Bump the dependencies group across 1 directory with 57 updates #4018

dependabot · 2026-01-01T10:07:43Z

Bumps the dependencies group with 57 updates in the / directory:

Package	From	To
org.apache.logging.log4j:log4j-api	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-api-test	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-iostreams	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-jpl	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-slf4j2-impl	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-slf4j-impl	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-to-jul	`2.24.3`	`2.25.3`
org.apache.logging.log4j:log4j-to-slf4j	`2.24.3`	`2.25.3`
org.apache.commons:commons-csv	`1.14.0`	`1.14.1`
ch.qos.logback:logback-core	`1.5.18`	`1.5.23`
org.apache.groovy:groovy-bom	`4.0.27`	`5.0.3`
tools.jackson:jackson-bom	`3.0.0`	`3.0.3`
org.junit:junit-bom	`5.13.4`	`6.0.1`
org.junit.jupiter:junit-jupiter-engine	`5.13.4`	`6.0.1`
org.mockito:mockito-bom	`5.18.0`	`5.21.0`
org.assertj:assertj-core	`3.27.3`	`3.27.6`
net.bytebuddy:byte-buddy	`1.17.6`	`1.18.3`
commons-codec:commons-codec	`1.18.0`	`1.20.0`
org.apache.commons:commons-dbcp2	`2.13.0`	`2.14.0`
commons-io:commons-io	`2.20.0`	`2.21.0`
org.apache.commons:commons-lang3	`3.17.0`	`3.20.0`
org.apache.commons:commons-pool2	`2.12.1`	`2.13.0`
com.google.guava:guava	`33.4.8-jre`	`33.5.0-jre`
com.google.guava:guava-testlib	`33.4.8-jre`	`33.5.0-jre`
com.h2database:h2	`2.3.232`	`2.4.240`
org.jmdns:jmdns	`3.6.1`	`3.6.3`
net.java.dev.jna:jna	`5.17.0`	`5.18.1`
net.javacrumbs.json-unit:json-unit	`4.1.1`	`5.1.0`
com.vlkan.log4j2:log4j2-logstash-layout	`0.18`	`1.0.5`
org.apache.maven:maven-core	`3.9.10`	`3.9.12`
org.apache.maven:maven-model	`3.9.10`	`3.9.12`
org.openjdk.nashorn:nashorn-core	`15.6`	`15.7`
org.eclipse.platform:org.eclipse.osgi	`3.23.100`	`3.24.0`
org.xmlunit:xmlunit-core	`2.10.3`	`2.11.0`
org.xmlunit:xmlunit-matchers	`2.10.3`	`2.11.0`
biz.aQute.bnd:biz.aQute.bnd.annotation	`7.1.0`	`7.2.0`
com.github.spotbugs:spotbugs-annotations	`4.9.3`	`4.9.8`
io.fabric8:docker-maven-plugin	`0.46.0`	`0.48.0`
org.tukaani:xz	`1.10`	`1.11`
com.github.luben:zstd-jni	`1.5.7-4`	`1.5.7-6`
org.apache.commons:commons-compress	`1.27.1`	`1.28.0`
com.google.code.gson:gson	`2.13.1`	`2.13.2`
org.wiremock:wiremock	`3.13.1`	`3.13.2`
com.fasterxml.jackson.core:jackson-databind	`2.20.0`	`2.20.1`
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	`2.20.0`	`2.20.1`
co.elastic.clients:elasticsearch-java	`9.2.0`	`9.2.3`
org.elasticsearch.client:elasticsearch-rest-client	`9.2.0`	`9.2.3`
org.mongodb:bson	`5.5.1`	`5.6.2`
org.mongodb:mongodb-driver-core	`5.5.1`	`5.6.2`
org.mongodb:mongodb-driver-sync	`5.5.1`	`5.6.2`
ch.qos.logback:logback-classic	`1.5.18`	`1.5.23`
org.springframework:spring-framework-bom	`6.2.9`	`7.0.2`
org.springframework:spring-core	`6.2.9`	`7.0.2`
org.springframework.boot:spring-boot-autoconfigure	`3.5.3`	`4.0.1`
org.springframework.boot:spring-boot-starter-test	`3.5.3`	`4.0.1`
org.springframework.boot:spring-boot-starter-log4j2	`3.5.3`	`4.0.1`
org.springframework.cloud:spring-cloud-context	`4.3.0`	`5.0.0`

Updates org.apache.logging.log4j:log4j-api from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-api-test from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-iostreams from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-jpl from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-to-jul from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-api-test from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-iostreams from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-jpl from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-to-jul from 2.24.3 to 2.25.3

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.24.3 to 2.25.3

Updates org.apache.commons:commons-csv from 1.14.0 to 1.14.1

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV 1.14.1 Release Notes

The Apache Commons CSV team is pleased to announce the release of Apache Commons CSV 1.14.1.

This document contains the release notes for the 1.14.1 version of Apache Commons CSV. Commons CSV reads and writes files in Comma Separated Value (CSV) format variations.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version include:

Fixed Bugs
CSV-318: CSVPrinter.printRecord(Stream) hangs if given a parallel stream. Thanks to Joseph Shraibman, Gary Gregory.

CSV-318: CSVPrinter now uses an internal lock instead of synchronized methods. Thanks to Joseph Shraibman, Gary Gregory.
      org.apache.commons.csv.CSVPrinter.printRecords(ResultSet) now writes one record at a time using a lock. Thanks to Gary Gregory.
Changes
      Bump org.apache.commons:commons-parent from 81 to 85 [#542](https://github.com/apache/commons-csv/issues/542). Thanks to Gary Gregory, Dependabot.
      Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.
      Bump com.opencsv:opencsv from 5.10 to 5.11.2 [#545](https://github.com/apache/commons-csv/issues/545), [#551](https://github.com/apache/commons-csv/issues/551), [#553](https://github.com/apache/commons-csv/issues/553). Thanks to Gary Gregory, Dependabot.
      Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#556](https://github.com/apache/commons-csv/issues/556). Thanks to Gary Gregory, Dependabot.
      Bump commons-codec:commons-codec from 1.18.0 to 1.19.0. Thanks to Gary Gregory.
Historical list of changes: https://commons.apache.org/proper/commons-csv/changes.html

For complete information on Apache Commons CSV, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CSV website:

https://commons.apache.org/proper/commons-csv/

Download page: https://commons.apache.org/proper/commons-csv/download_csv.cgi

Have fun! -Apache Commons CSV team

Commits

e14ef86 Ignore macOS file
d8724bf Prepare for the release candidate 1.14.1 RC1
b76971c Prepare for the next release candidate
b66814e Merge pull request #557 from apache/dependabot/github_actions/github/codeql-a...
9c95e92 Bump github/codeql-action from 3.29.2 to 3.29.4
1fb3716 Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
7b72c50 Merge some string literals
9658373 Update the GitHub pull request template for AI
67192a9 Bump commons-io:commons-io from 2.19.0 to 2.20.0
59164c8 Bump com.opencsv:opencsv from 5.11.1 to 5.11.2 #553
Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.18 to 1.5.23

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.21

2025-11-10 Release of logback version 1.5.21

• Invocations of turbo filters in isDebugEnabled, isInfoEnabled()... remain as they were, untouched. However, any installed instances of TurboFilter are now invoked also from within the log(LoggingEvent) method of Logger with the contents of the LoggingEvent, typically via the fluent API. This fixes issues/871.

• Removed reentry-guard in most subclasses of UnsynchronizedAppenderBase where it was not needed.

• Initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• JsonEncoder is now friendlier to derivation by sub-classes as requested in issues/979.

• Fixed XMLLayout thread safety issue reported in LOGBACK-427.

• Removed superfluous buffering in Zip, GZ and XZ compression code.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit fed6f37ffe3449e40f6a9fffe050936a33116bd1 associated with the tag v_1.5.21. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.20

2025-10-19 Release of logback version 1.5.20

• Due to potential vulnerabilities associated with dynamic, i.e. runtime, java code compilation and execution (using Janino), the 'condition' attribute within the <if> element is deprecated and will be removed in 2027.

An online migration service is provided to help with the transition.

The <condition> element, new in this version, admits custom PropertyEvaluator as a recommended alternative. See also the updated documentation on conditional configuration.

• Initialization procedure was incorrectly reported as having been simplified in this version, i.e. version 1.5.20 by removing the step instantiating a SerializedModelConfigurator. The actual simplification was done in version 1.5.21

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 930fb15c993a4344bcecc6ba2225c12a2c38e676 associated with the tag v_1.5.20. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

... (truncated)

Commits

0bcc3fe prepare release 1.5.23
4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
299f091 add collision test in presence of conditional processing
b446f3f In Context, remove collision map
a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
681b2be remove unused method, minor comment edits
17a3edf start work on 1.5.23-SNAPSHOT
572379a prepare release 1.5.22
39d17ea fix status printing of variable substitution when the variable name contains ...
75509a9 fix PR 404, LOGBACK-543
Additional commits viewable in compare view

Updates org.apache.groovy:groovy-bom from 4.0.27 to 5.0.3

Commits

See full diff in compare view

Updates tools.jackson:jackson-bom from 3.0.0 to 3.0.3

Commits

a280bf7 [maven-release-plugin] prepare release jackson-bom-3.0.3
71ce3c9 Prep for 3.0.3 release
69acf34 Merge branch '2.x' into 3.0
3001d78 Merge pull request #116 from FasterXML/tatu/2.21/115-fix-cyclonedx-backport-i...
9370292 makeAggregateBom -> makeBom
3e4db58 Backport #115 in 2.x for 2.21
09f71f8 ...
ada83b5 Post-release dep version bump
4edcd2f [maven-release-plugin] prepare for next development iteration
8328126 [maven-release-plugin] prepare release jackson-bom-3.0.2
Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.13.4 to 6.0.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.13.4 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.mockito:mockito-bom from 5.18.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-bom's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]

Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 [(#3768)](mockito/mockito#3768)

Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 [(#3767)](mockito/mockito#3767)

Bump actions/checkout from 5 to 6 [(#3765)](mockito/mockito#3765)

Adds output of matchers to potential mismatch; Fixes #2468 [(#3760)](mockito/mockito#3760)

Forbid mocking WeakReference with inline mock maker [(#3759)](mockito/mockito#3759)

StackOverflowError when mocking WeakReference [(#3758)](mockito/mockito#3758)

Bump actions/upload-artifact from 4 to 5 [(#3756)](mockito/mockito#3756)

Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 [(#3755)](mockito/mockito#3755)

Support primitives in GenericArrayReturnType. [(#3753)](mockito/mockito#3753)

ClassNotFoundException when stubbing array of primitive type on Android [(#3752)](mockito/mockito#3752)

Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 [(#3744)](mockito/mockito#3744)

Bump gradle/actions from 4 to 5 [(#3743)](mockito/mockito#3743)

Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 [(#3738)](mockito/mockito#3738)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 [(#3735)](mockito/mockito#3735)

Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 [(#3734)](mockito/mockito#3734)

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 [(#3733)](mockito/mockito#3733)

Bump errorprone from 2.41.0 to 2.42.0 [(#3732)](mockito/mockito#3732)

Feat: automatically detect class to mock in mockStatic and mockConstruction [(#3731)](mockito/mockito#3731)

Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues [(#3727)](mockito/mockito#3727)

automatically detect class to mock [(#2779)](mockito/mockito#2779)

Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers [(#2468)](mockito/mockito#2468)

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 [(#3730)](mockito/mockito#3730)

Introducing the Ability to Mock Construction of Generic Types (#2401) [(#3729)](mockito/mockito#3729)

Bump com.gradle.develocity from 4.1.1 to 4.2 [(#3726)](mockito/mockito#3726)

Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 [(#3725)](mockito/mockito#3725)

Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 [(#3720)](mockito/mockito#3720)

Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 [(#3719)](mockito/mockito#3719)

Bump actions/setup-java from 4 to 5 [(#3715)](mockito/mockito#3715)

Bump com.gradle.develocity from 4.1 to 4.1.1 [(#3713)](mockito/mockito#3713)

Bump bytebuddy from 1.17.6 to 1.17.7 [(#3712)](mockito/mockito#3712)

test: Use Assume.assumeThat for SequencedCollection tests [(#3711)](mockito/mockito#3711)

Fix #3709 [(#3710)](mockito/mockito#3710)

feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708)

Introducing the Ability to Mock Construction of Generic Types [(#2401)](mockito/mockito#2401)

v5.19.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.19.0

... (truncated)

Commits

09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
04a6e9f Bump actions/checkout from 5 to 6 (#3765)
756a3cf Add description of matchers to potential mismatch (#3760)
58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
cffddd4 Bump gradle/actions from 4 to 5 (#3743)
Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.3 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@duponter

v3.27.5

⚡ Improvements

Core

ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

Upgrade to Byte Buddy 1.17.7 #3947

Upgrade to JUnit BOM 5.13.4 #3947

Guava

Upgrade to Guava 33.4.8-jre #3947

v3.27.4

🚫 Deprecated

Core

Deprecate org.assertj.core.annotations.Beta in favor of org.assertj.core.annotation.Beta

Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of org.assertj.core.annotation.CanIgnoreReturnValue

Deprecate org.assertj.core.util.CheckReturnValue in favor of org.assertj.core.annotation.CheckReturnValue

🐛 Bug Fixes

Core

Fix thread-safety in AbstractDateAssert #3874

⚡ Improvements

Migrate to the Central Publisher Portal, enable snapshot publishing #3881

... (truncated)

Commits

716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
e189652 Add missing export for org.assertj.core.annotation (#3951)
0cb489e Update Maven Central URL
7286309 [maven-release-plugin] prepare for next development iteration
dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
1d0defc Add missing permission to release workflow
844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
bdd7106 Add CodeQL custom workflow
a93d7e6 Remove EOL Java 24
26ea866 Update production dependencies (#3947)
Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy from 1.17.6 to 1.18.3

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.3

Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.

Add additional safety when processing class files with illegally formed parameters.

Update to latest ASM.

Byte Buddy 1.18.2

Support modifiers for value classes in Valhalla builds.

Improve use of build cache in Gradle.

Byte Buddy 1.18.1

Fix generated module-info to include new package.

Byte Buddy 1.18.0

Add support for module-info class files and ModuleDescriptions.

Allow for manipulating module information using the ByteBuddy API.

Byte Buddy 1.17.8

Avoid use of types that are deprecated as of Java 26.

Include ASM 9.9 that offers ASM support for Java 26.

Make sure that generated code internal to Byte Buddy supports CDS if available.

Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.

Byte Buddy 1.17.7

Specify correct JVM environment for Android builds when using the Gradle plugin.

Avoid recomputing the size of a parameter list for performance reasons after measuring the significant impact.

Correct validation of JVM names to avoid breaking when Java names are not allowed while JVM names are, with Kotlin and others.

Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

26. November 2025: version 1.18.3

Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.

Add additional safety when processing class files with illegally formed parameters.

Update to latest ASM.

26. November 2025: version 1.18.2

Support modifiers for value classes in Valhalla builds.

Improve use of build cache in Gradle.

12. November 2025: version 1.18.1

Fix generated module-info to include new package.

11. November 2025: version 1.18.0

Add support for module-info class files and ModuleDescriptions.

Allow for manipulating module information using the ByteBuddy API.

8. October 2025: version 1.17.8

Avoid use of types that are deprecated as of Java 26.

Include ASM 9.9 that offers ASM support for Java 26.

Make sure that generated code internal to Byte Buddy supports CDS if available.

Update version of ASM to JDK Class File API bridge to fix some minor bugs related to type annotations.

17. August 2025: version 1.17.7

Specify correct JVM environment for Android builds when using the Gradle plugin.

Avoid recomputing the size of a parameter list for performance reasons after measuring the significant impact.

Correct validation of JVM names to avoid breaking when Java names are not allowed while JVM names are, with Kotlin and others.

Commits

6f358c8 [maven-release-plugin] prepare release byte-buddy-1.18.3
57df2c7 [release] Release new version.
1111a18 [release] Release new version.
6698c45 [release] Release new version
04a89c6 Avoid using class file API when loaded on the boot path as multi release jar ...
ba05f0d Remove unused import.
ec50316 Adds safety for illegally compiled parameters.
e720b5e Update README.md
a966b04 Update README.md
dfa50ad Update release notes and internal Byte Buddy.
Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.18.0 to 1.20.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.20.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.20.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features
        Add org.apache.commons.codec.digest.Crc16. Thanks to Fredrik Kjellberg, Gary Gregory.
        Add builders to org.apache.commons.codec.digest streams and deprecate some old constructors. Thanks to Gary Gregory.
        Add builder to Base16 streams and deprecate some old constructors. Thanks to Gary Gregory.
        Add support for SHAKE128-256 and SHAKE256-512 to `DigestUtils` and `MessageDigestAlgorithms` on Java 25 and up. Thanks to Gary Gregory.
        Add BaseNCodec.AbstractBuilder.setDecodeTable(byte[]) and refactor subclasses. Thanks to Gary Gregory.
Changes
        Deprecate all but one Base32 constructor in favor of the builder added in version 1.17.0. Thanks to Gary Gregory.
        Deprecate all but one Base64 constructor in favor of the builder added in version 1.17.0. Thanks to Gary Gregory.
        BaseNCodecInputStream subclasses are now type-safe to match its matching BaseNCodec. Thanks to Gary Gregory.
        BaseNCodecOutputStream subclasses are now type-safe to match its matching BaseNCodec. Thanks to Gary Gregory.
        Bump org.apache.commons:commons-parent from 85 to 91. Thanks to Gary Gregory, Dependabot.
        [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0. Thanks to Gary Gregory.
For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

Apache Commons Codec 1.19.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.19.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a

... (truncated)

Commits

b20db1f Merge branch 'master' into release
cb344d6 Use leaf in overview
004966b Better package description
1320800 Use HTTPS in URL
fcb8bf6 Use component logo
af58c1a Use final
4368bfe Add dependabot email [skip ci]
cb2b7b6 Clarify comment
48bb283 Bump github/codeql-action from 4.30.9 to 4.31.2 (#414)
f61c2e6 Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#413)
Additional commits viewable in compare view

Updates org.apache.commons:commons-dbcp2 from 2.13.0 to 2.14.0

Updates commons-io:commons-io from 2.20.0 to 2.21.0

Changelog

Sourced from commons-io:commons-io's changelog.

Apache Commons IO 2.21.0 Release Notes

The Apache Commons IO team is pleased to announce the release of Apache Commons IO 2.21.0.

Introduction

The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Version 2.21.0: Java 8 or later is required.

New features

o FileUtils#byteCountToDisplaySize() supports Zettabyte, Yottabyte, Ronnabyte and Quettabyte #763. Thanks to strangelookingnerd, Gary Gregory. o Add org.apache.commons.io.FileUtils.ONE_RB #763. Thanks to strangelookingnerd, Gary Gregory. o Add org.apache.commons.io.FileUtils.ONE_QB #763. Thanks to strangelookingnerd, Gary Gregory. o Add org.apache.commons.io.output.ProxyOutputStream.writeRepeat(byte[], int, int, long). Thanks to Gary Gregory. o Add org.apache.commons.io.output.ProxyOutputStream.writeRepeat(byte[], long). Thanks to Gary Gregory. o Add org.apache.commons.io.output.ProxyOutputStream.writeRepeat(int, long). Thanks to Gary Gregory. o Add length unit support in FileSystem limits. Thanks to Piotr P. Karwasz. o Add IOUtils.toByteArray(InputStream, int, int) for safer chunked reading with size validation. Thanks to Piotr P. Karwasz. o Add org.apache.commons.io.file.PathUtils.getPath(String, String). Thanks to Gary Gregory. o Add org.apache.commons.io.channels.ByteArraySeekableByteChannel. Thanks to Gary Gregory. o Add IOIterable.asIterable(). Thanks to Gary Gregory. o Add NIO channel support to AbstractStreamBuilder. Thanks to Piotr P. Karwasz. o Add CloseShieldChannel to close-shielded NIO Channels #786. Thanks to Piotr P. Karwasz. o Added IOUtils.checkFromIndexSize as a Jav...
Description has been truncated

Bumps the dependencies group with 57 updates in the / directory: | Package | From | To | | --- | --- | --- | | org.apache.logging.log4j:log4j-api | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-api-test | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-iostreams | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-jpl | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-slf4j2-impl | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-slf4j-impl | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-to-jul | `2.24.3` | `2.25.3` | | org.apache.logging.log4j:log4j-to-slf4j | `2.24.3` | `2.25.3` | | [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.14.0` | `1.14.1` | | [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.23` | | [org.apache.groovy:groovy-bom](https://github.com/apache/groovy) | `4.0.27` | `5.0.3` | | [tools.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `3.0.0` | `3.0.3` | | [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.1` | | [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.1` | | [org.mockito:mockito-bom](https://github.com/mockito/mockito) | `5.18.0` | `5.21.0` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.3` | `3.27.6` | | [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.17.6` | `1.18.3` | | [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.18.0` | `1.20.0` | | org.apache.commons:commons-dbcp2 | `2.13.0` | `2.14.0` | | [commons-io:commons-io](https://github.com/apache/commons-io) | `2.20.0` | `2.21.0` | | org.apache.commons:commons-lang3 | `3.17.0` | `3.20.0` | | org.apache.commons:commons-pool2 | `2.12.1` | `2.13.0` | | [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` | | [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` | | [com.h2database:h2](https://github.com/h2database/h2database) | `2.3.232` | `2.4.240` | | [org.jmdns:jmdns](https://github.com/jmdns/jmdns) | `3.6.1` | `3.6.3` | | [net.java.dev.jna:jna](https://github.com/java-native-access/jna) | `5.17.0` | `5.18.1` | | [net.javacrumbs.json-unit:json-unit](https://github.com/lukas-krecan/JsonUnit) | `4.1.1` | `5.1.0` | | [com.vlkan.log4j2:log4j2-logstash-layout](https://github.com/vy/log4j2-logstash-layout) | `0.18` | `1.0.5` | | org.apache.maven:maven-core | `3.9.10` | `3.9.12` | | org.apache.maven:maven-model | `3.9.10` | `3.9.12` | | [org.openjdk.nashorn:nashorn-core](https://github.com/openjdk/nashorn) | `15.6` | `15.7` | | [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) | `3.23.100` | `3.24.0` | | [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.11.0` | | [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.11.0` | | [biz.aQute.bnd:biz.aQute.bnd.annotation](https://github.com/bndtools/bnd) | `7.1.0` | `7.2.0` | | [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.9.3` | `4.9.8` | | [io.fabric8:docker-maven-plugin](https://github.com/fabric8io/docker-maven-plugin) | `0.46.0` | `0.48.0` | | [org.tukaani:xz](https://github.com/tukaani-project/xz-java) | `1.10` | `1.11` | | [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-4` | `1.5.7-6` | | [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.27.1` | `1.28.0` | | [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.1` | `2.13.2` | | [org.wiremock:wiremock](https://github.com/wiremock/wiremock) | `3.13.1` | `3.13.2` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.20.0` | `2.20.1` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.20.0` | `2.20.1` | | [co.elastic.clients:elasticsearch-java](https://github.com/elastic/elasticsearch-java) | `9.2.0` | `9.2.3` | | [org.elasticsearch.client:elasticsearch-rest-client](https://github.com/elastic/elasticsearch) | `9.2.0` | `9.2.3` | | [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.5.1` | `5.6.2` | | [org.mongodb:mongodb-driver-core](https://github.com/mongodb/mongo-java-driver) | `5.5.1` | `5.6.2` | | [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.5.1` | `5.6.2` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.23` | | [org.springframework:spring-framework-bom](https://github.com/spring-projects/spring-framework) | `6.2.9` | `7.0.2` | | [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `6.2.9` | `7.0.2` | | [org.springframework.boot:spring-boot-autoconfigure](https://github.com/spring-projects/spring-boot) | `3.5.3` | `4.0.1` | | [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.3` | `4.0.1` | | [org.springframework.boot:spring-boot-starter-log4j2](https://github.com/spring-projects/spring-boot) | `3.5.3` | `4.0.1` | | [org.springframework.cloud:spring-cloud-context](https://github.com/spring-cloud/spring-cloud-commons) | `4.3.0` | `5.0.0` | Updates `org.apache.logging.log4j:log4j-api` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-api-test` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-iostreams` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-jpl` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-to-jul` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-api-test` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-iostreams` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-jpl` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-to-jul` from 2.24.3 to 2.25.3 Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.24.3 to 2.25.3 Updates `org.apache.commons:commons-csv` from 1.14.0 to 1.14.1 - [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-csv@rel/commons-csv-1.14.0...rel/commons-csv-1.14.1) Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.23 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.18...v_1.5.23) Updates `org.apache.groovy:groovy-bom` from 4.0.27 to 5.0.3 - [Commits](https://github.com/apache/groovy/commits) Updates `tools.jackson:jackson-bom` from 3.0.0 to 3.0.3 - [Commits](FasterXML/jackson-bom@jackson-bom-3.0.0...jackson-bom-3.0.3) Updates `org.junit:junit-bom` from 5.13.4 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.4...r6.0.1) Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.4...r6.0.1) Updates `org.mockito:mockito-bom` from 5.18.0 to 5.21.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.18.0...v5.21.0) Updates `org.assertj:assertj-core` from 3.27.3 to 3.27.6 - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](assertj/assertj@assertj-build-3.27.3...assertj-build-3.27.6) Updates `net.bytebuddy:byte-buddy` from 1.17.6 to 1.18.3 - [Release notes](https://github.com/raphw/byte-buddy/releases) - [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md) - [Commits](raphw/byte-buddy@byte-buddy-1.17.6...byte-buddy-1.18.3) Updates `commons-codec:commons-codec` from 1.18.0 to 1.20.0 - [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-codec@rel/commons-codec-1.18.0...rel/commons-codec-1.20.0) Updates `org.apache.commons:commons-dbcp2` from 2.13.0 to 2.14.0 Updates `commons-io:commons-io` from 2.20.0 to 2.21.0 - [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-io@rel/commons-io-2.20.0...rel/commons-io-2.21.0) Updates `org.apache.commons:commons-lang3` from 3.17.0 to 3.20.0 Updates `org.apache.commons:commons-pool2` from 2.12.1 to 2.13.0 Updates `com.google.guava:guava` from 33.4.8-jre to 33.5.0-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.5.0-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.5.0-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `com.h2database:h2` from 2.3.232 to 2.4.240 - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](h2database/h2database@version-2.3.232...version-2.4.240) Updates `org.jmdns:jmdns` from 3.6.1 to 3.6.3 - [Release notes](https://github.com/jmdns/jmdns/releases) - [Changelog](https://github.com/jmdns/jmdns/blob/main/CHANGELOG.txt) - [Commits](jmdns/jmdns@3.6.1...v3.6.3) Updates `net.java.dev.jna:jna` from 5.17.0 to 5.18.1 - [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md) - [Commits](java-native-access/jna@5.17.0...5.18.1) Updates `net.javacrumbs.json-unit:json-unit` from 4.1.1 to 5.1.0 - [Changelog](https://github.com/lukas-krecan/JsonUnit/blob/master/RELEASES.md) - [Commits](lukas-krecan/JsonUnit@json-unit-parent-4.1.1...json-unit-parent-5.1.0) Updates `com.vlkan.log4j2:log4j2-logstash-layout` from 0.18 to 1.0.5 - [Changelog](https://github.com/vy/log4j2-logstash-layout/blob/master/CHANGELOG.md) - [Commits](vy/log4j2-logstash-layout@v0.18...v1.0.5) Updates `org.apache.maven:maven-core` from 3.9.10 to 3.9.12 Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.12 Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.12 Updates `org.openjdk.nashorn:nashorn-core` from 15.6 to 15.7 - [Changelog](https://github.com/openjdk/nashorn/blob/main/CHANGELOG.md) - [Commits](openjdk/nashorn@release-15.6...release-15.7) Updates `org.eclipse.platform:org.eclipse.osgi` from 3.23.100 to 3.24.0 - [Commits](https://github.com/eclipse-equinox/equinox/commits) Updates `org.xmlunit:xmlunit-core` from 2.10.3 to 2.11.0 - [Release notes](https://github.com/xmlunit/xmlunit/releases) - [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md) - [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0) Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.11.0 - [Release notes](https://github.com/xmlunit/xmlunit/releases) - [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md) - [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0) Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.11.0 - [Release notes](https://github.com/xmlunit/xmlunit/releases) - [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md) - [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0) Updates `biz.aQute.bnd:biz.aQute.bnd.annotation` from 7.1.0 to 7.2.0 - [Release notes](https://github.com/bndtools/bnd/releases) - [Commits](bndtools/bnd@7.1.0...7.2.0) Updates `com.github.spotbugs:spotbugs-annotations` from 4.9.3 to 4.9.8 - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](spotbugs/spotbugs@4.9.3...4.9.8) Updates `io.fabric8:docker-maven-plugin` from 0.46.0 to 0.48.0 - [Release notes](https://github.com/fabric8io/docker-maven-plugin/releases) - [Changelog](https://github.com/fabric8io/docker-maven-plugin/blob/master/doc/changelog.md) - [Commits](fabric8io/docker-maven-plugin@v0.46.0...v0.48.0) Updates `org.tukaani:xz` from 1.10 to 1.11 - [Release notes](https://github.com/tukaani-project/xz-java/releases) - [Changelog](https://github.com/tukaani-project/xz-java/blob/master/NEWS.md) - [Commits](tukaani-project/xz-java@v1.10...v1.11) Updates `com.github.luben:zstd-jni` from 1.5.7-4 to 1.5.7-6 - [Commits](luben/zstd-jni@v1.5.7-4...v1.5.7-6) Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0 - [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-compress@rel/commons-compress-1.27.1...rel/commons-compress-1.28.0) Updates `com.google.code.gson:gson` from 2.13.1 to 2.13.2 - [Release notes](https://github.com/google/gson/releases) - [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md) - [Commits](google/gson@gson-parent-2.13.1...gson-parent-2.13.2) Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.4...r6.0.1) Updates `org.wiremock:wiremock` from 3.13.1 to 3.13.2 - [Release notes](https://github.com/wiremock/wiremock/releases) - [Commits](wiremock/wiremock@3.13.1...3.13.2) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.20.0 to 2.20.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.20.0 to 2.20.1 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.20.0...jackson-dataformats-text-2.20.1) Updates `co.elastic.clients:elasticsearch-java` from 9.2.0 to 9.2.3 - [Release notes](https://github.com/elastic/elasticsearch-java/releases) - [Changelog](https://github.com/elastic/elasticsearch-java/blob/main/CHANGELOG.md) - [Commits](elastic/elasticsearch-java@v9.2.0...v9.2.3) Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.0 to 9.2.3 - [Release notes](https://github.com/elastic/elasticsearch/releases) - [Changelog](https://github.com/elastic/elasticsearch/blob/main/CHANGELOG.md) - [Commits](elastic/elasticsearch@v9.2.0...v9.2.3) Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.0 to 9.2.3 - [Release notes](https://github.com/elastic/elasticsearch/releases) - [Changelog](https://github.com/elastic/elasticsearch/blob/main/CHANGELOG.md) - [Commits](elastic/elasticsearch@v9.2.0...v9.2.3) Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.20.0 to 2.20.1 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.20.0...jackson-dataformats-text-2.20.1) Updates `org.mongodb:bson` from 5.5.1 to 5.6.2 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.2) Updates `org.mongodb:mongodb-driver-core` from 5.5.1 to 5.6.2 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.2) Updates `org.mongodb:mongodb-driver-sync` from 5.5.1 to 5.6.2 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.2) Updates `org.mongodb:mongodb-driver-core` from 5.5.1 to 5.6.2 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.2) Updates `org.mongodb:mongodb-driver-sync` from 5.5.1 to 5.6.2 - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.2) Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.23 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.18...v_1.5.23) Updates `org.springframework:spring-framework-bom` from 6.2.9 to 7.0.2 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.9...v7.0.2) Updates `org.springframework:spring-core` from 6.2.9 to 7.0.2 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.9...v7.0.2) Updates `org.springframework:spring-core` from 6.2.9 to 7.0.2 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.9...v7.0.2) Updates `org.springframework.boot:spring-boot-autoconfigure` from 3.5.3 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.3...v4.0.1) Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.3 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.3...v4.0.1) Updates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.3 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.3...v4.0.1) Updates `org.springframework.cloud:spring-cloud-context` from 4.3.0 to 5.0.0 - [Release notes](https://github.com/spring-cloud/spring-cloud-commons/releases) - [Commits](spring-cloud/spring-cloud-commons@v4.3.0...v5.0.0) Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.3 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.3...v4.0.1) Updates `org.springframework.boot:spring-boot-starter-log4j2` from 3.5.3 to 4.0.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v3.5.3...v4.0.1) --- updated-dependencies: - dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-api-test dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-iostreams dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-jpl dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-to-jul dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-to-slf4j dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-api-test dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-iostreams dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-jpl dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-to-jul dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.logging.log4j:log4j-to-slf4j dependency-version: 2.25.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-csv dependency-version: 1.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.groovy:groovy-bom dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: tools.jackson:jackson-bom dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.junit:junit-bom dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.junit.jupiter:junit-jupiter-engine dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.mockito:mockito-bom dependency-version: 5.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.assertj:assertj-core dependency-version: 3.27.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: net.bytebuddy:byte-buddy dependency-version: 1.18.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: commons-codec:commons-codec dependency-version: 1.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-dbcp2 dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: commons-io:commons-io dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-pool2 dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.google.guava:guava dependency-version: 33.5.0-jre dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.google.guava:guava-testlib dependency-version: 33.5.0-jre dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.google.guava:guava-testlib dependency-version: 33.5.0-jre dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.h2database:h2 dependency-version: 2.4.240 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.jmdns:jmdns dependency-version: 3.6.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: net.java.dev.jna:jna dependency-version: 5.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: net.javacrumbs.json-unit:json-unit dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: com.vlkan.log4j2:log4j2-logstash-layout dependency-version: 1.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.apache.maven:maven-core dependency-version: 3.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.maven:maven-model dependency-version: 3.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.maven:maven-model dependency-version: 3.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.openjdk.nashorn:nashorn-core dependency-version: '15.7' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.eclipse.platform:org.eclipse.osgi dependency-version: 3.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.xmlunit:xmlunit-core dependency-version: 2.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.xmlunit:xmlunit-matchers dependency-version: 2.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.xmlunit:xmlunit-matchers dependency-version: 2.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: biz.aQute.bnd:biz.aQute.bnd.annotation dependency-version: 7.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.github.spotbugs:spotbugs-annotations dependency-version: 4.9.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.fabric8:docker-maven-plugin dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.tukaani:xz dependency-version: '1.11' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.github.luben:zstd-jni dependency-version: 1.5.7-6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.commons:commons-compress dependency-version: 1.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: com.google.code.gson:gson dependency-version: 2.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.junit.jupiter:junit-jupiter-engine dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.wiremock:wiremock dependency-version: 3.13.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.20.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: co.elastic.clients:elasticsearch-java dependency-version: 9.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.elasticsearch.client:elasticsearch-rest-client dependency-version: 9.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.elasticsearch.client:elasticsearch-rest-client dependency-version: 9.2.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.20.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.mongodb:bson dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.mongodb:mongodb-driver-core dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.mongodb:mongodb-driver-sync dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.mongodb:mongodb-driver-core dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.mongodb:mongodb-driver-sync dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.23 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.springframework:spring-framework-bom dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework:spring-core dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework:spring-core dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework.boot:spring-boot-autoconfigure dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework.boot:spring-boot-starter-test dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework.boot:spring-boot-starter-log4j2 dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework.cloud:spring-cloud-context dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework.boot:spring-boot-starter-test dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.springframework.boot:spring-boot-starter-log4j2 dependency-version: 4.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Related to third party dependency updates or migrations java Pull requests that update Java code labels Jan 1, 2026

github-project-automation bot added this to Log4j pull request tracker Jan 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the dependencies group across 1 directory with 57 updates #4018

Bump the dependencies group across 1 directory with 57 updates #4018

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Bump the dependencies group across 1 directory with 57 updates #4018

Are you sure you want to change the base?

Bump the dependencies group across 1 directory with 57 updates #4018

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

Apache Commons CSV 1.14.1 Release Notes

Fixed Bugs

Changes

Logback 1.5.23

Logback 1.5.22

Logback 1.5.21

Logback 1.5.20

New Contributors

New Contributors

New Contributors

New Contributors

New Contributors

New Contributors

v5.21.0

5.21.0

v5.20.0

5.20.0

v5.19.0

5.19.0

v3.27.6

🐛 Bug Fixes

Core

❤️ Contributors

v3.27.5

⚡ Improvements

Core

🔨 Dependency Upgrades

Core

Guava

v3.27.4

🚫 Deprecated

Core

🐛 Bug Fixes

Core

⚡ Improvements

Byte Buddy 1.18.3

Byte Buddy 1.18.2

Byte Buddy 1.18.1

Byte Buddy 1.18.0

Byte Buddy 1.17.8

Byte Buddy 1.17.7

26. November 2025: version 1.18.3

26. November 2025: version 1.18.2

12. November 2025: version 1.18.1

11. November 2025: version 1.18.0

8. October 2025: version 1.17.8

17. August 2025: version 1.17.7

Apache Commons Codec 1.20.0 Release Notes

New features

Changes

Apache Commons Codec 1.19.0 Release Notes

Introduction

New features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants