Skip to content

Bump the maven-dependencies group across 1 directory with 7 updates#141

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/maven/maven-dependencies-1923700b5a
Open

Bump the maven-dependencies group across 1 directory with 7 updates#141
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/maven/maven-dependencies-1923700b5a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the maven-dependencies group with 7 updates in the / directory:

Package From To
org.cryptomator:webdav-nio-adapter-servlet 1.2.11 1.2.12
org.cryptomator:integrations-api 1.7.0 1.8.0
org.jetbrains:annotations 26.0.2-1 26.1.0
org.junit.jupiter:junit-jupiter 6.0.2 6.0.3
org.cryptomator:cryptofs 2.9.0 2.10.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.5
org.owasp:dependency-check-maven 12.2.0 12.2.1

Updates org.cryptomator:webdav-nio-adapter-servlet from 1.2.11 to 1.2.12

Release notes

Sourced from org.cryptomator:webdav-nio-adapter-servlet's releases.

1.2.12

For a list of all notable changes, see the changelog.

What's Changed

Full Changelog: cryptomator/webdav-nio-adapter-servlet@1.2.11...1.2.12

Changelog

Sourced from org.cryptomator:webdav-nio-adapter-servlet's changelog.

[1.2.12] - 2026-03-03

Fixed

  • Fixed logging requests paths in non-debug mode (#101)
Commits
  • b168e91 Merge branch 'release/1.2.12'
  • 6d92845 prepare 1.2.12
  • be7e939 [skip ci] update changelog
  • d8cdbfe Bump actions/upload-artifact in the github-actions group (#100)
  • dd6849e Bump the java-test-dependencies group with 2 updates (#98)
  • f9f8785 Bump the maven-build-plugins group with 2 updates (#99)
  • dfe60e4 Controlled logging of IOExceptions (#101)
  • ddd8894 [skip ci] Merge branch 'main' into develop
  • See full diff in compare view

Updates org.cryptomator:integrations-api from 1.7.0 to 1.8.0

Release notes

Sourced from org.cryptomator:integrations-api's releases.

1.8.0

For a list of all notable changes, read the changelog.

What's Changed

New Contributors

Full Changelog: cryptomator/integrations-api@1.7.0...1.8.0

1.8.0-beta1

For a list of all notable changes, read the changelog.

What's Changed

Full Changelog: cryptomator/integrations-api@1.7.0...1.8.0-beta1

Changelog

Sourced from org.cryptomator:integrations-api's changelog.

1.8.0 - 2026-03-12

Added

Fixed

  • Fixed plugin loading/discovery active even if pluginDir property is not set (#86)

Changed

  • [BREAKING] Updated required build JDK to 25 (#73)
  • Pin version of GitHub actions in CI (#87)
Commits
  • 3cd78f1 Merge branch 'release/1.8.0'
  • a38dc82 finalize 1.18.0
  • 37169ea Merge branch 'develop' into release/1.8.0
  • 7708704 [skip ci] update changelog
  • 11b42a1 Merge pull request #87 from mindmonk/feature/pin-ci-actions
  • be707fd pin github action version with SHA checksum
  • a92cced pin github action version with SHA checksum
  • 5d8010b Merge pull request #86 from cryptomator/feature/no-plugin-loading-on-invalid-dir
  • 12fb0ef Bump the java-test-dependencies group across 1 directory with 2 updates (#80)
  • 1e568a0 Bump the maven-build-plugins group across 1 directory with 4 updates (#83)
  • Additional commits viewable in compare view

Updates org.jetbrains:annotations from 26.0.2-1 to 26.1.0

Release notes

Sourced from org.jetbrains:annotations's releases.

26.1.0

  • @NotNullByDefault is not experimental anymore.
Changelog

Sourced from org.jetbrains:annotations's changelog.

Version 26.1.0

  • @NotNullByDefault is not experimental anymore.
Commits

Updates org.junit.jupiter:junit-jupiter from 6.0.2 to 6.0.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.cryptomator:cryptofs from 2.9.0 to 2.10.0

Release notes

Sourced from org.cryptomator:cryptofs's releases.

2.10.0

Changelog

For a list of all notable changes, read the changelog.

Maven Coordinates

  <dependency>
    <groupId>org.cryptomator</groupId>
    <artifactId>cryptofs</artifactId>
    <version>2.10.0</version>
  </dependency>

Artifact Checksums

b6074fd71663fc56f6e7a26ff0c65715adef2be7c5837fd8630131ec095918ce  target/cryptofs-2.10.0-javadoc.jar
3a7bdc52fea90b62a8005024dc13b9fd2f96e3d639563ba804bc3a9e113bc4f1  target/cryptofs-2.10.0-sources.jar
79aec0a8d802d7ee88bf5f070be179bbd51486841e9935c1c1298f9014ec6bbd  target/cryptofs-2.10.0.jar

What's Changed

Full Changelog: cryptomator/cryptofs@2.9.0...2.10.0

2.10.0-beta3

... (truncated)

Changelog

Sourced from org.cryptomator:cryptofs's changelog.

2.10.0 - 2026-03-05

Added

  • Files-in-Use: Optional feature to indicate for external parties if an encrypted file is currently opened by this filesystem (#312, #338)
  • Changelog file

Changed

  • Use JDK 25 for build (bf26d6c9cd15a2489126ee0409a8ec9eca59da0c)
  • Pin external ci actions (#320)
  • Use Maven wrapper (#341)
  • Updated dependencies:
    • com.github.ben-manes.caffeine:caffeine from 3.2.0 to 3.2.3 (#323)
    • org.cryptomator:cryptolib from 2.2.1 to 2.2.2
    • com.auth0:java-jwt from 4.5.0 to 4.5.1
  • Removed dependencies:
    • com.google.guava:guava

Fixed

  • Replacing internal path class CryptoPath with strings in FilesystemEvents (#319)
  • Make DOS file attribute class immutable (#305)
Commits
  • 488b201 Merge branch 'release/2.10.0'
  • ad6ada5 finalize 2.10.0
  • a220315 Merge branch 'develop' into release/2.10.0
  • ee3011a [skip ci] update changelog
  • 89e1fb3 Bump github/codeql-action in the github-actions group (#343)
  • bb74d13 Merge pull request #342 from cryptomator/feature/refactor-ci
  • c0856f5 fix attestation
  • f77ccb7 Merge branch 'develop' into feature/refactor-ci
  • df84ca1 Merge pull request #344 from cryptomator/feature/fix-use-token-tests
  • 853445a improve move tests
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 968cb38 [maven-release-plugin] prepare release surefire-3.5.5
  • 8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
  • 4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
  • 8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
  • 68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
  • 0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
  • 688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
  • e5c01a6 Build only by the latest Maven on Jenkins (#3255)
  • 9c99e97 Fix Jenkin badges in README (#3254)
  • 20930ea Bump parent from 44 to 47 (#3253)
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 12.2.0 to 12.2.1

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.2.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.2.1 (2026-04-11)

  • build: improve GHA workflow experience for forks (#8285)
  • build: use maven jdk toolchains to build with Java 25; test against Java 11/17/21/25 (#8292)
  • chore: avoid use of parent pom and maven properties where unnecessary (#8322)
  • chore: bump java development to 25.0 (#8365)
  • chore: fix Charset warnings; preferring typed charsets (#8326)
  • chore: fix Maven scm tags after 12.2.1-SNAPSHOT bump (#8265)
  • chore: pin GitHub actions to specific SHAs rather than mutable tags (#8381)
  • chore: remove unused properties and schemas (#8378)
  • docs: define schema locations in XML examples (#8254)
  • docs: document external data sources and hostnames (#8219)
  • docs: ensure OSS Index URL override is consistently documented (#8338)
  • docs: fix minor typo in README (#8246)
  • fix(core): correct xml schema validation handling without needing external access (#8272)
  • fix(deps): upgrade slf4j and logback (#8306)
  • fix(test): disable pnpm analyzer during test (#8305)
  • fix: Correct published/hosted suppressions namespace header and indent (#8258)
  • fix: Suppress noisy WARN logging from Apache Lucene within Maven and Ant plugins (#8248)
  • fix: #8140 AssemblyAnalyzer version resolution issue (#8352)
  • fix: #8140 fix version resolution
  • fix: #8140 hint azure_identity_library_for_.net
  • fix: #8356 narrow down VersionFilterAnalyzer scope to JAR files (#8358)
  • fix: correct parsing for CVSSv4 strings with Provider Urgency (#8377)
  • fix: evidence source in Retire JS analyzer (#8303)
  • fix: exclude deprecations from Yarn Berry audit results (#8380)
  • fix: improve PEAnalyzer reliability by migrating to maintained PE/COFF 4J library fork (#8245)
  • fix: improve configuration consistency (casing) (#8355)
  • fix: improve logging of unexpected Java Errors during processing of NVD (#8250)
  • fix: raw type warning in ProcessReader (#8324)
  • fix: suppress false positives for zabbix-utils #8087 (#8218)
  • fix: update docs (#8405)
  • fix: warn if deprecated configs are used (#8366)
  • test: Make tests locale independent (#8328)
  • test: #8140 reproduce current behavior
  • test: avoid polluting test classpaths with sample dependencies to be scanned (#8267)

See the full listing of changes

Commits
  • bda36b8 build: prepare release v12.2.1
  • ef83e7b docs: prepare release 12.2.1
  • 09af10d fix: update docs (#8405)
  • 3562775 build(deps): bump golang from 1.26.1-alpine to 1.26.2-alpine (#8403)
  • 9ef93be build(deps): bump golang from 1.26.1-alpine to 1.26.2-alpine
  • ca79bd5 build(deps-dev): bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.2 ...
  • 6b58069 build(deps): bump apache.ant.version from 1.10.15 to 1.10.16 (#8401)
  • 91c6972 fix: correct parsing for CVSSv4 strings with Provider Urgency (#8377)
  • 267e7eb build(deps): bump the actions-deps group with 2 updates (#8394)
  • 53f58ab build(deps): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 (#8389)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the maven-dependencies group across 1 directory with 7 updates
29ceff3 
Bumps the maven-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.cryptomator:webdav-nio-adapter-servlet](https://github.com/cryptomator/webdav-nio-adapter-servlet) | `1.2.11` | `1.2.12` |
| [org.cryptomator:integrations-api](https://github.com/cryptomator/integrations-api) | `1.7.0` | `1.8.0` |
| [org.jetbrains:annotations](https://github.com/JetBrains/java-annotations) | `26.0.2-1` | `26.1.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.2` | `6.0.3` |
| [org.cryptomator:cryptofs](https://github.com/cryptomator/cryptofs) | `2.9.0` | `2.10.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.5` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.2.0` | `12.2.1` |



Updates `org.cryptomator:webdav-nio-adapter-servlet` from 1.2.11 to 1.2.12
- [Release notes](https://github.com/cryptomator/webdav-nio-adapter-servlet/releases)
- [Changelog](https://github.com/cryptomator/webdav-nio-adapter-servlet/blob/develop/CHANGELOG.md)
- [Commits](cryptomator/webdav-nio-adapter-servlet@1.2.11...1.2.12)

Updates `org.cryptomator:integrations-api` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/cryptomator/integrations-api/releases)
- [Changelog](https://github.com/cryptomator/integrations-api/blob/develop/CHANGELOG.md)
- [Commits](cryptomator/integrations-api@1.7.0...1.8.0)

Updates `org.jetbrains:annotations` from 26.0.2-1 to 26.1.0
- [Release notes](https://github.com/JetBrains/java-annotations/releases)
- [Changelog](https://github.com/JetBrains/java-annotations/blob/master/CHANGELOG.md)
- [Commits](JetBrains/java-annotations@26.0.2-1...26.1.0)

Updates `org.junit.jupiter:junit-jupiter` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.2...r6.0.3)

Updates `org.cryptomator:cryptofs` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/cryptomator/cryptofs/releases)
- [Changelog](https://github.com/cryptomator/cryptofs/blob/develop/CHANGELOG.md)
- [Commits](cryptomator/cryptofs@2.9.0...2.10.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.owasp:dependency-check-maven` from 12.2.0 to 12.2.1
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.0...v12.2.1)

---
updated-dependencies:
- dependency-name: org.cryptomator:webdav-nio-adapter-servlet
  dependency-version: 1.2.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.cryptomator:integrations-api
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains:annotations
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.cryptomator:cryptofs
  dependency-version: 2.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels May 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants