Bump the java group across 1 directory with 18 updates #3932

dependabot · 2025-11-01T22:03:25Z

Bumps the java group with 18 updates in the /java directory:

Package	From	To
org.apache.maven.scm:maven-scm-api	`2.0.1`	`2.2.1`
org.apache.maven.scm:maven-scm-provider-gitexe	`2.0.1`	`2.2.1`
org.mockito:mockito-core	`2.23.4`	`5.20.0`
org.apache.felix:maven-bundle-plugin	`5.1.9`	`6.0.0`
org.apache.maven.plugins:maven-jar-plugin	`3.3.0`	`3.4.2`
org.apache.maven.plugins:maven-surefire-plugin	`3.1.2`	`3.5.4`
org.apache.maven.plugins:maven-source-plugin	`3.3.0`	`3.3.1`
org.apache.maven.plugins:maven-javadoc-plugin	`3.5.0`	`3.12.0`
org.apache.maven.plugins:maven-release-plugin	`3.0.1`	`3.1.1`
org.apache.maven.plugins:maven-compiler-plugin	`3.11.0`	`3.14.1`
org.sonatype.central:central-publishing-maven-plugin	`0.8.0`	`0.9.0`
org.apache.maven.plugins:maven-gpg-plugin	`3.1.0`	`3.2.8`
com.google.template:soy	`2022-07-20`	`v20160111`
com.google.cloud.tools:appengine-maven-plugin	`2.4.4`	`2.8.4`
commons-io:commons-io	`2.14.0`	`2.20.0`
commons-fileupload:commons-fileupload	`1.5`	`1.6.0`
org.apache.maven.plugins:maven-war-plugin	`3.4.0`	`3.5.0`
org.codehaus.mojo:exec-maven-plugin	`3.1.0`	`3.6.2`

Updates org.apache.maven.scm:maven-scm-api from 2.0.1 to 2.2.1

Release notes

Sourced from org.apache.maven.scm:maven-scm-api's releases.

2.2.1

🚀 New features and improvements

Add method to ScmManager to get an ScmRepository from an existing (#1319) @kwin

Reduce log noise (#1313) @elharo

Reduce amount of log junk emitted (#1286) @elharo

Support "no-verify" with JGit commits (#1294) @kwin

Rework sign option for Git tag/commit (#1293) @kwin

[SCM-1011] - Consider interactive flag for SvnExeScmProvider (#181) @kwin

Git: Observe interactive flag (#1280) @kwin

New option to be able to disable sign for commit/tag to be able use this with jgit when you have gpgsign configured in ~/.gitconfig (#1266) @olamy

Add shallow parameter to checkout mojo (#1264) @clafren1

Add Apache 2.0 LICENSE file (#1265) @Ndacyayisenga-droid

🐛 Bug Fixes

Replace "git whatchanged" by "git log" (#1311) @kwin

Avoid raw RuntimeException (#1307) @elharo

JGit: Propagate exceptions when pushing tags/branches (#1271) @kwin

Git: Use environment variables when pushing tags/branches to remote (#1270) @kwin

[SCM-1029] - Fix empty commits on JGit checkin (#238) @mhoffrog

📝 Documentation updates

Document SCM authentication means (#1281) @kwin

Feature/apt to md (#1277) @kwin

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#234) @Bukama

[MNGSITE-540] - Use correct plugin for reporting (#216) @kwin

Remove mention of deprecated SCM provider which have been removed in 2.0.0 (#209) @elharo

👻 Maintenance

Deprecate ConsumerUtils (#1315) @elharo

cleanup runtime exceptions (#1299) @elharo

feat: enable prevent branch protection rules (#1309) @sebtiem

Throw is enough (#1306) @elharo

Replace raw runtime exceptions with GeneralSecurityException (#1304) @elharo

remove not used plugins from pom (#1267) @olamy

Enable Github issues (#242) @Bukama

Make asserts meaningful (#232) @elharo

Convert from plexus to guice injection (#229) @elharo

Remove dead commented code (#231) @elharo

Unabbreviate cl variable names (#230) @elharo

Declare used dependencies (#227) @elharo

Prefer try with resources (#228) @elharo

📦 Dependency updates

Use SSHD 2.16.0 (#1318) @kwin

... (truncated)

Commits

f2a75b3 [maven-release-plugin] prepare for next development iteration
65b342b [maven-release-plugin] prepare release maven-scm-2.2.1
ab95cfc [maven-release-plugin] rollback the release of maven-scm-2.2.1
26021cf [maven-release-plugin] prepare for next development iteration
851705a Add method to ScmManager to get an ScmRepository from an existing
01ffa73 trivial: clarify description
0e5bccd Deprecate ConsumerUtils (#1315)
ea97644 Reduce log noise (#1313)
092eed6 Use SSHD 2.16.0
041492e Follow Oracle Javadoc guidelines (#1312)
Additional commits viewable in compare view

Updates org.apache.maven.scm:maven-scm-provider-gitexe from 2.0.1 to 2.2.1

Updates org.mockito:mockito-core from 2.23.4 to 5.20.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 [(#3730)](mockito/mockito#3730)

Introducing the Ability to Mock Construction of Generic Types (#2401) [(#3729)](mockito/mockito#3729)

Bump com.gradle.develocity from 4.1.1 to 4.2 [(#3726)](mockito/mockito#3726)

Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 [(#3725)](mockito/mockito#3725)

Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 [(#3720)](mockito/mockito#3720)

Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 [(#3719)](mockito/mockito#3719)

Bump actions/setup-java from 4 to 5 [(#3715)](mockito/mockito#3715)

Bump com.gradle.develocity from 4.1 to 4.1.1 [(#3713)](mockito/mockito#3713)

Bump bytebuddy from 1.17.6 to 1.17.7 [(#3712)](mockito/mockito#3712)

test: Use Assume.assumeThat for SequencedCollection tests [(#3711)](mockito/mockito#3711)

Fix #3709 [(#3710)](mockito/mockito#3710)

feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708)

Introducing the Ability to Mock Construction of Generic Types [(#2401)](mockito/mockito#2401)

v5.19.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.19.0

2025-08-15 - 37 commit(s) by Adrian-Kim, Tim van der Lippe, Tran Ngoc Nhan, dependabot[bot], juyeop

feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708)

Bump actions/checkout from 4 to 5 [(#3707)](mockito/mockito#3707)

build: Allow overriding 'Created-By' for reproducible builds [(#3704)](mockito/mockito#3704)

Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 [(#3703)](mockito/mockito#3703)

Bump androidx.test:runner from 1.6.2 to 1.7.0 [(#3697)](mockito/mockito#3697)

Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 [(#3694)](mockito/mockito#3694)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 [(#3693)](mockito/mockito#3693)

Bump junit-jupiter from 5.13.3 to 5.13.4 [(#3691)](mockito/mockito#3691)

Bump com.gradle.develocity from 4.0.2 to 4.1 [(#3689)](mockito/mockito#3689)

Bump com.google.googlejavaformat:google-java-format from 1.27.0 to 1.28.0 [(#3688)](mockito/mockito#3688)

Bump com.google.googlejavaformat:google-java-format from 1.25.2 to 1.27.0 [(#3686)](mockito/mockito#3686)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.4 to 7.1.0 [(#3685)](mockito/mockito#3685)

Bump junit-jupiter from 5.13.2 to 5.13.3 [(#3684)](mockito/mockito#3684)

Bump org.shipkit:shipkit-auto-version from 2.1.0 to 2.1.2 [(#3683)](mockito/mockito#3683)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.0.2 to 7.0.4 [(#3682)](mockito/mockito#3682)

Only run release after both Java and Android tests have finished [(#3681)](mockito/mockito#3681)

Bump org.junit.platform:junit-platform-launcher from 1.12.2 to 1.13.3 [(#3680)](mockito/mockito#3680)

Bump org.codehaus.groovy:groovy from 3.0.24 to 3.0.25 [(#3679)](mockito/mockito#3679)

Bump org.eclipse.platform:org.eclipse.osgi from 3.23.0 to 3.23.100 [(#3678)](mockito/mockito#3678)

Can no longer publish snapshot releases [(#3677)](mockito/mockito#3677)

Update Gradle to 8.14.2 [(#3676)](mockito/mockito#3676)

Bump errorprone from 2.23.0 to 2.39.0 [(#3674)](mockito/mockito#3674)

Correct Junit docs link [(#3672)](mockito/mockito#3672)

Bump net.ltgt.gradle:gradle-errorprone-plugin from 4.1.0 to 4.3.0 [(#3670)](mockito/mockito#3670)

Bump junit-jupiter from 5.13.1 to 5.13.2 [(#3669)](mockito/mockito#3669)

Bump bytebuddy from 1.17.5 to 1.17.6 [(#3668)](mockito/mockito#3668)

... (truncated)

Commits

3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
37bb3e5 Fix metadata generation on GraalVM (#3710)
ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
Additional commits viewable in compare view

Updates org.apache.felix:maven-bundle-plugin from 5.1.9 to 6.0.0

Updates org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.2

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.4.2

🐛 Bug Fixes

[MJAR-310] - fixed toolchain version detection when toolchain paths contain white spaces (#86) @jansohn

👻 Maintenance

Build with Maven 4 (#88) @slawekjaranowski

3.4.1

🐛 Bug Fixes

[MJAR-307] - Wrong version of commons-io cause a ClassNotFound o.a.commons.io.file.attribute.FileTimes (#83) @slawekjaranowski

📦 Dependency updates

[MJAR-308] - Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#85) @dependabot

3.4.0

🚀 New features and improvements

[MJAR-296] - Allow including files excluded by default. (#67) @redzi

[MJAR-302] - Require Maven 3.6.3 (#77) @slawekjaranowski

[MJAR-292] - Detect MRJAR and add Multi-Release manifest entry (#57) @jorsol

🐛 Bug Fixes

[MJAR-62] - Set Build-Jdk according to used toolchain (#73) @slawekjaranowski

📦 Dependency updates

[MJAR-306] - Use properties for plugins versions in LifecycleMapping (#82) @slawekjaranowski

Bump org.junit:junit-bom from 5.10.1 to 5.10.2 (#74) @dependabot

[MJAR-298] - Update Maven-Archiver to 3.6.2 (#78) @slawekjaranowski

Bump apache/maven-gh-actions-shared from 2 to 4 (#72) @dependabot

Bump commons-io:commons-io from 2.14.0 to 2.15.1 (#68) @dependabot

[MJAR-297] - Update Parent to 40 (#64) @jorsol

[MJAR-298] - Update Maven-Archiver to 3.6.1 (#65) @jorsol

[MJAR-293] - Update Parent to 39 (#59) @jorsol

👻 Maintenance

[MJAR-304] - Refresh download page (#80) @slawekjaranowski

[MJAR-303] - Cleanup declared dependencies (#79) @slawekjaranowski

Remove dependency on plexus (#63) @elharo

Commits

95007e8 [maven-release-plugin] prepare release maven-jar-plugin-3.4.2
99584ce Build with Maven 4
e9c98a4 [MJAR-310] fixed toolchain version detection when toolchain paths contain whi...
a5554bb [maven-release-plugin] prepare for next development iteration
8b29adc [maven-release-plugin] prepare release maven-jar-plugin-3.4.1
325b299 [MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#85)
52111cc [MJAR-307] Wrong version of commons-io cause a ClassNotFound o.a.commons.io.f...
902d4c5 [maven-release-plugin] prepare for next development iteration
992f44a [maven-release-plugin] prepare release maven-jar-plugin-3.4.0
5e31b99 [MJAR-296] Allow including files excluded by default. (#67)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

Name the shutdown hook (#3170) @cstamas

Implement fail-fast behavior for JUnit Platform provider (#3155) @marcphilipp

Create a single LauncherSession for invocations of JUnitPlatformProvider (#863) @marcphilipp

🐛 Bug Fixes

[SUREFIRE-2298] - fix xml output with junit 5 nested classes (fix integration with Cucumber and Archunit) (#828) @olamy

👻 Maintenance

feat: enable prevent branch protection rules (#3168) @sparsick

Get rid of plexus-annotations (#3163) @olamy

Remove maven-changes-plugin (#861) @sparsick

Enable GitHub Issues (#831) @Bukama

📦 Dependency updates

Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173) @dependabot[bot]

Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167) @dependabot[bot]

Bump org.apache.commons:commons-compress from 1.27.1 to 1.28.0 (#3165) @dependabot[bot]

Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#3161) @dependabot[bot]

Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#3158) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.12.0 to 4.13.0 (#856) @dependabot[bot]

Bump org.xmlunit:xmlunit-core from 2.10.2 to 2.10.3 (#860) @dependabot[bot]

Bump commons-beanutils:commons-beanutils from 1.7.0 to 1.11.0 in /surefire-its/src/test/resources/webapp (#851) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.11.1 to 4.12.0 (#844) @dependabot[bot]

Bump org.fusesource.jansi:jansi from 2.4.1 to 2.4.2 (#836) @dependabot[bot]

Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#833) @dependabot[bot]

Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28 (#829) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0 (#830) @dependabot[bot]

Bump jacocoVersion from 0.8.12 to 0.8.13 (#827) @dependabot[bot]

3.5.3

🐛 Bug Fixes

[SUREFIRE-1737] - Fix disable in statelessTestsetReporter (#816) @slawekjaranowski

[SUREFIRE-1643] - surefire junit5 parallel tests (#815) @olamy

[SUREFIRE-2289] - Make exceptions more appropriate to context (#798) @elharo

👻 Maintenance

surefire shared utils version current version (#825) @olamy

Update site descriptors (#821) @slawekjaranowski

... (truncated)

Commits

88513d8 [maven-release-plugin] prepare release surefire-3.5.4
9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
1e63159 Name the shutdown hook (#3170)
76e806a feat: enable prevent branch protection rules (#3168)
0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.3.1

Release notes

Sourced from org.apache.maven.plugins:maven-source-plugin's releases.

3.3.1

What's Changed

[MSOURCES-139] Fix typo in AbstractSourceJarMojo exception by @NotMyFault in apache/maven-source-plugin#11

[MSOURCES-142]Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 by @dependabot in apache/maven-source-plugin#12

Fix typos in AbstractSourceJarMojo exception by @sabi0 in apache/maven-source-plugin#13

Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 by @dependabot in apache/maven-source-plugin#21

Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 by @dependabot in apache/maven-source-plugin#20

Bump org.apache.maven.plugins:maven-plugins from 39 to 41 by @dependabot in apache/maven-source-plugin#18

Bump apache/maven-gh-actions-shared from 3 to 4 by @dependabot in apache/maven-source-plugin#22

New Contributors

@NotMyFault made their first contribution in apache/maven-source-plugin#11

@sabi0 made their first contribution in apache/maven-source-plugin#13

Full Changelog: apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1

Commits

f80596e [maven-release-plugin] prepare release maven-source-plugin-3.3.1
7626998 Bump apache/maven-gh-actions-shared from 3 to 4
83c963c Bump org.apache.maven.plugins:maven-plugins from 39 to 41 (#18)
40ae495 Bump org.codehaus.plexus:plexus-archiver from 4.8.0 to 4.9.1 (#20)
073462b Bump org.apache.maven:maven-archiver from 3.6.0 to 3.6.1 (#21)
0b1c823 Fix typos in AbstractSourceJarMojo exception
099c65a [MSOURCES-142] Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0 (...
1edeea4 [MSOURCES-139] Fix typo in AbstractSourceJarMojo exception
436966e [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.5.0 to 3.12.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.12.0

💥 Breaking changes

remove fix mojo (#1263) @elharo

detectOfflineLinks is now false per default for all jar mojo issue #1258 (#1259) @olamy

🐛 Bug Fixes

Fix legacyMode (#1265) @fridrich

Fix package {...} does not exist in legacyMode (#1243) @JackPGreen

Ensure UTF-8 charset is used to avoid IllegalArgumentException: Null charset name (#1245) @elharo

Remove Javadoc 1.4+ / -1.1 switch related warning (#1240) @perceptron8

👻 Maintenance

protect 3.8.x branch (#1238) @hboutemy

feat: enable prevent branch protection rules (#1228) @sparsick

📦 Dependency updates

Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0 (#1257) @dependabot[bot]

3.11.3

🚨 Removed

Remove workaround for long patched CVE in javadoc (#388) @elharo

🚀 New features and improvements

Issue #369 Support --no-fonts option per default for jdk 23+ (#375) @olamy

🐛 Bug Fixes

Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use --source-path in legacy mode) (#1217) @fridrich

[MJAVADOC-826] - Don't try to modify project source roots (#358) @oehme

📝 Documentation updates

Correct javadoc-no-fork description on index-page (#368) @Bukama

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#360) @Bukama

(doc) Close links tag in links parameter javadoc example (#355) @sixcorners

👻 Maintenance

Be consistent about data encoding when copying files (#1215) @fridrich

Clean up JavadocUtilTest (#1210) @elharo

Use Java 7 relativization instead of hand-rolled code (#385) @elharo

Rephrase source code fix interactive messages for clarity (#390) @elharo

... (truncated)

Commits

2a06bed [maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0
a71ecf9 bump version 3.12.0-SNAPSHOT
88f2b71 [maven-release-plugin] prepare for next development iteration
7e18956 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4
c11b76c In legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...
bc9904b remove fix mojo (#1263)
f310135 Fix package {...} does not exist in legacyMode (#1243)
c8270f9 detectOfflineLinks is now false per default for all jar mojo issue #1258 ...
953e609 Delete flaky test (#1260)
2bba7a4 Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-release-plugin from 3.0.1 to 3.1.1

Release notes

Sourced from org.apache.maven.plugins:maven-release-plugin's releases.

3.1.0

🚀 New features and improvements

[MRELEASE-1145] - Upgrade to Maven 3.6.3 (#217) @michael-o

[MRELEASE-1139] - Improve logging of sources for used credentials (#209) @kwin

[MRELEASE-1134] - Pass interactive flag to SCM provider (#197) @kwin

🐛 Bug Fixes

[MRELEASE-1064] - [REGRESSION] release:branch uses @releaseLabel instea… (#221) @michael-o

[MRELEASE-1147] - @junitVersion@ never replaced in UTs (make explicit) (#220) @michael-o

[MRELEASE-1148] - Release Manage pulls in transitive dependencies (#219) @michael-o

[MRELEASE-1146] - maven-release-plugin tests do not properly check for … (#218) @michael-o

[MRELEASE-1109] - patch JDomModel (#201) @mkolesnikov

[MRELEASE-1109] - Support CI friendly versions (#198) @kwin

📦 Dependency updates

Bump scmVersion from 2.0.1 to 2.1.0 (#213) @dependabot

Bump org.apache.maven.shared:maven-invoker from 3.2.0 to 3.3.0 (#215) @dependabot

Bump org.codehaus.plexus:plexus-interactivity-api from 1.2 to 1.3 (#210) @dependabot

Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27 (#206) @dependabot

Bump org.xmlunit:xmlunit-core from 2.9.1 to 2.10.0 (#214) @dependabot

[MRELEASE-1144] - Upgrade to Parent 42 (#216) @michael-o

Bump apache/maven-gh-actions-shared from 3 to 4 (#212) @dependabot

Bump org.codehaus.plexus:plexus-interactivity-api from 1.1 to 1.2 (#207) @dependabot

Bump org.codehaus.mojo:mrm-maven-plugin from 1.5.0 to 1.6.0 (#200) @dependabot

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.5.1 to 3.6.0 (#204) @dependabot

Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.14.0 (#205) @dependabot

[MRELEASE-1128] - update maven-scm to 2.0.1 (#192) @elharo

👻 Maintenance

Bump release-drafter/release-drafter from 5 to 6 (#211) @dependabot

[MRELEASE-1136] - Upgrade parent pom to 41 (#208) @slachiewicz

fixup hamcrest dependencies (#194) @elharo

prefer JDK String replace methods to Plexus ones (#193) @elharo

Commits

4f350d4 [maven-release-plugin] prepare release maven-release-3.1.1
06f6de4 [MRELEASE-1153] Revert parts of MRELEASE-1109 (8dfcb47996320af5e6f0b2d50eac20...
985d0bc [MRELEASE-1149] Current release of the plugin has configuration docs missing
47e94b4 [maven-release-plugin] prepare for next development iteration
f2f9f4e [maven-release-plugin] prepare release maven-release-3.1.0
e109d3b Bump scmVersion from 2.0.1 to 2.1.0
5f794a1 Bump org.apache.maven.shared:maven-invoker from 3.2.0 to 3.3.0
28201bb Bump org.codehaus.plexus:plexus-interactivity-api from 1.2 to 1.3
8547606 Bump org.codehaus.plexus:plexus-interpolation from 1.26 to 1.27
adf6aaf Bump org.xmlunit:xmlunit-core from 2.9.1 to 2.10.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

Improve DeltaList behavior for large projects (#335) @gsmet

Allow to not use --module-version for the Java compiler (#331) @pzygielo

🐛 Bug Fixes

Add generatedSourcesPath back to the maven project (#312) @mensinda

[MCOMPILER-538] - Do not add target/generated-sources/annotations to the source roots (Description has been truncated

Bumps the java group with 18 updates in the /java directory: | Package | From | To | | --- | --- | --- | | [org.apache.maven.scm:maven-scm-api](https://github.com/apache/maven-scm) | `2.0.1` | `2.2.1` | | org.apache.maven.scm:maven-scm-provider-gitexe | `2.0.1` | `2.2.1` | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | `2.23.4` | `5.20.0` | | org.apache.felix:maven-bundle-plugin | `5.1.9` | `6.0.0` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.4.2` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.1.2` | `3.5.4` | | [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.3.1` | | [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.5.0` | `3.12.0` | | [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.0.1` | `3.1.1` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.11.0` | `3.14.1` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` | | [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.1.0` | `3.2.8` | | [com.google.template:soy](https://github.com/google/closure-templates) | `2022-07-20` | `v20160111` | | [com.google.cloud.tools:appengine-maven-plugin](https://github.com/GoogleCloudPlatform/appengine-plugins) | `2.4.4` | `2.8.4` | | [commons-io:commons-io](https://github.com/apache/commons-io) | `2.14.0` | `2.20.0` | | commons-fileupload:commons-fileupload | `1.5` | `1.6.0` | | [org.apache.maven.plugins:maven-war-plugin](https://github.com/apache/maven-war-plugin) | `3.4.0` | `3.5.0` | | [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.1.0` | `3.6.2` | Updates `org.apache.maven.scm:maven-scm-api` from 2.0.1 to 2.2.1 - [Release notes](https://github.com/apache/maven-scm/releases) - [Commits](apache/maven-scm@maven-scm-2.0.1...v2.2.1) Updates `org.apache.maven.scm:maven-scm-provider-gitexe` from 2.0.1 to 2.2.1 Updates `org.mockito:mockito-core` from 2.23.4 to 5.20.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v2.23.4...v5.20.0) Updates `org.apache.felix:maven-bundle-plugin` from 5.1.9 to 6.0.0 Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.4.2 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.4.2) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.1.2 to 3.5.4 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.1.2...surefire-3.5.4) Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.3.1 - [Release notes](https://github.com/apache/maven-source-plugin/releases) - [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1) Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.5.0 to 3.12.0 - [Release notes](https://github.com/apache/maven-javadoc-plugin/releases) - [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.12.0) Updates `org.apache.maven.plugins:maven-release-plugin` from 3.0.1 to 3.1.1 - [Release notes](https://github.com/apache/maven-release/releases) - [Commits](apache/maven-release@maven-release-3.0.1...maven-release-3.1.1) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.11.0 to 3.14.1 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.11.0...maven-compiler-plugin-3.14.1) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0 - [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits) Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.1.0 to 3.2.8 - [Release notes](https://github.com/apache/maven-gpg-plugin/releases) - [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.1.0...maven-gpg-plugin-3.2.8) Updates `com.google.template:soy` from 2022-07-20 to v20160111 - [Commits](https://github.com/google/closure-templates/commits) Updates `com.google.cloud.tools:appengine-maven-plugin` from 2.4.4 to 2.8.4 - [Release notes](https://github.com/GoogleCloudPlatform/appengine-plugins/releases) - [Changelog](https://github.com/GoogleCloudPlatform/appengine-plugins/blob/main/CHANGELOG.md) - [Commits](https://github.com/GoogleCloudPlatform/appengine-plugins/commits/v2.8.4) Updates `commons-io:commons-io` from 2.14.0 to 2.20.0 - [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-io@rel/commons-io-2.14.0...rel/commons-io-2.20.0) Updates `commons-fileupload:commons-fileupload` from 1.5 to 1.6.0 Updates `org.apache.maven.plugins:maven-war-plugin` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/apache/maven-war-plugin/releases) - [Commits](apache/maven-war-plugin@maven-war-plugin-3.4.0...maven-war-plugin-3.5.0) Updates `org.codehaus.mojo:exec-maven-plugin` from 3.1.0 to 3.6.2 - [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases) - [Commits](mojohaus/exec-maven-plugin@exec-maven-plugin-3.1.0...3.6.2) --- updated-dependencies: - dependency-name: org.apache.maven.scm:maven-scm-api dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.scm:maven-scm-provider-gitexe dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.mockito:mockito-core dependency-version: 5.20.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: java - dependency-name: org.apache.felix:maven-bundle-plugin dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: java - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java - dependency-name: org.apache.maven.plugins:maven-javadoc-plugin dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.plugins:maven-release-plugin dependency-version: 3.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.14.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.plugins:maven-gpg-plugin dependency-version: 3.2.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: com.google.template:soy dependency-version: v20160111 dependency-type: direct:production dependency-group: java - dependency-name: com.google.cloud.tools:appengine-maven-plugin dependency-version: 2.8.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: commons-io:commons-io dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: commons-fileupload:commons-fileupload dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.apache.maven.plugins:maven-war-plugin dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java - dependency-name: org.codehaus.mojo:exec-maven-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2025

dependabot bot requested a review from a team as a code owner November 1, 2025 22:03

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the java group across 1 directory with 18 updates #3932

Bump the java group across 1 directory with 18 updates #3932

dependabot bot commented on behalf of github Nov 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the java group across 1 directory with 18 updates #3932

Are you sure you want to change the base?

Bump the java group across 1 directory with 18 updates #3932

Conversation

dependabot bot commented on behalf of github Nov 1, 2025

2.2.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

v5.20.0

5.20.0

v5.19.0

5.19.0

3.4.2

🐛 Bug Fixes

👻 Maintenance

3.4.1

🐛 Bug Fixes

📦 Dependency updates

3.4.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.5.3

🐛 Bug Fixes

👻 Maintenance

3.3.1

What's Changed

New Contributors

3.12.0

💥 Breaking changes

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.11.3

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.1.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant