Skip to content

build(deps): bump dev.cel:cel from 0.9.1 to 0.13.1 - #803

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/dev.cel-cel-0.13.1
Open

build(deps): bump dev.cel:cel from 0.9.1 to 0.13.1#803
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/dev.cel-cel-0.13.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps dev.cel:cel from 0.9.1 to 0.13.1.

Release notes

Sourced from dev.cel:cel's releases.

v0.13.1

This minor release brings expanded support for Native Extensions, and correctness fixes for optionals, protobuf types and policy evaluation.

🚀 Highlights & New Features

  • Native Extensions: Expanded support to include arrays for Native type extensions (#1069).

🛠️ Configuration & Default Changes

  • Deprecations: The enableCelValue option has been deprecated (#1057).

🐛 Bug Fixes & Correctness

  • Protobuf Conversion: Updated ProtoCelValueConverter to correctly handle FIXED32 and FIXED64 as unsigned values (#1073).
  • Native Extensions: Safely ignored enums in native type extensions to prevent evaluation errors (#1078).
  • Policy Dead Code: Fixed dead code reachability logic that was erroneously flagging on unconditional nested rules (#1072).
  • Optional Types: Ensured that chained optional field selection does not repeatedly wrap the optional type (#1086).

👏 New Contributors

Full Changelog: cel-expr/cel-java@v0.13.0...v0.13.1

v0.13.0

This release brings significant performance optimizations, robust support for parsed-only evaluation across standard extensions, and several important bug fixes to align behavior with other CEL implementations. It also introduces major enhancements to the planner and policy compilation.

🚀 Highlights & New Features

  • Planner Promotion & Enhancements: The planner runtime builder has been officially promoted from experimental to the main factories (#1033). Note: This planner runtime will become the default in a future release. Additionally, the planner now supports trace (#1031), exhaustive evaluation (#1032), and partial evaluation via unknowns (#982).
  • Native Extensions: We are thrilled to introduce Native Extensions (#1037), a powerful new feature that allows you to seamlessly bind and evaluate native Java objects and functions directly within your CEL environment. This drastically reduces boilerplate and avoids the overhead of converting your Java types into intermediate representations. Please refer to the documentation here.
  • Parsed-Only Evaluation Support: Broadened parsed-only evaluation support and test coverage across all standard extensions, including Proto (#1015), Comprehensions (#1018), Lists (#1016), Math (#1011), Sets (#1021), Encoders (#1020), Bindings (#1014), and Strings (#1019).
  • New String Extensions: Added quote and reverse to the string extensions library (#998). string.split was also changed to return an immutable list (#1019).
  • Policy Improvements: Introduced the CEL Policy Conformance Test Runner for Java and enabled it in OSS (#1043, #1053), added support for context variables in the YAML environment (#1046), and allowed specifying a set of optimizers to run during policy compilation (#986).

⚡ Performance Improvements

We have invested heavily in optimizing the performance characteristics of the planner runtime compared to the legacy runtime (#999, #1000, #1001, #1002, #1003, #1041). Benchmark highlights include:

  • Massive CPU Speedups: Drastic execution time cuts, especially for expressions involving comprehensions (up to an 88% reduction). When caching programs, non-protobuf operations see up to a 92% improvement (e.g., execution dropping from 77µs down to 10µs).
  • Significant GC Pressure Reduction: Elimination of unnecessary temporary object allocations results in up to a 99% memory footprint reduction for loops and list creation (e.g., dropping from 160 KB down to just 1 KB for cached, type-checked programs).
  • Evaluation Nuance: For non-protobuf work evaluated on-the-fly, execution is 40%–80% faster with a 60%–97% memory savings. For deep protobuf field selections, the planner introduces a negligible, fractional microsecond overhead due to the new planning lifecycle.

🛠️ Configuration & Default Changes

  • Quoted Identifiers: Quoted identifiers are now enabled by default (#997).
  • Timestamp Epoch: enableTimestampEpoch is now set by default (#989), and the configuration option has been deprecated (#991).

🐛 Bug Fixes & Correctness

  • Math Consistency: Fixed math.round to use HALF_UP to match documentation and align behavior with cel-go and cel-cpp (#1054). Removed signed long support for uint (#1011).

... (truncated)

Commits
  • 6e267b4 Release 0.13.1
  • d917045 Ensure chained optional field selection does not repeatedly wrap the optional...
  • f31ad58 Internal Changes
  • c2b6039 Internal Changes
  • 359d39a Expand support to arrays to Native type extensions
  • 02052f3 Safely ignore enums in native type extensions
  • a6f2930 Merge pull request #1074 from andrewparmet:fix-fieldmask-celvalue
  • 7452e0d Merge pull request #1073 from andrewparmet:fix-fixed32-fixed64-celvalue
  • c5d86d9 Remove redundant base FieldMask handler now that both converters intercept it
  • abbd7cf Override fromWellKnownProto in ProtoLiteCelValueConverter for FieldMask
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dev.cel:cel](https://github.com/google/cel-java) from 0.9.1 to 0.13.1.
- [Release notes](https://github.com/google/cel-java/releases)
- [Commits](cel-expr/cel-java@v0.9.1...v0.13.1)

---
updated-dependencies:
- dependency-name: dev.cel:cel
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 7, 2026
@dependabot
dependabot Bot requested a review from fhussonnois as a code owner August 7, 2026 03:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants