Skip to content

Bump the dependencies group across 1 directory with 52 updates#4109

Open
dependabot[bot] wants to merge 2 commits into2.xfrom
dependabot/maven/2.x/dependencies-7ba277e27d
Open

Bump the dependencies group across 1 directory with 52 updates#4109
dependabot[bot] wants to merge 2 commits into2.xfrom
dependabot/maven/2.x/dependencies-7ba277e27d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026 •
edited
Loading

Bumps the dependencies group with 52 updates in the / directory:

Package From To
org.apache.commons:commons-compress 1.27.1 1.28.0
org.apache.commons:commons-csv 1.14.0 1.14.1
commons-logging:commons-logging 1.3.5 1.3.6
com.fasterxml.jackson:jackson-bom 2.19.2 2.21.3
org.jctools:jctools-core 4.0.5 4.0.6
org.apache.kafka:kafka-clients 3.9.1 3.9.2
org.apache.rat:apache-rat-plugin 0.16.1 0.18
org.apache.groovy:groovy-bom 4.0.27 5.0.5
org.junit:junit-bom 5.13.4 6.0.3
org.junit.jupiter:junit-jupiter-engine 5.13.4 6.0.3
org.apache.activemq:activemq-broker 6.1.7 6.2.5
org.eclipse.angus:angus-activation 2.0.2 2.0.3
org.assertj:assertj-core 3.27.3 3.27.7
com.code-intelligence:jazzer 0.24.0 0.30.0
com.code-intelligence:jazzer-api 0.24.0 0.30.0
commons-codec:commons-codec 1.18.0 1.22.0
org.apache.commons:commons-dbcp2 2.13.0 2.14.0
commons-io:commons-io 2.19.0 2.22.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
org.apache.commons:commons-pool2 2.12.1 2.13.1
com.google.guava:guava 33.4.8-jre 33.6.0-jre
com.google.guava:guava-testlib 33.4.8-jre 33.6.0-jre
jakarta.activation:jakarta.activation-api 2.1.3 2.1.4
org.eclipse.angus:jakarta.mail 2.0.3 2.0.5
jakarta.mail:jakarta.mail-api 2.1.3 2.1.5
com.google.code.java-allocation-instrumenter:java-allocation-instrumenter 3.3.4 3.3.5
org.jmdns:jmdns 3.6.1 3.6.3
net.java.dev.jna:jna 5.17.0 5.18.1
co.elastic.logging:log4j2-ecs-layout 1.7.0 1.8.0
org.apache.maven:maven-core 3.9.10 3.9.15
org.apache.maven:maven-model 3.9.10 3.9.15
org.openjdk.nashorn:nashorn-core 15.6 15.7
org.eclipse.platform:org.eclipse.osgi 3.23.100 3.24.100
org.codehaus.plexus:plexus-utils 3.6.0 3.6.1
org.codehaus.woodstox:stax2-api 4.2.2 4.3.0
org.xmlunit:xmlunit-core 2.10.3 2.11.0
org.xmlunit:xmlunit-matchers 2.10.3 2.11.0
org.tukaani:xz 1.10 1.12
com.github.luben:zstd-jni 1.5.7-4 1.5.7-8
biz.aQute.bnd:biz.aQute.bnd.annotation 7.1.0 7.2.3
com.google.errorprone:error_prone_annotations 2.38.0 2.49.0
io.fabric8:docker-maven-plugin 0.46.0 0.48.1
org.gradlex:gradle-module-metadata-maven-plugin 1.1 1.2
com.github.jnr:jnr-ffi 2.2.18 2.2.19
org.bouncycastle:bcpkix-jdk18on 1.83 1.84
org.json:json 20250517 20251224
co.elastic.clients:elasticsearch-java 9.2.0 9.3.4
org.elasticsearch.client:elasticsearch-rest-client 9.2.0 9.3.4
org.mongodb:bson 5.6.1 5.7.0
org.mongodb:mongodb-driver-core 5.6.1 5.7.0
org.mongodb:mongodb-driver-sync 5.6.1 5.7.0
org.springframework.cloud:spring-cloud-context 4.3.0 5.0.1

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 

  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 

  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 

  •        Add GzipParameters.toString(). Thanks to Gary Gregory.
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 

  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 

  •        Add ZipFile.stream(). Thanks to Gary Gregory. 

  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 

  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 

  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory.
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory.
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory.
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

... (truncated)

Commits

Updates org.apache.commons:commons-csv from 1.14.0 to 1.14.1

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV 1.14.1 Release Notes

The Apache Commons CSV team is pleased to announce the release of Apache Commons CSV 1.14.1.

This document contains the release notes for the 1.14.1 version of Apache Commons CSV. Commons CSV reads and writes files in Comma Separated Value (CSV) format variations.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version include:

Fixed Bugs

  • CSV-318: CSVPrinter.printRecord(Stream) hangs if given a parallel stream. Thanks to Joseph Shraibman, Gary Gregory.
  • CSV-318: CSVPrinter now uses an internal lock instead of synchronized methods. Thanks to Joseph Shraibman, Gary Gregory.
  •       org.apache.commons.csv.CSVPrinter.printRecords(ResultSet) now writes one record at a time using a lock. Thanks to Gary Gregory.

Changes

  •       Bump org.apache.commons:commons-parent from 81 to 85 [#542](https://github.com/apache/commons-csv/issues/542). Thanks to Gary Gregory, Dependabot.

  •       Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.

  •       Bump com.opencsv:opencsv from 5.10 to 5.11.2 [#545](https://github.com/apache/commons-csv/issues/545), [#551](https://github.com/apache/commons-csv/issues/551), [#553](https://github.com/apache/commons-csv/issues/553). Thanks to Gary Gregory, Dependabot.

  •       Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#556](https://github.com/apache/commons-csv/issues/556). Thanks to Gary Gregory, Dependabot.

  •       Bump commons-codec:commons-codec from 1.18.0 to 1.19.0. Thanks to Gary Gregory.

Historical list of changes: https://commons.apache.org/proper/commons-csv/changes.html

For complete information on Apache Commons CSV, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CSV website:

https://commons.apache.org/proper/commons-csv/

Download page: https://commons.apache.org/proper/commons-csv/download_csv.cgi

Have fun! -Apache Commons CSV team

Commits
  • e14ef86 Ignore macOS file
  • d8724bf Prepare for the release candidate 1.14.1 RC1
  • b76971c Prepare for the next release candidate
  • b66814e Merge pull request #557 from apache/dependabot/github_actions/github/codeql-a...
  • 9c95e92 Bump github/codeql-action from 3.29.2 to 3.29.4
  • 1fb3716 Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
  • 7b72c50 Merge some string literals
  • 9658373 Update the GitHub pull request template for AI
  • 67192a9 Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • 59164c8 Bump com.opencsv:opencsv from 5.11.1 to 5.11.2 #553
  • Additional commits viewable in compare view

Updates commons-logging:commons-logging from 1.3.5 to 1.3.6

Changelog

Sourced from commons-logging:commons-logging's changelog.

Apache Commons Logging 1.3.6 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.6.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

Fixed Bugs

  •           Fix running spotbugs:check: Unable to parse configuration of mojo. Thanks to Gary Gregory.

  •           Update deprecated call in PathableClassLoader.addLogicalLib(String). Thanks to Gary Gregory.

  •           Fix malformed Javadoc comments. Thanks to Gary Gregory.

  •           Fix log level in Slf4jLogFactory.error(Object, Throwable) [#416](https://github.com/apache/commons-logging/issues/416). Thanks to Gary Gregory.

Changes

  •           Bump org.apache.commons:commons-parent from 81 to 97 [#361](https://github.com/apache/commons-logging/issues/361), [#367](https://github.com/apache/commons-logging/issues/367), [#388](https://github.com/apache/commons-logging/issues/388), [#409](https://github.com/apache/commons-logging/issues/409), [#410](https://github.com/apache/commons-logging/issues/410). Thanks to Gary Gregory, Dependabot.

  •           Bump org.slf4j:slf4j-api from 2.0.16 to 2.0.17 [#344](https://github.com/apache/commons-logging/issues/344). Thanks to Gary Gregory, Dependabot.

  •           Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.13.0 to 1.14.0 [#360](https://github.com/apache/commons-logging/issues/360). Thanks to Gary Gregory, Dependabot.

  •           Bump log4j2.version from 2.24.3 to 2.25.3 [#371](https://github.com/apache/commons-logging/issues/371), [#412](https://github.com/apache/commons-logging/issues/412). Thanks to Gary Gregory, Dependabot.

  •           Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 [#373](https://github.com/apache/commons-logging/issues/373). Thanks to Gary Gregory, Dependabot.

  •           Bump ch.qos.logback:logback-core from 1.3.14 to 1.3.16 [#411](https://github.com/apache/commons-logging/issues/411).. Thanks to Gary Gregory, Dependabot.

Historical list of changes: https://commons.apache.org/proper/commons-logging/changes.html

Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi

For complete information on Apache Commons Logging, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Logging website:

https://commons.apache.org/proper/commons-logging/

Commits
  • 141c9ea Prepare for the release candidate 1.3.6 RC1
  • 05cbf46 Prepare for release
  • 3ea5f4d Prepare for the next release candidate
  • d8e5e80 Simplify
  • 694754e Simpler description.
  • 97e7660 Fix log level in Slf4jLogFactory.error(Object, Throwable) #416
  • 07452cc fix LogLevel (#416)
  • c8c20de Bump github/codeql-action from 4.32.4 to 4.32.5
  • b879d3e Bump org.apache.commons:commons-parent from 96 to 97.
  • 5b2e759 Add security page.
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.19.2 to 2.21.3

Commits
  • 374fbd0 [maven-release-plugin] prepare release jackson-bom-2.21.3
  • 7059df7 Prep for 2.21.3 release
  • 2fd60bd Merge branch '2.20' into 2.21
  • b82a364 Merge branch '2.19' into 2.20
  • ef4e013 Merge branch '2.18' into 2.19
  • 536ae51 Post-release dep version bump
  • 536c533 [maven-release-plugin] prepare for next development iteration
  • 426b778 [maven-release-plugin] prepare release jackson-bom-2.18.7
  • a73cda9 Prep for 2.18.7 release
  • 76b4a05 Post-release dep version bump
  • Additional commits viewable in compare view

Updates org.jctools:jctools-core from 4.0.5 to 4.0.6

Release notes

Sourced from org.jctools:jctools-core's releases.

Add VarHandle queues and other minor fixups

NOTE: This will be the last release with JDK6 bytecode for jctools-core. The next release will be 5.0.0 and will compile with the 1.8 target, allowing for method handles.

This release has 2 artifacts. The old jctools-core with the following changes:

  • Where plain access to field is used by queues, the field is not volatile and volatile access is done using Unsafe.
  • Use a generated ConcurrentCircularXXXQueue instead of hand rolled base classes in generated code.
  • Padding blocks formatting is improved in generated code.

The release introduces a new artifact, jctools-core-jdk11 which included generated VarHandle queues (padded and unpadded). These queues do not rely on Unsafe, and offer better performance than the AtomicFieldUpdater generated code. We expect many users will prefer these variants going forward to break their reliance on Unsafe.

The majority of the VarHandle work is a great contribution from @​amarziali , thanks!!! We also thank @​franz1981 for his help reviewing and profiling the code.

Commits
  • 81fc9f7 Add VH package info
  • b43fb9a Remove la optimization from VH queues in the absence of evidence it improve...
  • b8b6eb5 Improve baseline
  • e06b852 Generate atomic queues after builder changes
  • 97aa7b4 Prep atomic generator for generating base classes
  • e17024a Generate VH LinkedArray queues
  • 85f8938 Regenerate queues with padding block
  • 845e8ff Fix up volatile/plain fields access and prep for LinkedArray queues
  • dc94426 Nicer formatting for padding blocks
  • 7c77981 Fix test timeout due to slow clear on linked queues
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 3.9.1 to 3.9.2

Updates org.apache.rat:apache-rat-plugin from 0.16.1 to 0.18

Updates org.apache.groovy:groovy-bom from 4.0.27 to 5.0.5

Commits

Updates org.junit:junit-bom from 5.13.4 to 6.0.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

... (truncated)

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.13.4 to 6.0.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

... (truncated)

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.apache.activemq:activemq-broker from 6.1.7 to 6.2.5

Release notes

Sourced from org.apache.activemq:activemq-broker's releases.

Apache ActiveMQ 6.2.5

What's Changed

Full Changelog: apache/activemq@activemq-6.2.4...activemq-6.2.5

Apache ActiveMQ 6.2.4

What's Changed

Full Changelog: apache/activemq@activemq-6.2.3...activemq-6.2.4

Apache ActiveMQ 6.2.3

What's Changed

Full Changelog: apache/activemq@activemq-6.2.2...activemq-6.2.3

Apache ActiveMQ 6.2.2

What's Changed

... (truncated)

Commits

Updates org.eclipse.angus:angus-activation from 2.0.2 to 2.0.3

Commits
  • 6eff4c5 Prepare release org.eclipse.angus:angus-activation-project:2.0.3
  • bcb3375 jaf api 2.1.4 (#55)
  • 84e5a0d Rename resources so javax and jakarta can live in same classpath #174
  • c3c4d67 Merge pull request #46 from eclipse-ee4j/2.0.2-RELEASE
  • 354de40 Update README.md
  • c62baf3 Update TCK-Results.md
  • 6cda1e7 Prepare next development cycle for 2.1.0-SNAPSHOT
  • See full diff in compare view

Updates org.assertj:assertj-core from 3.27.3 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

  • Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

  • Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.18.3
  • Upgrade to JUnit BOM 5.14.1

Guava

  • Upgrade to Guava 33.5.0-jre

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

... (truncated)

Commits
  • e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
  • 85ca7eb Deprecate XmlStringPrettyFormatter
  • 77081dc Merge commit from fork
  • b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
  • 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
  • d393ef1 Abort tests when symbolic links cannot be created (#3788)
  • 2212433 Add IntelliJ custom inspection for test class names
  • 5717d02 Update JetBrains icon
  • a8ec20b Add icon for JetBrains products
  • c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
  • Additional commits viewable in compare view

Updates com.code-intelligence:jazzer from 0.24.0 to 0.30.0

Release notes

Sourced from com.code-intelligence:jazzer's releases.

v0.30.0

What's Changed

Full Changelog: CodeIntelligenceTesting/jazzer@v0.29.1...v0.30.0

v0.29.1

What's Changed

@dependabot dependabot Bot added dependencies Related to third party dependency updates or migrations java Pull requests that update Java code labels May 1, 2026
@ppkarwasz
Copy link
Copy Markdown
Member

ppkarwasz commented May 2, 2026

@dependabot recreate

@dependabot
Bump the dependencies group across 1 directory with 52 updates
e072170 
Bumps the dependencies group with 52 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.27.1` | `1.28.0` |
| [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.14.0` | `1.14.1` |
| [commons-logging:commons-logging](https://github.com/apache/commons-logging) | `1.3.5` | `1.3.6` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.19.2` | `2.21.3` |
| [org.jctools:jctools-core](https://github.com/JCTools/JCTools) | `4.0.5` | `4.0.6` |
| org.apache.kafka:kafka-clients | `3.9.1` | `3.9.2` |
| org.apache.rat:apache-rat-plugin | `0.16.1` | `0.18` |
| [org.apache.groovy:groovy-bom](https://github.com/apache/groovy) | `4.0.27` | `5.0.5` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.3` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.3` |
| [org.apache.activemq:activemq-broker](https://github.com/apache/activemq) | `6.1.7` | `6.2.5` |
| [org.eclipse.angus:angus-activation](https://github.com/eclipse-ee4j/angus-activation) | `2.0.2` | `2.0.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.3` | `3.27.7` |
| [com.code-intelligence:jazzer](https://github.com/CodeIntelligenceTesting/jazzer) | `0.24.0` | `0.30.0` |
| [com.code-intelligence:jazzer-api](https://github.com/CodeIntelligenceTesting/jazzer) | `0.24.0` | `0.30.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.18.0` | `1.22.0` |
| org.apache.commons:commons-dbcp2 | `2.13.0` | `2.14.0` |
| commons-io:commons-io | `2.19.0` | `2.22.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| org.apache.commons:commons-pool2 | `2.12.1` | `2.13.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.6.0-jre` |
| [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.8-jre` | `33.6.0-jre` |
| [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api) | `2.1.3` | `2.1.4` |
| org.eclipse.angus:jakarta.mail | `2.0.3` | `2.0.5` |
| [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) | `2.1.3` | `2.1.5` |
| [com.google.code.java-allocation-instrumenter:java-allocation-instrumenter](https://github.com/google/allocation-instrumenter) | `3.3.4` | `3.3.5` |
| [org.jmdns:jmdns](https://github.com/jmdns/jmdns) | `3.6.1` | `3.6.3` |
| [net.java.dev.jna:jna](https://github.com/java-native-access/jna) | `5.17.0` | `5.18.1` |
| [co.elastic.logging:log4j2-ecs-layout](https://github.com/elastic/ecs-logging-java) | `1.7.0` | `1.8.0` |
| org.apache.maven:maven-core | `3.9.10` | `3.9.15` |
| org.apache.maven:maven-model | `3.9.10` | `3.9.15` |
| [org.openjdk.nashorn:nashorn-core](https://github.com/openjdk/nashorn) | `15.6` | `15.7` |
| [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) | `3.23.100` | `3.24.100` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `3.6.0` | `3.6.1` |
| [org.codehaus.woodstox:stax2-api](https://github.com/FasterXML/stax2-api) | `4.2.2` | `4.3.0` |
| [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.11.0` |
| [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.11.0` |
| [org.tukaani:xz](https://github.com/tukaani-project/xz-java) | `1.10` | `1.12` |
| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-4` | `1.5.7-8` |
| [biz.aQute.bnd:biz.aQute.bnd.annotation](https://github.com/bndtools/bnd) | `7.1.0` | `7.2.3` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.38.0` | `2.49.0` |
| [io.fabric8:docker-maven-plugin](https://github.com/fabric8io/docker-maven-plugin) | `0.46.0` | `0.48.1` |
| [org.gradlex:gradle-module-metadata-maven-plugin](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin) | `1.1` | `1.2` |
| [com.github.jnr:jnr-ffi](https://github.com/jnr/jnr-ffi) | `2.2.18` | `2.2.19` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.83` | `1.84` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20250517` | `20251224` |
| [co.elastic.clients:elasticsearch-java](https://github.com/elastic/elasticsearch-java) | `9.2.0` | `9.3.4` |
| [org.elasticsearch.client:elasticsearch-rest-client](https://github.com/elastic/elasticsearch) | `9.2.0` | `9.3.4` |
| [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.6.1` | `5.7.0` |
| [org.mongodb:mongodb-driver-core](https://github.com/mongodb/mongo-java-driver) | `5.6.1` | `5.7.0` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.6.1` | `5.7.0` |
| [org.springframework.cloud:spring-cloud-context](https://github.com/spring-cloud/spring-cloud-commons) | `4.3.0` | `5.0.1` |



Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.27.1...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-csv` from 1.14.0 to 1.14.1
- [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-csv@rel/commons-csv-1.14.0...rel/commons-csv-1.14.1)

Updates `commons-logging:commons-logging` from 1.3.5 to 1.3.6
- [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-logging@rel/commons-logging-1.3.5...rel/commons-logging-1.3.6)

Updates `com.fasterxml.jackson:jackson-bom` from 2.19.2 to 2.21.3
- [Commits](FasterXML/jackson-bom@jackson-bom-2.19.2...jackson-bom-2.21.3)

Updates `org.jctools:jctools-core` from 4.0.5 to 4.0.6
- [Release notes](https://github.com/JCTools/JCTools/releases)
- [Changelog](https://github.com/JCTools/JCTools/blob/master/RELEASE-NOTES.md)
- [Commits](JCTools/JCTools@v4.0.5...v4.0.6)

Updates `org.apache.kafka:kafka-clients` from 3.9.1 to 3.9.2

Updates `org.apache.rat:apache-rat-plugin` from 0.16.1 to 0.18

Updates `org.apache.groovy:groovy-bom` from 4.0.27 to 5.0.5
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.junit:junit-bom` from 5.13.4 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.3)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.3)

Updates `org.apache.activemq:activemq-broker` from 6.1.7 to 6.2.5
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-6.1.7...activemq-6.2.5)

Updates `org.eclipse.angus:angus-activation` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/eclipse-ee4j/angus-activation/releases)
- [Commits](eclipse-ee4j/angus-activation@2.0.2...2.0.3)

Updates `org.assertj:assertj-core` from 3.27.3 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.3...assertj-build-3.27.7)

Updates `com.code-intelligence:jazzer` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.30.0)

Updates `com.code-intelligence:jazzer-api` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.30.0)

Updates `com.code-intelligence:jazzer-api` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.30.0)

Updates `commons-codec:commons-codec` from 1.18.0 to 1.22.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.18.0...rel/commons-codec-1.22.0)

Updates `org.apache.commons:commons-dbcp2` from 2.13.0 to 2.14.0

Updates `commons-io:commons-io` from 2.19.0 to 2.22.0

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `org.apache.commons:commons-pool2` from 2.12.1 to 2.13.1

Updates `com.google.guava:guava` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `jakarta.activation:jakarta.activation-api` from 2.1.3 to 2.1.4
- [Release notes](https://github.com/jakartaee/jaf-api/releases)
- [Commits](jakartaee/jaf-api@2.1.3...2.1.4)

Updates `org.eclipse.angus:jakarta.mail` from 2.0.3 to 2.0.5

Updates `jakarta.mail:jakarta.mail-api` from 2.1.3 to 2.1.5
- [Release notes](https://github.com/jakartaee/mail-api/releases)
- [Commits](jakartaee/mail-api@2.1.3...2.1.5)

Updates `com.google.code.java-allocation-instrumenter:java-allocation-instrumenter` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/google/allocation-instrumenter/releases)
- [Commits](google/allocation-instrumenter@java-allocation-instrumenter-3.3.4...java-allocation-instrumenter-3.3.5)

Updates `org.jmdns:jmdns` from 3.6.1 to 3.6.3
- [Release notes](https://github.com/jmdns/jmdns/releases)
- [Changelog](https://github.com/jmdns/jmdns/blob/main/CHANGELOG.txt)
- [Commits](jmdns/jmdns@3.6.1...v3.6.3)

Updates `net.java.dev.jna:jna` from 5.17.0 to 5.18.1
- [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md)
- [Commits](java-native-access/jna@5.17.0...5.18.1)

Updates `co.elastic.logging:log4j2-ecs-layout` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/elastic/ecs-logging-java/releases)
- [Commits](elastic/ecs-logging-java@v1.7.0...v1.8.0)

Updates `org.apache.maven:maven-core` from 3.9.10 to 3.9.15

Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.15

Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.15

Updates `org.openjdk.nashorn:nashorn-core` from 15.6 to 15.7
- [Changelog](https://github.com/openjdk/nashorn/blob/main/CHANGELOG.md)
- [Commits](openjdk/nashorn@release-15.6...release-15.7)

Updates `org.eclipse.platform:org.eclipse.osgi` from 3.23.100 to 3.24.100
- [Commits](https://github.com/eclipse-equinox/equinox/commits)

Updates `org.codehaus.plexus:plexus-utils` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.0...plexus-utils-3.6.1)

Updates `org.codehaus.woodstox:stax2-api` from 4.2.2 to 4.3.0
- [Commits](FasterXML/stax2-api@stax2-api-4.2.2...stax2-api-4.3.0)

Updates `org.xmlunit:xmlunit-core` from 2.10.3 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0)

Updates `org.tukaani:xz` from 1.10 to 1.12
- [Release notes](https://github.com/tukaani-project/xz-java/releases)
- [Changelog](https://github.com/tukaani-project/xz-java/blob/master/NEWS.md)
- [Commits](tukaani-project/xz-java@v1.10...v1.12)

Updates `com.github.luben:zstd-jni` from 1.5.7-4 to 1.5.7-8
- [Commits](luben/zstd-jni@v1.5.7-4...v1.5.7-8)

Updates `biz.aQute.bnd:biz.aQute.bnd.annotation` from 7.1.0 to 7.2.3
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.2.3)

Updates `com.google.errorprone:error_prone_annotations` from 2.38.0 to 2.49.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.38.0...v2.49.0)

Updates `io.fabric8:docker-maven-plugin` from 0.46.0 to 0.48.1
- [Release notes](https://github.com/fabric8io/docker-maven-plugin/releases)
- [Changelog](https://github.com/fabric8io/docker-maven-plugin/blob/master/doc/changelog.md)
- [Commits](fabric8io/docker-maven-plugin@v0.46.0...v0.48.1)

Updates `org.gradlex:gradle-module-metadata-maven-plugin` from 1.1 to 1.2
- [Release notes](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin/releases)
- [Changelog](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin/blob/main/CHANGELOG.md)
- [Commits](gradlex-org/gradle-module-metadata-maven-plugin@v1.1...v1.2)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.3)

Updates `com.github.jnr:jnr-ffi` from 2.2.18 to 2.2.19
- [Commits](jnr/jnr-ffi@jnr-ffi-2.2.18...jnr-ffi-2.2.19)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.json:json` from 20250517 to 20251224
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2025051...2025122)

Updates `co.elastic.clients:elasticsearch-java` from 9.2.0 to 9.3.4
- [Release notes](https://github.com/elastic/elasticsearch-java/releases)
- [Changelog](https://github.com/elastic/elasticsearch-java/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch-java@v9.2.0...v9.3.4)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.0 to 9.3.4
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch@v9.2.0...v9.3.4)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.0 to 9.3.4
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch@v9.2.0...v9.3.4)

Updates `org.mongodb:bson` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.7.0)

Updates `org.mongodb:mongodb-driver-core` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.7.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.7.0)

Updates `org.mongodb:mongodb-driver-core` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.7.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.6.1 to 5.7.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.7.0)

Updates `org.springframework.cloud:spring-cloud-context` from 4.3.0 to 5.0.1
- [Release notes](https://github.com/spring-cloud/spring-cloud-commons/releases)
- [Commits](spring-cloud/spring-cloud-commons@v4.3.0...v5.0.1)

---
updated-dependencies:
- dependency-name: biz.aQute.bnd:biz.aQute.bnd.annotation
  dependency-version: 7.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: co.elastic.clients:elasticsearch-java
  dependency-version: 9.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: co.elastic.logging:log4j2-ecs-layout
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.code-intelligence:jazzer
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.code-intelligence:jazzer-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.code-intelligence:jazzer-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.jnr:jnr-ffi
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.google.code.java-allocation-instrumenter:java-allocation-instrumenter
  dependency-version: 3.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-logging:commons-logging
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.fabric8:docker-maven-plugin
  dependency-version: 0.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jakarta.activation:jakarta.activation-api
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jakarta.mail:jakarta.mail-api
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: net.java.dev.jna:jna
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.activemq:activemq-broker
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-csv
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-pool2
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.groovy:groovy-bom
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 3.9.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.rat:apache-rat-plugin
  dependency-version: '0.18'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.woodstox:stax2-api
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.angus:angus-activation
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.angus:jakarta.mail
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.platform:org.eclipse.osgi
  dependency-version: 3.24.100
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.3.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.gradlex:gradle-module-metadata-maven-plugin
  dependency-version: '1.2'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jctools:jctools-core
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jmdns:jmdns
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.json:json
  dependency-version: '20251224'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.mongodb:bson
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.openjdk.nashorn:nashorn-core
  dependency-version: '15.7'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.springframework.cloud:spring-cloud-context
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.tukaani:xz
  dependency-version: '1.12'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/maven/2.x/dependencies-7ba277e27d branch from 67af160 to e072170 Compare May 2, 2026 21:59
@github-actions github-actions Bot enabled auto-merge (squash) May 2, 2026 21:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Related to third party dependency updates or migrations java Pull requests that update Java code

Projects

Log4j pull request tracker
Status: No status

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ppkarwasz