From e7fab57294b9ccbc041d84d9fd95b31d3361f966 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 21 Sep 2026 13:20:49 +0000
Subject: [PATCH] deps: bump the maven-minor-patch group across 1 directory
 with 16 updates

Bumps the maven-minor-patch group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.modelcontextprotocol.sdk:mcp-bom](https://github.com/modelcontextprotocol/java-sdk) | `2.0.0` | `2.0.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-help-plugin](https://github.com/apache/maven-help-plugin) | `3.5.1` | `3.5.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.7.0` | `3.10.2` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.1` | `3.6.2` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.3` | `3.6.4` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.21.0` | `2.22.0` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.9.1` | `10.10` |
| org.eclipse.jetty.ee10:jetty-ee10-servlet | `12.1.10` | `12.1.13` |
| org.slf4j:slf4j-simple | `2.0.18` | `2.0.19` |
| [org.springframework.security:spring-security-oauth2-resource-server](https://github.com/spring-projects/spring-security) | `7.1.0` | `7.1.1` |
| [org.springframework.security:spring-security-config](https://github.com/spring-projects/spring-security) | `7.1.0` | `7.1.1` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |
| [org.springframework.ai:mcp-spring-webmvc](https://github.com/spring-projects/spring-ai) | `2.0.0` | `2.0.1` |
| [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) | `7.0.8` | `7.0.9` |



Updates `io.modelcontextprotocol.sdk:mcp-bom` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/java-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/modelcontextprotocol/java-sdk/compare/v2.0.0...v2.0.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](https://github.com/apache/maven-compiler-plugin/compare/maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-help-plugin` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/apache/maven-help-plugin/releases)
- [Commits](https://github.com/apache/maven-help-plugin/compare/maven-help-plugin-3.5.1...maven-help-plugin-3.5.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.5.6...surefire-3.6.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.7.0 to 3.10.2
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](https://github.com/diffplug/spotless/compare/maven/3.7.0...maven/3.10.2)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/build-helper-maven-plugin/compare/3.6.1...3.6.2)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.3 to 3.6.4
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.6.3...3.6.4)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/mojohaus/versions/compare/2.21.0...2.22.0)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.9.1 to 10.10
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.10..10.9.1)

Updates `org.eclipse.jetty.ee10:jetty-ee10-servlet` from 12.1.10 to 12.1.13

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `org.springframework.security:spring-security-oauth2-resource-server` from 7.1.0 to 7.1.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/7.1.0...7.1.1)

Updates `org.springframework.security:spring-security-config` from 7.1.0 to 7.1.1
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](https://github.com/spring-projects/spring-security/compare/7.1.0...7.1.1)

Updates `org.springframework:spring-webmvc` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.8...v7.0.9)

Updates `org.springframework:spring-test` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.8...v7.0.9)

Updates `org.springframework.ai:mcp-spring-webmvc` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Changelog](https://github.com/spring-projects/spring-ai/blob/main/release-train-settings.xml)
- [Commits](https://github.com/spring-projects/spring-ai/compare/v2.0.0...v2.0.1)

Updates `org.springframework:spring-test` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v7.0.8...v7.0.9)

---
updated-dependencies:
- dependency-name: io.modelcontextprotocol.sdk:mcp-bom
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-help-plugin
  dependency-version: 3.5.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-servlet
  dependency-version: 12.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.springframework.security:spring-security-oauth2-resource-server
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.springframework.security:spring-security-config
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.springframework:spring-test
  dependency-version: 7.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.springframework.ai:mcp-spring-webmvc
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.springframework:spring-test
  dependency-version: 7.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 core/pom.xml   |  2 +-
 mcp/pom.xml    |  4 ++--
 pom.xml        | 16 ++++++++--------
 spring/pom.xml |  8 ++++----
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/core/pom.xml b/core/pom.xml
index 398493a..c6c00f2 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -34,7 +34,7 @@
     <dependency>
       <groupId>com.nimbusds</groupId>
       <artifactId>nimbus-jose-jwt</artifactId>
-      <version>10.9.1</version>
+      <version>10.10</version>
     </dependency>
 
     <!-- Test dependencies — version and scope managed in the parent pom -->
diff --git a/mcp/pom.xml b/mcp/pom.xml
index c2fb087..6ba33ce 100644
--- a/mcp/pom.xml
+++ b/mcp/pom.xml
@@ -67,7 +67,7 @@
     <dependency>
       <groupId>org.eclipse.jetty.ee10</groupId>
       <artifactId>jetty-ee10-servlet</artifactId>
-      <version>12.1.10</version>
+      <version>12.1.13</version>
       <optional>true</optional>
     </dependency>
 
@@ -75,7 +75,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-simple</artifactId>
-      <version>2.0.18</version>
+      <version>2.0.19</version>
       <optional>true</optional>
     </dependency>
 
diff --git a/pom.xml b/pom.xml
index 863c4cc..203b150 100644
--- a/pom.xml
+++ b/pom.xml
@@ -112,7 +112,7 @@
       <dependency>
         <groupId>io.modelcontextprotocol.sdk</groupId>
         <artifactId>mcp-bom</artifactId>
-        <version>2.0.0</version>
+        <version>2.0.1</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -136,7 +136,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>3.15.0</version>
+          <version>3.16.0</version>
           <configuration>
             <release>21</release>
           </configuration>
@@ -150,7 +150,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-help-plugin</artifactId>
-          <version>3.5.1</version>
+          <version>3.5.2</version>
         </plugin>
         <!--
           maven-javadoc-plugin: shared config so direct invocations
@@ -201,7 +201,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.5.6</version>
+          <version>3.6.0</version>
           <configuration>
             <systemPropertyVariables>
               <jdk.httpclient.allowRestrictedHeaders>host</jdk.httpclient.allowRestrictedHeaders>
@@ -226,7 +226,7 @@
         <plugin>
           <groupId>com.diffplug.spotless</groupId>
           <artifactId>spotless-maven-plugin</artifactId>
-          <version>3.7.0</version>
+          <version>3.10.2</version>
           <configuration>
             <java>
               <googleJavaFormat>
@@ -243,12 +243,12 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>build-helper-maven-plugin</artifactId>
-          <version>3.6.1</version>
+          <version>3.6.2</version>
         </plugin>
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>exec-maven-plugin</artifactId>
-          <version>3.6.3</version>
+          <version>3.6.4</version>
         </plugin>
         <!--
           versions-maven-plugin: pinned globally so direct `versions:set` /
@@ -258,7 +258,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>versions-maven-plugin</artifactId>
-          <version>2.21.0</version>
+          <version>2.22.0</version>
         </plugin>
         <plugin>
           <groupId>org.jacoco</groupId>
diff --git a/spring/pom.xml b/spring/pom.xml
index 881d456..4576610 100644
--- a/spring/pom.xml
+++ b/spring/pom.xml
@@ -19,7 +19,7 @@
       it has to move with spring-webmvc, and two literals side by side drift the moment one is
       bumped alone.
     -->
-    <spring.version>7.0.8</spring.version>
+    <spring.version>7.0.9</spring.version>
   </properties>
 
   <artifactId>authplane-spring</artifactId>
@@ -49,7 +49,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-oauth2-resource-server</artifactId>
-      <version>7.1.0</version>
+      <version>7.1.1</version>
       <scope>provided</scope>
     </dependency>
 
@@ -62,7 +62,7 @@
     <dependency>
       <groupId>org.springframework.security</groupId>
       <artifactId>spring-security-config</artifactId>
-      <version>7.1.0</version>
+      <version>7.1.1</version>
       <scope>provided</scope>
     </dependency>
 
@@ -98,7 +98,7 @@
     <dependency>
       <groupId>org.springframework.ai</groupId>
       <artifactId>mcp-spring-webmvc</artifactId>
-      <version>2.0.0</version>
+      <version>2.0.1</version>
       <scope>provided</scope>
     </dependency>