Skip to content

Bump the dependencies group across 1 directory with 55 updates#4126

Open
dependabot[bot] wants to merge 2 commits into
2.xfrom
dependabot/maven/2.x/dependencies-b4f24955e2
Open

Bump the dependencies group across 1 directory with 55 updates#4126
dependabot[bot] wants to merge 2 commits into
2.xfrom
dependabot/maven/2.x/dependencies-b4f24955e2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 55 updates in the / directory:

Package From To
org.apache.commons:commons-compress 1.27.1 1.28.0
org.apache.commons:commons-csv 1.14.0 1.14.1
commons-logging:commons-logging 1.3.5 1.4.0
com.fasterxml.jackson:jackson-bom 2.19.2 2.22.0
org.jctools:jctools-core 4.0.5 4.0.6
org.apache.kafka:kafka-clients 3.9.1 3.9.2
org.slf4j:slf4j-api 2.0.17 2.0.18
org.apache.groovy:groovy-bom 4.0.27 5.0.6
org.junit:junit-bom 5.13.4 5.14.4
org.junit.jupiter:junit-jupiter-engine 5.13.4 5.14.4
org.apache.activemq:activemq-broker 6.1.7 6.2.6
org.eclipse.angus:angus-activation 2.0.2 2.0.3
org.assertj:assertj-core 3.27.3 3.27.7
com.code-intelligence:jazzer 0.24.0 0.30.0
com.code-intelligence:jazzer-api 0.24.0 0.30.0
com.datastax.cassandra:cassandra-driver-core 3.11.5 4.0.0
commons-codec:commons-codec 1.18.0 1.22.0
org.apache.commons:commons-dbcp2 2.13.0 2.14.0
commons-io:commons-io 2.19.0 2.22.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
org.apache.commons:commons-pool2 2.12.1 2.13.1
com.google.guava:guava 33.4.8-jre 33.6.0-jre
com.google.guava:guava-testlib 33.4.8-jre 33.6.0-jre
jakarta.activation:jakarta.activation-api 2.1.3 2.1.4
org.eclipse.angus:jakarta.mail 2.0.3 2.0.5
jakarta.mail:jakarta.mail-api 2.1.3 2.1.5
com.google.code.java-allocation-instrumenter:java-allocation-instrumenter 3.3.4 3.3.5
org.jmdns:jmdns 3.6.1 3.6.3
net.java.dev.jna:jna 5.17.0 5.19.1
co.elastic.logging:log4j2-ecs-layout 1.7.0 1.8.0
org.apache.maven:maven-core 3.9.10 3.9.16
org.apache.maven:maven-model 3.9.10 3.9.16
org.openjdk.nashorn:nashorn-core 15.6 15.7
org.eclipse.platform:org.eclipse.osgi 3.23.100 3.24.200
org.codehaus.plexus:plexus-utils 3.6.0 3.6.1
org.codehaus.woodstox:stax2-api 4.2.2 4.3.0
com.github.tomakehurst:wiremock-jre8 2.35.2 3.0.1
org.xmlunit:xmlunit-core 2.10.3 2.12.0
org.xmlunit:xmlunit-matchers 2.10.3 2.12.0
org.tukaani:xz 1.10 1.12
com.github.luben:zstd-jni 1.5.7-4 1.5.7-11
biz.aQute.bnd:biz.aQute.bnd.annotation 7.1.0 7.3.0
com.google.errorprone:error_prone_annotations 2.38.0 2.50.0
io.fabric8:docker-maven-plugin 0.46.0 0.48.1
org.gradlex:gradle-module-metadata-maven-plugin 1.1 1.2
com.github.jnr:jnr-ffi 2.2.18 2.2.19
org.bouncycastle:bcpkix-jdk18on 1.83 1.84
org.json:json 20250517 20260522
co.elastic.clients:elasticsearch-java 9.2.0 9.4.2
org.elasticsearch.client:elasticsearch-rest-client 9.2.0 9.4.2
org.mongodb:bson 5.6.1 5.8.0
org.mongodb:mongodb-driver-core 5.6.1 5.8.0
org.mongodb:mongodb-driver-sync 5.6.1 5.8.0
org.slf4j:slf4j-nop 2.0.17 2.0.18
org.springframework.cloud:spring-cloud-context 4.3.0 5.0.2

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 

  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 

  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 

  •        Add GzipParameters.toString(). Thanks to Gary Gregory.
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 

  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 

  •        Add ZipFile.stream(). Thanks to Gary Gregory. 

  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 

  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 

  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory.
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory.
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory.
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

... (truncated)

Commits

Updates org.apache.commons:commons-csv from 1.14.0 to 1.14.1

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV 1.14.1 Release Notes

The Apache Commons CSV team is pleased to announce the release of Apache Commons CSV 1.14.1.

This document contains the release notes for the 1.14.1 version of Apache Commons CSV. Commons CSV reads and writes files in Comma Separated Value (CSV) format variations.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version include:

Fixed Bugs

  • CSV-318: CSVPrinter.printRecord(Stream) hangs if given a parallel stream. Thanks to Joseph Shraibman, Gary Gregory.
  • CSV-318: CSVPrinter now uses an internal lock instead of synchronized methods. Thanks to Joseph Shraibman, Gary Gregory.
  •       org.apache.commons.csv.CSVPrinter.printRecords(ResultSet) now writes one record at a time using a lock. Thanks to Gary Gregory.

Changes

  •       Bump org.apache.commons:commons-parent from 81 to 85 [#542](https://github.com/apache/commons-csv/issues/542). Thanks to Gary Gregory, Dependabot.

  •       Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.

  •       Bump com.opencsv:opencsv from 5.10 to 5.11.2 [#545](https://github.com/apache/commons-csv/issues/545), [#551](https://github.com/apache/commons-csv/issues/551), [#553](https://github.com/apache/commons-csv/issues/553). Thanks to Gary Gregory, Dependabot.

  •       Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#556](https://github.com/apache/commons-csv/issues/556). Thanks to Gary Gregory, Dependabot.

  •       Bump commons-codec:commons-codec from 1.18.0 to 1.19.0. Thanks to Gary Gregory.

Historical list of changes: https://commons.apache.org/proper/commons-csv/changes.html

For complete information on Apache Commons CSV, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CSV website:

https://commons.apache.org/proper/commons-csv/

Download page: https://commons.apache.org/proper/commons-csv/download_csv.cgi

Have fun! -Apache Commons CSV team

Commits
  • e14ef86 Ignore macOS file
  • d8724bf Prepare for the release candidate 1.14.1 RC1
  • b76971c Prepare for the next release candidate
  • b66814e Merge pull request #557 from apache/dependabot/github_actions/github/codeql-a...
  • 9c95e92 Bump github/codeql-action from 3.29.2 to 3.29.4
  • 1fb3716 Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
  • 7b72c50 Merge some string literals
  • 9658373 Update the GitHub pull request template for AI
  • 67192a9 Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • 59164c8 Bump com.opencsv:opencsv from 5.11.1 to 5.11.2 #553
  • Additional commits viewable in compare view

Updates commons-logging:commons-logging from 1.3.5 to 1.4.0

Changelog

Sourced from commons-logging:commons-logging's changelog.

Apache Commons Logging 1.4.0 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.4.0.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

Fixed Bugs

  •           Use the new Apache oak leaf logo. Thanks to Gary Gregory.

  •           Fix broken URLs in website links. Thanks to Stanimir Stamenkov, Gary Gregory.

  •           Add support for Jakarta servlets, see org.apache.commons.logging.jakarta.ServletContextCleaner [#419](https://github.com/apache/commons-logging/issues/419). Thanks to Kiril Keranov, Gary Gregory.

Changes

  •           Bump org.apache.commons:commons-parent from 97 to 102. Thanks to Gary Gregory.

  •           Bump log4j2.version from 2.25.3 to 2.26.0. Thanks to Gary Gregory, Dependabot.

  •           Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18. Thanks to Gary Gregory, Dependabot.

Historical list of changes: https://commons.apache.org/proper/commons-logging/changes.html

Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi

For complete information on Apache Commons Logging, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Logging website:

https://commons.apache.org/proper/commons-logging/

Apache Commons Logging 1.3.6 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.6.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

... (truncated)

Commits
  • ff5ff39 Prepare for the release candidate 1.4.0 RC1
  • a685f33 Prepare for the next release candidate
  • a253ab6 Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
  • d6c9b81 Javadoc
  • 1cf45b2 Update legacy GitHub links in CONTRIBUTING.md
  • 9b48b5b Bump org.apache.commons:commons-parent from 101 to 102.
  • 7a44cb6 Bump GH CI actions/dependency-review-action from 4.9.0 to 5.0.0
  • e884661 Bump GH CI actions/checkout from 6.0.2 to 6.0.3
  • f6ad6f9 Bump org.apache.commons:commons-parent from 100 to 101
  • b468740 Bump github/codeql-action from 4.36.0 to 4.36.2
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.19.2 to 2.22.0

Commits
  • 112e859 [maven-release-plugin] prepare release jackson-bom-2.22.0
  • 2cae2ce Prep for 2.22.0 release
  • 7955d21 Merge branch '2.21' into 2.x
  • 8922a05 Post-release dep version bump
  • 1fa9943 [maven-release-plugin] prepare for next development iteration
  • d1abd31 [maven-release-plugin] prepare release jackson-bom-2.21.4
  • 2aaea43 Prep for 2.21.4 release
  • 902ec69 Update Woodstox/stax2-api (to 7.2.0/4.3.0)
  • 2570647 Merge branch '2.21' into 2.x
  • 9d3a9d5 Post-release dep version bump
  • Additional commits viewable in compare view

Updates org.jctools:jctools-core from 4.0.5 to 4.0.6

Release notes

Sourced from org.jctools:jctools-core's releases.

Add VarHandle queues and other minor fixups

NOTE: This will be the last release with JDK6 bytecode for jctools-core. The next release will be 5.0.0 and will compile with the 1.8 target, allowing for method handles.

This release has 2 artifacts. The old jctools-core with the following changes:

  • Where plain access to field is used by queues, the field is not volatile and volatile access is done using Unsafe.
  • Use a generated ConcurrentCircularXXXQueue instead of hand rolled base classes in generated code.
  • Padding blocks formatting is improved in generated code.

The release introduces a new artifact, jctools-core-jdk11 which included generated VarHandle queues (padded and unpadded). These queues do not rely on Unsafe, and offer better performance than the AtomicFieldUpdater generated code. We expect many users will prefer these variants going forward to break their reliance on Unsafe.

The majority of the VarHandle work is a great contribution from @​amarziali , thanks!!! We also thank @​franz1981 for his help reviewing and profiling the code.

Commits
  • 81fc9f7 Add VH package info
  • b43fb9a Remove la optimization from VH queues in the absence of evidence it improve...
  • b8b6eb5 Improve baseline
  • e06b852 Generate atomic queues after builder changes
  • 97aa7b4 Prep atomic generator for generating base classes
  • e17024a Generate VH LinkedArray queues
  • 85f8938 Regenerate queues with padding block
  • 845e8ff Fix up volatile/plain fields access and prep for LinkedArray queues
  • dc94426 Nicer formatting for padding blocks
  • 7c77981 Fix test timeout due to slow clear on linked queues
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 3.9.1 to 3.9.2

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.apache.groovy:groovy-bom from 4.0.27 to 5.0.6

Commits

Updates org.junit:junit-bom from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits
  • 096fd69 Release 5.14.4
  • 11fd02b Remove JDK 24 (EOL)
  • 5b7f023 Fix integration tests on JDK 27
  • 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
  • a5bf336 Polish 5.14.4 release notes
  • 7667c14 Fix race condition in NodeTestTask (#5427)
  • ac01f2d Include full display name in legacy XML reports (#5524)
  • fbd4a8e Include class template invocation index in legacy reporting names
  • 7d6f0c0 Only check PDF for GA releases
  • 14f534d Test 5.14.x against JDK 25 ga (#5623)
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits
  • 096fd69 Release 5.14.4
  • 11fd02b Remove JDK 24 (EOL)
  • 5b7f023 Fix integration tests on JDK 27
  • 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
  • a5bf336 Polish 5.14.4 release notes
  • 7667c14 Fix race condition in NodeTestTask (#5427)
  • ac01f2d Include full display name in legacy XML reports (#5524)
  • fbd4a8e Include class template invocation index in legacy reporting names
  • 7d6f0c0 Only check PDF for GA releases
  • 14f534d Test 5.14.x against JDK 25 ga (#5623)
  • Additional commits viewable in compare view

Updates org.apache.activemq:activemq-broker from 6.1.7 to 6.2.6

Release notes

Sourced from org.apache.activemq:activemq-broker's releases.

Apache ActiveMQ 6.2.6

What's Changed

New Contributors

Full Changelog: apache/activemq@activemq-6.2.5...activemq-6.2.6

Apache ActiveMQ 6.2.5

What's Changed

Full Changelog: apache/activemq@activemq-6.2.4...activemq-6.2.5

Apache ActiveMQ 6.2.4

What's Changed

... (truncated)

Commits
  • bb9523b [maven-release-plugin] prepare release activemq-6.2.6
  • 4115627 Ensure connection info is processed before durable sync (#2048)
  • 9c5639d Backport network flaky test improvements (#2045)
  • be8415f [6.2.x] Harden web console and Jolokia access by default (#2025) (#2037)
  • 7d7d0af build(deps): bump shiro-version from 2.1.0 to 2.2.0 (#2023) (#2041)
  • df95bf8 Harden default broker and web console configuration (6.2.x backport) (#2035)
  • 09a74c5 Bump dependencies for CVE fixes on 6.2.x (#2030)
  • 68b5d2b Remove "java.lang" package as a default allowed serializable package (#2026) ...
  • dfeac9f #2005 6.2.x - Fix authorization check on removeDestination (#2009)
  • 8b5af8d Disable the message servlet by default (#2000) (#2014)
  • Additional commits viewable in compare view

Updates org.eclipse.angus:angus-activation from 2.0.2 to 2.0.3

Commits
  • 6eff4c5 Prepare release org.eclipse.angus:angus-activation-project:2.0.3
  • bcb3375 jaf api 2.1.4 (#55)
  • 84e5a0d Rename resources so javax and jakarta can live in same classpath #174
  • c3c4d67 Merge pull request #46 from eclipse-ee4j/2.0.2-RELEASE
  • 354de40 Update README.md
  • c62baf3 Update TCK-Results.md
  • 6cda1e7 Prepare next development cycle for 2.1.0-SNAPSHOT
  • See full diff in compare view

Updates org.assertj:assertj-core from 3.27.3 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

  • Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

  • Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.18.3
  • Upgrade to JUnit BOM 5.14.1

Guava

  • Upgrade to Guava 33.5.0-jre

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

... (truncated)

Commits
  • e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
  • 85ca7eb Deprecate XmlStringPrettyFormatter
  • 77081dc Merge commit from fork
  • b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
  • 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
  • d393ef1 Abort tests when symbolic links cannot be created (#3788)
  • 2212433 Add IntelliJ custom inspection for test class names
  • 5717d02 Update JetBrains icon
  • a8ec20b Add icon for JetBrains products
  • c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
  • Additional commits viewable in compare view

Updates com.code-intelligence:jazzer from 0.24.0 to 0.30.0

Release notes

Sourced from com.code-intelligence:jazzer's releases.

v0.30.0

What's Changed

Full Changelog: CodeIntelligenceTesting/jazzer@v0.29.1...v0.30.0

v0.29.1

What's Changed

Full Changelog: CodeIntelligenceTesting/jazzer@v0.28.0...v0.29.1

Note: There is no release for v0.29.0 due to a bug in the release pipeline.

v0.28.0

What's Changed

@dependabot dependabot Bot added dependencies Related to third party dependency updates or migrations java Pull requests that update Java code labels May 15, 2026
@dependabot dependabot Bot added dependencies Related to third party dependency updates or migrations java Pull requests that update Java code labels May 15, 2026
ppkarwasz pushed a commit that referenced this pull request May 15, 2026
@github-actions
Generate changelog entries for #4126
c7a3216
@github-actions github-actions Bot enabled auto-merge (squash) May 15, 2026 14:10
@ppkarwasz

ppkarwasz commented Jun 18, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
Bump the dependencies group across 1 directory with 55 updates
db18dd8 
Bumps the dependencies group with 55 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.27.1` | `1.28.0` |
| [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.14.0` | `1.14.1` |
| [commons-logging:commons-logging](https://github.com/apache/commons-logging) | `1.3.5` | `1.4.0` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.19.2` | `2.22.0` |
| [org.jctools:jctools-core](https://github.com/JCTools/JCTools) | `4.0.5` | `4.0.6` |
| org.apache.kafka:kafka-clients | `3.9.1` | `3.9.2` |
| org.slf4j:slf4j-api | `2.0.17` | `2.0.18` |
| [org.apache.groovy:groovy-bom](https://github.com/apache/groovy) | `4.0.27` | `5.0.6` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.4` | `5.14.4` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `5.13.4` | `5.14.4` |
| [org.apache.activemq:activemq-broker](https://github.com/apache/activemq) | `6.1.7` | `6.2.6` |
| [org.eclipse.angus:angus-activation](https://github.com/eclipse-ee4j/angus-activation) | `2.0.2` | `2.0.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.3` | `3.27.7` |
| [com.code-intelligence:jazzer](https://github.com/CodeIntelligenceTesting/jazzer) | `0.24.0` | `0.30.0` |
| [com.code-intelligence:jazzer-api](https://github.com/CodeIntelligenceTesting/jazzer) | `0.24.0` | `0.30.0` |
| [com.datastax.cassandra:cassandra-driver-core](https://github.com/datastax/java-driver) | `3.11.5` | `4.0.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.18.0` | `1.22.0` |
| org.apache.commons:commons-dbcp2 | `2.13.0` | `2.14.0` |
| commons-io:commons-io | `2.19.0` | `2.22.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| org.apache.commons:commons-pool2 | `2.12.1` | `2.13.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.6.0-jre` |
| [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.8-jre` | `33.6.0-jre` |
| [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api) | `2.1.3` | `2.1.4` |
| org.eclipse.angus:jakarta.mail | `2.0.3` | `2.0.5` |
| [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) | `2.1.3` | `2.1.5` |
| [com.google.code.java-allocation-instrumenter:java-allocation-instrumenter](https://github.com/google/allocation-instrumenter) | `3.3.4` | `3.3.5` |
| [org.jmdns:jmdns](https://github.com/jmdns/jmdns) | `3.6.1` | `3.6.3` |
| [net.java.dev.jna:jna](https://github.com/java-native-access/jna) | `5.17.0` | `5.19.1` |
| [co.elastic.logging:log4j2-ecs-layout](https://github.com/elastic/ecs-logging-java) | `1.7.0` | `1.8.0` |
| org.apache.maven:maven-core | `3.9.10` | `3.9.16` |
| org.apache.maven:maven-model | `3.9.10` | `3.9.16` |
| [org.openjdk.nashorn:nashorn-core](https://github.com/openjdk/nashorn) | `15.6` | `15.7` |
| [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) | `3.23.100` | `3.24.200` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `3.6.0` | `3.6.1` |
| [org.codehaus.woodstox:stax2-api](https://github.com/FasterXML/stax2-api) | `4.2.2` | `4.3.0` |
| [com.github.tomakehurst:wiremock-jre8](https://github.com/wiremock/wiremock) | `2.35.2` | `3.0.1` |
| [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.12.0` |
| [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.12.0` |
| [org.tukaani:xz](https://github.com/tukaani-project/xz-java) | `1.10` | `1.12` |
| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-4` | `1.5.7-11` |
| [biz.aQute.bnd:biz.aQute.bnd.annotation](https://github.com/bndtools/bnd) | `7.1.0` | `7.3.0` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.38.0` | `2.50.0` |
| [io.fabric8:docker-maven-plugin](https://github.com/fabric8io/docker-maven-plugin) | `0.46.0` | `0.48.1` |
| [org.gradlex:gradle-module-metadata-maven-plugin](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin) | `1.1` | `1.2` |
| [com.github.jnr:jnr-ffi](https://github.com/jnr/jnr-ffi) | `2.2.18` | `2.2.19` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.83` | `1.84` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20250517` | `20260522` |
| [co.elastic.clients:elasticsearch-java](https://github.com/elastic/elasticsearch-java) | `9.2.0` | `9.4.2` |
| [org.elasticsearch.client:elasticsearch-rest-client](https://github.com/elastic/elasticsearch) | `9.2.0` | `9.4.2` |
| [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.6.1` | `5.8.0` |
| [org.mongodb:mongodb-driver-core](https://github.com/mongodb/mongo-java-driver) | `5.6.1` | `5.8.0` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.6.1` | `5.8.0` |
| org.slf4j:slf4j-nop | `2.0.17` | `2.0.18` |
| [org.springframework.cloud:spring-cloud-context](https://github.com/spring-cloud/spring-cloud-commons) | `4.3.0` | `5.0.2` |



Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.27.1...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-csv` from 1.14.0 to 1.14.1
- [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-csv@rel/commons-csv-1.14.0...rel/commons-csv-1.14.1)

Updates `commons-logging:commons-logging` from 1.3.5 to 1.4.0
- [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-logging@rel/commons-logging-1.3.5...rel/commons-logging-1.4.0)

Updates `com.fasterxml.jackson:jackson-bom` from 2.19.2 to 2.22.0
- [Commits](FasterXML/jackson-bom@jackson-bom-2.19.2...jackson-bom-2.22.0)

Updates `org.jctools:jctools-core` from 4.0.5 to 4.0.6
- [Release notes](https://github.com/JCTools/JCTools/releases)
- [Changelog](https://github.com/JCTools/JCTools/blob/master/RELEASE-NOTES.md)
- [Commits](JCTools/JCTools@v4.0.5...v4.0.6)

Updates `org.apache.kafka:kafka-clients` from 3.9.1 to 3.9.2

Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18

Updates `org.apache.groovy:groovy-bom` from 4.0.27 to 5.0.6
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.junit:junit-bom` from 5.13.4 to 5.14.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r5.14.4)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 5.14.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r5.14.4)

Updates `org.apache.activemq:activemq-broker` from 6.1.7 to 6.2.6
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-6.1.7...activemq-6.2.6)

Updates `org.eclipse.angus:angus-activation` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/eclipse-ee4j/angus-activation/releases)
- [Commits](eclipse-ee4j/angus-activation@2.0.2...2.0.3)

Updates `org.assertj:assertj-core` from 3.27.3 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.3...assertj-build-3.27.7)

Updates `com.code-intelligence:jazzer` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.30.0)

Updates `com.code-intelligence:jazzer-api` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.30.0)

Updates `com.code-intelligence:jazzer-api` from 0.24.0 to 0.30.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.30.0)

Updates `com.datastax.cassandra:cassandra-driver-core` from 3.11.5 to 4.0.0
- [Release notes](https://github.com/datastax/java-driver/releases)
- [Commits](apache/cassandra-java-driver@3.11.5...4.0.0)

Updates `commons-codec:commons-codec` from 1.18.0 to 1.22.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.18.0...rel/commons-codec-1.22.0)

Updates `org.apache.commons:commons-dbcp2` from 2.13.0 to 2.14.0

Updates `commons-io:commons-io` from 2.19.0 to 2.22.0

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `org.apache.commons:commons-pool2` from 2.12.1 to 2.13.1

Updates `com.google.guava:guava` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `jakarta.activation:jakarta.activation-api` from 2.1.3 to 2.1.4
- [Release notes](https://github.com/jakartaee/jaf-api/releases)
- [Commits](jakartaee/jaf-api@2.1.3...2.1.4)

Updates `org.eclipse.angus:jakarta.mail` from 2.0.3 to 2.0.5

Updates `jakarta.mail:jakarta.mail-api` from 2.1.3 to 2.1.5
- [Release notes](https://github.com/jakartaee/mail-api/releases)
- [Commits](jakartaee/mail-api@2.1.3...2.1.5)

Updates `com.google.code.java-allocation-instrumenter:java-allocation-instrumenter` from 3.3.4 to 3.3.5
- [Release notes](https://github.com/google/allocation-instrumenter/releases)
- [Commits](google/allocation-instrumenter@java-allocation-instrumenter-3.3.4...java-allocation-instrumenter-3.3.5)

Updates `org.jmdns:jmdns` from 3.6.1 to 3.6.3
- [Release notes](https://github.com/jmdns/jmdns/releases)
- [Changelog](https://github.com/jmdns/jmdns/blob/main/CHANGELOG.txt)
- [Commits](jmdns/jmdns@3.6.1...v3.6.3)

Updates `net.java.dev.jna:jna` from 5.17.0 to 5.19.1
- [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md)
- [Commits](java-native-access/jna@5.17.0...5.19.1)

Updates `co.elastic.logging:log4j2-ecs-layout` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/elastic/ecs-logging-java/releases)
- [Commits](elastic/ecs-logging-java@v1.7.0...v1.8.0)

Updates `org.apache.maven:maven-core` from 3.9.10 to 3.9.16

Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.16

Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.16

Updates `org.openjdk.nashorn:nashorn-core` from 15.6 to 15.7
- [Changelog](https://github.com/openjdk/nashorn/blob/main/CHANGELOG.md)
- [Commits](openjdk/nashorn@release-15.6...release-15.7)

Updates `org.eclipse.platform:org.eclipse.osgi` from 3.23.100 to 3.24.200
- [Commits](https://github.com/eclipse-equinox/equinox/commits)

Updates `org.codehaus.plexus:plexus-utils` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-3.6.0...plexus-utils-3.6.1)

Updates `org.codehaus.woodstox:stax2-api` from 4.2.2 to 4.3.0
- [Commits](FasterXML/stax2-api@stax2-api-4.2.2...stax2-api-4.3.0)

Updates `com.github.tomakehurst:wiremock-jre8` from 2.35.2 to 3.0.1
- [Release notes](https://github.com/wiremock/wiremock/releases)
- [Commits](wiremock/wiremock@2.35.2...3.0.1)

Updates `org.xmlunit:xmlunit-core` from 2.10.3 to 2.12.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.12.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.12.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.12.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.12.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.12.0)

Updates `org.tukaani:xz` from 1.10 to 1.12
- [Release notes](https://github.com/tukaani-project/xz-java/releases)
- [Changelog](https://github.com/tukaani-project/xz-java/blob/master/NEWS.md)
- [Commits](tukaani-project/xz-java@v1.10...v1.12)

Updates `com.github.luben:zstd-jni` from 1.5.7-4 to 1.5.7-11
- [Commits](luben/zstd-jni@v1.5.7-4...v1.5.7-11)

Updates `biz.aQute.bnd:biz.aQute.bnd.annotation` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/bndtools/bnd/releases)
- [Commits](bndtools/bnd@7.1.0...7.3.0)

Updates `com.google.errorprone:error_prone_annotations` from 2.38.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.38.0...v2.50.0)

Updates `io.fabric8:docker-maven-plugin` from 0.46.0 to 0.48.1
- [Release notes](https://github.com/fabric8io/docker-maven-plugin/releases)
- [Changelog](https://github.com/fabric8io/docker-maven-plugin/blob/master/doc/changelog.md)
- [Commits](fabric8io/docker-maven-plugin@v0.46.0...v0.48.1)

Updates `org.gradlex:gradle-module-metadata-maven-plugin` from 1.1 to 1.2
- [Release notes](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin/releases)
- [Changelog](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin/blob/main/CHANGELOG.md)
- [Commits](gradlex-org/gradle-module-metadata-maven-plugin@v1.1...v1.2)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.13.4 to 5.14.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r5.14.4)

Updates `com.github.jnr:jnr-ffi` from 2.2.18 to 2.2.19
- [Commits](jnr/jnr-ffi@jnr-ffi-2.2.18...jnr-ffi-2.2.19)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.json:json` from 20250517 to 20260522
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2025051...2026052)

Updates `co.elastic.clients:elasticsearch-java` from 9.2.0 to 9.4.2
- [Release notes](https://github.com/elastic/elasticsearch-java/releases)
- [Changelog](https://github.com/elastic/elasticsearch-java/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch-java@v9.2.0...v9.4.2)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.0 to 9.4.2
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml)
- [Commits](elastic/elasticsearch@v9.2.0...v9.4.2)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.0 to 9.4.2
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/docs/changelog.yml)
- [Commits](elastic/elasticsearch@v9.2.0...v9.4.2)

Updates `org.mongodb:bson` from 5.6.1 to 5.8.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.8.0)

Updates `org.mongodb:mongodb-driver-core` from 5.6.1 to 5.8.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.8.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.6.1 to 5.8.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.8.0)

Updates `org.mongodb:mongodb-driver-core` from 5.6.1 to 5.8.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.8.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.6.1 to 5.8.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.1...r5.8.0)

Updates `org.slf4j:slf4j-nop` from 2.0.17 to 2.0.18

Updates `org.springframework.cloud:spring-cloud-context` from 4.3.0 to 5.0.2
- [Release notes](https://github.com/spring-cloud/spring-cloud-commons/releases)
- [Commits](spring-cloud/spring-cloud-commons@v4.3.0...v5.0.2)

---
updated-dependencies:
- dependency-name: biz.aQute.bnd:biz.aQute.bnd.annotation
  dependency-version: 7.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: co.elastic.clients:elasticsearch-java
  dependency-version: 9.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: co.elastic.logging:log4j2-ecs-layout
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.code-intelligence:jazzer
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.code-intelligence:jazzer-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.code-intelligence:jazzer-api
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.datastax.cassandra:cassandra-driver-core
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.jnr:jnr-ffi
  dependency-version: 2.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.tomakehurst:wiremock-jre8
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: com.google.code.java-allocation-instrumenter:java-allocation-instrumenter
  dependency-version: 3.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-logging:commons-logging
  dependency-version: 1.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.fabric8:docker-maven-plugin
  dependency-version: 0.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jakarta.activation:jakarta.activation-api
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jakarta.mail:jakarta.mail-api
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: net.java.dev.jna:jna
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.activemq:activemq-broker
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-csv
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-pool2
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.groovy:groovy-bom
  dependency-version: 5.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 3.9.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.woodstox:stax2-api
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.angus:angus-activation
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.angus:jakarta.mail
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.platform:org.eclipse.osgi
  dependency-version: 3.24.100
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.gradlex:gradle-module-metadata-maven-plugin
  dependency-version: '1.2'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jctools:jctools-core
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jmdns:jmdns
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.json:json
  dependency-version: '20251224'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 5.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 5.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 5.14.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:bson
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.openjdk.nashorn:nashorn-core
  dependency-version: '15.7'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-nop
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.springframework.cloud:spring-cloud-context
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.tukaani:xz
  dependency-version: '1.12'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/maven/2.x/dependencies-b4f24955e2 branch from c7a3216 to db18dd8 Compare June 18, 2026 08:31
@github-actions github-actions Bot marked this pull request as draft June 18, 2026 08:31
auto-merge was automatically disabled June 18, 2026 08:31

Pull request was converted to draft

@ppkarwasz ppkarwasz marked this pull request as ready for review June 18, 2026 11:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Related to third party dependency updates or migrations java Pull requests that update Java code

Projects

Log4j pull request tracker
Status: No status

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ppkarwasz