Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the minor-java-dependencies group with 10 updates in the / directory:

Package From To
io.micrometer:micrometer-bom 1.15.3 1.15.4
com.google.cloud:libraries-bom 26.67.0 26.69.0
ch.qos.logback:logback-core 1.5.18 1.5.19
ch.qos.logback:logback-classic 1.5.18 1.5.19
org.yaml:snakeyaml 2.4 2.5
org.signal:libsignal-server 0.79.0 0.82.1
org.assertj:assertj-core 3.27.4 3.27.6
org.codehaus.mojo:versions-maven-plugin 2.18.0 2.19.1
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4

Updates io.micrometer:micrometer-bom from 1.15.3 to 1.15.4

Release notes

Sourced from io.micrometer:micrometer-bom's releases.

1.15.4

🐞 Bug Fixes

  • NettyAllocatorMetrics should not prevent collecting executors #6641
  • [JOOQ] MetricsDSLContext - fetchExists doesn't report provided tags #6583

📔 Documentation

  • add compatibility note for jOOQ overload delegation #6681

🔨 Dependency Upgrades

  • Bump dropwizard-metrics from 4.2.33 to 4.2.36 #6677

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​HeeChanN

Commits
  • 68c4d22 Merge branch '1.14.x' into 1.15.x
  • 2c77f86 Bump org.ehcache:ehcache from 3.10.8 to 3.10.9 (#6698)
  • 05c9c05 Bump org.apache.felix:org.apache.felix.scr from 2.2.12 to 2.2.14 (#6699)
  • dc9285f Bump org.apache.felix:org.apache.felix.scr from 2.2.12 to 2.2.14 (#6696)
  • 2840e48 Bump org.ehcache:ehcache from 3.10.8 to 3.10.9 (#6697)
  • 6ad623e Bump io.netty:netty-bom from 4.1.124.Final to 4.1.126.Final (#6691)
  • ada8cff Bump io.netty:netty-bom from 4.1.124.Final to 4.1.126.Final (#6690)
  • f4ef3e7 Bump dropwizard-metrics from 4.2.35 to 4.2.36 (#6688)
  • 3cd227b Bump dropwizard-metrics from 4.2.35 to 4.2.36 (#6685)
  • 9303ddb add compatibility note for jOOQ overload delegation (#6681)
  • Additional commits viewable in compare view

Updates com.google.cloud:libraries-bom from 26.67.0 to 26.69.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

v26.69.0

GCP Libraries BOM 26.69.0

Here are the differences from the previous version (26.68.0)

The group ID of the following artifacts is com.google.cloud.

Notable Changes

google-cloud-spanner 6.101.1 (prev: 6.100.0)

google-cloud-spanner-jdbc 2.33.0 (prev: 2.32.3)

  • Add transaction_timeout connection property (#2226) (092df54)

google-cloud-storage 2.58.0 (prev: 2.57.0)

  • storagecontrol: Add GetIamPolicy, SetIamPolicy, and TestIamPermissions RPCs (c884551)

  • Fix appendable upload finalization race condition (#3295) (485be18)

  • Fix IllegalMonitorStateException thrown from BlobAppendableUpload.isOpen() (#3302) (aa90468)

  • Update object context diff logic to be shallow rather than deep (#3287) (2fd15f6)

Other libraries

  • [aiplatform] add private_model_server_enabled to in Endpoint.proto (bd1762a)

  • [apihub] Introduce new services for data collection (ApiHubCollect) and curation (ApiHubCurate) (bd1762a)

  • [batch] added new provisioning models (bd1762a)

  • [compute] Update Compute Engine v1 API to revision 20250902 (bd1762a)

  • [eventarc] add new fields to Eventarc resources (bd1762a)

  • [gkehub] add k8s_git_version field (bd1762a)

  • [texttospeech] add Gemini TTS Multispeaker API fields (bd1762a)

  • [video-live-stream] Added H.265 (HEVC) codec support (bd1762a)

  • update dependency com.google.cloud:sdk-platform-java-config to v3.52.2 (#11747) (deb0ed9)

Version Upgrades

Minor Version Upgrades

  • google-cloud-apigee-registry:0.75.0 (prev:0.74.0; Release Notes: v0.75.0)
  • google-cloud-video-intelligence:2.74.0 (prev:2.73.0; Release Notes: v2.74.0)
  • google-cloud-assured-workloads:2.75.0 (prev:2.74.0; Release Notes: v2.75.0)
  • google-cloud-speech:4.70.0 (prev:4.69.0; Release Notes: v4.70.0)
  • google-cloud-eventarc-publishing:0.75.0 (prev:0.74.0; Release Notes: v0.75.0)
  • google-cloud-cloudsecuritycompliance:0.2.0 (prev:0.1.0; Release Notes: v0.2.0)
  • google-cloud-workstations:0.63.0 (prev:0.62.0; Release Notes: v0.63.0)

... (truncated)

Commits
  • 9212b8a chore: release main (#7213)
  • 1e9b8c7 deps: update dependency com.google.cloud:google-cloud-datastore-bom to v2.32....
  • e3debca deps: update dependency com.google.cloud:google-cloud-spanner-jdbc to v2.33.0...
  • a516b51 deps: update dependency com.google.cloud:google-cloud-spanner-bom to v6.101.1...
  • a59bacc deps: update dependency com.google.cloud:google-cloud-pubsublite-bom to v1.15...
  • 4fac3db deps: update dependency com.google.cloud:google-cloud-bigquery to v2.55.1 (#7...
  • 38ec3ff deps: update dependency com.google.cloud:google-cloud-nio to v0.128.5 (#7204)
  • 9c8625b deps: update dependency com.google.cloud:gapic-libraries-bom to v1.69.0 (#7206)
  • 98443be deps: update dependency com.google.cloud:google-cloud-storage-bom to v2.58.0 ...
  • bce4761 deps: update dependency com.google.cloud:google-cloud-logging-logback to v0.1...
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.18 to 1.5.19

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its potential impact on performance.

• In ViewStatusMessagesServlet, restrict processing of "Clear" button to POST method. This change was proposed by Ralf Wiebicke who also provided the relevant PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e572d4f87f06674788eb3ca7148e8d1dffc615fa associated with the tag v_1.5.19. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e572d4f skip deployment of blackbox and example modules, published as version 1.5.9
  • 4adae8b add plugin for Maven Central deployment
  • ee70cf4 prepare release 1.5.19
  • 20802cf mindor javadoc changes
  • 8116069 comment out code in COWArrayListConcurrencyTest to make IDE happy
  • 7f65340 minor changes
  • 8d2262d soften warning on using ConsoleAppender
  • c76fed3 ViewStatusMessagesServlet requires method POST for button 'Clear' (#971)
  • 61f6a25 disallow new in if condition attribute in config files
  • a07cfd5 logback-core: fix spelling errors (#956)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.18 to 1.5.19

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its potential impact on performance.

• In ViewStatusMessagesServlet, restrict processing of "Clear" button to POST method. This change was proposed by Ralf Wiebicke who also provided the relevant PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e572d4f87f06674788eb3ca7148e8d1dffc615fa associated with the tag v_1.5.19. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e572d4f skip deployment of blackbox and example modules, published as version 1.5.9
  • 4adae8b add plugin for Maven Central deployment
  • ee70cf4 prepare release 1.5.19
  • 20802cf mindor javadoc changes
  • 8116069 comment out code in COWArrayListConcurrencyTest to make IDE happy
  • 7f65340 minor changes
  • 8d2262d soften warning on using ConsoleAppender
  • c76fed3 ViewStatusMessagesServlet requires method POST for button 'Clear' (#971)
  • 61f6a25 disallow new in if condition attribute in config files
  • a07cfd5 logback-core: fix spelling errors (#956)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.18 to 1.5.19

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its potential impact on performance.

• In ViewStatusMessagesServlet, restrict processing of "Clear" button to POST method. This change was proposed by Ralf Wiebicke who also provided the relevant PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e572d4f87f06674788eb3ca7148e8d1dffc615fa associated with the tag v_1.5.19. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e572d4f skip deployment of blackbox and example modules, published as version 1.5.9
  • 4adae8b add plugin for Maven Central deployment
  • ee70cf4 prepare release 1.5.19
  • 20802cf mindor javadoc changes
  • 8116069 comment out code in COWArrayListConcurrencyTest to make IDE happy
  • 7f65340 minor changes
  • 8d2262d soften warning on using ConsoleAppender
  • c76fed3 ViewStatusMessagesServlet requires method POST for button 'Clear' (#971)
  • 61f6a25 disallow new in if condition attribute in config files
  • a07cfd5 logback-core: fix spelling errors (#956)
  • Additional commits viewable in compare view

Updates org.yaml:snakeyaml from 2.4 to 2.5

Commits
  • 015ab57 [maven-release-plugin] prepare for next development iteration
  • 4795519 Update info
  • 9c36c69 Introduce devcontainer
  • 0c5b3e5 fix: add debug level to internal logger
  • a65b131 Merge branch 'master' into devcontainers
  • 788a98b Update changes
  • 556b4bf Add info for devcontainer
  • 0828c39 ops: migrate deployment from OSSRH to Central Portal
  • 30d6a3a Add a test for issue 1108
  • 2da4c6d Remove unrelated code
  • Additional commits viewable in compare view

Updates org.signal:libsignal-server from 0.79.0 to 0.82.1

Changelog

Sourced from org.signal:libsignal-server's changelog.

v0.82.1

  • keytrans: Unify errors with other typed APIs

  • Locally-closed WebSocket connections now explicitly send close code 1000 instead of an empty close frame

Commits
  • d694fc3 Add libsignal-client Android interop build integration test
  • 6511260 node: Make sure we always qualify node: imports
  • 8b10397 node: Explicitly import Buffer from node:buffer
  • 83c0421 net: Add log tag to internal keepalive logs
  • 3d970d2 zkgroup: Use common redemption time validator in backups
  • e516d8e Bump the toolchain to nightly-2025-09-24
  • 90c6651 Java: Update Android Gradle Plugin to 8.10.1 to match Signal-Android.
  • 1e7d61c swift: Get our comments DocC-clean
  • a18d5a4 net: Close websockets with CloseCode::Normal (1000)
  • 0e9c85c keytrans: Unify errors with other typed APIs
  • Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.4 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.17.7 #3947
  • Upgrade to JUnit BOM 5.13.4 #3947

Guava

  • Upgrade to Guava 33.4.8-jre #3947
Commits
  • 716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
  • e189652 Add missing export for org.assertj.core.annotation (#3951)
  • 0cb489e Update Maven Central URL
  • 7286309 [maven-release-plugin] prepare for next development iteration
  • dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
  • 1d0defc Add missing permission to release workflow
  • 844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
  • bdd7106 Add CodeQL custom workflow
  • a93d7e6 Remove EOL Java 24
  • 26ea866 Update production dependencies (#3947)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:versions-maven-plugin from 2.18.0 to 2.19.1

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.19.1

🐛 Bug Fixes

📝 Documentation updates

2.19.0

💥 Breaking changes

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

... (truncated)

Commits
  • 804a5ab [maven-release-plugin] prepare release 2.19.1
  • 4affd18 Resolves #1270: Ensuring thread safety when VersionsHelper (#1273)
  • 6bd8d68 Resolves #1266: Applying the include filter while resolving property associat...
  • 60d273c Resolves #1271: Fixed broken Site links (#1275)
  • 4456751 Revert "Bump org.hibernate:hibernate-validator (#1267)"
  • 3eee9f9 Bump org.hibernate:hibernate-validator (#1267)
  • 9c43c1a [maven-release-plugin] prepare for next development iteration
  • b625a90 [maven-release-plugin] prepare release 2.19.0
  • ba67cf1 Bump actions/stale from 9 to 10
  • 28ac80d Remove manual default from docs for parameters
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the minor-java-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.micrometer:micrometer-bom](https://github.com/micrometer-metrics/micrometer) | `1.15.3` | `1.15.4` |
| [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) | `26.67.0` | `26.69.0` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.19` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.19` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.4` | `2.5` |
| [org.signal:libsignal-server](https://github.com/signalapp/libsignal) | `0.79.0` | `0.82.1` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.4` | `3.27.6` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.18.0` | `2.19.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |



Updates `io.micrometer:micrometer-bom` from 1.15.3 to 1.15.4
- [Release notes](https://github.com/micrometer-metrics/micrometer/releases)
- [Commits](micrometer-metrics/micrometer@v1.15.3...v1.15.4)

Updates `com.google.cloud:libraries-bom` from 26.67.0 to 26.69.0
- [Release notes](https://github.com/googleapis/java-cloud-bom/releases)
- [Changelog](https://github.com/googleapis/java-cloud-bom/blob/main/release-please-config.json)
- [Commits](googleapis/java-cloud-bom@v26.67.0...v26.69.0)

Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.19
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.19)

Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.19
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.19)

Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.19
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.19)

Updates `org.yaml:snakeyaml` from 2.4 to 2.5
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.5..snakeyaml-2.4)

Updates `org.signal:libsignal-server` from 0.79.0 to 0.82.1
- [Release notes](https://github.com/signalapp/libsignal/releases)
- [Changelog](https://github.com/signalapp/libsignal/blob/main/RELEASE_NOTES.md)
- [Commits](signalapp/libsignal@v0.79.0...v0.82.1)

Updates `org.assertj:assertj-core` from 3.27.4 to 3.27.6
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.6)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.18.0 to 2.19.1
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.18.0...2.19.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

---
updated-dependencies:
- dependency-name: io.micrometer:micrometer-bom
  dependency-version: 1.15.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: com.google.cloud:libraries-bom
  dependency-version: 26.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-java-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-java-dependencies
- dependency-name: org.signal:libsignal-server
  dependency-version: 0.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-java-dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-java-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants