Skip to content

Bump the maven-dependencies group across 1 directory with 7 updates - #257

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-3444cd474d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-3444cd474d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 7 updates in the / directory:

Package From To
org.codehaus.plexus:plexus-archiver 4.14.0 4.15.0
com.github.siom79.japicmp:japicmp 0.26.3 0.26.5
com.fasterxml.jackson.core:jackson-databind 2.22.3 2.22.4
com.fasterxml.jackson.core:jackson-core 2.22.3 2.22.4
org.apache.maven.plugins:maven-failsafe-plugin 3.6.0 3.6.1
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.springframework.boot:spring-boot-starter-parent 4.1.1 4.1.2

Updates org.codehaus.plexus:plexus-archiver from 4.14.0 to 4.15.0

Release notes

Sourced from org.codehaus.plexus:plexus-archiver's releases.

4.15.0

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

Full changelog

Commits
  • 9271db9 [maven-release-plugin] prepare release plexus-archiver-4.15.0
  • 3567302 Bump release-drafter/release-drafter from 7.9.0 to 7.10.0
  • 4ff8533 Bump version to 4.15.0-SNAPSHOT
  • cdfdc9f Reflow the component table after dropping the escapes
  • 5bc412f Restore the document metadata dropped when the page was ported
  • 657f055 Drop backslash escapes that Markdown does not need
  • 5124ec7 Allow maintainers to start the build manually
  • aa201fe Quote the distribution key of the extra matrix entry
  • 8e3ba79 Copy the target when DirectoryArchiver cannot create a symbolic link
  • a5492de Copy the target when the file system refuses a symbolic link
  • Additional commits viewable in compare view

Updates com.github.siom79.japicmp:japicmp from 0.26.3 to 0.26.5

Release notes

Sourced from com.github.siom79.japicmp:japicmp's releases.

japicmp-base-0.26.5

Reproducible reports #531

Commits
  • df5cec4 [maven-release-plugin] prepare release japicmp-base-0.26.5
  • 89eaf35 update publishing plugin
  • 0d9e62a [maven-release-plugin] prepare for next development iteration
  • 5ac0e96 [maven-release-plugin] prepare release japicmp-base-0.26.4
  • 2e4fe78 upgraded version in *.md files to 0.26.4
  • 99cf5d7 Update japicmp jar version in README
  • 06354fc Add release notes for version 0.26.4
  • b0338e4 Merge pull request #532 from siom79/ccr-8233ddde-hng43h
  • b3a4ca4 Add option to generate reproducible reports (#531)
  • de476fb Merge pull request #530 from siom79/release-v0.26.3
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.3 to 2.22.4

Commits
  • a56a810 [maven-release-plugin] prepare release jackson-databind-2.22.4
  • c172c5d Prep for 2.22.4 release
  • 1e761c0 Merge branch '2.21' into 2.22
  • fe3780f Post-release dep version bump
  • a0e1fad [maven-release-plugin] prepare for next development iteration
  • c92512e [maven-release-plugin] prepare release jackson-databind-2.21.8
  • 0a41b7c Prep for 2.21.8 release
  • ab63665 Remove stale empty 2.23.0 section from 2.22 release notes
  • 2b5a04b Merge branch '2.21' into 2.22
  • 3402e80 Merge branch '2.20' into 2.21
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.22.3 to 2.22.4

Commits
  • 822b0a0 [maven-release-plugin] prepare release jackson-core-2.22.4
  • 8d6ea81 Prep for 2.22.4 release
  • b809db3 Merge branch '2.21' into 2.22
  • 498587a Post-release dep version bump
  • ad24c5b [maven-release-plugin] prepare for next development iteration
  • 8bd7d2f [maven-release-plugin] prepare release jackson-core-2.21.8
  • bffd3aa Prep for 2.21.8 release
  • 6ac4640 Merge branch '2.21' into 2.22
  • 3a5647b Merge branch '2.20' into 2.21
  • a18f841 Merge branch '2.19' into 2.20
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-parent from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) | `4.14.0` | `4.15.0` |
| [com.github.siom79.japicmp:japicmp](https://github.com/siom79/japicmp) | `0.26.3` | `0.26.5` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.3` | `2.22.4` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.3` | `2.22.4` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |



Updates `org.codehaus.plexus:plexus-archiver` from 4.14.0 to 4.15.0
- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)
- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)
- [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.14.0...plexus-archiver-4.15.0)

Updates `com.github.siom79.japicmp:japicmp` from 0.26.3 to 0.26.5
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.26.3...japicmp-base-0.26.5)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.3...jackson-databind-2.22.4)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-core@jackson-core-2.22.3...jackson-core-2.22.4)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.springframework.boot:spring-boot-starter-parent` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-archiver
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.github.siom79.japicmp:japicmp
  dependency-version: 0.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 26, 2026
@jmanico

jmanico commented Oct 26, 2026

Copy link
Copy Markdown
Member

Superseded by #259, which takes these updates with Boot 4.1.2 and removes the Jakarta fixture overrides that Boot now covers.

@jmanico jmanico closed this Oct 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/maven/maven-dependencies-3444cd474d branch October 26, 2026 09:41
jmanico added a commit that referenced this pull request Oct 26, 2026
…259)

* Bump the maven-dependencies group across 1 directory with 7 updates

Bumps the maven-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) | `4.14.0` | `4.15.0` |
| [com.github.siom79.japicmp:japicmp](https://github.com/siom79/japicmp) | `0.26.3` | `0.26.5` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.3` | `2.22.4` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.3` | `2.22.4` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |



Updates `org.codehaus.plexus:plexus-archiver` from 4.14.0 to 4.15.0
- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)
- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)
- [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.14.0...plexus-archiver-4.15.0)

Updates `com.github.siom79.japicmp:japicmp` from 0.26.3 to 0.26.5
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.26.3...japicmp-base-0.26.5)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.3...jackson-databind-2.22.4)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-core@jackson-core-2.22.3...jackson-core-2.22.4)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.springframework.boot:spring-boot-starter-parent` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-archiver
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.github.siom79.japicmp:japicmp
  dependency-version: 0.26.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* Drop Jakarta fixture overrides now covered by Boot 4.1.2

Boot 4.1.2 manages Tomcat 11.0.27, so the fixture's 11.0.26 override now
downgrades Tomcat and fails RequireUpperBoundDeps. Its buildpack platform
also brings Jackson 3.1.7, matching the plugin-realm pin, so remove the
pin with its Dependabot rules and exact-version policy test as recorded
in DEPENDENCY_DECISIONS.md. A policy test now guards against either
override returning.

Supersedes #256 and #257.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant