deps: Update Non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.plugins:maven-surefire-plugin (source)	3.5.3 -> 3.5.4
org.apache.maven.plugins:maven-javadoc-plugin (source)	3.11.2 -> 3.12.0
org.junit.vintage:junit-vintage-engine (source)	6.0.0 -> 6.0.1
org.junit.platform:junit-platform-commons (source)	6.0.0 -> 6.0.1
org.junit.platform:junit-platform-engine (source)	6.0.0 -> 6.0.1
org.jacoco:jacoco-maven-plugin (source)	0.8.13 -> 0.8.14
org.apache.maven.plugins:maven-dependency-plugin (source)	3.8.1 -> 3.9.0
org.apache.maven.plugins:maven-enforcer-plugin (source)	3.6.0 -> 3.6.2
org.apache.maven.plugins:maven-compiler-plugin (source)	3.14.0 -> 3.14.1
org.codehaus.mojo:versions-maven-plugin (source)	2.18.0 -> 2.19.1
org.junit:junit-bom (source)	6.0.0 -> 6.0.1
com.google.truth:truth	1.4.4 -> 1.4.5
io.netty:netty-resolver (source)	4.1.123.Final -> 4.2.7.Final
io.netty:netty-buffer (source)	4.1.123.Final -> 4.2.7.Final
io.netty:netty-transport-native-unix-common (source)	4.1.123.Final -> 4.2.7.Final
io.netty:netty-transport (source)	4.1.123.Final -> 4.2.7.Final
io.netty:netty-common (source)	4.1.123.Final -> 4.2.7.Final
io.netty:netty-handler (source)	4.1.123.Final -> 4.2.7.Final
io.projectreactor.netty:reactor-netty	1.2.8 -> 1.2.11
io.projectreactor:reactor-core	3.7.8 -> 3.7.12
org.apache.maven.plugins:maven-javadoc-plugin (source)	3.6.3 -> 3.12.0
com.google.api:gax	2.69.0 -> 2.72.0
org.graalvm.sdk:nativeimage	25.0.0 -> 25.0.1
org.codehaus.mojo:build-helper-maven-plugin (source)	3.3.0 -> 3.6.1
dnsjava:dnsjava	3.6.0 -> 3.6.3
com.github.jnr:jnr-unixsocket	0.38.23 -> 0.38.24
com.google.protobuf:protobuf-java (source)	4.32.0 -> 4.33.0
com.google.errorprone:error_prone_annotations (source)	2.41.0 -> 2.43.0
com.google.auth:google-auth-library-oauth2-http	1.37.1 -> 1.40.0
com.google.auth:google-auth-library-credentials	1.37.1 -> 1.40.0
com.google.http-client:google-http-client-jackson2	2.0.1 -> 2.0.2
com.google.http-client:google-http-client	2.0.1 -> 2.0.2
com.google.apis:google-api-services-sqladmin (source)	v1beta4-rev20250823-2.0.0 -> v1beta4-rev20251023-2.0.0
com.google.api-client:google-api-client	2.8.0 -> 2.8.1
com.google.code.gson:gson	2.13.1 -> 2.13.2
org.checkerframework:checker-qual (source)	3.49.5 -> 3.52.0
io.r2dbc:r2dbc-mssql	1.0.2.RELEASE -> 1.0.3.RELEASE
org.postgresql:r2dbc-postgresql	1.0.7.RELEASE -> 1.1.1.RELEASE
com.google.j2objc:j2objc-annotations	3.0.0 -> 3.1
org.ow2.asm:asm-util (source)	9.8 -> 9.9
org.mariadb.jdbc:mariadb-java-client (source)	3.5.5 -> 3.5.6
org.postgresql:postgresql (source)	42.7.7 -> 42.7.8
com.mysql:mysql-connector-j (source)	9.4.0 -> 9.5.0
org.ow2.asm:asm-analysis (source)	9.8 -> 9.9
org.ow2.asm:asm-tree (source)	9.8 -> 9.9
org.ow2.asm:asm (source)	9.8 -> 9.9
com.github.jnr:jnr-enxio	0.32.18 -> 0.32.19
com.google.cloud:google-cloud-shared-config	1.16.1 -> 1.17.0

---

Release Notes

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.14: 0.8.14

Compare Source

New Features

• JaCoCo now officially supports Java 25 (GitHub #​1950).
• Experimental support for Java 26 class files (GitHub #​1870).
• Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
• Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
• Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
• Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
• Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
• Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
• Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
• Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

• Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
• Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
  Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

• JaCoCo now depends on ASM 9.9 (GitHub #​1965).

mojohaus/versions (org.codehaus.mojo:versions-maven-plugin)

v2.19.1

Compare Source

🐛 Bug Fixes

• Resolves #​1270: Ensuring thread safety when creating VersionsHelper (#​1273) @​andrzejj0
• Resolves #​1266: Applying the include filter during association resolution (#​1274) @​andrzejj0

📝 Documentation updates

• Resolves #​1271: Fixed broken Site links (#​1275) @​andrzejj0

v2.19.0

Compare Source

💥 Breaking changes

• Removed numeric and mercury comparators, further refactoring (#​1222) @​andrzejj0

🚀 New features and improvements

• Parallel version updates (#​1207) @​andrzejj0
• Fixes #​1140: Added showVersionless (default true) (#​1187) @​andrzejj0

🐛 Bug Fixes

• Resolves #​1227: revert working in case of a non-standard "pom.xml" filename (#​1263) @​andrzejj0
• Resolves #​1255: set-property special case when a property has no value (#​1261) @​andrzejj0
• Resolves #​1251: nextSnapshotIndexToIncrement should zeros on the right (#​1262) @​andrzejj0
• Fixed #​1233- set-property in profile without module property (#​1234) @​mcarlett
• Fix closing code tags (#​1206) @​pzygielo
• Resolves #​1197: Handling a no-version case in dependencyManagement for CompareDependenciesMojo (#​1198) @​andrzejj0
• Fixed the failed release build (#​1194) @​andrzejj0
• Fixed #​1191: Processes (all) profiles from original model if transitive is false (#​1193) @​andrzejj0
• Fixes #​1140 for reports (#​1188) @​andrzejj0
• Fixes #​1140: Added showVersionless (default true) (#​1187) @​andrzejj0
• Fixes #​1182 and #​1184: Bug fixes (#​1185) @​andrzejj0

👻 Maintenance

• Remove manual default from docs for parameters (#​1264) @​slawekjaranowski
• Use default configuration for release-drafter (#​1256) @​slawekjaranowski
• Bump project version to 2.19.0-SNAPSHOT (#​1237) @​slawekjaranowski
• Exposing the problem causing artifact if Resolver throws an exception (#​1224) @​andrzejj0
• Site fix for rule-2.1.0.xsd and rule-2.0.0.xsd; getOutputPath() for reports (#​1223) @​andrzejj0
• Removed numeric and mercury comparators, further refactoring (#​1222) @​andrzejj0
• Pom helper refactoring (#​1221) @​andrzejj0
• PR Automation only on close event (#​1220) @​slawekjaranowski
• Refactoring: ArtifactFactory and ArtifactVersionService (#​1218) @​andrzejj0
• Versions refactor 2 (#​1204) @​andrzejj0
• Refactoring: coalesce use-- goals. (#​1202) @​andrzejj0
• PR Automation - must use pull_request_target (#​1205) @​slawekjaranowski
• Add PR Automation (#​1201) @​slawekjaranowski

📦 Dependency updates

• Bump actions/stale from 9 to 10 (#​1265) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#​1260) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#​1259) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.6 to 1.17.7 (#​1258) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#​1257) @​dependabot[bot]
• Bump org.apache.commons:commons-text from 1.13.1 to 1.14.0 (#​1254) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.18.0 to 1.19.0 (#​1253) @​dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#​1252) @​dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#​1249) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#​1248) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.5 to 1.17.6 (#​1247) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 87 to 91 (#​1246) @​dependabot[bot]
• Bump com.fasterxml.woodstox:woodstox-core from 7.1.0 to 7.1.1 (#​1244) @​dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.10.1 to 1.11.0 (#​1243) @​dependabot[bot]
• Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0 (#​1236) @​dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#​1235) @​dependabot[bot]
• Bump org.apache.commons:commons-text from 1.13.0 to 1.13.1 (#​1232) @​dependabot[bot]
• Bump org.apache.poi:poi-ooxml from 3.17 to 5.4.0 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#​1231) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-interactivity-api from 1.3 to 1.4 (#​1230) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.4 to 1.17.5 (#​1228) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.2 to 1.17.4 (#​1226) @​dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.10.0 to 1.10.1 (#​1215) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.1 to 1.17.2 (#​1219) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.17.2 to 1.18.0 (#​1211) @​dependabot[bot]
• Bump byteBuddyVersion from 1.16.1 to 1.17.1 (#​1216) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 86 to 87 (#​1214) @​dependabot[bot]
• Bump byteBuddyVersion from 1.15.11 to 1.16.1 (#​1210) @​dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.9.4 to 1.10.0 (#​1208) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.17.1 to 1.17.2 (#​1209) @​dependabot[bot]
• Bump byteBuddyVersion from 1.15.10 to 1.15.11 (#​1195) @​dependabot[bot]
• Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 (#​1196) @​dependabot[bot]
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#​1186) @​dependabot[bot]

google/truth (com.google.truth:truth)

v1.4.5: 1.4.5

• Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e9)
• Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef19)
• Improved isWithin to pretty-print numbers in its failure messages. (de78553, 07318c2)
• Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d6)
• Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e8)
• Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75c)
• Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37)

reactor/reactor-netty (io.projectreactor.netty:reactor-netty)

v1.2.11

Compare Source

Reactor Netty 1.2.11 is part of 2024.0.11 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.12 by @​violetagg in f7fc6b7, see release notes
• Support Proxy-Authorization renewal by @​violetagg in #​3925
• Add API for configuring maximum number RST frames that are allowed per window by @​violetagg in #​3931

🐞 Bug fixes

• Ensure ResponseTimeoutHandler is added as one of the first handlers in the pipeline by @​violetagg in #​3916
• Do not try to send the file when Content-Length:0 by @​violetagg in #​3936
• Ensure the HTTP/2 upgrade stream inherits the proper state from the original HTTP/1.1 connection when successful upgrade from HTTP/1.1 to HTTP/2 by @​violetagg in #​3957
• Fix HttpClientConfig copying issue in MonoHttpConnect by @​violetagg in #​3964

Full Changelog: reactor/reactor-netty@v1.2.10...v1.2.11

v1.2.10

Compare Source

Reactor Netty 1.2.10 is part of 2024.0.10 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.11 by @​chemicL in 0d81f66, see release notes
• Depend on Netty v4.1.127.Final by @​violetagg in #​3905
• Depend on Netty QUIC Codec v0.0.74.Final by @​violetagg in #​3880

🐞 Bug fixes

• Ensure both resolved and unresolved server bind addresses are used with ConnectionProvider#disposeWhen by @​violetagg in #​3881
• Ensure 100-Continue is handled when collecting client's metrics by @​violetagg in #​3895
• Ensure cookie validation errors are propagated by @​violetagg in #​3898

Full Changelog: reactor/reactor-netty@v1.2.9...v1.2.10

v1.2.9

Compare Source

Reactor Netty 1.2.9 is part of 2024.0.9 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.9 by @​violetagg in ad6415d, see release notes
• Depend on Netty v4.1.123.Final by @​violetagg in #​3844

🐞 Bug fixes

• When HTTP/2, ensure the trailer headers are provided in case full response is received by @​violetagg in #​3847
• Ensure HttpClientResponse#trailerHeaders always completes by @​violetagg in #​3848
• Fix message for handlerConfigurator by @​klopfdreh in #​3861

New Contributors

• @​klopfdreh made their first contribution in #​3861

Full Changelog: reactor/reactor-netty@v1.2.8...v1.2.9

reactor/reactor-core (io.projectreactor:reactor-core)

v3.7.12

Reactor Core 3.7.12 is part of the 2024.0.11 Release Train.

What's Changed

✨ New features and improvements

• Depend on Micrometer v1.14.12 by @​violetagg in a1dcd93
• Depend on Micrometer Tracing v1.4.11 by @​violetagg in a1dcd93
• Depend on Blockhound v1.0.14.RELEASE by @​dependabot[bot] in #​4088
• Add Hooks#isAutomaticContextPropagationEnabled by @​sdeleuze in #​4090

Full Changelog: reactor/reactor-core@v3.7.11...v3.7.12

v3.7.11

Compare Source

Reactor Core 3.7.11 is part of the 2024.0.10 Release Train.

What's Changed

✨ New features and improvements

• Bump byteBuddy from 1.17.6 to 1.17.7 by @​dependabot[bot] in #​4076
• Depend on Micrometer v1.14.11 by @​chemicL in 9b5105f
• Depend on Micrometer Tracing v1.4.10 by @​chemicL in 9b5105f

Full Changelog: reactor/reactor-core@v3.7.9...v3.7.11

v3.7.10

Compare Source

v3.7.9

Compare Source

Reactor Core 3.7.9 is part of the 2024.0.9 Release Train.

What's Changed

✨ New features and improvements

• Depend on Micrometer v1.14.10 by @​violetagg in 4965f64
• Depend on Micrometer Tracing v1.4.9 by @​violetagg in 4965f64

Full Changelog: reactor/reactor-core@v3.7.8...v3.7.9

mojohaus/build-helper-maven-plugin (org.codehaus.mojo:build-helper-maven-plugin)

v3.6.1

Compare Source

📝 Documentation updates

• Rename Goals to Plugin Documentation in the site menu (#​229) @​slawekjaranowski
• update the documentation for adding more resource directories (#​213) @​mjj042

👻 Maintenance

• Use common release-drafter configuration (#​230) @​slawekjaranowski

📦 Dependency updates

• Bump org.codehaus.mojo:mojo-parent from 87 to 91 (#​228) @​dependabot[bot]
• Bump org.apache.maven.shared:file-management from 3.1.0 to 3.2.0 (#​222) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 86 to 87 (#​221) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 85 to 86 (#​219) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (#​220) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 84 to 85 (#​217) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 82 to 84 (#​214) @​dependabot[bot]

v3.6.0

Compare Source

Changes

🚀 New features and improvements

• Deprecate remove-project-artifact goal (#​205) @​slawekjaranowski
• Parallel execution of uptodate-properties (#​201) @​mkarg

📦 Dependency updates

• Bump org.codehaus.mojo:mojo-parent from 81 to 82 (#​206) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 78 to 81 (#​204) @​dependabot
• Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#​202) @​dependabot
• Bump apache/maven-gh-actions-shared from 3 to 4 (#​200) @​dependabot
• Bump release-drafter/release-drafter from 5 to 6 (#​195) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 77 to 78 (#​193) @​dependabot

👻 Maintenance

• Delete link to remove-project-artifact as is deprecated (#​210) @​slawekjaranowski
• Cleanups dependencies (#​209) @​slawekjaranowski
• Remove public modifiers from JUnit 5 t

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun