version>1.4.1</version>
+  <version>1.4.2-SNAPSHOT</version>
   <name>Example GCF Function Jar</name>
   <description>
     An example of a GCF function packaged into a jar. We use this in tests.

From 420327967b96b4aa66c0edd6753a9d6db781478d Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Tue, 7 Oct 2025 15:27:48 -0700
Subject: [PATCH 10/22] fix: add autovalue plugin config to
 invoker/core/pom.xml to fix local development (#339)

---
 invoker/core/pom.xml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/invoker/core/pom.xml b/invoker/core/pom.xml
index 28eaf73d..06dccab1 100644
--- a/invoker/core/pom.xml
+++ b/invoker/core/pom.xml
@@ -158,6 +158,24 @@
 
   <build>
     <plugins>
+     <plugin>
+       <artifactId>maven-compiler-plugin</artifactId>
+       <version>3.14.1</version>
+      <configuration>
+        <annotationProcessorPaths>
+          <path>
+            <groupId>com.google.auto.value</groupId>
+            <artifactId>auto-value</artifactId>
+            <version>1.11.0</version>
+          </path>
+          <path>
+            <groupId>com.ryanharter.auto.value</groupId>
+            <artifactId>auto-value-gson</artifactId>
+            <version>1.3.1</version>
+          </path>
+        </annotationProcessorPaths>
+      </configuration>
+     </plugin>
       <plugin>
         <artifactId>maven-jar-plugin</artifactId>
         <version>3.4.2</version>

From e152e0d697c1a3f4a90a6480347b4ddf0b73f3e3 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Tue, 7 Oct 2025 17:58:00 -0700
Subject: [PATCH 11/22] fix: several minor fixes (#341)

* fix: several minor fixes

Changed a couple of maven plugins's scope to provided as recommended by
Maven.

Fixed #117: during first deploy unless the allowUnauthenticated property
was set to true, the gcloud command was waiting on a prompt that was not
visible and could not be interacted with. This change removes the
allowUnauthenticated property's default value and relies on gcloud's
behavior which will default this value to false if prompting is turned
off with '--quiet'. If the allowUnauthenticated is explicitly set, it
will correctly append the --[no-]allow-unauthenticated flag to the
command.

If the gcloud command fails, the plugin will not report a successful
build.

* fix formatting
---
 function-maven-plugin/pom.xml                 |  2 ++
 .../functions/plugin/DeployFunction.java      | 19 +++++++++++++------
 .../functions/plugin/DeployFunctionTest.java  |  3 ++-
 3 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/function-maven-plugin/pom.xml b/function-maven-plugin/pom.xml
index 4ddebd00..a7e8764c 100644
--- a/function-maven-plugin/pom.xml
+++ b/function-maven-plugin/pom.xml
@@ -42,11 +42,13 @@
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-plugin-api</artifactId>
       <version>3.9.11</version>
+      <scope>provided</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.maven</groupId>
       <artifactId>maven-core</artifactId>
       <version>3.9.11</version>
+      <scope>provided</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.maven.plugin-tools</groupId>
diff --git a/function-maven-plugin/src/main/java/com/google/cloud/functions/plugin/DeployFunction.java b/function-maven-plugin/src/main/java/com/google/cloud/functions/plugin/DeployFunction.java
index 35dab3f8..d0067ded 100644
--- a/function-maven-plugin/src/main/java/com/google/cloud/functions/plugin/DeployFunction.java
+++ b/function-maven-plugin/src/main/java/com/google/cloud/functions/plugin/DeployFunction.java
@@ -63,9 +63,8 @@ public class DeployFunction extends CloudSdkMojo {
    */
   @Parameter(
       alias = "deploy.allowunauthenticated",
-      property = "function.deploy.allowunauthenticated",
-      defaultValue = "false")
-  boolean allowUnauthenticated;
+      property = "function.deploy.allowunauthenticated")
+  Boolean allowUnauthenticated;
 
   /**
    * Name of a Google Cloud Function (as defined in source code) that will be executed. Defaults to
@@ -314,8 +313,12 @@ public List<String> getCommands() {
     if (triggerEvent != null) {
       commands.add("--trigger-event=" + triggerEvent);
     }
-    if (allowUnauthenticated) {
-      commands.add("--allow-unauthenticated");
+    if (allowUnauthenticated != null) {
+      if (allowUnauthenticated) {
+        commands.add("--allow-unauthenticated");
+      } else {
+        commands.add("--no-allow-unauthenticated");
+      }
     }
     if (functionTarget != null) {
       commands.add("--entry-point=" + functionTarget);
@@ -371,6 +374,8 @@ public List<String> getCommands() {
     if (projectId != null) {
       commands.add("--project=" + projectId);
     }
+
+    commands.add("--quiet");
     return Collections.unmodifiableList(commands);
   }
 
@@ -382,7 +387,9 @@ public void execute() throws MojoExecutionException {
       System.out.println("Executing Cloud SDK command: gcloud " + String.join(" ", params));
       gcloud.runCommand(params);
     } catch (CloudSdkNotFoundException | IOException | ProcessHandlerException ex) {
-      Logger.getLogger(DeployFunction.class.getName()).log(Level.SEVERE, null, ex);
+      Logger.getLogger(DeployFunction.class.getName())
+          .log(Level.SEVERE, "Function deployment failed", ex);
+      throw new MojoExecutionException("Function deployment failed", ex);
     }
   }
 }
diff --git a/function-maven-plugin/src/test/java/com/google/cloud/functions/plugin/DeployFunctionTest.java b/function-maven-plugin/src/test/java/com/google/cloud/functions/plugin/DeployFunctionTest.java
index e5a2913d..2b441d4e 100644
--- a/function-maven-plugin/src/test/java/com/google/cloud/functions/plugin/DeployFunctionTest.java
+++ b/function-maven-plugin/src/test/java/com/google/cloud/functions/plugin/DeployFunctionTest.java
@@ -53,7 +53,8 @@ public void testDeployFunctionCommandLine() {
             "--env-vars-file=myfile",
             "--set-build-env-vars=env1=a,env2=b",
             "--build-env-vars-file=myfile2",
-            "--runtime=java11");
+            "--runtime=java11",
+            "--quiet");
     assertThat(mojo.getCommands()).isEqualTo(expected);
   }
 }

From 043f647ef10cb8993441106be12ae495f86d7972 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Thu, 16 Oct 2025 11:48:06 -0700
Subject: [PATCH 12/22] chore: update relese process (#343)

---
 .kokoro/release.sh            | 45 ++++++++++++++++++++++++-----------
 function-maven-plugin/pom.xml | 25 ++++++++++++++-----
 2 files changed, 50 insertions(+), 20 deletions(-)

diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index 66ef1e6d..7a7e067e 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -3,21 +3,19 @@
 # Stop execution when any command fails.
 set -e
 
-# update the Maven version to 3.6.3
+# update the Maven version to 3.9.11
 pushd /usr/local
-wget https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.6.3/apache-maven-3.6.3-bin.tar.gz
-tar -xvzf apache-maven-3.6.3-bin.tar.gz apache-maven-3.6.3
+wget https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.11/apache-maven-3.9.11-bin.tar.gz
+tar -xvzf apache-maven-3.9.11-bin.tar.gz apache-maven-3.9.11
 rm -f /usr/local/apache-maven
-ln -s /usr/local/apache-maven-3.6.3 /usr/local/apache-maven
-rm apache-maven-3.6.3-bin.tar.gz
+ln -s /usr/local/apache-maven-3.9.11 /usr/local/apache-maven
+rm apache-maven-3.9.11-bin.tar.gz
 popd
 
 
 # Get secrets from keystore and set and environment variables.
 setup_environment_secrets() {
   export GPG_TTY=$(tty)
-  export SONATYPE_USERNAME=$(cat ${KOKORO_KEYSTORE_DIR}/75669_functions-framework-java-release-bot-sonatype-password | cut -f1 -d':')
-  export SONATYPE_PASSWORD=$(cat ${KOKORO_KEYSTORE_DIR}/75669_functions-framework-java-release-bot-sonatype-password | cut -f2 -d':')
   export GPG_PASSPHRASE=$(cat ${KOKORO_KEYSTORE_DIR}/70247_maven-gpg-passphrase)
 
   # Add the key ring files to $GNUPGHOME to verify the GPG credentials.
@@ -26,6 +24,29 @@ setup_environment_secrets() {
   mv ${KOKORO_KEYSTORE_DIR}/70247_maven-gpg-pubkeyring $GNUPGHOME/pubring.gpg
   mv ${KOKORO_KEYSTORE_DIR}/70247_maven-gpg-keyring $GNUPGHOME/secring.gpg
   gpg -k
+
+  echo "KOKORO_GFILE_DIR: ${KOKORO_GFILE_DIR}"
+  SECRET_LOCATION="${KOKORO_GFILE_DIR}/secret_manager"
+  echo "Creating folder for secrets: ${SECRET_LOCATION} (if not exists)"
+  mkdir -p "${SECRET_LOCATION}"
+  echo "Content of ${SECRET_LOCATION}:"
+  ls -alt "${SECRET_LOCATION}"
+  echo "------"
+
+  export SECRET_MANAGER_PROJECT_ID="serverless-runtimes"
+  export CENTRAL_REPO_USER="sonatype-central-repo-user"
+  export CENTRAL_REPO_TOKEN="sonatype-central-repo-token"
+  SECRET_MANAGER_KEYS="${CENTRAL_REPO_USER} ${CENTRAL_REPO_TOKEN}"
+  echo "SECRET_MANAGER_PROJECT_ID: ${SECRET_MANAGER_PROJECT_ID}, SECRET_MANAGER_KEYS: ${SECRET_MANAGER_KEYS}"
+
+  for key in $(echo "${SECRET_MANAGER_KEYS}" | sed "s/,/ /g")
+  do
+    gcloud secrets versions access latest \
+        --project "${SECRET_MANAGER_PROJECT_ID}" \
+        --secret "${key}" \
+        --out-file "${SECRET_LOCATION}/${key}"
+    echo "Created ${SECRET_LOCATION}/${key}"
+  done
 }
 
 create_settings_xml_file() {
@@ -42,14 +63,10 @@ create_settings_xml_file() {
   </profiles>
   <servers>
     <server>
-      <id>sonatype-nexus-staging</id>
-      <username>${SONATYPE_USERNAME}</username>
-      <password>${SONATYPE_PASSWORD}</password>
+      <id>sonatype-central-portal</id>
+      <username>$(cat "${SECRET_LOCATION}/${CENTRAL_REPO_USER}")</username>
+      <password>$(cat "${SECRET_LOCATION}/${CENTRAL_REPO_TOKEN}")</password>
     </server>
-    <server>
-      <id>sonatype-nexus-snapshots</id>
-      <username>${SONATYPE_USERNAME}</username>
-      <password>${SONATYPE_PASSWORD}</password>
     </server>
   </servers>
 </settings>" > $1
diff --git a/function-maven-plugin/pom.xml b/function-maven-plugin/pom.xml
index a7e8764c..a1678bd6 100644
--- a/function-maven-plugin/pom.xml
+++ b/function-maven-plugin/pom.xml
@@ -23,6 +23,21 @@
     <tag>HEAD</tag>
   </scm>
 
+  <developers>
+    <developer>
+      <name>Andras Kerekes</name>
+      <email>akerekes@google.com</email>
+      <organization>Google LLC</organization>
+      <organizationUrl>http://www.google.com</organizationUrl>
+    </developer>
+    <developer>
+      <name>Di Xu</name>
+      <email>dixuswe@google.com</email>
+      <organization>Google LLC</organization>
+      <organizationUrl>http://www.google.com</organizationUrl>
+    </developer>
+  </developers>
+
   <licenses>
     <license>
       <name>Apache License, Version 2.0</name>
@@ -159,14 +174,12 @@
             </executions>
           </plugin>
           <plugin>
-            <groupId>org.sonatype.plugins</groupId>
-            <artifactId>nexus-staging-maven-plugin</artifactId>
-            <version>1.7.0</version>
+            <groupId>org.sonatype.central</groupId>
+            <artifactId>central-publishing-maven-plugin</artifactId>
+            <version>0.9.0</version>
             <extensions>true</extensions>
             <configuration>
-              <serverId>sonatype-nexus-snapshots</serverId>
-              <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-              <autoReleaseAfterClose>true</autoReleaseAfterClose>
+              <publishingServerId>sonatype-central-portal</publishingServerId>
             </configuration>
           </plugin>
         </plugins>

From 5f847d3daf2367526445815e0952e0fdcf2f22af Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Fri, 17 Oct 2025 13:59:43 -0700
Subject: [PATCH 13/22] chore: update release process (#344)

---
 .kokoro/release.cfg |  8 ++++++++
 .kokoro/release.sh  | 27 ++-------------------------
 2 files changed, 10 insertions(+), 25 deletions(-)

diff --git a/.kokoro/release.cfg b/.kokoro/release.cfg
index f2ee4665..08d0ac9f 100644
--- a/.kokoro/release.cfg
+++ b/.kokoro/release.cfg
@@ -6,6 +6,14 @@ before_action {
       keystore_config_id: 75669
       keyname: "functions-framework-java-release-bot-sonatype-password"
     }
+    keystore_resource {
+      keystore_config_id: 75669
+      keyname: "functions-framework-release-sonatype-central-portal-username"
+    }
+    keystore_resource {
+      keystore_config_id: 75669
+      keyname: "functions-framework-release-sonatype-central-portal-password"
+    }
     keystore_resource {
       keystore_config_id: 70247
       keyname: "maven-gpg-pubkeyring"
diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index 7a7e067e..1aa8d455 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -24,29 +24,6 @@ setup_environment_secrets() {
   mv ${KOKORO_KEYSTORE_DIR}/70247_maven-gpg-pubkeyring $GNUPGHOME/pubring.gpg
   mv ${KOKORO_KEYSTORE_DIR}/70247_maven-gpg-keyring $GNUPGHOME/secring.gpg
   gpg -k
-
-  echo "KOKORO_GFILE_DIR: ${KOKORO_GFILE_DIR}"
-  SECRET_LOCATION="${KOKORO_GFILE_DIR}/secret_manager"
-  echo "Creating folder for secrets: ${SECRET_LOCATION} (if not exists)"
-  mkdir -p "${SECRET_LOCATION}"
-  echo "Content of ${SECRET_LOCATION}:"
-  ls -alt "${SECRET_LOCATION}"
-  echo "------"
-
-  export SECRET_MANAGER_PROJECT_ID="serverless-runtimes"
-  export CENTRAL_REPO_USER="sonatype-central-repo-user"
-  export CENTRAL_REPO_TOKEN="sonatype-central-repo-token"
-  SECRET_MANAGER_KEYS="${CENTRAL_REPO_USER} ${CENTRAL_REPO_TOKEN}"
-  echo "SECRET_MANAGER_PROJECT_ID: ${SECRET_MANAGER_PROJECT_ID}, SECRET_MANAGER_KEYS: ${SECRET_MANAGER_KEYS}"
-
-  for key in $(echo "${SECRET_MANAGER_KEYS}" | sed "s/,/ /g")
-  do
-    gcloud secrets versions access latest \
-        --project "${SECRET_MANAGER_PROJECT_ID}" \
-        --secret "${key}" \
-        --out-file "${SECRET_LOCATION}/${key}"
-    echo "Created ${SECRET_LOCATION}/${key}"
-  done
 }
 
 create_settings_xml_file() {
@@ -64,8 +41,8 @@ create_settings_xml_file() {
   <servers>
     <server>
       <id>sonatype-central-portal</id>
-      <username>$(cat "${SECRET_LOCATION}/${CENTRAL_REPO_USER}")</username>
-      <password>$(cat "${SECRET_LOCATION}/${CENTRAL_REPO_TOKEN}")</password>
+      <username>$(cat "${KOKORO_KEYSTORE_DIR}/75699_functions-framework-release-sonatype-central-portal-username")</username>
+      <password>$(cat "${KOKORO_KEYSTORE_DIR}/75699_functions-framework-release-sonatype-central-portal-password")</password>
     </server>
     </server>
   </servers>

From 3ce8832b498113f84e9a6607e30c885cf6f5b834 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 10:07:45 -0700
Subject: [PATCH 14/22] chore: fix generated release m2 settings content (#345)

---
 .kokoro/release.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index 1aa8d455..59580d66 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -44,7 +44,6 @@ create_settings_xml_file() {
       <username>$(cat "${KOKORO_KEYSTORE_DIR}/75699_functions-framework-release-sonatype-central-portal-username")</username>
       <password>$(cat "${KOKORO_KEYSTORE_DIR}/75699_functions-framework-release-sonatype-central-portal-password")</password>
     </server>
-    </server>
   </servers>
 </settings>" > $1
 }

From 9aa60907c749fcb14efc4a5919a5ea518d14df96 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 10:27:33 -0700
Subject: [PATCH 15/22] chore: fix generated release m2 settings content -
 attempt2 (#346)

---
 .kokoro/release.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index 59580d66..c6e1ee05 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -53,6 +53,7 @@ setup_environment_secrets
 # Pick the right package to release based on the Kokoro job name.
 cd ${KOKORO_ARTIFACTS_DIR}/github/functions-framework-java
 create_settings_xml_file "settings.xml"
+cat settings.xml
 echo "KOKORO_JOB_NAME=${KOKORO_JOB_NAME}"
 if [[ $KOKORO_JOB_NAME == *"function-maven-plugin"* ]]; then
   cd function-maven-plugin

From 1cbda1a0be06ba61d6e89b7c4c82bd9b2d152e41 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 10:32:30 -0700
Subject: [PATCH 16/22] chore: fix generated release m2 settings content -
 attempt3 (#347)

---
 .kokoro/release.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index c6e1ee05..ffc31a87 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -41,8 +41,8 @@ create_settings_xml_file() {
   <servers>
     <server>
       <id>sonatype-central-portal</id>
-      <username>$(cat "${KOKORO_KEYSTORE_DIR}/75699_functions-framework-release-sonatype-central-portal-username")</username>
-      <password>$(cat "${KOKORO_KEYSTORE_DIR}/75699_functions-framework-release-sonatype-central-portal-password")</password>
+      <username>$(cat "${KOKORO_KEYSTORE_DIR}/75669_functions-framework-release-sonatype-central-portal-username")</username>
+      <password>$(cat "${KOKORO_KEYSTORE_DIR}/75669_functions-framework-release-sonatype-central-portal-password")</password>
     </server>
   </servers>
 </settings>" > $1

From bd78f345bc99686763259b4e196b53e0ebfd8183 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 10:42:54 -0700
Subject: [PATCH 17/22] chore: fix snapshot repo url (#348)

---
 .kokoro/release.sh            |  1 -
 function-maven-plugin/pom.xml | 12 ------------
 2 files changed, 13 deletions(-)

diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index ffc31a87..2804846d 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -53,7 +53,6 @@ setup_environment_secrets
 # Pick the right package to release based on the Kokoro job name.
 cd ${KOKORO_ARTIFACTS_DIR}/github/functions-framework-java
 create_settings_xml_file "settings.xml"
-cat settings.xml
 echo "KOKORO_JOB_NAME=${KOKORO_JOB_NAME}"
 if [[ $KOKORO_JOB_NAME == *"function-maven-plugin"* ]]; then
   cd function-maven-plugin
diff --git a/function-maven-plugin/pom.xml b/function-maven-plugin/pom.xml
index a1678bd6..ee45a444 100644
--- a/function-maven-plugin/pom.xml
+++ b/function-maven-plugin/pom.xml
@@ -116,18 +116,6 @@
       </plugin>
     </plugins>
   </build>
-  <distributionManagement>
-    <snapshotRepository>
-      <id>sonatype-nexus-snapshots</id>
-      <name>Sonatype Nexus Snapshots</name>
-      <url>https://oss.sonatype.org/content/repositories/snapshots/</url>
-    </snapshotRepository>
-    <repository>
-      <id>sonatype-nexus-staging</id>
-      <name>Nexus Release Repository</name>
-      <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-    </repository>
-  </distributionManagement>
   <profiles>
     <profile>
       <id>sonatype-oss-release</id>

From a2eec52e3046b797e675468440bcb43572cbd7ef Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 10:56:09 -0700
Subject: [PATCH 18/22] chore: fix snapshot repo url (#349)

* chore: fix snapshot repo url

* chore: fix snapshot repo url
---
 function-maven-plugin/pom.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/function-maven-plugin/pom.xml b/function-maven-plugin/pom.xml
index ee45a444..c00117ce 100644
--- a/function-maven-plugin/pom.xml
+++ b/function-maven-plugin/pom.xml
@@ -168,6 +168,7 @@
             <extensions>true</extensions>
             <configuration>
               <publishingServerId>sonatype-central-portal</publishingServerId>
+              <centralSnapshotsUrl>https://central.sonatype.com/repository/maven-snapshots/</centralSnapshotsUrl>
             </configuration>
           </plugin>
         </plugins>

From f9a70f6b082d8d5c82cc2cc1a277b4ff2ca30710 Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 11:34:51 -0700
Subject: [PATCH 19/22] chore: fix release (#350)

* chore: fix snapshot repo url

* chore: fix snapshot repo url

* chore: fix release
---
 functions-framework-api/pom.xml | 38 +++++++++++++++++----------------
 invoker/pom.xml                 | 34 +++++++++++++++++++++++------
 2 files changed, 48 insertions(+), 24 deletions(-)

diff --git a/functions-framework-api/pom.xml b/functions-framework-api/pom.xml
index 3d6226c7..e9994047 100644
--- a/functions-framework-api/pom.xml
+++ b/functions-framework-api/pom.xml
@@ -41,6 +41,21 @@
     </license>
   </licenses>
 
+  <developers>
+    <developer>
+      <name>Andras Kerekes</name>
+      <email>akerekes@google.com</email>
+      <organization>Google LLC</organization>
+      <organizationUrl>http://www.google.com</organizationUrl>
+    </developer>
+    <developer>
+      <name>Di Xu</name>
+      <email>dixuswe@google.com</email>
+      <organization>Google LLC</organization>
+      <organizationUrl>http://www.google.com</organizationUrl>
+    </developer>
+  </developers>
+
   <scm>
     <connection>scm:git:https://github.com/GoogleCloudPlatform/functions-framework-java.git</connection>
     <developerConnection>scm:git:git@github.com:GoogleCloudPlatform/functions-framework-java.git</developerConnection>
@@ -131,18 +146,6 @@
       </plugins>
     </pluginManagement>
   </build>
-  <distributionManagement>
-    <snapshotRepository>
-      <id>sonatype-nexus-snapshots</id>
-      <name>Sonatype Nexus Snapshots</name>
-      <url>https://oss.sonatype.org/content/repositories/snapshots/</url>
-    </snapshotRepository>
-    <repository>
-      <id>sonatype-nexus-staging</id>
-      <name>Nexus Release Repository</name>
-      <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
-    </repository>
-  </distributionManagement>
   <profiles>
     <profile>
       <id>sonatype-oss-release</id>
@@ -189,14 +192,13 @@
             </executions>
           </plugin>
           <plugin>
-            <groupId>org.sonatype.plugins</groupId>
-            <artifactId>nexus-staging-maven-plugin</artifactId>
-            <version>1.7.0</version>
+            <groupId>org.sonatype.central</groupId>
+            <artifactId>central-publishing-maven-plugin</artifactId>
+            <version>0.9.0</version>
             <extensions>true</extensions>
             <configuration>
-              <serverId>sonatype-nexus-snapshots</serverId>
-              <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-              <autoReleaseAfterClose>true</autoReleaseAfterClose>
+              <publishingServerId>sonatype-central-portal</publishingServerId>
+              <centralSnapshotsUrl>https://central.sonatype.com/repository/maven-snapshots/</centralSnapshotsUrl>
             </configuration>
           </plugin>
         </plugins>
diff --git a/invoker/pom.xml b/invoker/pom.xml
index 0800eb37..0698f631 100644
--- a/invoker/pom.xml
+++ b/invoker/pom.xml
@@ -24,6 +24,29 @@
     <tag>HEAD</tag>
   </scm>
 
+  <developers>
+    <developer>
+      <name>Andras Kerekes</name>
+      <email>akerekes@google.com</email>
+      <organization>Google LLC</organization>
+      <organizationUrl>http://www.google.com</organizationUrl>
+    </developer>
+    <developer>
+      <name>Di Xu</name>
+      <email>dixuswe@google.com</email>
+      <organization>Google LLC</organization>
+      <organizationUrl>http://www.google.com</organizationUrl>
+    </developer>
+  </developers>
+
+  <licenses>
+    <license>
+      <name>Apache License, Version 2.0</name>
+      <url>http://www.apache.org/licenses/LICENSE-2.0.txt</url>
+      <distribution>repo</distribution>
+    </license>
+  </licenses>
+
   <modules>
     <module>core</module>
     <module>testfunction</module>
@@ -105,14 +128,13 @@
             </executions>
           </plugin>
           <plugin>
-            <groupId>org.sonatype.plugins</groupId>
-            <artifactId>nexus-staging-maven-plugin</artifactId>
-            <version>1.7.0</version>
+            <groupId>org.sonatype.central</groupId>
+            <artifactId>central-publishing-maven-plugin</artifactId>
+            <version>0.9.0</version>
             <extensions>true</extensions>
             <configuration>
-              <serverId>sonatype-nexus-snapshots</serverId>
-              <nexusUrl>https://oss.sonatype.org/</nexusUrl>
-              <autoReleaseAfterClose>true</autoReleaseAfterClose>
+              <publishingServerId>sonatype-central-portal</publishingServerId>
+              <centralSnapshotsUrl>https://central.sonatype.com/repository/maven-snapshots/</centralSnapshotsUrl>
             </configuration>
           </plugin>
         </plugins>

From 3a568368dc1b1ce2ab173f7e9df5d6f6a25a2210 Mon Sep 17 00:00:00 2001
From: "release-please[bot]"
 <55107282+release-please[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 16:20:05 -0700
Subject: [PATCH 20/22] chore(main): release java-function-invoker 1.4.2 (#340)

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
---
 .github/.release-please-manifest.json | 2 +-
 invoker/CHANGELOG.md                  | 7 +++++++
 invoker/conformance/pom.xml           | 4 ++--
 invoker/core/pom.xml                  | 6 +++---
 invoker/pom.xml                       | 2 +-
 invoker/testfunction/pom.xml          | 4 ++--
 6 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/.github/.release-please-manifest.json b/.github/.release-please-manifest.json
index e86b66fc..f6e3d0a5 100644
--- a/.github/.release-please-manifest.json
+++ b/.github/.release-please-manifest.json
@@ -1 +1 @@
-{"functions-framework-api":"1.1.4","invoker":"1.4.1","function-maven-plugin":"0.11.1"}
+{"functions-framework-api":"1.1.4","invoker":"1.4.2","function-maven-plugin":"0.11.1"}
diff --git a/invoker/CHANGELOG.md b/invoker/CHANGELOG.md
index 9fb244aa..1333434e 100644
--- a/invoker/CHANGELOG.md
+++ b/invoker/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.4.2](https://github.com/GoogleCloudPlatform/functions-framework-java/compare/java-function-invoker-v1.4.1...java-function-invoker-v1.4.2) (2025-10-20)
+
+
+### Bug Fixes
+
+* add autovalue plugin config to invoker/core/pom.xml to fix local development ([#339](https://github.com/GoogleCloudPlatform/functions-framework-java/issues/339)) ([4203279](https://github.com/GoogleCloudPlatform/functions-framework-java/commit/420327967b96b4aa66c0edd6753a9d6db781478d))
+
 ## [1.4.1](https://github.com/GoogleCloudPlatform/functions-framework-java/compare/java-function-invoker-v1.4.0...java-function-invoker-v1.4.1) (2025-03-07)
 
 
diff --git a/invoker/conformance/pom.xml b/invoker/conformance/pom.xml
index f882d4ad..ccebd793 100644
--- a/invoker/conformance/pom.xml
+++ b/invoker/conformance/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <artifactId>java-function-invoker-parent</artifactId>
     <groupId>com.google.cloud.functions.invoker</groupId>
-    <version>1.4.2-SNAPSHOT</version>
+    <version>1.4.2</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>conformance</artifactId>
-  <version>1.4.2-SNAPSHOT</version>
+  <version>1.4.2</version>
 
   <name>GCF Confromance Tests</name>
   <description>
diff --git a/invoker/core/pom.xml b/invoker/core/pom.xml
index 06dccab1..787341d0 100644
--- a/invoker/core/pom.xml
+++ b/invoker/core/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <groupId>com.google.cloud.functions.invoker</groupId>
     <artifactId>java-function-invoker-parent</artifactId>
-    <version>1.4.2-SNAPSHOT</version>
+    <version>1.4.2</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker</artifactId>
-  <version>1.4.2-SNAPSHOT</version>
+  <version>1.4.2</version>
   <name>GCF Java Invoker</name>
   <description>
     Application that invokes a GCF Java function. This application is a
@@ -115,7 +115,7 @@
     <dependency>
       <groupId>com.google.cloud.functions.invoker</groupId>
       <artifactId>java-function-invoker-testfunction</artifactId>
-      <version>1.4.2-SNAPSHOT</version>
+      <version>1.4.2</version>
       <type>test-jar</type>
       <scope>test</scope>
     </dependency>
diff --git a/invoker/pom.xml b/invoker/pom.xml
index 0698f631..cd969f0b 100644
--- a/invoker/pom.xml
+++ b/invoker/pom.xml
@@ -8,7 +8,7 @@
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker-parent</artifactId>
-  <version>1.4.2-SNAPSHOT</version>
+  <version>1.4.2</version>
   <packaging>pom</packaging>
   <name>GCF Java Invoker Parent</name>
   <description>
diff --git a/invoker/testfunction/pom.xml b/invoker/testfunction/pom.xml
index 78df65aa..cca7015d 100644
--- a/invoker/testfunction/pom.xml
+++ b/invoker/testfunction/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <groupId>com.google.cloud.functions.invoker</groupId>
     <artifactId>java-function-invoker-parent</artifactId>
-    <version>1.4.2-SNAPSHOT</version>
+    <version>1.4.2</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker-testfunction</artifactId>
-  <version>1.4.2-SNAPSHOT</version>
+  <version>1.4.2</version>
   <name>Example GCF Function Jar</name>
   <description>
     An example of a GCF function packaged into a jar. We use this in tests.

From ac8dd01013d41fd8236e79252bd089d7ccc4c53e Mon Sep 17 00:00:00 2001
From: Andras Kerekes <akerekes@users.noreply.github.com>
Date: Mon, 20 Oct 2025 16:57:38 -0700
Subject: [PATCH 21/22] chore: surpress mvn logging during release (#352)

---
 .kokoro/release.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.kokoro/release.sh b/.kokoro/release.sh
index 2804846d..8e1b30b0 100644
--- a/.kokoro/release.sh
+++ b/.kokoro/release.sh
@@ -66,7 +66,7 @@ echo "pwd=$(pwd)"
 # Make sure `JAVA_HOME` is set and using jdk11.
 export JAVA_HOME=/usr/lib/jvm/java-1.11.0-openjdk-amd64
 echo "JAVA_HOME=$JAVA_HOME"
-mvn clean deploy -B \
+mvn clean deploy -B -q \
   -P sonatype-oss-release \
   --settings=../settings.xml \
   -Dgpg.executable=gpg \

From 251ef75a105b9f6400edff3d59020846e742c40b Mon Sep 17 00:00:00 2001
From: "release-please[bot]"
 <55107282+release-please[bot]@users.noreply.github.com>
Date: Mon, 20 Oct 2025 17:09:05 -0700
Subject: [PATCH 22/22] chore(main): release java-function-invoker 1.4.3 (#351)

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>
Co-authored-by: Andras Kerekes <akerekes@users.noreply.github.com>
---
 .github/.release-please-manifest.json | 2 +-
 invoker/CHANGELOG.md                  | 7 +++++++
 invoker/conformance/pom.xml           | 4 ++--
 invoker/core/pom.xml                  | 6 +++---
 invoker/pom.xml                       | 2 +-
 invoker/testfunction/pom.xml          | 4 ++--
 6 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/.github/.release-please-manifest.json b/.github/.release-please-manifest.json
index f6e3d0a5..87a47513 100644
--- a/.github/.release-please-manifest.json
+++ b/.github/.release-please-manifest.json
@@ -1 +1 @@
-{"functions-framework-api":"1.1.4","invoker":"1.4.2","function-maven-plugin":"0.11.1"}
+{"functions-framework-api":"1.1.4","invoker":"1.4.3","function-maven-plugin":"0.11.1"}
diff --git a/invoker/CHANGELOG.md b/invoker/CHANGELOG.md
index 1333434e..9502293b 100644
--- a/invoker/CHANGELOG.md
+++ b/invoker/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [1.4.3](https://github.com/GoogleCloudPlatform/functions-framework-java/compare/java-function-invoker-v1.4.2...java-function-invoker-v1.4.3) (2025-10-20)
+
+
+### Bug Fixes
+
+* add autovalue plugin config to invoker/core/pom.xml to fix local development ([#339](https://github.com/GoogleCloudPlatform/functions-framework-java/issues/339)) ([4203279](https://github.com/GoogleCloudPlatform/functions-framework-java/commit/420327967b96b4aa66c0edd6753a9d6db781478d))
+
 ## [1.4.2](https://github.com/GoogleCloudPlatform/functions-framework-java/compare/java-function-invoker-v1.4.1...java-function-invoker-v1.4.2) (2025-10-20)
 
 
diff --git a/invoker/conformance/pom.xml b/invoker/conformance/pom.xml
index ccebd793..3f87d3c5 100644
--- a/invoker/conformance/pom.xml
+++ b/invoker/conformance/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <artifactId>java-function-invoker-parent</artifactId>
     <groupId>com.google.cloud.functions.invoker</groupId>
-    <version>1.4.2</version>
+    <version>1.4.3</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>conformance</artifactId>
-  <version>1.4.2</version>
+  <version>1.4.3</version>
 
   <name>GCF Confromance Tests</name>
   <description>
diff --git a/invoker/core/pom.xml b/invoker/core/pom.xml
index 787341d0..3e73e84b 100644
--- a/invoker/core/pom.xml
+++ b/invoker/core/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <groupId>com.google.cloud.functions.invoker</groupId>
     <artifactId>java-function-invoker-parent</artifactId>
-    <version>1.4.2</version>
+    <version>1.4.3</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker</artifactId>
-  <version>1.4.2</version>
+  <version>1.4.3</version>
   <name>GCF Java Invoker</name>
   <description>
     Application that invokes a GCF Java function. This application is a
@@ -115,7 +115,7 @@
     <dependency>
       <groupId>com.google.cloud.functions.invoker</groupId>
       <artifactId>java-function-invoker-testfunction</artifactId>
-      <version>1.4.2</version>
+      <version>1.4.3</version>
       <type>test-jar</type>
       <scope>test</scope>
     </dependency>
diff --git a/invoker/pom.xml b/invoker/pom.xml
index cd969f0b..0feb32eb 100644
--- a/invoker/pom.xml
+++ b/invoker/pom.xml
@@ -8,7 +8,7 @@
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker-parent</artifactId>
-  <version>1.4.2</version>
+  <version>1.4.3</version>
   <packaging>pom</packaging>
   <name>GCF Java Invoker Parent</name>
   <description>
diff --git a/invoker/testfunction/pom.xml b/invoker/testfunction/pom.xml
index cca7015d..3b619b35 100644
--- a/invoker/testfunction/pom.xml
+++ b/invoker/testfunction/pom.xml
@@ -4,12 +4,12 @@
   <parent>
     <groupId>com.google.cloud.functions.invoker</groupId>
     <artifactId>java-function-invoker-parent</artifactId>
-    <version>1.4.2</version>
+    <version>1.4.3</version>
   </parent>
 
   <groupId>com.google.cloud.functions.invoker</groupId>
   <artifactId>java-function-invoker-testfunction</artifactId>
-  <version>1.4.2</version>
+  <version>1.4.3</version>
   <name>Example GCF Function Jar</name>
   <description>
     An example of a GCF function packaged into a jar. We use this in tests.