Skip to content

chore(deps): bump the maven group with 8 updates#43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-aa0d249cce
Closed

chore(deps): bump the maven group with 8 updates#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-aa0d249cce

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 25, 2026 •
edited
Loading

Bumps the maven group with 8 updates:

Package From To
com.fasterxml.jackson:jackson-bom 2.18.6 2.21.3
org.xmlunit:xmlunit-core 2.10.0 2.11.0
io.github.resilience4j:resilience4j-circuitbreaker 2.2.0 2.4.0
org.apache.maven.plugins:maven-compiler-plugin 3.13.0 3.15.0
org.apache.maven.plugins:maven-surefire-plugin 3.2.5 3.5.5
org.jacoco:jacoco-maven-plugin 0.8.12 0.8.14
org.springaicommunity.agents:agent-model 0.15.0 0.16.0
org.codehaus.mojo:exec-maven-plugin 3.2.0 3.6.3

Updates com.fasterxml.jackson:jackson-bom from 2.18.6 to 2.21.3

Commits
  • 374fbd0 [maven-release-plugin] prepare release jackson-bom-2.21.3
  • 7059df7 Prep for 2.21.3 release
  • 2fd60bd Merge branch '2.20' into 2.21
  • b82a364 Merge branch '2.19' into 2.20
  • ef4e013 Merge branch '2.18' into 2.19
  • 536ae51 Post-release dep version bump
  • 536c533 [maven-release-plugin] prepare for next development iteration
  • 426b778 [maven-release-plugin] prepare release jackson-bom-2.18.7
  • a73cda9 Prep for 2.18.7 release
  • 76b4a05 Post-release dep version bump
  • Additional commits viewable in compare view

Updates org.xmlunit:xmlunit-core from 2.10.0 to 2.11.0

Release notes

Sourced from org.xmlunit:xmlunit-core's releases.

XMLUnit for Java 2.11.0

This release is identical to XMLUnit for Java 2.10.4 except for the dependency list of the xmlunit-jakarta-jaxb-impl modulle. If you don't use the module, you can ignore this release.

Up until XMLUnit 2.10.4 the xmlunit-jakarta-jaxb-impl module depended on org.glassfish.jaxb:jaxb-runtime making it more difficult to chose a different JAXB implementation than necessary (see #313). This dependency has now been removed.

If you use the xmlunit-jakarta-jaxb-impl module you may now need to specify the JAXB implementation you want to use explicitly. If you have excluded the module's dependency inside your own build configuration so far, you can now safely remove the exclusion.

XMLUnit for Java 2.10.4

This is a bugfix release. Fixed bugs:

  • attributes with null values could cause a NullPointerException. Issue #307 PR #309

XMLUnit for Java 2.10.3

This release fixes OSGi headers inside xmlunit-core's and xmlunit-legacy's manifests, it doesn't contain any other changes.

Full list of changes:

  • marked OSGi Import-Package optional for javax.xml.bind packages in xmlunit-core. Also fixed the Export-Package header of the legacy module. Issue #300 PR #301

XMLUnit for Java 2.10.2

This release fixes a problem with the published POM of the xmlunit-legacy module. It doesn't contain any changes to any of the other modules.

XMLUnit for Java 2.10.1

  • placeholders can now also be used inside of the local part of xsi:type attributes. PR #293

  • PlaceholderDifferenceEvaluator would cause ClassCastException for documents with differences in xsi:type attributes. Issue #276

  • updated a bunch of Maven plugins, in particular we now create CylcloneDX files using version 1.6 of the schema. PR #292

  • updated bytebuddy dependency of xmlunit-assertj to 2.12.23 in order to support Java 17 properly

  • Migrated form TraciCI to CircleCI Issue #289

  • Migrated to Sonatype's Central Portal Issue #287

  • added a new BOM artifact xmlunit-bom Issue #269

... (truncated)

Changelog

Sourced from org.xmlunit:xmlunit-core's changelog.

XMLUnit for Java 2.11.0 - /Released 2025-10-24/

  • the xmlunit-jakarta-jaxb-impl no longer depends on org.glassfish.jaxb:jaxb-runtime directly. Issue #313 PR #314

    This is a breaking change and may force you to add an explicit dependency if you are using the module and rely on XMLUnit to provide the JAXB implementation.

XMLUnit for Java 2.10.4 - /Released 2025-09-13/

  • attributes with null values could cause a NullPointerException. Issue #307 PR #309

XMLUnit for Java 2.10.3 - /Released 2025-06-19/

  • marked OSGi Import-Package optional for javax.xml.bind packages in xmlunit-core. Also fixed the Export-Package header of the legacy module. Issue #300 PR #301

XMLUnit for Java 2.10.2 - /Released 2025-05-23/

  • the published POM of xmlunit-legacy lacked the dependency on xmlunit-core. Issue #296

XMLUnit for Java 2.10.1 - /Released 2025-05-19/

  • placeholders can now also be used inside of the local part of xsi:type attributes. PR #293

  • PlaceholderDifferenceEvaluator would cause ClassCastException for documents with differences in xsi:type attributes. Issue #276

  • updated a bunch of Maven plugins, in particular we now create CylcloneDX files using version 1.6 of the schema. PR #292

  • updated bytebuddy dependency of xmlunit-assertj to 2.12.23 in order to support Java 17 properly

  • Migrated form TravisCI to CircleCI Issue #289

  • Migrated to Sonatype's Central Portal Issue #287

  • added a new BOM artifact xmlunit-bom Issue #269

... (truncated)

Commits
  • 02aef5d release 2.11.0
  • c56a766 Merge pull request #314 from xmlunit/dont-directly-depend-on-jaxb-implementation
  • 0500c61 remove hard dependency on glassfish's JAXB implementation
  • cb37f53 Merge pull request #312 from xmlunit/release-2.10.4
  • b3d86ad don't sign cyclonedx signatures/checksum
  • 72c34c1 prepare next iteration
  • 9be68d1 release 2.10.4
  • 6700f96 Merge pull request #311 from xmlunit/chore-fix-comment
  • 016c06f fix inline comment
  • e250b15 Merge pull request #309 from xmlunit/deal-with-null-attrs
  • Additional commits viewable in compare view

Updates io.github.resilience4j:resilience4j-circuitbreaker from 2.2.0 to 2.4.0

Release notes

Sourced from io.github.resilience4j:resilience4j-circuitbreaker's releases.

v2.4.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from io.github.resilience4j:resilience4j-circuitbreaker's changelog.

= Release Notes

== Version 0.1.0

  • Initial version

=== Version 0.1.1

  • Added the functionality to add exceptions with are ignored by the CircuitBreaker

=== Version 0.1.2

  • Added the feature to get Metrics for function executions

=== Version 0.1.3

  • Added a static factory method for the CircuitBreakerConfig builder

=== Version 0.1.4

  • Added the feature to retry a failed function

=== Version 0.1.5

  • Added builders to simplify chaining of decorators

=== Version 0.1.6

  • Renamed project to javaslang-circuitbreaker

=== Version 0.1.7

  • Fixed Issue #2
  • Issue #3 Added a listener mechanism for state transitions

== Version 0.2.0

  • Removed Dropwizard Metrics, because its a too heavy dependency for such a lightweight library.
  • Changed the way exceptions can be handled. You have to provide a Predicate now instead of a list of exceptions to ignore.

== Version 0.3.0

  • The CircuitBreaker is based on a Ring Bit Buffer and a failure rate now.

=== Version 0.3.1

  • Changed the visibility of CircuitBreakerUtils.isCallPermitted to public.

=== Version 0.3.2

  • CircuitBreakerRegistry has a new method which takes a Supplier of a CircuitBreakerConfig so that the CircuitBreakerConfig is only created when needed.

=== Version 0.3.3

  • CircuitBreaker has a new method +getCircuitBreakerConfig+ which allows to retrieve the CircuitBreakerConfig of the CircuitBreaker.
  • Renamed the state HALF_CLOSED to HALF_OPEN to match the pattern description of Martin Fowler.

=== Version 0.3.4

  • Added a Metrics interface to the CircuitBreaker which allows to retrieve current statistics like failureRate and number of buffer calls.

== Version 0.4.0

  • Updated javaslang from 2.0.0-RC4 to 2.0.1

... (truncated)

Commits
  • f1c3be8 Fix signing
  • 88a8293 Enable signing for resilience4j-bom
  • 1ed88c2 Remove sign skip on snapshot version (#2419)
  • ed637ec Enable SNAPSHOT artifact signing from master (#2418)
  • d51bce1 Read env variables from gradle for gpg key (#2417)
  • 89baea7 Fix release workflow: unquoted multi-line GPG key breaks Gradle invocation (#...
  • b888e82 Add GPG key and passphrase to build step
  • e9aedee Revert JDK target back to 17 (#2415)
  • ad4efb8 Remove log spam from tests (#2412)4
  • cd8f8e0 Issue #2189: Use snapshot reads for actuator event endpoints in Spring Boot 3...
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

3.14.0

... (truncated)

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 968cb38 [maven-release-plugin] prepare release surefire-3.5.5
  • 8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
  • 4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
  • 8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
  • 68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
  • 0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
  • 688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
  • e5c01a6 Build only by the latest Maven on Jenkins (#3255)
  • 9c99e97 Fix Jenkin badges in README (#3254)
  • 20930ea Bump parent from 44 to 47 (#3253)
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.14

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #1950).
  • Experimental support for Java 26 class files (GitHub #1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #1965).

0.8.13

New Features

  • JaCoCo now officially supports Java 23 and Java 24 (GitHub #1757, #1631, #1867).
  • Experimental support for Java 25 class files (GitHub #1807).
  • Calculation of line coverage for Kotlin inline functions (GitHub #1670).
  • Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #1670, #1700).
  • Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #1700).
  • Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #1616).
  • Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #1475).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #1283).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #1774).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #1769).
  • Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #1810, #1818).
  • Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #1625).
  • Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #1768).

Fixed bugs

  • Fixed interpretation of Kotlin SMAP (GitHub #1525).
  • File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #1660).

Non-functional Changes

  • JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #1708, #1707, #1681).
  • JaCoCo now depends on ASM 9.8 (GitHub #1862).
  • More context information when IllegalArgumentException occurs during reading of zip file (GitHub #1833).
Commits
  • 2eb2483 Prepare release v0.8.14
  • de76181 KotlinSerializableFilter should filter more methods (#1971)
  • 89c4bd5 Fix NPE in KotlinSerializableFilter (#1970)
  • 0981128 Migrate release staging to the Central Publisher Portal (#1968)
  • d07bc6b Add filter for bytecode generated by Kotlin serialization compiler plugin (#1...
  • 5e35fd5 Upgrade maven-dependency-plugin to 3.9.0 (#1966)
  • c2fe5cc Upgrade ASM to 9.9 (#1965)
  • b0f8e23 KotlinSafeCallOperatorFilter should filter "unoptimized" safe call followed b...
  • c7bd3f4 Upgrade spotless-maven-plugin to 3.0.0 (#1961)
  • faa289d KotlinSafeCallOperatorFilter should not be affected by presence of pseudo ins...
  • Additional commits viewable in compare view

Updates org.springaicommunity.agents:agent-model from 0.15.0 to 0.16.0

Updates org.codehaus.mojo:exec-maven-plugin from 3.2.0 to 3.6.3

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.3

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.2

🚀 New features and improvements

📦 Dependency updates

3.6.1

🐛 Bug Fixes

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

... (truncated)

Commits
  • fe1fa8c [maven-release-plugin] prepare release 3.6.3
  • 5b3feca Bump asm.version from 9.9 to 9.9.1
  • efc7faa Bump org.apache.commons:commons-exec from 1.5.0 to 1.6.0
  • cdaf267 JUnit 5 best practices (#505)
  • f3f5997 Move ExecJavaMojoTest, ExecMojoTest to JUnit 5
  • 03b87b5 Document thread group isolation limitation in java goal (#503)
  • 7a66c3e Add support for JEP 512 for for package-private static main methods with and ...
  • a6d01ef Move to JUnit 5
  • 88d5961 [maven-release-plugin] prepare for next development iteration

@dependabot
chore(deps): bump the maven group with 8 updates
e03f2c7 
Bumps the maven group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.18.6` | `2.21.3` |
| [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.0` | `2.11.0` |
| [io.github.resilience4j:resilience4j-circuitbreaker](https://github.com/resilience4j/resilience4j) | `2.2.0` | `2.4.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.13.0` | `3.15.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.5.5` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.14` |
| org.springaicommunity.agents:agent-model | `0.15.0` | `0.16.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.2.0` | `3.6.3` |


Updates `com.fasterxml.jackson:jackson-bom` from 2.18.6 to 2.21.3
- [Commits](FasterXML/jackson-bom@jackson-bom-2.18.6...jackson-bom-2.21.3)

Updates `org.xmlunit:xmlunit-core` from 2.10.0 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.0...v2.11.0)

Updates `io.github.resilience4j:resilience4j-circuitbreaker` from 2.2.0 to 2.4.0
- [Release notes](https://github.com/resilience4j/resilience4j/releases)
- [Changelog](https://github.com/resilience4j/resilience4j/blob/master/RELEASENOTES.adoc)
- [Commits](resilience4j/resilience4j@v2.2.0...v2.4.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.13.0 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.13.0...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.5.5)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.14)

Updates `org.springaicommunity.agents:agent-model` from 0.15.0 to 0.16.0

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.2.0 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.2.0...3.6.3)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: io.github.resilience4j:resilience4j-circuitbreaker
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.springaicommunity.agents:agent-model
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 25, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 25, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 25, 2026
@dependabot dependabot Bot deleted the dependabot/maven/maven-aa0d249cce branch May 25, 2026 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants