Skip to content

Bump the maven-dependencies group with 8 updates - #163

Merged
infeo merged 1 commit into
developfrom
dependabot/maven/maven-dependencies-c2cdd2f97f
Oct 6, 2026
Merged

infeo merged 1 commit into
developfrom
dependabot/maven/maven-dependencies-c2cdd2f97f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 8 updates:

Package From To
org.slf4j:slf4j-api 2.0.18 2.0.20
org.slf4j:slf4j-simple 2.0.18 2.0.20
com.fasterxml.jackson.core:jackson-databind 2.21.6 2.21.7
org.purejava:secret-service 1.3.1 1.3.2
org.purejava:flatpak-update-portal 1.1.1 1.1.2
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-deploy-plugin 3.1.4 3.2.0

Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.20

Updates org.slf4j:slf4j-simple from 2.0.18 to 2.0.20

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.6 to 2.21.7

Commits
  • 13a9ff4 [maven-release-plugin] prepare release jackson-databind-2.21.7
  • d168f96 Prep for 2.21.7 release
  • e05ef4c Merge branch '2.20' into 2.21
  • f6d4000 Merge branch '2.19' into 2.20
  • eb3583b Merge branch '2.18' into 2.19
  • 3829201 Post-release dep version bump
  • f7f50ce [maven-release-plugin] prepare for next development iteration
  • a254f8c [maven-release-plugin] prepare release jackson-databind-2.18.11
  • e6e578b Prep for 2.18.11 release
  • e3e59d2 Add CVE id (CVE-2026-91777) for #6204 in 2.21 release notes
  • Additional commits viewable in compare view

Updates org.purejava:secret-service from 1.3.1 to 1.3.2

Release notes

Sourced from org.purejava:secret-service's releases.

1.3.2

What's Changed

Full Changelog: purejava/secret-service@1.3.1...1.3.2

Commits
  • 5d6f5f5 Prepare release 1.3.2
  • 5ab9ad4 Update verification-metadata.xml
  • 07fa536 Bump the java-bundles group with 2 updates
  • 2d7d516 Bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group
  • 481e0e7 Sign commit on updating verification-metadata.xml
  • 76e825e Update verification-metadata.xml
  • e970df0 Bump the java-bundles group with 3 updates
  • 9aeea10 Distinction between desktops is not needed any more
  • aeb4374 Update verification-metadata.xml
  • 5a73136 Bump the github-actions group with 2 updates
  • Additional commits viewable in compare view

Updates org.purejava:flatpak-update-portal from 1.1.1 to 1.1.2

Release notes

Sourced from org.purejava:flatpak-update-portal's releases.

1.1.2

What's Changed

Full Changelog: purejava/FlatpakUpdateAndRestart@1.1.1...1.1.2

Commits
  • b0077c5 Prepare release 1.1.2
  • 4fa0e9a Fix README
  • 7fb420a Bump the java-bundles group across 1 directory with 9 updates
  • a91342b Bump the github-actions group with 2 updates
  • 1acabea Update to Gradle 9.7.1
  • 84cbb0c Update to Gradle 9.7.0
  • 36d53fb Move to Java 25
  • 456e6ee Bump the github-actions group with 3 updates
  • 9f02a8b Bump the java-bundles group with 4 updates
  • fdc643b Bump the java-bundles group across 1 directory with 5 updates
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-simple from 2.0.18 to 2.0.20

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0

Release notes

Sourced from org.apache.maven.plugins:maven-deploy-plugin's releases.

3.2.0

🚀 New features and improvements

🐛 Bug Fixes

  • Backport security audit fixes to 3.x (f004-f008, f010, f012) (#701) @​gnodet

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 7aab9fb [maven-release-plugin] prepare release maven-deploy-plugin-3.2.0
  • 1f3eef5 Backport security audit fixes to 3.x (f004-f008, f010, f012)
  • 307f328 Simplify remote repository creation
  • 7b1bbc4 Cache projectsWithDeployExecution to fix O(N²) reactor scan
  • a9177c6 Clarify deploy without editing this projects POM
  • 7c40513 Restore the plain form of the ASF licence header
  • 5969234 Update Release Drafter configuration to use custom tag template and remove un...
  • df7b3fa Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • b4e8aed work around Maven 4 CLI lack of interpolation
  • d634bb4 enable build with Maven 4
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| org.slf4j:slf4j-api | `2.0.18` | `2.0.20` |
| org.slf4j:slf4j-simple | `2.0.18` | `2.0.20` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.21.6` | `2.21.7` |
| [org.purejava:secret-service](https://github.com/purejava/secret-service) | `1.3.1` | `1.3.2` |
| [org.purejava:flatpak-update-portal](https://github.com/purejava/FlatpakUpdateAndRestart) | `1.1.1` | `1.1.2` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) | `3.1.4` | `3.2.0` |


Updates `org.slf4j:slf4j-api` from 2.0.18 to 2.0.20

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.20

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.6 to 2.21.7
- [Commits](FasterXML/jackson-databind@jackson-databind-2.21.6...jackson-databind-2.21.7)

Updates `org.purejava:secret-service` from 1.3.1 to 1.3.2
- [Release notes](https://github.com/purejava/secret-service/releases)
- [Commits](purejava/secret-service@1.3.1...1.3.2)

Updates `org.purejava:flatpak-update-portal` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/purejava/FlatpakUpdateAndRestart/releases)
- [Commits](purejava/FlatpakUpdateAndRestart@1.1.1...1.1.2)

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.20

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0)

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.purejava:secret-service
  dependency-version: 1.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.purejava:flatpak-update-portal
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2026
@infeo infeo self-assigned this Oct 6, 2026
@infeo infeo added this to the next milestone Oct 6, 2026
@infeo
infeo merged commit e3b8a50 into develop Oct 6, 2026
25 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/maven-dependencies-c2cdd2f97f branch October 6, 2026 13:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant