Skip to content

Bump the maven-dependencies group across 1 directory with 14 updates - #357

Merged
infeo merged 1 commit into
developfrom
dependabot/maven/maven-dependencies-6d85413b0a
Sep 25, 2026
Merged

infeo merged 1 commit into
developfrom
dependabot/maven/maven-dependencies-6d85413b0a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 14 updates in the / directory:

Package From To
com.auth0:java-jwt 4.5.1 4.6.1
com.github.ben-manes.caffeine:caffeine 3.2.3 3.3.0
org.slf4j:slf4j-api 2.0.17 2.0.19
org.slf4j:slf4j-simple 2.0.17 2.0.19
org.junit.jupiter:junit-jupiter 6.0.3 6.1.3
org.slf4j:slf4j-simple 2.0.17 2.0.19
com.google.jimfs:jimfs 1.3.1 1.3.2
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0
org.apache.maven.plugins:maven-dependency-plugin 3.10.0 3.11.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.6.0
org.apache.maven.plugins:maven-jar-plugin 3.5.0 3.5.1
org.owasp:dependency-check-maven 12.2.0 13.0.0
org.jacoco:jacoco-maven-plugin 0.8.14 0.8.15
org.sonatype.central:central-publishing-maven-plugin 0.10.0 0.11.0
org.apache.maven:apache-maven 3.9.12 3.9.16

Updates com.auth0:java-jwt from 4.5.1 to 4.6.1

Release notes

Sourced from com.auth0:java-jwt's releases.

4.6.1

Added

4.6.0

Added

4.5.2

Added

Changelog

Sourced from com.auth0:java-jwt's changelog.

4.6.1 (2026-09-08)

Full Changelog

Added

4.6.0 (2026-07-13)

Full Changelog

Added

4.5.2 (2026-04-29)

Full Changelog

Added

Commits
  • 29f252b Release 4.6.1 (#803)
  • 4674f5a Bump actions/setup-java from 5 to 6 (#798)
  • f9c6113 chore: update bouncycastle (#801)
  • bca344b chore: Remove Semgrep Workflow (#802)
  • b7645c2 Bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0 (#796)
  • eb1b160 Bump com.fasterxml.jackson.core:jackson-core from 2.22.1 to 2.22.2 in /lib (#...
  • f4a2401 Bump gradle/actions/wrapper-validation from 6.2.0 to 6.3.0 (#795)
  • 021af99 Bump com.fasterxml.jackson.core:jackson-core from 2.22.0 to 2.22.1 in /lib (#...
  • 4994fdf chore: remove unused imports (#794)
  • 8920eed Release 4.6.0 (#789)
  • Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.3.0

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.3.0

  • Improved read performance by avoiding false sharing in the fast-path check
  • Improved adaptive climber for small caches and shifting workloads
  • Fixed various minor issues found using AI audits
  • Fixed over-aggressive refresh discard (#1970)

3.2.4

  • Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update
  • Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)
  • Fixed various minor issues found using AI audits
  • Added ObjectInputFilter support to JCache
Commits
  • af86011 fix jcache audit triage
  • f063e56 Prevent overflow in snapshot durations
  • 5b6fbd9 Saturate the audit stillness counter
  • 48cb408 Read lazy cache views and policies once
  • 4978d18 Normalize JCache processor loader failures
  • c9038d8 Consume JCache iterator removals before listener failures
  • 0b0afd2 polish
  • c0edd00 restore coverage lost to recent fixes
  • 5283c96 make CLOCK-Pro's cold hand a setting
  • d15c205 make the bulk cache loaders serializable
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.19

Updates org.slf4j:slf4j-simple from 2.0.17 to 2.0.19

Updates org.junit.jupiter:junit-jupiter from 6.0.3 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

... (truncated)

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-simple from 2.0.17 to 2.0.19

Updates com.google.jimfs:jimfs from 1.3.1 to 1.3.2

Release notes

Sourced from com.google.jimfs:jimfs's releases.

v1.3.2

  • Fixed Files.move so that ATOMIC_MOVE always enables overwriting of an existing destination file. (3f6e092c)
  • Ensured that SecureDirectoryStream.move works like Files.move with the ATOMIC_MOVE option, as specified, and required that all Path arguments to SecureDirectoryStream methods be from the same FileSystem as the stream itself. (398b0f90)
  • Fixed access from SystemJimfsFileSystemProvider to JimfsFileSystem when they are loaded by different class loaders. (5b756f17)
  • Fixed JimfsInputStream.read to always return 0 when len is 0. (0e5725b4d44ec51d54fba15336aa23147c1bedc7)
Commits
  • d10679b Set version number for jimfs-parent to 1.3.2.
  • 145b64d Bump Guava to 33.7.1.
  • 3965760 Throw UnsupportedOperationException for unsupported attribute views
  • 8ccbf27 Bump Guava to 33.7.0.
  • 10121d7 Update links from the legacy search.maven.org to the new central.sonatype.com.
  • 27ad1f9 Enact some security improvements that I'd missed in previous rounds.
  • 4bb21de Delete assertAsynchronousClose, migrating callers to assertClosed.
  • 0dbccb6 Set persist-credentials: false on checkout actions.
  • 6bff2d8 Bump JSpecify to 1.0.1.
  • 6922aea Bump the github-actions group across 1 directory with 2 updates
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0

Release notes

Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.

3.11.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • c186d05 [maven-release-plugin] prepare release maven-dependency-plugin-3.11.0
  • 3712611 Fix artifact relocation support
  • e873e0e Manage ASM version 9.10 to support JDK 27
  • 70b5356 fix: fix addParentPoms=true causes repositories to be ignored. (#1585)
  • 51d8939 Fix false positive in analyze-exclusions with transitive dependency exclusion...
  • 02b865b Bump eu.maveniverse.maven.domtrip:domtrip-core from 1.5.0 to 1.5.1
  • 04f4de1 Bump eu.maveniverse.maven.domtrip:domtrip-maven from 1.5.0 to 1.5.1
  • 2812490 Bump mavenVersion from 3.9.15 to 3.9.16
  • ce117da Bump org.apache.maven.shared:maven-dependency-analyzer
  • aea7a64 Prevent NPE (#1622)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 12.2.0 to 13.0.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 13.0.0

What's Changed

Bumps the maven-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.5.1` | `4.6.1` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.3` | `3.3.0` |
| org.slf4j:slf4j-api | `2.0.17` | `2.0.19` |
| org.slf4j:slf4j-simple | `2.0.17` | `2.0.19` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.3` |
| org.slf4j:slf4j-simple | `2.0.17` | `2.0.19` |
| [com.google.jimfs:jimfs](https://github.com/google/jimfs) | `1.3.1` | `1.3.2` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.10.0` | `3.11.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.6.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.2.0` | `13.0.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.10.0` | `0.11.0` |
| org.apache.maven:apache-maven | `3.9.12` | `3.9.16` |



Updates `com.auth0:java-jwt` from 4.5.1 to 4.6.1
- [Release notes](https://github.com/auth0/java-jwt/releases)
- [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md)
- [Commits](auth0/java-jwt@4.5.1...4.6.1)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.3 to 3.3.0
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.2.3...v3.3.0)

Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.19

Updates `org.slf4j:slf4j-simple` from 2.0.17 to 2.0.19

Updates `org.junit.jupiter:junit-jupiter` from 6.0.3 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.3)

Updates `org.slf4j:slf4j-simple` from 2.0.17 to 2.0.19

Updates `com.google.jimfs:jimfs` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/google/jimfs/releases)
- [Commits](google/jimfs@v1.3.1...v1.3.2)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.10.0 to 3.11.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.10.0...maven-dependency-plugin-3.11.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

Updates `org.owasp:dependency-check-maven` from 12.2.0 to 13.0.0
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.0...v13.0.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.14...v0.8.15)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.11.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `org.apache.maven:apache-maven` from 3.9.12 to 3.9.16

---
updated-dependencies:
- dependency-name: com.auth0:java-jwt
  dependency-version: 4.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.google.jimfs:jimfs
  dependency-version: 1.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 13.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 25, 2026
@infeo infeo self-assigned this Sep 25, 2026
@infeo
infeo merged commit 66e1379 into develop Sep 25, 2026
26 of 27 checks passed
@infeo infeo added this to the next milestone Sep 25, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-dependencies-6d85413b0a branch September 25, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant