chore(deps): bump the maven-minor group with 15 updates #556

dependabot · 2025-07-15T02:11:29Z

Bumps the maven-minor group with 15 updates:

Package	From	To
org.junit:junit-bom	`5.13.1`	`5.13.3`
org.apache.commons:commons-lang3	`3.17.0`	`3.18.0`
org.mariadb.jdbc:mariadb-java-client	`3.5.3`	`3.5.4`
org.flywaydb:flyway-core	`11.9.1`	`11.10.2`
org.flywaydb:flyway-mysql	`11.9.1`	`11.10.2`
org.apache.logging.log4j:log4j-api	`2.25.0`	`2.25.1`
org.apache.logging.log4j:log4j-core	`2.25.0`	`2.25.1`
org.apache.logging.log4j:log4j-jcl	`2.25.0`	`2.25.1`
org.apache.logging.log4j:log4j-slf4j-impl	`2.25.0`	`2.25.1`
org.apache.logging.log4j:log4j-jakarta-web	`2.25.0`	`2.25.1`
io.sentry:sentry-log4j2	`8.13.3`	`8.17.0`
com.github.ben-manes.caffeine:caffeine	`3.2.1`	`3.2.2`
org.jsoup:jsoup	`1.20.1`	`1.21.1`
org.commonmark:commonmark	`0.24.0`	`0.25.0`
org.apache.maven.plugins:maven-enforcer-plugin	`3.5.0`	`3.6.0`

Updates org.junit:junit-bom from 5.13.1 to 5.13.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.1...r5.13.2

Commits

9e8abdd Release 5.13.3
8a0be13 Improve message of discovery issues for ineffective @Order annotations (#4718)
59d562e Fix Javadoc references
f4c202b Strip reasons when concatenating them in ConditionEvaluationResult
e5d0e0b Fix multiple issues with ConditionEvaluationResult reason values
e5c9a56 Improve display names in tests
cf19095 Polish release notes
aec59d2 Update dependency com.puppycrawl.tools:checkstyle to v10.26.1
7d8fe2a Update dependency com.puppycrawl.tools:checkstyle to v10.26.0
d1ffa36 Update dependency com.puppycrawl.tools:checkstyle to v10.25.1
Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.3 to 3.5.4

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.4

3.5.4 (Jun 2025)

Full Changelog

Key Enhancements

CONJ-1261 - Added caching option for loadCodecs results to improve performance

Issues Resolved

CONJ-1234 - Fixed incorrect type definitions in DatabaseMetaData.getTypeInfo()

CONJ-1247 - Resolved potential race condition that could cause NullPointerException

CONJ-1250 - avoids redundant queries for CallableStatement.getParameterMetaData()

CONJ-1251 - Fixed SSL configuration issue where zero SSL settings only functioned without explicit SSL configuration

CONJ-1252 - Resolved GSSAPI authentication error when server exchanges begin with 0x01 byte

CONJ-1254 - Corrected DatabaseMetadata.getTypeInfo() returning incorrect values for AUTO_INCREMENT, FIXED_PREC_SCALE, and CASE_SENSITIVE fields

CONJ-1255 - Fixed getString method on BIT(1) fields to properly honor transformedBitIsBoolean configuration

CONJ-1259 - Enhanced metadata compatibility with MariaDB version 12.0

CONJ-1260 - Improved performance of DatabaseMetaData.getExportedKeys method

CONJ-1256 - Fixed issue to ensure correct catalog name is returned

Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.4 (Jun 2025)

Full Changelog

Key Enhancements

CONJ-1261 - Added caching option for loadCodecs results to improve performance

Issues Resolved

CONJ-1234 - Fixed incorrect type definitions in DatabaseMetaData.getTypeInfo()

CONJ-1247 - Resolved potential race condition that could cause NullPointerException

CONJ-1250 - avoids redundant queries for CallableStatement.getParameterMetaData()

CONJ-1251 - Fixed SSL configuration issue where zero SSL settings only functioned without explicit SSL configuration

CONJ-1252 - Resolved GSSAPI authentication error when server exchanges begin with 0x01 byte

CONJ-1254 - Corrected DatabaseMetadata.getTypeInfo() returning incorrect values for AUTO_INCREMENT, FIXED_PREC_SCALE, and CASE_SENSITIVE fields

CONJ-1255 - Fixed getString method on BIT(1) fields to properly honor transformedBitIsBoolean configuration

CONJ-1259 - Enhanced metadata compatibility with MariaDB version 12.0

CONJ-1260 - Improved performance of DatabaseMetaData.getExportedKeys method

CONJ-1256 - Fixed issue to ensure correct catalog name is returned

Commits

3b9bebd [misc] change maven oss to central since oss is now deprecated
81b0dcc [misc] correct test certificate path
ce280ce [misc] ensure test stability with MySQL
2a916ff [misc] ensure pkcs testing
db2f3f9 bump 3.5.4 version
bc3bec4 Merge branch 'develop'
69114ab [CONJ-1260] DatabaseMetaData.getExportedKeys may be slow
413760d [misc] correct schedule on maintenance version
b58aa84 [CONJ-1261] Provide an option to cache the results of loadCodecs
ec452a7 [misc] connect to docker if env set
Additional commits viewable in compare view

Updates org.flywaydb:flyway-core from 11.9.1 to 11.10.2

Release notes

Sourced from org.flywaydb:flyway-core's releases.

Flyway 11.10.2

See release notes here

Flyway 11.10.1

See release notes here

Flyway 11.10.0

See release notes here

Flyway 11.9.2

See release notes here

Commits

d57eee0 Bump version to flyway-11.10.2
c84e440 Bump version to flyway-11.10.1
bff25e0 Bump version to flyway-11.10.0
ad889ef Merge pull request #4101 from flyway/11.9.2
bf2c91e Bump version to flyway-11.9.2
See full diff in compare view

Updates org.flywaydb:flyway-mysql from 11.9.1 to 11.10.2

Updates org.apache.logging.log4j:log4j-api from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-core from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-jcl from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-jakarta-web from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-core from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-jcl from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-slf4j-impl from 2.25.0 to 2.25.1

Updates org.apache.logging.log4j:log4j-jakarta-web from 2.25.0 to 2.25.1

Updates io.sentry:sentry-log4j2 from 8.13.3 to 8.17.0

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.17.0

Features

Send Timber logs through Sentry Logs (#4490)

Enable the Logs feature in your SentryOptions or with the io.sentry.logs.enabled manifest option and the SDK will automatically send Timber logs to Sentry, if the TimberIntegration is enabled.

The SDK will automatically detect Timber and use it to send logs to Sentry.

Send logcat through Sentry Logs (#4487)

Enable the Logs feature in your SentryOptions or with the io.sentry.logs.enabled manifest option and the SDK will automatically send logcat logs to Sentry, if the Sentry Android Gradle plugin is applied.

To set the logcat level check the Logcat integration documentation.

Read build tool info from sentry-debug-meta.properties and attach it to events (#4314)

Dependencies

Bump OpenTelemetry (#4532)

opentelemetry-sdk to 1.51.0

opentelemetry-instrumentation to 2.17.0

opentelemetry-javaagent to 2.17.0

opentelemetry-semconv to 1.34.0

We are now configuring OpenTelemetry to still behave the same way it did before for span names it generates in GraphQL auto instrumentation (#4537)

Fixes

Use Spring Boot Starter 3 in sentry-spring-boot-starter-jakarta (#4545)

While refactoring our dependency management, we accidentally added Spring Boot 2 and Spring Boot Starter 2 as dependencies of sentry-spring-boot-starter-jakarta, which is intended for Spring Boot 3.

Now, the correct dependencies (Spring Boot 3 and Spring Boot Starter 3) are being added.

8.16.1-alpha.2

Fixes

Optimize scope when maxBreadcrumb is 0 (#4504)

Fix javadoc on TransportResult (#4528)

Session Replay: Fix IllegalArgumentException when Bitmap is initialized with non-positive values (#4536)

Set thread information on transaction from OpenTelemetry attributes (#4478)

Internal

Flattened PerformanceCollectionData (#4505)

8.16.0

Features
Send JUL logs to Sentry as logs (#4518)
You need to enable the logs feature, either in sentry.properties:
logs.enabled=true
Or, if you manually initialize Sentry, you may also enable logs on Sentry.init:
Sentry.init(options -> {
  ...

... (truncated)

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.17.0

Features

Send Timber logs through Sentry Logs (#4490)

Enable the Logs feature in your SentryOptions or with the io.sentry.logs.enabled manifest option and the SDK will automatically send Timber logs to Sentry, if the TimberIntegration is enabled.

The SDK will automatically detect Timber and use it to send logs to Sentry.

Send logcat through Sentry Logs (#4487)

Enable the Logs feature in your SentryOptions or with the io.sentry.logs.enabled manifest option and the SDK will automatically send logcat logs to Sentry, if the Sentry Android Gradle plugin is applied.

To set the logcat level check the Logcat integration documentation.

Read build tool info from sentry-debug-meta.properties and attach it to events (#4314)

Dependencies

Bump OpenTelemetry (#4532)

opentelemetry-sdk to 1.51.0

opentelemetry-instrumentation to 2.17.0

opentelemetry-javaagent to 2.17.0

opentelemetry-semconv to 1.34.0

We are now configuring OpenTelemetry to still behave the same way it did before for span names it generates in GraphQL auto instrumentation (#4537)

Bump Gradle from v8.14.2 to v8.14.3 (#4540)

changelog

diff

Fixes

Use Spring Boot Starter 3 in sentry-spring-boot-starter-jakarta (#4545)

While refactoring our dependency management, we accidentally added Spring Boot 2 and Spring Boot Starter 2 as dependencies of sentry-spring-boot-starter-jakarta, which is intended for Spring Boot 3.

Now, the correct dependencies (Spring Boot 3 and Spring Boot Starter 3) are being added.

8.16.1-alpha.2

Fixes

Optimize scope when maxBreadcrumb is 0 (#4504)

Fix javadoc on TransportResult (#4528)

Session Replay: Fix IllegalArgumentException when Bitmap is initialized with non-positive values (#4536)

Set thread information on transaction from OpenTelemetry attributes (#4478)

Internal

Flattened PerformanceCollectionData (#4505)

8.16.0

Features
Send JUL logs to Sentry as logs (#4518)
You need to enable the logs feature, either in sentry.properties:

... (truncated)

Commits

385ce06 release: 8.17.0
7606f3f Improve detail of E2E test assertions (#4543)
328d1a1 Use Spring Boot Starter 3 in sentry-spring-boot-starter-jakarta (#4545)
6e0d085 Read build tool info from sentry-debug-meta.properties and attach it to eve...
10ae067 Bump OpenTelemetry SDK to 1.51.0, instrumentation to 2.17.0 and semconv t...
d1e46e5 Send Timber logs through Sentry Logs (#4490)
bc15877 Send logcat through Sentry Logs (#4487)
f43539f Merge branch 'release/8.16.1-alpha.2'
4a3c8a4 release: 8.16.1-alpha.2
b90f667 fix(replay): Fix IllegalArgumentException when Bitmap is initialized with...
Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.1 to 3.2.2

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.2.2

Fixed characteristics returned by Spliterators (#1883)

Commits

f55fea4 minor touchups
419e861 increase branch coverage
a794497 additional tests for collection streams
9021c74 Return correct characteristics from spliterators (#1884)
e9ecffe increase branch coverage
b20d839 increase branch coverage
a5e031b increase branch coverage
7df5358 Release 3.2.1
See full diff in compare view

Updates org.jsoup:jsoup from 1.20.1 to 1.21.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.21.1

jsoup 1.21.1 is out now, featuring powerful new node selection capabilities that let you target specific DOM nodes like comments and text nodes using CSS selectors, dynamic tag customization through the new TagSet callback system, and improved defense against mutation XSS attacks with simplified attribute escaping. This release also brings HTTP/2 support by default, numerous API improvements for better developer experience, and fixes for several edge-case parsing issues.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Changes

Removed previously deprecated methods. #2317

Deprecated the :matchText pseduo-selector due to its side effects on the DOM; use the new ::textnode selector and the Element#selectNodes(String css, Class<T> type) method instead. #2343

Deprecated Connection.Response#bufferUp() in lieu of Connection.Response#readFully() which can throw a checked IOException.

Deprecated internal methods Validate#ensureNotNull(Object) (replaced by typed Validate#expectNotNull(T)); protected HTML appenders from Attribute and Node.

If you happen to be using any of the deprecated methods, please take the opportunity now to migrate away from them, as they will be removed in a future release.

Improvements

Enhanced the Selector to support direct matching against nodes such as comments and text nodes. For example, you can now find an element that follows a specific comment: ::comment:contains(prices) + p will select p elements immediately after a  comment. Supported types include ::node, ::leafnode, ::comment, ::text, ::data, and ::cdata. Node contextual selectors like ::node:contains(text), :matches(regex), and :blank are also supported. Introduced Element#selectNodes(String css) and Element#selectNodes(String css, Class<T> nodeType) for direct node selection. #2324

Added TagSet#onNewTag(Consumer<Tag> customizer): register a callback that’s invoked for each new or cloned Tag when it’s inserted into the set. Enables dynamic tweaks of tag options (for example, marking all custom tags as self-closing, or everything in a given namespace as preserving whitespace). #2330

Made TokenQueue and CharacterReader autocloseable, to ensure that they will release their buffers back to the buffer pool, for later reuse.

Added Selector#evaluatorOf(String css), as a clearer way to obtain an Evaluator from a CSS query. An alias of QueryParser.parse(String css).

Custom tags (defined via the TagSet) in a foreign namespace (e.g. SVG) can be configured to parse as data tags.

Added NodeVisitor#traverse(Node) to simplify node traversal calls (vs. importing NodeTraversor).

Updated the default user-agent string to improve compatibility. #2341

The HTML parser now allows the specific text-data type (Data, RcData) to be customized for known tags. (Previously, that was only supported on custom tags.) #2326

Added Connection.Response#readFully() as a replacement for Connection.Response#bufferUp() with an explicit IOException. Similarly, added Connection.Response#readBody() over Connection.Response#body(). Deprecated Connection.Response#bufferUp(). #2327

When serializing HTML, the < and > characters are now escaped in attributes. This helps prevent a class of mutation XSS attacks. #2337

Changed Connection to prefer using the JDK's HttpClient over HttpUrlConnection, if available, to enable HTTP/2 support by default. Users can disable via -Djsoup.useHttpClient=false. #2340

Bug Fixes

The contents of a script in a svg foreign context should be parsed as script data, not text. #2320

Tag#isFormSubmittable() was updating the Tag's options. #2323

The HTML pretty-printer would incorrectly trim whitespace when text followed an inline element in a block element. #2325

Custom tags with hyphens or other non-letter characters in their names now work correctly as Data or RcData tags. Their closing tags are now tokenized properly. #2332

When cloning an Element, the clone would retain the source's cached child Element list (if any), which could lead to incorrect results when modifying the clone's child elements. #2334

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.21.1 (2025-Jun-23)

Changes

Removed previously deprecated methods. #2317

Deprecated the :matchText pseduo-selector due to its side effects on the DOM; use the new ::textnode selector and the Element#selectNodes(String css, Class type) method instead. #2343

Deprecated Connection.Response#bufferUp() in lieu of Connection.Response#readFully() which can throw a checked IOException.

Deprecated internal methods Validate#ensureNotNull (replaced by typed Validate#expectNotNull); protected HTML appenders from Attribute and Node.

If you happen to be using any of the deprecated methods, please take the opportunity now to migrate away from them, as they will be removed in a future release.

Improvements

Enhanced the Selector to support direct matching against nodes such as comments and text nodes. For example, you can now find an element that follows a specific comment: ::comment:contains(prices) + p will select p elements immediately after a  comment. Supported types include ::node, ::leafnode, ::comment, ::text, ::data, and ::cdata. Node contextual selectors like ::node:contains(text), :matches(regex), and :blank are also supported. Introduced Element#selectNodes(String css) and Element#selectNodes(String css, Class nodeType) for direct node selection. #2324

Added TagSet#onNewTag(Consumer<Tag> customizer): register a callback that’s invoked for each new or cloned Tag when it’s inserted into the set. Enables dynamic tweaks of tag options (for example, marking all custom tags as self-closing, or everything in a given namespace as preserving whitespace).

Made TokenQueue and CharacterReader autocloseable, to ensure that they will release their buffers back to the buffer pool, for later reuse.

Added Selector#evaluatorOf(String css), as a clearer way to obtain an Evaluator from a CSS query. An alias of QueryParser.parse(String css).

Custom tags (defined via the TagSet) in a foreign namespace (e.g. SVG) can be configured to parse as data tags.

Added NodeVisitor#traverse(Node) to simplify node traversal calls (vs. importing NodeTraversor).

Updated the default user-agent string to improve compatibility. #2341

The HTML parser now allows the specific text-data type (Data, RcData) to be customized for known tags. (Previously, that was only supported on custom tags.) #2326.

Added Connection#readFully() as a replacement for Connection#bufferUp() with an explicit IOException. Similarly, added Connection#readBody() over Connection#body(). Deprecated Connection#bufferUp(). #2327

When serializing HTML, the < and > characters are now escaped in attributes. This helps prevent a class of mutation XSS attacks. #2337

Changed Connection to prefer using the JDK's HttpClient over HttpUrlConnection, if available, to enable HTTP/2 support by default. Users can disable via -Djsoup.useHttpClient=false. #2340

Bug Fixes

The contents of a script in a svg foreign context should be parsed as script data, not text. #2320

Tag#isFormSubmittable() was updating the Tag's options. #2323

The HTML pretty-printer would incorrectly trim whitespace when text followed an inline element in a block element. #2325

Custom tags with hyphens or other non-letter characters in their names now work correctly as Data or RcData tags. Their closing tags are now tokenized properly. #2332

When cloning an Element, the clone would retain the source's cached child Element list (if any), which could lead to incorrect results when modifying the clone's child elements. #2334

Commits

9a059f4 [maven-release-plugin] prepare release jsoup-1.21.1
a9f6ad0 Prep 1.21.1 release
63ed60b Tidy up exception test
a4d451f Improved unhandled node type error msg
cf88221 Added ::cdata node selector
893706a Deprecate :matchText selector (#2343)
2a73678 Added javadoc note for Connection#timeout
3f70665 Fix date format
2f48c65 Updated the default UA
42dbaa0 Cleanup redundant Syntax parameter
Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.24.0 to 0.25.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.25.0

Added

Include OSGi metadata in jars (META-INF/MANIFEST.MF files) (#378)

More documentation with examples for Node classes (#370)

Changed

GitHub tables: Tables are now parsed even if there's no blank line before the table heading, matching GitHub's behavior. (#381)

Fixed

MarkdownRenderer: Fix precedence for nodeRendererFactory: Factories passed to the builder can now override rendering for core node types. (#368)

MarkdownRenderer: Fix exception with ordered lists with a long first number followed by a shorter one (#382)

Fix warning in Eclipse about "missing 'requires transitive'" (#358)

Fix Android incompatibility with requireNonNullElseGet (#369)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.25.0] - 2025-06-20

Added

Include OSGi metadata in jars (META-INF/MANIFEST.MF files) (#378)

More documentation with examples for Node classes (#370)

Changed

GitHub tables: Tables are now parsed even if there's no blank line before the table heading, matching GitHub's behavior. (#381)

Fixed

MarkdownRenderer: Fix precedence for nodeRendererFactory: Factories passed to the builder can now override rendering for core node types. (#368)

MarkdownRenderer: Fix exception with ordered lists with a long first number followed by a shorter one (#382)

Fix warning in Eclipse about "missing 'requires transitive'" (#358)

Fix Android incompatibility with requireNonNullElseGet (#369)

Commits

99e6050 [maven-release-plugin] prepare release commonmark-parent-0.25.0
1701991 Merge pull request #385 from commonmark/release-0.25
6354f02 Prepare for version 0.25.0
adcf2f2 Prepare CHANGELOG for release 0.25
8cc1fa2 Merge pull request #384 from commonmark/central-publisher-portal
5e6b740 Migrate from OSSRH to Central Publisher Portal
7616e19 Merge pull request #383 from commonmark/markdown-renderer-ordered-list-fix
971aaa9 MarkdownRenderer: Fix ordered list with long start number (fixes #382)
32c9290 Merge pull request #381 from commonmark/tables-without-blank-line-before
bb57a5f Parse tables without blank line before
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.0

🚀 New features and improvements

Warning about old enforcer api in rule implementation (#894) @slawekjaranowski

Introduce ruleName for rules configuration (#893) @slawekjaranowski

Improve performance of BannedPlugins and RequireReleaseDeps (#371) @harrisric

Enforce size bounds recursively on directory content (#368) @zabetak

Improve the performance of BannedDependencies (#367) @harrisric

[MENFORCER-516] - Use rule configuration in POM when executed from CLI (#344) @bpfoster

[MENFORCER-508] - Add option to enforce same versions among Maven modules (#328) @kwin

[MENFORCER-507] - Add xsltLocation parameter to ExternalRules (#322) @ppalaga

🐛 Bug Fixes

RequireSameVersions rule: consider entries in <plugins> when analyzing build- and report-plugins (#892) @turing85

[MENFORCER-495] - Remove "JAVA_HOME" from rule violation message (#346) @elharo

📝 Documentation updates

Improve example of custom rule (#890) @slawekjaranowski

Make documentation explicit about java versions for custom rules (#370) @harrisric

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#351) @Bukama

[MENFORCER-335] - Update dependencyConvergence.apt.vm (#347) @elharo

[MENFORCER-511] - Match start-tag to end-tag (#341) @elharo

[MENFORCER-505] - fix documentation for requireMatchingCoordinates (#320) @kwin

👻 Maintenance

Update site descriptor to 2.0.0 (#889) @slawekjaranowski

Use constant 3.6.3 in prerequisites/maven as minimal Maven version (#887) @slawekjaranowski

Enable Github Issues (#363) @Bukama

Remove unused collections (#358) @elharo

Eliminate some string operations (#357) @elharo

Use cached default charset and update URL fragment (#360) @elharo

Add GitHub Automation actions (#359) @slawekjaranowski

A grabbag of small simplifications found by IntelliJ (#354) @elharo

🔧 Build

Enable build by Maven 4 on GitHub (#891) @slawekjaranowski

📦 Dependency updates

Bump mavenVersion from 3.6.3 to 3.9.10 (#888) @dependabot[bot]

Bump org.apache.maven:maven-parent from 44 to 45 (#886) @dependabot[bot]

Update parent to 44 (#365) @Bukama

Bump commons-codec:commons-codec from 1.17.1 to 1.18.0 (#349) @dependabot[bot]

Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#362) @dependabot[bot]

Bump org.assertj:assertj-core from 3.26.3 to 3.27.3 (#348) @dependabot[bot]

... (truncated)

Commits

dc9d2ab [maven-release-plugin] prepare release enforcer-3.6.0
9aed56c Warning about old enforcer api in rule implementation (#894)
8b8ac7a Improve example of custom rule (#890)
1992401 Introduce ruleName for rules configuration
5ec0a9f Update site descriptor to 2.0.0
e8cc57e RequireSameVersions rule: consider entries in \<plugins> when analyzing b...
785ab9d Enable build by Maven 4 on GitHub
5f664d5 Bump mavenVersion from 3.6.3 to 3.9.10 (#888)
30cb548 Bump org.apache.maven:maven-parent from 44 to 45
265dc89 Use constant 3.6.3 in prerequisites/maven as minimal Maven version
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-minor group with 15 updates: | Package | From | To | | --- | --- | --- | | [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.1` | `5.13.3` | | org.apache.commons:commons-lang3 | `3.17.0` | `3.18.0` | | [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.3` | `3.5.4` | | [org.flywaydb:flyway-core](https://github.com/flyway/flyway) | `11.9.1` | `11.10.2` | | org.flywaydb:flyway-mysql | `11.9.1` | `11.10.2` | | org.apache.logging.log4j:log4j-api | `2.25.0` | `2.25.1` | | org.apache.logging.log4j:log4j-core | `2.25.0` | `2.25.1` | | org.apache.logging.log4j:log4j-jcl | `2.25.0` | `2.25.1` | | org.apache.logging.log4j:log4j-slf4j-impl | `2.25.0` | `2.25.1` | | org.apache.logging.log4j:log4j-jakarta-web | `2.25.0` | `2.25.1` | | [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `8.13.3` | `8.17.0` | | [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.1` | `3.2.2` | | [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.20.1` | `1.21.1` | | [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) | `0.24.0` | `0.25.0` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.5.0` | `3.6.0` | Updates `org.junit:junit-bom` from 5.13.1 to 5.13.3 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.1...r5.13.3) Updates `org.apache.commons:commons-lang3` from 3.17.0 to 3.18.0 Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.3 to 3.5.4 - [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases) - [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md) - [Commits](mariadb-corporation/mariadb-connector-j@3.5.3...3.5.4) Updates `org.flywaydb:flyway-core` from 11.9.1 to 11.10.2 - [Release notes](https://github.com/flyway/flyway/releases) - [Commits](flyway/flyway@flyway-11.9.1...flyway-11.10.2) Updates `org.flywaydb:flyway-mysql` from 11.9.1 to 11.10.2 Updates `org.flywaydb:flyway-mysql` from 11.9.1 to 11.10.2 Updates `org.apache.logging.log4j:log4j-api` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-core` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-jakarta-web` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-core` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.0 to 2.25.1 Updates `org.apache.logging.log4j:log4j-jakarta-web` from 2.25.0 to 2.25.1 Updates `io.sentry:sentry-log4j2` from 8.13.3 to 8.17.0 - [Release notes](https://github.com/getsentry/sentry-java/releases) - [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md) - [Commits](getsentry/sentry-java@8.13.3...8.17.0) Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.1 to 3.2.2 - [Release notes](https://github.com/ben-manes/caffeine/releases) - [Commits](ben-manes/caffeine@v3.2.1...v3.2.2) Updates `org.jsoup:jsoup` from 1.20.1 to 1.21.1 - [Release notes](https://github.com/jhy/jsoup/releases) - [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md) - [Commits](jhy/jsoup@jsoup-1.20.1...jsoup-1.21.1) Updates `org.commonmark:commonmark` from 0.24.0 to 0.25.0 - [Release notes](https://github.com/commonmark/commonmark-java/releases) - [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md) - [Commits](commonmark/commonmark-java@commonmark-parent-0.24.0...commonmark-parent-0.25.0) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.6.0) --- updated-dependencies: - dependency-name: org.junit:junit-bom dependency-version: 5.13.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: org.mariadb.jdbc:mariadb-java-client dependency-version: 3.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.flywaydb:flyway-core dependency-version: 11.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: org.flywaydb:flyway-mysql dependency-version: 11.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: org.flywaydb:flyway-mysql dependency-version: 11.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-jcl dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-jakarta-web dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-jcl dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.apache.logging.log4j:log4j-jakarta-web dependency-version: 2.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: io.sentry:sentry-log4j2 dependency-version: 8.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: com.github.ben-manes.caffeine:caffeine dependency-version: 3.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor - dependency-name: org.jsoup:jsoup dependency-version: 1.21.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: org.commonmark:commonmark dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 15, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the maven-minor group with 15 updates #556

chore(deps): bump the maven-minor group with 15 updates #556

Uh oh!

dependabot bot commented on behalf of github Jul 15, 2025

Uh oh!

Uh oh!

chore(deps): bump the maven-minor group with 15 updates #556

Are you sure you want to change the base?

chore(deps): bump the maven-minor group with 15 updates #556

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 15, 2025

MariaDB Connector/Java 3.5.4

3.5.4 (Jun 2025)

Key Enhancements

Issues Resolved

3.5.4 (Jun 2025)

Key Enhancements

Issues Resolved

Flyway 11.10.2

Flyway 11.10.1

Flyway 11.10.0

Flyway 11.9.2

8.17.0

Features

Dependencies

Fixes

8.16.1-alpha.2

Fixes

Internal

8.16.0

Features

8.17.0

Features

Dependencies

Fixes

8.16.1-alpha.2

Fixes

Internal

8.16.0

Features

3.2.2

jsoup 1.21.1

Changes

Improvements

Bug Fixes

1.21.1 (2025-Jun-23)

Changes

Improvements

Bug Fixes

commonmark-java 0.25.0

Added

Changed

Fixed

[0.25.0] - 2025-06-20

Added

Changed

Fixed

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

Uh oh!

Uh oh!