Repository navigation
Bump the maven-dependencies group across 1 directory with 7 updates - #257
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the maven-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) | `4.14.0` | `4.15.0` | | [com.github.siom79.japicmp:japicmp](https://github.com/siom79/japicmp) | `0.26.3` | `0.26.5` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.3` | `2.22.4` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.3` | `2.22.4` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | Updates `org.codehaus.plexus:plexus-archiver` from 4.14.0 to 4.15.0 - [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases) - [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md) - [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.14.0...plexus-archiver-4.15.0) Updates `com.github.siom79.japicmp:japicmp` from 0.26.3 to 0.26.5 - [Release notes](https://github.com/siom79/japicmp/releases) - [Changelog](https://github.com/siom79/japicmp/blob/master/release.py) - [Commits](siom79/japicmp@japicmp-base-0.26.3...japicmp-base-0.26.5) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.3 to 2.22.4 - [Commits](FasterXML/jackson-databind@jackson-databind-2.22.3...jackson-databind-2.22.4) Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.3 to 2.22.4 - [Commits](FasterXML/jackson-core@jackson-core-2.22.3...jackson-core-2.22.4) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1) Updates `org.springframework.boot:spring-boot-starter-parent` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2) --- updated-dependencies: - dependency-name: org.codehaus.plexus:plexus-archiver dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: com.github.siom79.japicmp:japicmp dependency-version: 0.26.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.22.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Member
|
Superseded by #259, which takes these updates with Boot 4.1.2 and removes the Jakarta fixture overrides that Boot now covers. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/maven/maven-dependencies-3444cd474d
branch
October 26, 2026 09:41
jmanico
added a commit
that referenced
this pull request
Oct 26, 2026
…259) * Bump the maven-dependencies group across 1 directory with 7 updates Bumps the maven-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) | `4.14.0` | `4.15.0` | | [com.github.siom79.japicmp:japicmp](https://github.com/siom79/japicmp) | `0.26.3` | `0.26.5` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.3` | `2.22.4` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.3` | `2.22.4` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` | | [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` | Updates `org.codehaus.plexus:plexus-archiver` from 4.14.0 to 4.15.0 - [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases) - [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md) - [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.14.0...plexus-archiver-4.15.0) Updates `com.github.siom79.japicmp:japicmp` from 0.26.3 to 0.26.5 - [Release notes](https://github.com/siom79/japicmp/releases) - [Changelog](https://github.com/siom79/japicmp/blob/master/release.py) - [Commits](siom79/japicmp@japicmp-base-0.26.3...japicmp-base-0.26.5) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.3 to 2.22.4 - [Commits](FasterXML/jackson-databind@jackson-databind-2.22.3...jackson-databind-2.22.4) Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.3 to 2.22.4 - [Commits](FasterXML/jackson-core@jackson-core-2.22.3...jackson-core-2.22.4) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1) Updates `org.springframework.boot:spring-boot-starter-parent` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2) --- updated-dependencies: - dependency-name: org.codehaus.plexus:plexus-archiver dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: com.github.siom79.japicmp:japicmp dependency-version: 0.26.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.22.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.springframework.boot:spring-boot-starter-parent dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> * Drop Jakarta fixture overrides now covered by Boot 4.1.2 Boot 4.1.2 manages Tomcat 11.0.27, so the fixture's 11.0.26 override now downgrades Tomcat and fails RequireUpperBoundDeps. Its buildpack platform also brings Jackson 3.1.7, matching the plugin-realm pin, so remove the pin with its Dependabot rules and exact-version policy test as recorded in DEPENDENCY_DECISIONS.md. A policy test now guards against either override returning. Supersedes #256 and #257. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the maven-dependencies group with 7 updates in the / directory:
4.14.04.15.00.26.30.26.52.22.32.22.42.22.32.22.43.6.03.6.13.6.03.6.14.1.14.1.2Updates
org.codehaus.plexus:plexus-archiverfrom 4.14.0 to 4.15.0Release notes
Sourced from org.codehaus.plexus:plexus-archiver's releases.
Commits
9271db9[maven-release-plugin] prepare release plexus-archiver-4.15.03567302Bump release-drafter/release-drafter from 7.9.0 to 7.10.04ff8533Bump version to 4.15.0-SNAPSHOTcdfdc9fReflow the component table after dropping the escapes5bc412fRestore the document metadata dropped when the page was ported657f055Drop backslash escapes that Markdown does not need5124ec7Allow maintainers to start the build manuallyaa201feQuote the distribution key of the extra matrix entry8e3ba79Copy the target when DirectoryArchiver cannot create a symbolic linka5492deCopy the target when the file system refuses a symbolic linkUpdates
com.github.siom79.japicmp:japicmpfrom 0.26.3 to 0.26.5Release notes
Sourced from com.github.siom79.japicmp:japicmp's releases.
Commits
df5cec4[maven-release-plugin] prepare release japicmp-base-0.26.589eaf35update publishing plugin0d9e62a[maven-release-plugin] prepare for next development iteration5ac0e96[maven-release-plugin] prepare release japicmp-base-0.26.42e4fe78upgraded version in *.md files to 0.26.499cf5d7Update japicmp jar version in README06354fcAdd release notes for version 0.26.4b0338e4Merge pull request #532 from siom79/ccr-8233ddde-hng43hb3a4ca4Add option to generate reproducible reports (#531)de476fbMerge pull request #530 from siom79/release-v0.26.3Updates
com.fasterxml.jackson.core:jackson-databindfrom 2.22.3 to 2.22.4Commits
a56a810[maven-release-plugin] prepare release jackson-databind-2.22.4c172c5dPrep for 2.22.4 release1e761c0Merge branch '2.21' into 2.22fe3780fPost-release dep version bumpa0e1fad[maven-release-plugin] prepare for next development iterationc92512e[maven-release-plugin] prepare release jackson-databind-2.21.80a41b7cPrep for 2.21.8 releaseab63665Remove stale empty 2.23.0 section from 2.22 release notes2b5a04bMerge branch '2.21' into 2.223402e80Merge branch '2.20' into 2.21Updates
com.fasterxml.jackson.core:jackson-corefrom 2.22.3 to 2.22.4Commits
822b0a0[maven-release-plugin] prepare release jackson-core-2.22.48d6ea81Prep for 2.22.4 releaseb809db3Merge branch '2.21' into 2.22498587aPost-release dep version bumpad24c5b[maven-release-plugin] prepare for next development iteration8bd7d2f[maven-release-plugin] prepare release jackson-core-2.21.8bffd3aaPrep for 2.21.8 release6ac4640Merge branch '2.21' into 2.223a5647bMerge branch '2.20' into 2.21a18f841Merge branch '2.19' into 2.20Updates
org.apache.maven.plugins:maven-failsafe-pluginfrom 3.6.0 to 3.6.1Release notes
Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.
... (truncated)
Commits
5bf0dcf[maven-release-plugin] prepare release surefire-3.6.17f73580Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)ab7ce2fBump org.testng:testng (#3539)ff3b768Group module path heuristics in ModulePathJpmsArguments (#3541)a343e4dFix IllegalAccessError when the main module requires JUnit (#3532) (#3538)907a2e2Fix groups and excludedGroups being ignored when TestNG is on the classpath (...cc69b3cUse push for PR Automationb119019Install the JUnit Platform provider for the ITs (#3535)2cdec2eDon't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)1e4f6b9Use workflow_run for PR check (#3531)Updates
org.apache.maven.plugins:maven-surefire-pluginfrom 3.6.0 to 3.6.1Release notes
Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.
... (truncated)
Commits
5bf0dcf[maven-release-plugin] prepare release surefire-3.6.17f73580Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)ab7ce2fBump org.testng:testng (#3539)ff3b768Group module path heuristics in ModulePathJpmsArguments (#3541)a343e4dFix IllegalAccessError when the main module requires JUnit (#3532) (#3538)907a2e2Fix groups and excludedGroups being ignored when TestNG is on the classpath (...cc69b3cUse push for PR Automationb119019Install the JUnit Platform provider for the ITs (#3535)2cdec2eDon't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)1e4f6b9Use workflow_run for PR check (#3531)Updates
org.springframework.boot:spring-boot-starter-parentfrom 4.1.1 to 4.1.2Release notes
Sourced from org.springframework.boot:spring-boot-starter-parent's releases.
... (truncated)
Commits
634e6fdRelease 4.1.26b43cf1Upgrade to Spring WS 5.0.3a73dfadUpgrade to Spring Security 7.1.20485f1eUpgrade to Spring RESTDocs 4.0.2de2c11aUpgrade to Spring Pulsar 2.0.88d0359eUpgrade to Spring LDAP 4.1.2f22c6e6Upgrade to Spring Kafka 4.1.2ed55709Upgrade to Spring Integration 7.1.22e88a38Upgrade to Spring HATEOAS 3.1.30d69ce5Upgrade to Spring gRPC 1.1.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions