Skip to content

Bump the dependencies group across 1 directory with 15 updates - #509

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/maven/main/dependencies-0d2d71c38f
Open

Bump the dependencies group across 1 directory with 15 updates#509
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/maven/main/dependencies-0d2d71c38f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 15 updates in the / directory:

Package From To
org.apache:apache 37 39
org.apache.groovy:groovy 5.0.5 5.0.8
org.apache.groovy:groovy-ant 5.0.5 5.0.8
com.google.errorprone:error_prone_core 2.49.0 2.50.0
com.palantir.javaformat:palantir-java-format 2.90.0 2.96.0
org.eclipse.jgit:org.eclipse.jgit 7.6.0.202603022253-r 7.7.1.202607240634-r
biz.aQute.bnd:bnd-baseline-maven-plugin 7.2.3 7.3.0
biz.aQute.bnd:bnd-maven-plugin 7.2.3 7.3.0
org.cyclonedx:cyclonedx-maven-plugin 2.9.1 2.9.2
org.codehaus.mojo:flatten-maven-plugin 1.7.3 1.8.0
org.codehaus.gmavenplus:gmavenplus-plugin 4.3.1 5.1.0
org.jacoco:jacoco-maven-plugin 0.8.14 0.8.15
com.github.spotbugs:spotbugs-maven-plugin 4.9.8.3 4.10.3.0
com.diffplug.spotless:spotless-maven-plugin 3.4.0 3.9.0
com.github.eirslett:frontend-maven-plugin 2.0.0 2.0.2

Updates org.apache:apache from 37 to 39

Release notes

Sourced from org.apache:apache's releases.

Apache Parent POM version 39

see push-to-atr profile integration documentation for more details: https://maven.apache.org/pom/asf/#the-push-to-atr-profile

🚀 New features and improvements

👻 Maintenance

📦 Dependency updates

Apache Parent POM version 38

👻 Maintenance

📦 Dependency updates

  • Bump org.apache.maven.plugins:maven-invoker-plugin from 3.10.0 to 3.10.1 (#578) @dependabot[bot]
  • Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.0 (#575) @dependabot[bot]
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 (#572) @dependabot[bot]
  • Bump org.apache.maven.plugins:maven-shade-plugin from 3.6.1 to 3.6.2 (#573) @dependabot[bot]
  • Bump org.apache.apache.resources:apache-source-release-assembly-descriptor from 1.7 to 1.8 (#571) @dependabot[bot]
  • Bump version.maven-surefire from 3.5.4 to 3.5.5 (#570) @dependabot[bot]
  • Bump org.apache.maven.plugins:maven-dependency-plugin from 3.9.0 to 3.10.0 (#568) @dependabot[bot]
  • Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 (#567) @dependabot[bot]
Commits

Updates org.apache.groovy:groovy from 5.0.5 to 5.0.8

Commits

Updates org.apache.groovy:groovy-ant from 5.0.5 to 5.0.8

Commits

Updates org.apache.groovy:groovy-ant from 5.0.5 to 5.0.8

Commits

Updates com.google.errorprone:error_prone_core from 2.49.0 to 2.50.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.50.0

New checks:

Closed issues: #5553, #5649, #5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

Commits
  • d802cff Release Error Prone 2.50.0
  • b12b5f2 In StringCharset, move the description from explanation to summary.
  • a7ca02a Update AssertThrowsUtils to emit var thrown = assertThrows(...) instead o...
  • 6b56517 Fix handling of nested tags in UnrecognisedJavadocTag
  • d36e74f Remove translation of the fail() message into assertThrows(). We already ...
  • c3581e9 Fix JavacFileManager compiler crash during speculative recompiles in modular ...
  • da1f32b Remove assignments from assertThrows() lambdas. A large percentage of remai...
  • dee62f7 Update AssertThrowsBlockToExpression to re-write single VariableTrees int...
  • 4939448 Only hoist the last statement into the assertThrows() lambda.
  • 30fd05a refactor: Rename JavaLangClash bug pattern to AvoidCommonTypeNames
  • Additional commits viewable in compare view

Updates com.palantir.javaformat:palantir-java-format from 2.90.0 to 2.96.0

Release notes

Sourced from com.palantir.javaformat:palantir-java-format's releases.

2.96.0

🐛 Fixes

  • Fix duplicate class entries in instrumentedJar that block plugin publishin (#1714)

Full Changelog: 2.95.0...2.96.0

2.95.0

No documented user-facing changes

Full Changelog: 2.94.0...2.95.0

2.94.0

🐛 Fixes

  • Fix Spotless targetExclude patterns being overridden (#1690)

Full Changelog: 2.93.0...2.94.0

2.93.0

No documented user-facing changes

Full Changelog: 2.92.0...2.93.0

2.92.0

🐛 Fixes

  • Only run the formatter on trusted projects (#1681)

Full Changelog: 2.91.0...2.92.0

2.91.0

🐛 Fixes

  • Fix issue when wrapping markdown docstrings resulted in 2 slashes instead of 3 (#1672)

Full Changelog: 2.90.0...2.91.0

Commits
  • d7f8169 Release 2.96.0
  • 1e759f7 Fix duplicate class entries in instrumentedJar that block plugin publishin ...
  • 1f2fe56 Excavator: Format Java files (#1715)
  • 2ce46d5 Release 2.95.0
  • 6d0d799 Excavator: Upgrade Java dependency com.diffplug.spotless:spotless-plugin-gra...
  • 941e381 Excavator: Upgrade Java dependency org.junit.jupiter:* (#1704)
  • 2ecae9c Excavator: Upgrade Java dependency org.junit.platform:* (#1703)
  • f9fe41c Excavator: Upgrade Java dependency org.junit.vintage:* (#1702)
  • b29ee3c Excavator: Format Java files (#1699)
  • df34ef1 Release 2.94.0
  • Additional commits viewable in compare view

Updates org.eclipse.jgit:org.eclipse.jgit from 7.6.0.202603022253-r to 7.7.1.202607240634-r

Commits
  • ec341ec JGit v7.7.1.202607240634-r
  • 50b9cb2 Update org.apache.sshd to 2.19.0
  • 7bd9958 Merge branch 'stable-7.6' into stable-7.7
  • 6e3531f Merge branch 'stable-7.5' into stable-7.6
  • 38da6c1 Merge branch 'stable-7.6' into stable-7.7
  • 1eb6ed0 junit.http: Extract AppServerBase to dedupe the EE8 AppServer overlay
  • 6dbcde7 Bazel: Add EE8 servlet test targets
  • 1a9c7be Bazel: Add EE8 servlet bridge targets
  • 66f0305 Bazel: Rename //lib:servlet-api to //lib:jakarta-servlet-api
  • 120a2ef Bazel: format build files with buildifier
  • Additional commits viewable in compare view

Updates biz.aQute.bnd:bnd-baseline-maven-plugin from 7.2.3 to 7.3.0

Release notes

Sourced from biz.aQute.bnd:bnd-baseline-maven-plugin's releases.

Bnd/Bndtools 7.3.0

See Release Notes

Commits
  • bf5b578 build: Build Release 7.3.0
  • 86529ea docs: auto-generated content
  • 02de52f Docs: Add HTTP headers override section
  • 002a72e Set explicit headers before defaults and refine logging
  • caa5827 Do not overwrite existing request properties
  • d9e8e96 fix build and Sonatype upload issues
  • 90e8d8b Merge pull request #7216 from kwin/patch-8
  • 0c7dfa4 Fix heading level
  • 72b494a Merge pull request #7212 from bndtools/dependabot/github_actions/ruby/setup-r...
  • 77fe017 Merge pull request #7213 from bndtools/dependabot/maven/maven-plugins/org.apa...
  • Additional commits viewable in compare view

Updates biz.aQute.bnd:bnd-maven-plugin from 7.2.3 to 7.3.0

Release notes

Sourced from biz.aQute.bnd:bnd-maven-plugin's releases.

Bnd/Bndtools 7.3.0

See Release Notes

Commits
  • bf5b578 build: Build Release 7.3.0
  • 86529ea docs: auto-generated content
  • 02de52f Docs: Add HTTP headers override section
  • 002a72e Set explicit headers before defaults and refine logging
  • caa5827 Do not overwrite existing request properties
  • d9e8e96 fix build and Sonatype upload issues
  • 90e8d8b Merge pull request #7216 from kwin/patch-8
  • 0c7dfa4 Fix heading level
  • 72b494a Merge pull request #7212 from bndtools/dependabot/github_actions/ruby/setup-r...
  • 77fe017 Merge pull request #7213 from bndtools/dependabot/maven/maven-plugins/org.apa...
  • Additional commits viewable in compare view

Updates org.cyclonedx:cyclonedx-maven-plugin from 2.9.1 to 2.9.2

Release notes

Sourced from org.cyclonedx:cyclonedx-maven-plugin's releases.

2.9.2

🚀 New features and improvements

  • chore: upgrade maven-dependency-analyzer/asm, support Java 25 (#630) @​shihyuho

📦 Dependency updates

🔧 Build

Commits
  • 0fe189d [maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.2
  • 96c218c update scm urls
  • 0fe08b4 Revert "Bump JamesIves/github-pages-deploy-action from 4.7.3 to 4.8.0"
  • 6779e48 Revert "Bump release-drafter/release-drafter from 6 to 7"
  • 955fead switch to Central Publishing Portal
  • 50dbac7 Bump release-drafter/release-drafter from 6 to 7
  • d50bc58 Bump org.apache.maven.plugins:maven-project-info-reports-plugin
  • 1034644 Bump plugin-tools.version from 3.15.0 to 3.15.2
  • 018ab8e Bump commons-codec:commons-codec from 1.17.1 to 1.22.0
  • e359705 Bump JamesIves/github-pages-deploy-action from 4.7.3 to 4.8.0
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.8.0

🚀 New features and improvements

🐛 Bug Fixes

🔧 Build

📦 Dependency updates

Commits
  • 1b21193 [maven-release-plugin] prepare release 1.8.0
  • f693210 Add PR automation workflow to GitHub Actions
  • cff2c4f Document revisionVariableName parameter with @since 1.8.0 tag
  • f18a67d Fix for #408, ensure nested dependency exclusions aren't overrided (#485)
  • 35396b6 Bump mavenVersion from 3.9.15 to 3.9.16
  • f78e07e Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 25f849e Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5fcc98f Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml
  • 4bd9eda Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 7bacd0e Fix for Maven 3.10.x (#517)
  • Additional commits viewable in compare view

Updates org.codehaus.gmavenplus:gmavenplus-plugin from 4.3.1 to 5.1.0

Release notes

Sourced from org.codehaus.gmavenplus:gmavenplus-plugin's releases.

5.1.0

Bugs

  • fix: Use Maven source-root removal APIs (#341)
  • Drop warnings about missing dependencies down to debug (#390)

Enhancements

  • Add to Java 25 enum LanguageLevel by @​jonesbusy in #346
  • feat: Honor compiler release for Groovy bytecode (#387)

Potentially breaking changes

None.

Notes

None.

New Contributors

Full Changelog

groovy/GMavenPlus@5.0.0...5.1.0

5.0.0

Bugs

  • Fix Javadoc mismatch in ReflectionUtils.getDeclaredMethods (#365)
  • Remove unneeded fork parameter (#361)
  • Fix Groovy 5 shell support (closes #367) (#380)

Enhancements

  • Support Groovy 6 changes to GroovyDoc (closes #381) (#382)

Potentially breaking changes

  • Removed the fork parameter
  • GMavenPlus no longer includes JLine, Jansi, Ant, or Ivy dependencies

Notes

  • GMavenPlus used to include the Jansi 2.4 and JLine 2.14.6 so that Groovy 2.2.0-beta-1 and newer would have colors work in Groovysh out of the box. However, JLine 2 is EOL, Groovy 5.x uses Jline 3, and Groovy 6.x uses JLine 4. Additionally, Maven 3.9 introduces a JLine 2.x into the classpath. This meant that Groovy 5.x and 6.x would never have their colors work with Maven 3.9.
  • GMavenPlus used to include Ant and Ivy, to make it easy to use @Grab and AntBuilder in scripts, Groovysh, and Groovy Console. The need to remove JLine/Jansi gave a reason to revisit this philosophy. Here are the reasons why this was abandoned.
    • The plugin version can win over the version in the project (unless you make sure to use an <exclusion>
    • To avoid downloading dependencies you may or may not need
    • If future Groovy versions use other versions of Ant/Ivy (like we ran into with JLine/Jansi), we'll have a similar breaking change needed
  • Here are examples of how to add back the dependencies you need 
    <plugin>
  <groupId>org.codehaus.gmavenplus</groupId>
  <artifactId>gmavenplus-plugin</artifactId>
  <version>5.0.0</version>
  <executions>
    <execution>
      <goals>
        <goal>execute</goal>

... (truncated)

Commits
  • 33ac4f5 [maven-release-plugin] prepare release 5.1.0
  • fadc578 Merge pull request #391 from groovy/adjust-dependency-logging
  • 2180de9 Drop warnings about missing dependencies down to debug (closes #390)
  • 3991ff8 Merge pull request #389 from groovy/feat/honor-compiler-release
  • 3d29b11 feat: Honor compiler release for Groovy bytecode (closes #387)
  • b7bb980 build: Bump version
  • 5622987 doc: Update redeploy instructions
  • 0951225 doc: Add a skill for updating everything
  • e510e45 doc: Add a skill for updating everything
  • aec8eb1 doc: Update developer documentation
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.15

New Features

  • JaCoCo now officially supports Java 26 (GitHub #2076).
  • Experimental support for Java 27 class files (GitHub #2004).
  • Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #1905).
  • Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #1944).
  • Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #2097).
  • Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #2098).
  • Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #2023).
  • Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #2114).
  • For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #2089).

Fixed bugs

  • Fixed processing of Kotlin SMAP in synthetic classes (GitHub #1985).
  • Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #2065, #2074).
  • For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #2073).
  • Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #1651).

Non-functional Changes

  • JaCoCo now depends on ASM 9.10.1 (GitHub #2134).
Commits
  • 6c5260a Prepare release v0.8.15
  • 5c05141 Transfer of execution data through socket should use buffered stream (#2089)
  • ab5efa9 Remove from Azure Pipelines all builds except with JDK 5 and JDK EA (#2148)
  • 5f6ea38 Use Windows 2025 image in GitHub Actions (#2130)
  • 35a8af2 Use Renovate instead of Dependabot for updates of ASM (#2137)
  • 85b8ddf Upgrade ASM to 9.10.1 (#2134)
  • 2988647 AgentModule should use ClassLoader of agent instead of SystemClassLoader (#1651)
  • 75a4e31 Add filter for Kotlin @JvmExposeBoxed (#1944)
  • 691fa1d Use Renovate instead of Dependabot for updates of GitHub Actions (#2132)
  • 3e18f17 Require at least JDK 21 for build (#2128)
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.3.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.10.3.0

Summary

This release delivers improvements to reliability, maintainability, and reproducibility. The SpotBugs execution path has been modernized by replacing the Ant-based launcher with ProcessBuilder, temporary auxiliary classpath handling has been improved, and toolchain detection has been made more robust. Build tooling has also been cleaned up with Maven modernization efforts, improved reproducible artifact generation, and updated documentation. Additional fixes include improved artifact handling, test coverage improvements, and dependency updates.

What's Changed

New Contributors

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0

Spotbugs Maven Plugin 4.10.2.0

  • Support spotbugs 4.10.2

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.5...spotbugs-maven-plugin-4.10.2.0

Spotbugs Maven Plugin 4.9.8.5

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.4...spotbugs-maven-plugin-4.9.8.5

Spotbugs Maven Plugin 4.9.8.4

  • build support for maven 4 with maven 4 plugins
  • spotbugs extensions jars now moved to target/spotbugs instead of root

... (truncated)

Commits
  • f0e6f45 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.3.0
  • 86af8d5 Merge pull request #1473 from spotbugs/renovate/spotbugs.version
  • 2fc1232 Update dependency com.github.spotbugs:spotbugs to v4.10.3
  • 8938370 Merge pull request #1472 from hazendaz/antwork
  • 68ee04d Replace 'ant' usage with process builder
  • 4fcdf58 Merge pull request #1471 from hazendaz/master
  • c97f85e [ci] Minor cleanup after toolchain adjustments
  • f7dde3a [nio] Change 'spotbugsAuxClasspath' file to a temp file and remove larger try...
  • ce2addb Merge pull request #1470 from hazendaz/restructure
  • bc53d37 [ci] readme update to reproducible builesd info
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 3.4.0 to 3.9.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.9.0

Added

Changes

  • Replace RDF formatter library de.atextor:turtle-formatter (discontinued) with cool.rdf:cool-rdf-formatter (its new coordinates); the RDF/turtle formatter now requires Java 25+. (#2995)
  • Bump default greclipse version to latest 4.39 -> 4.40. (#2989)
  • Bump default tabletest-formatter version 1.1.1 -> 1.1.2.

Maven Plugin v3.8.0

Added

  • Add support for custom string format for license header copyright year via yearStringFormat(). (#2965)

Fixed

  • <expandWildcardImports> no longer triggers a full transitive dependency resolution on every build. Dependency resolution is now deferred until the step actually runs, so projects that do not use <expandWildcardImports> (or that use version ranges) are no longer penalized. (#2983)

Maven Plugin v3.7.0

Fixed

  • Parse standard git year output in LicenseHeaderStep. (#2940)
  • <toggleOffOn> no longer disables lint-only steps such as <forbidWildcardImports>. (#2962)
  • Fix StringIndexOutOfBoundsException in scenarios where copyright year is surrounded by whitespace. (#2973)

Added

  • Add support for AsciiDoc formatting via adocfmt. (#2960)
  • <flexmark> step now supports arbitrary formatter options via <formatterOptions>. (#2968)

Maven Plugin v3.6.0

Added

  • Add <cacheDirectory> to <eclipse>, <greclipse>, and <eclipseCdt> for the Equo/Solstice P2 cache. (#2944)
  • EclipseJdtFormtterStep now can conditionally set compiler source/compliance options. Allows for better parsing of AST Node for newer language features and more correct sorting; e.g. records or seal classes. (#2942)

Fixed

  • <versionCatalog> no longer splits long inline tables across multiple lines — Gradle's TOML 1.0 parser cannot read multi-line inline tables. The maxLineLength option has been removed. (#2948)
  • spotless:apply no longer aborts on the first file with lints; it now formats all files and reports a single aggregated lint failure across every fil...

    Description has been truncated

@dependabot
Bump the dependencies group across 1 directory with 15 updates
5661ad0 
Bumps the dependencies group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `37` | `39` |
| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `5.0.5` | `5.0.8` |
| [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) | `5.0.5` | `5.0.8` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.49.0` | `2.50.0` |
| [com.palantir.javaformat:palantir-java-format](https://github.com/palantir/palantir-java-format) | `2.90.0` | `2.96.0` |
| [org.eclipse.jgit:org.eclipse.jgit](https://github.com/eclipse-jgit/jgit) | `7.6.0.202603022253-r` | `7.7.1.202607240634-r` |
| [biz.aQute.bnd:bnd-baseline-maven-plugin](https://github.com/bndtools/bnd) | `7.2.3` | `7.3.0` |
| [biz.aQute.bnd:bnd-maven-plugin](https://github.com/bndtools/bnd) | `7.2.3` | `7.3.0` |
| [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) | `2.9.1` | `2.9.2` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.3` | `1.8.0` |
| [org.codehaus.gmavenplus:gmavenplus-plugin](https://github.com/groovy/GMavenPlus) | `4.3.1` | `5.1.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.8.3` | `4.10.3.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.4.0` | `3.9.0` |
| [com.github.eirslett:frontend-maven-plugin](https://github.com/eirslett/frontend-maven-plugin) | `2.0.0` | `2.0.2` |



Updates `org.apache:apache` from 37 to 39
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)

Updates `org.apache.groovy:groovy` from 5.0.5 to 5.0.8
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.0.5 to 5.0.8
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.0.5 to 5.0.8
- [Commits](https://github.com/apache/groovy/commits)

Updates `com.google.errorprone:error_prone_core` from 2.49.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.49.0...v2.50.0)

Updates `com.palantir.javaformat:palantir-java-format` from 2.90.0 to 2.96.0
- [Release notes](https://github.com/palantir/palantir-java-format/releases)
- [Commits](palantir/palantir-java-format@2.90.0...2.96.0)

Updates `org.eclipse.jgit:org.eclipse.jgit` from 7.6.0.202603022253-r to 7.7.1.202607240634-r
- [Commits](eclipse-jgit/jgit@v7.6.0.202603022253-r...v7.7.1.202607240634-r)

Updates `biz.aQute.bnd:bnd-baseline-maven-plugin` from 7.2.3 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.2.3...7.3.0)

Updates `biz.aQute.bnd:bnd-maven-plugin` from 7.2.3 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.2.3...7.3.0)

Updates `org.cyclonedx:cyclonedx-maven-plugin` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/CycloneDX/cyclonedx-maven-plugin/releases)
- [Commits](CycloneDX/cyclonedx-maven-plugin@cyclonedx-maven-plugin-2.9.1...cyclonedx-maven-plugin-2.9.2)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

Updates `org.codehaus.gmavenplus:gmavenplus-plugin` from 4.3.1 to 5.1.0
- [Release notes](https://github.com/groovy/GMavenPlus/releases)
- [Commits](groovy/GMavenPlus@4.3.1...5.1.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.14...v0.8.15)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.8.3 to 4.10.3.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.3...spotbugs-maven-plugin-4.10.3.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.4.0 to 3.9.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.4.0...maven/3.9.0)

Updates `com.github.eirslett:frontend-maven-plugin` from 2.0.0 to 2.0.2
- [Changelog](https://github.com/eirslett/frontend-maven-plugin/blob/master/CHANGELOG.md)
- [Commits](eirslett/frontend-maven-plugin@frontend-plugins-2.0.0...frontend-plugins-2.0.2)

---
updated-dependencies:
- dependency-name: org.apache:apache
  dependency-version: '39'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.apache.groovy:groovy
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 5.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.palantir.javaformat:palantir-java-format
  dependency-version: 2.96.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.jgit:org.eclipse.jgit
  dependency-version: 7.7.1.202607240634-r
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: biz.aQute.bnd:bnd-baseline-maven-plugin
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: biz.aQute.bnd:bnd-maven-plugin
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.cyclonedx:cyclonedx-maven-plugin
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.gmavenplus:gmavenplus-plugin
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.eirslett:frontend-maven-plugin
  dependency-version: 2.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 1, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 1, 2026 10:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants