Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 19, 2025

Bumps the non-breaking group with 30 updates in the /log4j-parent directory:

Package From To
com.fasterxml.jackson:jackson-bom 2.19.2 2.20.1
org.apache.activemq:activemq-broker 6.1.7 6.2.0
org.eclipse.angus:angus-activation 2.0.2 2.0.3
org.assertj:assertj-core 3.27.3 3.27.6
com.code-intelligence:jazzer 0.24.0 0.27.0
com.code-intelligence:jazzer-api 0.24.0 0.27.0
commons-codec:commons-codec 1.18.0 1.20.0
org.apache.commons:commons-compress 1.27.1 1.28.0
org.apache.commons:commons-csv 1.14.0 1.14.1
commons-io:commons-io 2.19.0 2.21.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
com.google.guava:guava 33.4.8-jre 33.5.0-jre
com.google.guava:guava-testlib 33.4.8-jre 33.5.0-jre
jakarta.activation:jakarta.activation-api 2.1.3 2.1.4
org.eclipse.angus:jakarta.mail 2.0.3 2.0.5
jakarta.mail:jakarta.mail-api 2.1.3 2.1.5
org.jmdns:jmdns 3.6.1 3.6.2
net.java.dev.jna:jna 5.17.0 5.18.1
org.apache.maven:maven-core 3.9.10 3.9.11
org.apache.maven:maven-model 3.9.10 3.9.11
org.openjdk.nashorn:nashorn-core 15.6 15.7
org.eclipse.platform:org.eclipse.osgi 3.23.100 3.23.200
org.xmlunit:xmlunit-core 2.10.3 2.11.0
org.xmlunit:xmlunit-matchers 2.10.3 2.11.0
org.tukaani:xz 1.10 1.11
com.google.errorprone:error_prone_annotations 2.38.0 2.44.0
com.github.spotbugs:spotbugs-annotations 4.8.6 4.9.8
io.fabric8:docker-maven-plugin 0.46.0 0.48.0
org.gradlex:gradle-module-metadata-maven-plugin 1.1 1.2
org.apache.rat:apache-rat-plugin 0.16.1 0.17

Updates com.fasterxml.jackson:jackson-bom from 2.19.2 to 2.20.1

Commits
  • 5e24010 [maven-release-plugin] prepare release jackson-bom-2.20.1
  • 59a2e4a Prep for 2.20.1 release
  • 3fc3645 Merge branch '2.19' into 2.20
  • 7539ecc Post-release dep version bump
  • 21f04ba [maven-release-plugin] prepare for next development iteration
  • 085b32f [maven-release-plugin] prepare release jackson-bom-2.19.4
  • f2a1f50 Prep for 2.19.4 release
  • ee69fcf ...
  • 3735e1e ...
  • d405492 Add helper script for safekeeping
  • Additional commits viewable in compare view

Updates org.apache.activemq:activemq-broker from 6.1.7 to 6.2.0

Commits
  • 6d5b6bf [maven-release-plugin] prepare release activemq-6.2.0
  • 1323c54 Some tests are not cleanly using the target folder (creating targetfoo instea...
  • 730e94e Update md files in preparation of the 6.2.0 release
  • d3de142 Change file mode
  • 248f58c AMQ-9805: Upgrade to Shiro 2.0.6 (#1530)
  • 9dbdf61 Merge pull request #1529 from cshannon/AMQ-9392
  • 5861ed4 AMQ-9392 - Add extra inactivty monitor test case
  • aed472d AMQ-9392 - Rework fix for read check Timer leak
  • 2cafa43 [AMQ-9392] Prevent InactivityMonitor read check Timer leak when TCP connectio...
  • 53cff64 Revert "[AMQ-9392] Prevent InactivityMonitor read check Timer leak when TCP c...
  • Additional commits viewable in compare view

Updates org.eclipse.angus:angus-activation from 2.0.2 to 2.0.3

Commits
  • 6eff4c5 Prepare release org.eclipse.angus:angus-activation-project:2.0.3
  • bcb3375 jaf api 2.1.4 (#55)
  • 84e5a0d Rename resources so javax and jakarta can live in same classpath #174
  • c3c4d67 Merge pull request #46 from eclipse-ee4j/2.0.2-RELEASE
  • 354de40 Update README.md
  • c62baf3 Update TCK-Results.md
  • 6cda1e7 Prepare next development cycle for 2.1.0-SNAPSHOT
  • See full diff in compare view

Updates org.assertj:assertj-core from 3.27.3 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.17.7 #3947
  • Upgrade to JUnit BOM 5.13.4 #3947

Guava

  • Upgrade to Guava 33.4.8-jre #3947

v3.27.4

🚫 Deprecated

Core

  • Deprecate org.assertj.core.annotations.Beta in favor of org.assertj.core.annotation.Beta
  • Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of org.assertj.core.annotation.CanIgnoreReturnValue
  • Deprecate org.assertj.core.util.CheckReturnValue in favor of org.assertj.core.annotation.CheckReturnValue

🐛 Bug Fixes

Core

  • Fix thread-safety in AbstractDateAssert #3874

⚡ Improvements

  • Migrate to the Central Publisher Portal, enable snapshot publishing #3881

... (truncated)

Commits
  • 716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
  • e189652 Add missing export for org.assertj.core.annotation (#3951)
  • 0cb489e Update Maven Central URL
  • 7286309 [maven-release-plugin] prepare for next development iteration
  • dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
  • 1d0defc Add missing permission to release workflow
  • 844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
  • bdd7106 Add CodeQL custom workflow
  • a93d7e6 Remove EOL Java 24
  • 26ea866 Update production dependencies (#3947)
  • Additional commits viewable in compare view

Updates com.code-intelligence:jazzer from 0.24.0 to 0.27.0

Release notes

Sourced from com.code-intelligence:jazzer's releases.

v0.27.0

What's Changed

Full Changelog: CodeIntelligenceTesting/jazzer@v0.26.0...v0.27.0

v0.26.0

What's Changed

... (truncated)

Commits
  • 2d78a82 chore: update the release instructions
  • 118fbef chore: automatically deploy to Maven Central and create a GH release
  • 8ad3c12 chore: making local bundle doesn't need Sonatype usename or password
  • 068587e chore(deps): update maven deps
  • 85ae9d1 docs: document seed input sources for @​FuzzTest
  • 94ea994 fix: instrumention of nested records, and records with annotated fields
  • 761cc11 feat: add freemarker template injection guidance hook
  • 196391d chore: suppress unused params in XmlParserSsrfGuidance
  • 57628a7 refactor: improve readability of util function
  • 65f0722 chore: improve ArgumentsMutatorFuzzTest
  • Additional commits viewable in compare view

Updates com.code-intelligence:jazzer-api from 0.24.0 to 0.27.0

Release notes

Sourced from com.code-intelligence:jazzer-api's releases.

v0.27.0

What's Changed

Full Changelog: CodeIntelligenceTesting/jazzer@v0.26.0...v0.27.0

v0.26.0

What's Changed

... (truncated)

Commits
  • 2d78a82 chore: update the release instructions
  • 118fbef chore: automatically deploy to Maven Central and create a GH release
  • 8ad3c12 chore: making local bundle doesn't need Sonatype usename or password
  • 068587e chore(deps): update maven deps
  • 85ae9d1 docs: document seed input sources for @​FuzzTest
  • 94ea994 fix: instrumention of nested records, and records with annotated fields
  • 761cc11 feat: add freemarker template injection guidance hook
  • 196391d chore: suppress unused params in XmlParserSsrfGuidance
  • 57628a7 refactor: improve readability of util function
  • 65f0722 chore: improve ArgumentsMutatorFuzzTest
  • Additional commits viewable in compare view

Updates com.code-intelligence:jazzer-api from 0.24.0 to 0.27.0

Release notes

Sourced from com.code-intelligence:jazzer-api's releases.

v0.27.0

What's Changed

Full Changelog: CodeIntelligenceTesting/jazzer@v0.26.0...v0.27.0

v0.26.0

What's Changed

... (truncated)

Commits
  • 2d78a82 chore: update the release instructions
  • 118fbef chore: automatically deploy to Maven Central and create a GH release
  • 8ad3c12 chore: making local bundle doesn't need Sonatype usename or password
  • 068587e chore(deps): update maven deps
  • 85ae9d1 docs: document seed input sources for @​FuzzTest
  • 94ea994 fix: instrumention of nested records, and records with annotated fields
  • 761cc11 feat: add freemarker template injection guidance hook
  • 196391d chore: suppress unused params in XmlParserSsrfGuidance
  • 57628a7 refactor: improve readability of util function
  • 65f0722 chore: improve ArgumentsMutatorFuzzTest
  • Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.18.0 to 1.20.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.20.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.20.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  •         Add org.apache.commons.codec.digest.Crc16. Thanks to Fredrik Kjellberg, Gary Gregory.
    
  •         Add builders to org.apache.commons.codec.digest streams and deprecate some old constructors. Thanks to Gary Gregory.
    
  •         Add builder to Base16 streams and deprecate some old constructors. Thanks to Gary Gregory.
    
  •         Add support for SHAKE128-256 and SHAKE256-512 to `DigestUtils` and `MessageDigestAlgorithms` on Java 25 and up. Thanks to Gary Gregory.
    
  •         Add BaseNCodec.AbstractBuilder.setDecodeTable(byte[]) and refactor subclasses. Thanks to Gary Gregory.
    

Changes

  •         Deprecate all but one Base32 constructor in favor of the builder added in version 1.17.0. Thanks to Gary Gregory.
    
  •         Deprecate all but one Base64 constructor in favor of the builder added in version 1.17.0. Thanks to Gary Gregory.
    
  •         BaseNCodecInputStream subclasses are now type-safe to match its matching BaseNCodec. Thanks to Gary Gregory.
    
  •         BaseNCodecOutputStream subclasses are now type-safe to match its matching BaseNCodec. Thanks to Gary Gregory.
    
  •         Bump org.apache.commons:commons-parent from 85 to 91. Thanks to Gary Gregory, Dependabot.
    
  •         [test] Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0. Thanks to Gary Gregory.
    

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi


Apache Commons Codec 1.19.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.19.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a

... (truncated)

Commits

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 
    
  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 
    
  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 
    
  •        Add GzipParameters.toString(). Thanks to Gary Gregory. 
    
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 
    
  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 
    
  •        Add ZipFile.stream(). Thanks to Gary Gregory. 
    
  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
    
  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
    
  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 
    
  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 
    
  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
    
  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
    
  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 
    
  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 
    
  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. 
    
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. 
    
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. 
    
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
    
  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
    
  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
    

... (truncated)

Commits

Updates org.apache.commons:commons-csv from 1.14.0 ...

Description has been truncated

Bumps the non-breaking group with 30 updates in the /log4j-parent directory:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.19.2` | `2.20.1` |
| [org.apache.activemq:activemq-broker](https://github.com/apache/activemq) | `6.1.7` | `6.2.0` |
| [org.eclipse.angus:angus-activation](https://github.com/eclipse-ee4j/angus-activation) | `2.0.2` | `2.0.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.3` | `3.27.6` |
| [com.code-intelligence:jazzer](https://github.com/CodeIntelligenceTesting/jazzer) | `0.24.0` | `0.27.0` |
| [com.code-intelligence:jazzer-api](https://github.com/CodeIntelligenceTesting/jazzer) | `0.24.0` | `0.27.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.18.0` | `1.20.0` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.27.1` | `1.28.0` |
| [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.14.0` | `1.14.1` |
| [commons-io:commons-io](https://github.com/apache/commons-io) | `2.19.0` | `2.21.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` |
| [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` |
| [jakarta.activation:jakarta.activation-api](https://github.com/jakartaee/jaf-api) | `2.1.3` | `2.1.4` |
| org.eclipse.angus:jakarta.mail | `2.0.3` | `2.0.5` |
| [jakarta.mail:jakarta.mail-api](https://github.com/jakartaee/mail-api) | `2.1.3` | `2.1.5` |
| [org.jmdns:jmdns](https://github.com/jmdns/jmdns) | `3.6.1` | `3.6.2` |
| [net.java.dev.jna:jna](https://github.com/java-native-access/jna) | `5.17.0` | `5.18.1` |
| org.apache.maven:maven-core | `3.9.10` | `3.9.11` |
| org.apache.maven:maven-model | `3.9.10` | `3.9.11` |
| [org.openjdk.nashorn:nashorn-core](https://github.com/openjdk/nashorn) | `15.6` | `15.7` |
| [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) | `3.23.100` | `3.23.200` |
| [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.11.0` |
| [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit) | `2.10.3` | `2.11.0` |
| [org.tukaani:xz](https://github.com/tukaani-project/xz-java) | `1.10` | `1.11` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.38.0` | `2.44.0` |
| [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.8.6` | `4.9.8` |
| [io.fabric8:docker-maven-plugin](https://github.com/fabric8io/docker-maven-plugin) | `0.46.0` | `0.48.0` |
| [org.gradlex:gradle-module-metadata-maven-plugin](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin) | `1.1` | `1.2` |
| org.apache.rat:apache-rat-plugin | `0.16.1` | `0.17` |



Updates `com.fasterxml.jackson:jackson-bom` from 2.19.2 to 2.20.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.19.2...jackson-bom-2.20.1)

Updates `org.apache.activemq:activemq-broker` from 6.1.7 to 6.2.0
- [Commits](apache/activemq@activemq-6.1.7...activemq-6.2.0)

Updates `org.eclipse.angus:angus-activation` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/eclipse-ee4j/angus-activation/releases)
- [Commits](eclipse-ee4j/angus-activation@2.0.2...2.0.3)

Updates `org.assertj:assertj-core` from 3.27.3 to 3.27.6
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.3...assertj-build-3.27.6)

Updates `com.code-intelligence:jazzer` from 0.24.0 to 0.27.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.27.0)

Updates `com.code-intelligence:jazzer-api` from 0.24.0 to 0.27.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.27.0)

Updates `com.code-intelligence:jazzer-api` from 0.24.0 to 0.27.0
- [Release notes](https://github.com/CodeIntelligenceTesting/jazzer/releases)
- [Commits](CodeIntelligenceTesting/jazzer@v0.24.0...v0.27.0)

Updates `commons-codec:commons-codec` from 1.18.0 to 1.20.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.18.0...rel/commons-codec-1.20.0)

Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.27.1...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-csv` from 1.14.0 to 1.14.1
- [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-csv@rel/commons-csv-1.14.0...rel/commons-csv-1.14.1)

Updates `commons-io:commons-io` from 2.19.0 to 2.21.0
- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-io@rel/commons-io-2.19.0...rel/commons-io-2.21.0)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `com.google.guava:guava` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `jakarta.activation:jakarta.activation-api` from 2.1.3 to 2.1.4
- [Release notes](https://github.com/jakartaee/jaf-api/releases)
- [Commits](jakartaee/jaf-api@2.1.3...2.1.4)

Updates `org.eclipse.angus:jakarta.mail` from 2.0.3 to 2.0.5

Updates `jakarta.mail:jakarta.mail-api` from 2.1.3 to 2.1.5
- [Release notes](https://github.com/jakartaee/mail-api/releases)
- [Commits](jakartaee/mail-api@2.1.3...2.1.5)

Updates `org.jmdns:jmdns` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/jmdns/jmdns/releases)
- [Changelog](https://github.com/jmdns/jmdns/blob/main/CHANGELOG.txt)
- [Commits](jmdns/jmdns@3.6.1...3.6.2)

Updates `net.java.dev.jna:jna` from 5.17.0 to 5.18.1
- [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md)
- [Commits](java-native-access/jna@5.17.0...5.18.1)

Updates `org.apache.maven:maven-core` from 3.9.10 to 3.9.11

Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.11

Updates `org.apache.maven:maven-model` from 3.9.10 to 3.9.11

Updates `org.openjdk.nashorn:nashorn-core` from 15.6 to 15.7
- [Changelog](https://github.com/openjdk/nashorn/blob/main/CHANGELOG.md)
- [Commits](openjdk/nashorn@release-15.6...release-15.7)

Updates `org.eclipse.platform:org.eclipse.osgi` from 3.23.100 to 3.23.200
- [Commits](https://github.com/eclipse-equinox/equinox/commits)

Updates `org.xmlunit:xmlunit-core` from 2.10.3 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.3 to 2.11.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.3...v2.11.0)

Updates `org.tukaani:xz` from 1.10 to 1.11
- [Release notes](https://github.com/tukaani-project/xz-java/releases)
- [Changelog](https://github.com/tukaani-project/xz-java/blob/master/NEWS.md)
- [Commits](tukaani-project/xz-java@v1.10...v1.11)

Updates `com.google.errorprone:error_prone_annotations` from 2.38.0 to 2.44.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.38.0...v2.44.0)

Updates `com.github.spotbugs:spotbugs-annotations` from 4.8.6 to 4.9.8
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.8.6...4.9.8)

Updates `io.fabric8:docker-maven-plugin` from 0.46.0 to 0.48.0
- [Release notes](https://github.com/fabric8io/docker-maven-plugin/releases)
- [Changelog](https://github.com/fabric8io/docker-maven-plugin/blob/master/doc/changelog.md)
- [Commits](fabric8io/docker-maven-plugin@v0.46.0...v0.48.0)

Updates `org.gradlex:gradle-module-metadata-maven-plugin` from 1.1 to 1.2
- [Release notes](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin/releases)
- [Changelog](https://github.com/gradlex-org/gradle-module-metadata-maven-plugin/blob/main/CHANGELOG.md)
- [Commits](gradlex-org/gradle-module-metadata-maven-plugin@v1.1...v1.2)

Updates `org.apache.rat:apache-rat-plugin` from 0.16.1 to 0.17

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.activemq:activemq-broker
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.eclipse.angus:angus-activation
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: com.code-intelligence:jazzer
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.code-intelligence:jazzer-api
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.code-intelligence:jazzer-api
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-csv
  dependency-version: 1.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: commons-io:commons-io
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: jakarta.activation:jakarta.activation-api
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.eclipse.angus:jakarta.mail
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: jakarta.mail:jakarta.mail-api
  dependency-version: 2.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.jmdns:jmdns
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: net.java.dev.jna:jna
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.openjdk.nashorn:nashorn-core
  dependency-version: '15.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.eclipse.platform:org.eclipse.osgi
  dependency-version: 3.23.200
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.tukaani:xz
  dependency-version: '1.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.github.spotbugs:spotbugs-annotations
  dependency-version: 4.9.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: io.fabric8:docker-maven-plugin
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.gradlex:gradle-module-metadata-maven-plugin
  dependency-version: '1.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.rat:apache-rat-plugin
  dependency-version: '0.17'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 19, 2025
@github-actions github-actions bot enabled auto-merge (squash) November 19, 2025 22:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants