dependabot[bot] opened a new pull request, #2848: URL: https://github.com/apache/shiro/pull/2848
Bumps the maven-dependencies group with 30 updates: | Package | From | To | | --- | --- | --- | | [org.apache.groovy:groovy-all](https://github.com/apache/groovy) | `4.0.32` | `4.0.33` | | [org.apache.groovy:groovy](https://github.com/apache/groovy) | `4.0.32` | `4.0.33` | | [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.10` | `1.18.11` | | [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.18.10` | `1.18.11` | | org.apache.logging.log4j:log4j-slf4j2-impl | `2.26.0` | `2.26.1` | | org.apache.logging.log4j:log4j-core-test | `2.26.0` | `2.26.1` | | org.apache.logging.log4j:log4j-api | `2.26.0` | `2.26.1` | | org.apache.logging.log4j:log4j-core | `2.26.0` | `2.26.1` | | org.apache.logging.log4j:log4j-jul | `2.26.0` | `2.26.1` | | org.apache.logging.log4j:log4j-to-slf4j | `2.26.0` | `2.26.1` | | [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.37` | `1.6.1` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.37` | `1.6.1` | | [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` | | [org.apache.maven.plugins:maven-help-plugin](https://github.com/apache/maven-help-plugin) | `3.5.1` | `3.5.2` | | [org.codehaus.gmavenplus:gmavenplus-plugin](https://github.com/groovy/GMavenPlus) | `5.0.0` | `5.1.0` | | [com.mycila:license-maven-plugin](https://github.com/mathieucarbou/license-maven-plugin) | `5.0.0` | `5.1.1` | | org.apache.tomcat.embed:tomcat-embed-core | `9.0.119` | `9.0.120` | | org.apache.tomcat.embed:tomcat-embed-el | `9.0.119` | `9.0.120` | | org.apache.tomcat.embed:tomcat-embed-websocket | `9.0.119` | `9.0.120` | | org.apache.tomcat:tomcat-jaspic-api | `9.0.119` | `9.0.120` | | org.apache.tomcat:tomcat-catalina | `9.0.119` | `9.0.120` | | [org.omnifaces:omnifaces](https://github.com/omnifaces/omnifaces) | `3.14.21` | `3.14.23` | | [io.openliberty.tools:liberty-maven-plugin](https://github.com/OpenLiberty/ci.maven) | `3.12.0` | `3.12.1` | | org.apache.tomcat.embed:tomcat-embed-core | `10.1.56` | `10.1.57` | | org.apache.tomcat.embed:tomcat-embed-el | `10.1.56` | `10.1.57` | | org.apache.tomcat.embed:tomcat-embed-websocket | `10.1.56` | `10.1.57` | | org.apache.tomcat:tomcat-jaspic-api | `10.1.56` | `10.1.57` | | org.apache.tomcat:tomcat-catalina | `10.1.56` | `10.1.57` | | org.apache.tomcat:tomcat-jasper | `10.1.56` | `10.1.57` | | org.apache.tomcat:tomcat-jasper-el | `10.1.56` | `10.1.57` | Updates `org.apache.groovy:groovy-all` from 4.0.32 to 4.0.33 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/apache/groovy/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.groovy:groovy` from 4.0.32 to 4.0.33 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/apache/groovy/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.groovy:groovy` from 4.0.32 to 4.0.33 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/apache/groovy/commits";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy` from 1.18.10 to 1.18.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.11</h2> <ul> <li>Add SBOM to published artifacts.</li> <li>Check for traversable paths injected into class files as a rather hypothetical attack vector.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy's changelog</a>.</em></p> <blockquote> <h3>2. July 2026: version 1.18.11</h3> <ul> <li>Add SBOM to published artifacts.</li> <li>Check for traversable paths injected into class files as a rather hypothetical attack vector.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/88dd0a324b9479b39a50344865005ffb95b59f93";><code>88dd0a3</code></a> [publish] Releasing Byte Buddy 1.18.11</li> <li><a href="https://github.com/raphw/byte-buddy/commit/46fcadee820662ab1849777386a23ee82bc23b57";><code>46fcade</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/6a68de698f33468bc74cd7371b86232fee2ef5b8";><code>6a68de6</code></a> Prevent path traversal from crafted type names when writing class files to fo...</li> <li><a href="https://github.com/raphw/byte-buddy/commit/9ba4ab61e3c3bda09c399dff1646e2a1c7f9e064";><code>9ba4ab6</code></a> Pin ClusterFuzzLite base image and actions by hash.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/dd4f81e5e2be3d2741af2f404f12928502d8eb85";><code>dd4f81e</code></a> Add SBOM to build.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7dd9a0dd50045140f7e8245ae117f3f9ff9b1ae3";><code>7dd9a0d</code></a> Update internal Byte Buddy and release notes</li> <li><a href="https://github.com/raphw/byte-buddy/commit/d6b3e1512e164719a89d579582031ea84d2e86a9";><code>d6b3e15</code></a> [publish] Start next development iteration 1.18.11-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.10...byte-buddy-1.18.11";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy-agent` from 1.18.10 to 1.18.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy-agent's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.11</h2> <ul> <li>Add SBOM to published artifacts.</li> <li>Check for traversable paths injected into class files as a rather hypothetical attack vector.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy-agent's changelog</a>.</em></p> <blockquote> <h3>2. July 2026: version 1.18.11</h3> <ul> <li>Add SBOM to published artifacts.</li> <li>Check for traversable paths injected into class files as a rather hypothetical attack vector.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/88dd0a324b9479b39a50344865005ffb95b59f93";><code>88dd0a3</code></a> [publish] Releasing Byte Buddy 1.18.11</li> <li><a href="https://github.com/raphw/byte-buddy/commit/46fcadee820662ab1849777386a23ee82bc23b57";><code>46fcade</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/6a68de698f33468bc74cd7371b86232fee2ef5b8";><code>6a68de6</code></a> Prevent path traversal from crafted type names when writing class files to fo...</li> <li><a href="https://github.com/raphw/byte-buddy/commit/9ba4ab61e3c3bda09c399dff1646e2a1c7f9e064";><code>9ba4ab6</code></a> Pin ClusterFuzzLite base image and actions by hash.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/dd4f81e5e2be3d2741af2f404f12928502d8eb85";><code>dd4f81e</code></a> Add SBOM to build.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7dd9a0dd50045140f7e8245ae117f3f9ff9b1ae3";><code>7dd9a0d</code></a> Update internal Byte Buddy and release notes</li> <li><a href="https://github.com/raphw/byte-buddy/commit/d6b3e1512e164719a89d579582031ea84d2e86a9";><code>d6b3e15</code></a> [publish] Start next development iteration 1.18.11-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.10...byte-buddy-1.18.11";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy-agent` from 1.18.10 to 1.18.11 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/releases";>net.bytebuddy:byte-buddy-agent's releases</a>.</em></p> <blockquote> <h2>Byte Buddy 1.18.11</h2> <ul> <li>Add SBOM to published artifacts.</li> <li>Check for traversable paths injected into class files as a rather hypothetical attack vector.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy-agent's changelog</a>.</em></p> <blockquote> <h3>2. July 2026: version 1.18.11</h3> <ul> <li>Add SBOM to published artifacts.</li> <li>Check for traversable paths injected into class files as a rather hypothetical attack vector.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/88dd0a324b9479b39a50344865005ffb95b59f93";><code>88dd0a3</code></a> [publish] Releasing Byte Buddy 1.18.11</li> <li><a href="https://github.com/raphw/byte-buddy/commit/46fcadee820662ab1849777386a23ee82bc23b57";><code>46fcade</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/6a68de698f33468bc74cd7371b86232fee2ef5b8";><code>6a68de6</code></a> Prevent path traversal from crafted type names when writing class files to fo...</li> <li><a href="https://github.com/raphw/byte-buddy/commit/9ba4ab61e3c3bda09c399dff1646e2a1c7f9e064";><code>9ba4ab6</code></a> Pin ClusterFuzzLite base image and actions by hash.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/dd4f81e5e2be3d2741af2f404f12928502d8eb85";><code>dd4f81e</code></a> Add SBOM to build.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7dd9a0dd50045140f7e8245ae117f3f9ff9b1ae3";><code>7dd9a0d</code></a> Update internal Byte Buddy and release notes</li> <li><a href="https://github.com/raphw/byte-buddy/commit/d6b3e1512e164719a89d579582031ea84d2e86a9";><code>d6b3e15</code></a> [publish] Start next development iteration 1.18.11-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.10...byte-buddy-1.18.11";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core-test` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-jul` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core-test` from 2.26.0 to 2.26.1 Updates `ch.qos.logback:logback-core` from 1.5.37 to 1.6.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/qos-ch/logback/releases";>ch.qos.logback:logback-core's releases</a>.</em></p> <blockquote> <h2>Logback 1.6.1</h2> <p><strong>2026-07-28 Release of logback version 1.6.1</strong></p> <p>• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. <code>.gz</code>, <code>.zip</code>, <code>.xz</code>). Previously it used a nanotime-based <code>.tmp</code> suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)</p> <p>• On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact.</p> <p>• ConsoleAppender with <!-- raw HTML omitted --> now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. This issue was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1043";>issues/1043</a> by <a href="https://github.com/seonwooj0810";>seonwoo_jung</a> who also provided the relevant PR.</p> <p>• LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored <!-- raw HTML omitted -->/<!-- raw HTML omitted -->/<!-- raw HTML omitted --> branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. This issue was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1046";>issues/1046</a> by <a href="https://github.com/seonwooj0810";>seonwoo_jung</a> who also provided the relevant PR.</p> <p>• FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. This enhancement was contributed in [PR <a href="https://redirect.github.com/qos-ch/logback/issues/1041";>#1041</a>](<a href="https://redirect.github.com/qos-ch/logback/issues/1041";>qos-ch/logback#1041</a>) by <a href="https://github.com/seonwooj0810";>seonwoo_jung</a>.</p> <p>• More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise.</p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit 57759f433000a133088ef0441038963134437fbd associated with the tag v_1.6.1. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <p>• See <a href="https://logback.qos.ch/news.html#1.6.1";>https://logback.qos.ch/news.html#1.6.1</a> for the original text.</p> <h2>Logback 1.6.0</h2> <p><strong>2026-07-23 Release of logback version 1.6.0</strong></p> <p>• Removed certain deprecated variables, methods, and classes. For the list of removed members see <a href="https://logback.qos.ch/notes/release_1.6.0.txt";>release_1.6.0.txt.</a></p> <p>• In <code>AsyncAppenderBase</code>, the <code>put(ILoggingEvent)</code> method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in <a href="https://redirect.github.com/qos-ch/logback/pull/1053";>pr#1053</a>.</p> <p>• Bump SLF4J dependency to version 2.0.18.</p> <p>• <strong>See also the overview of the <a href="https://logback.qos.ch/news.html#latest_stable";>1.6.x series</a>.</strong></p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <h2>Logback 1.5.38</h2> <p><strong>2026-07-09 Release of logback version 1.5.38</strong></p> <p>• In <code>HardenedObjectInputStream</code>, fixed a typo preventing <code>Throwable</code> objects from being white-filtered. This issue was reported in [PR <a href="https://redirect.github.com/qos-ch/logback/issues/1045";>#1045</a>](<a href="https://redirect.github.com/qos-ch/logback/pull/1045";>qos-ch/logback#1045</a>) by <a href="https://github.com/t0rchwo0d";>t0rchwo0d</a>.</p> <p>• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/qos-ch/logback/commit/57759f433000a133088ef0441038963134437fbd";><code>57759f4</code></a> prepare release 1.6.1</li> <li><a href="https://github.com/qos-ch/logback/commit/175f99f2093ae07f4c8d44f93b800f65b03a6e19";><code>175f99f</code></a> fix imports</li> <li><a href="https://github.com/qos-ch/logback/commit/4b8773ed127fdc62b85a7c7ddaef10f25830788c";><code>4b8773e</code></a> add compressionFailureLeavesOriginalFileIntact test for XZ compression</li> <li><a href="https://github.com/qos-ch/logback/commit/cafaf1115fd20be19b2f7a4a09184446e8bbc04d";><code>cafaf11</code></a> do not delete original file if compression fails</li> <li><a href="https://github.com/qos-ch/logback/commit/ee50125b293f5a731543de9f9f5fb72756a43464";><code>ee50125</code></a> let the temporary file before compression be target file without the .gz or ....</li> <li><a href="https://github.com/qos-ch/logback/commit/5626acc301f4039537a6c668f0f2d51989472785";><code>5626acc</code></a> minor refactoring</li> <li><a href="https://github.com/qos-ch/logback/commit/d97da4fbc0de00ca901ef78d91b9fc1850ae803f";><code>d97da4f</code></a> minor refactoring</li> <li><a href="https://github.com/qos-ch/logback/commit/159c045d8f045ccf8b382775d81d83919c228cca";><code>159c045</code></a> more defensive coding in SyslogOutputStream and in SyslogAppenderBase</li> <li><a href="https://github.com/qos-ch/logback/commit/9427d6b23d5a692c8a76a994c076ef68ded7835c";><code>9427d6b</code></a> slight refactoring for clarity</li> <li><a href="https://github.com/qos-ch/logback/commit/79c4179c0b440a9dcf35bc9bda1ead2b2f90966c";><code>79c4179</code></a> slight refactoring</li> <li>Additional commits viewable in <a href="https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1";>compare view</a></li> </ul> </details> <br /> Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.6.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/qos-ch/logback/releases";>ch.qos.logback:logback-classic's releases</a>.</em></p> <blockquote> <h2>Logback 1.6.1</h2> <p><strong>2026-07-28 Release of logback version 1.6.1</strong></p> <p>• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. <code>.gz</code>, <code>.zip</code>, <code>.xz</code>). Previously it used a nanotime-based <code>.tmp</code> suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)</p> <p>• On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact.</p> <p>• ConsoleAppender with <!-- raw HTML omitted --> now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. This issue was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1043";>issues/1043</a> by <a href="https://github.com/seonwooj0810";>seonwoo_jung</a> who also provided the relevant PR.</p> <p>• LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored <!-- raw HTML omitted -->/<!-- raw HTML omitted -->/<!-- raw HTML omitted --> branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. This issue was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1046";>issues/1046</a> by <a href="https://github.com/seonwooj0810";>seonwoo_jung</a> who also provided the relevant PR.</p> <p>• FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. This enhancement was contributed in [PR <a href="https://redirect.github.com/qos-ch/logback/issues/1041";>#1041</a>](<a href="https://redirect.github.com/qos-ch/logback/issues/1041";>qos-ch/logback#1041</a>) by <a href="https://github.com/seonwooj0810";>seonwoo_jung</a>.</p> <p>• More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise.</p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit 57759f433000a133088ef0441038963134437fbd associated with the tag v_1.6.1. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <p>• See <a href="https://logback.qos.ch/news.html#1.6.1";>https://logback.qos.ch/news.html#1.6.1</a> for the original text.</p> <h2>Logback 1.6.0</h2> <p><strong>2026-07-23 Release of logback version 1.6.0</strong></p> <p>• Removed certain deprecated variables, methods, and classes. For the list of removed members see <a href="https://logback.qos.ch/notes/release_1.6.0.txt";>release_1.6.0.txt.</a></p> <p>• In <code>AsyncAppenderBase</code>, the <code>put(ILoggingEvent)</code> method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in <a href="https://redirect.github.com/qos-ch/logback/pull/1053";>pr#1053</a>.</p> <p>• Bump SLF4J dependency to version 2.0.18.</p> <p>• <strong>See also the overview of the <a href="https://logback.qos.ch/news.html#latest_stable";>1.6.x series</a>.</strong></p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <h2>Logback 1.5.38</h2> <p><strong>2026-07-09 Release of logback version 1.5.38</strong></p> <p>• In <code>HardenedObjectInputStream</code>, fixed a typo preventing <code>Throwable</code> objects from being white-filtered. This issue was reported in [PR <a href="https://redirect.github.com/qos-ch/logback/issues/1045";>#1045</a>](<a href="https://redirect.github.com/qos-ch/logback/pull/1045";>qos-ch/logback#1045</a>) by <a href="https://github.com/t0rchwo0d";>t0rchwo0d</a>.</p> <p>• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/qos-ch/logback/commit/57759f433000a133088ef0441038963134437fbd";><code>57759f4</code></a> prepare release 1.6.1</li> <li><a href="https://github.com/qos-ch/logback/commit/175f99f2093ae07f4c8d44f93b800f65b03a6e19";><code>175f99f</code></a> fix imports</li> <li><a href="https://github.com/qos-ch/logback/commit/4b8773ed127fdc62b85a7c7ddaef10f25830788c";><code>4b8773e</code></a> add compressionFailureLeavesOriginalFileIntact test for XZ compression</li> <li><a href="https://github.com/qos-ch/logback/commit/cafaf1115fd20be19b2f7a4a09184446e8bbc04d";><code>cafaf11</code></a> do not delete original file if compression fails</li> <li><a href="https://github.com/qos-ch/logback/commit/ee50125b293f5a731543de9f9f5fb72756a43464";><code>ee50125</code></a> let the temporary file before compression be target file without the .gz or ....</li> <li><a href="https://github.com/qos-ch/logback/commit/5626acc301f4039537a6c668f0f2d51989472785";><code>5626acc</code></a> minor refactoring</li> <li><a href="https://github.com/qos-ch/logback/commit/d97da4fbc0de00ca901ef78d91b9fc1850ae803f";><code>d97da4f</code></a> minor refactoring</li> <li><a href="https://github.com/qos-ch/logback/commit/159c045d8f045ccf8b382775d81d83919c228cca";><code>159c045</code></a> more defensive coding in SyslogOutputStream and in SyslogAppenderBase</li> <li><a href="https://github.com/qos-ch/logback/commit/9427d6b23d5a692c8a76a994c076ef68ded7835c";><code>9427d6b</code></a> slight refactoring for clarity</li> <li><a href="https://github.com/qos-ch/logback/commit/79c4179c0b440a9dcf35bc9bda1ead2b2f90966c";><code>79c4179</code></a> slight refactoring</li> <li>Additional commits viewable in <a href="https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-jul` from 2.26.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.26.0 to 2.26.1 Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html";>org.bouncycastle:bcprov-jdk18on's changelog</a>.</em></p> <blockquote> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/bcgit/bc-java/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven.plugins:maven-help-plugin` from 3.5.1 to 3.5.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/apache/maven-help-plugin/releases";>org.apache.maven.plugins:maven-help-plugin's releases</a>.</em></p> <blockquote> <h2>3.5.2</h2> <!-- raw HTML omitted --> <h2>🚀 New features and improvements</h2> <ul> <li>Add more goals to help plugin (self documenting any Maven version) (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/374";>#374</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Allow defining complex expression like in interactive mode (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/132";>#132</a>) <a href="https://github.com/ggkochanski";><code>@ggkochanski</code></a></li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li>Fix issue 367 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/372";>#372</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>MavenSession should be not changed (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/345";>#345</a>) <a href="https://github.com/slawekjaranowski";><code>@slawekjaranowski</code></a></li> </ul> <h2>📝 Documentation updates</h2> <ul> <li><a href="https://issues.apache.org/jira/browse/MNGSITE-529";>[MNGSITE-529]</a> - Rename "Goals" to "Plugin Documentation" (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/128";>#128</a>) <a href="https://github.com/Bukama";><code>@Bukama</code></a></li> <li><a href="https://issues.apache.org/jira/browse/MPH-177";>[MPH-177]</a> - Document help:help goal (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/124";>#124</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> </ul> <h2>👻 Maintenance</h2> <ul> <li>Update site descriptor to 2.0.0 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/377";>#377</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Configure project for ATR (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/376";>#376</a>) <a href="https://github.com/cstamas";><code>@cstamas</code></a></li> <li>Use version properties in IT (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/368";>#368</a>) <a href="https://github.com/Bukama";><code>@Bukama</code></a></li> <li>Fix ITs for Maven 3.10.x (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/366";>#366</a>) <a href="https://github.com/slawekjaranowski";><code>@slawekjaranowski</code></a></li> <li>Migrate JUnit 3/4 based tests to JUnit 5 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/347";>#347</a>) <a href="https://github.com/slawekjaranowski";><code>@slawekjaranowski</code></a></li> <li>feat: enable prevent branch protection rules (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/343";>#343</a>) <a href="https://github.com/sebtiem";><code>@sebtiem</code></a></li> <li>Enable Github Stuff (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/131";>#131</a>) <a href="https://github.com/Bukama";><code>@Bukama</code></a></li> <li>Use Sisu Guice instead of Plexus (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/127";>#127</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> <li>Replace deprecated toString methods (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/126";>#126</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> </ul> <h2>🔧 Build</h2> <ul> <li>revert broken IT updates from <a href="https://redirect.github.com/apache/maven-help-plugin/issues/344";>#344</a> (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/373";>#373</a>) <a href="https://github.com/hboutemy";><code>@hboutemy</code></a></li> </ul> <h2>📦 Dependency updates</h2> <ul> <li>remove unused dependency (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/379";>#379</a>) <a href="https://github.com/elharo";><code>@elharo</code></a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/375";>#375</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Maven to 3.9.16 and Resolver to 1.9.27, remove Invoker-version (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/365";>#365</a>) <a href="https://github.com/Bukama";><code>@Bukama</code></a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/364";>#364</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/358";>#358</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.codehaus.mojo:mrm-maven-plugin from 1.7.0 to 1.7.1 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/357";>#357</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/356";>#356</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/355";>#355</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/354";>#354</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Bump org.codehaus.plexus:plexus-interactivity-api from 1.4 to 1.5.1 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/350";>#350</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Use Maven 3.9.11 in dependencies, still required 3.6.3 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/346";>#346</a>) <a href="https://github.com/slawekjaranowski";><code>@slawekjaranowski</code></a></li> <li>Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/342";>#342</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li>Update Parent to 45 and invoker plugin 3.9.1 (Java 25) (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/344";>#344</a>) <a href="https://github.com/Bukama";><code>@Bukama</code></a></li> <li>Bump org.codehaus.plexus:plexus-interactivity-api from 1.3 to 1.4 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/130";>#130</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> <li><a href="https://issues.apache.org/jira/browse/MPH-221";>[MPH-221]</a> - Bump com.thoughtworks.xstream:xstream from 1.4.20 to 1.4.21 (<a href="https://redirect.github.com/apache/maven-help-plugin/pull/125";>#125</a>) @<a href="https://github.com/apps/dependabot";>dependabot[bot]</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-help-plugin/commit/bdefec373dbe663a2b581d9c438ec190676afb4d";><code>bdefec3</code></a> [maven-release-plugin] prepare release maven-help-plugin-3.5.2</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/b45833f4410562462148b357eab0f8672bf10169";><code>b45833f</code></a> Update site descriptor to 2.0.0 (<a href="https://redirect.github.com/apache/maven-help-plugin/issues/377";>#377</a>)</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/943dd091f60412aa8289e52ae4a1a59df93ee68b";><code>943dd09</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/8a495be7f90b3e96f2f222d48b8ff76e97a31661";><code>8a495be</code></a> [maven-release-plugin] prepare release maven-help-plugin-3.5.2</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/3ec573e617de939c308d06e80acf3d56585fed1a";><code>3ec573e</code></a> Configure project for ATR (<a href="https://redirect.github.com/apache/maven-help-plugin/issues/376";>#376</a>)</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/edff8529e073d18fa5c9a6cbe19a60bab651053f";><code>edff852</code></a> Add more goals to help plugin (self documenting any Maven version) (<a href="https://redirect.github.com/apache/maven-help-plugin/issues/374";>#374</a>)</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/2976b29088b810b042d80a67832c0419aa21576a";><code>2976b29</code></a> Fix issue 367 (<a href="https://redirect.github.com/apache/maven-help-plugin/issues/372";>#372</a>)</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/394ea1b15163a646595ec5f27b94891ea6bdf645";><code>394ea1b</code></a> Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (<a href="https://redirect.github.com/apache/maven-help-plugin/issues/375";>#375</a>)</li> <li><a href="https://github.com/apache/maven-help-plugin/commit/2c155b2163480230fe617d9b63e0d1ddbc8fb36a";><code>2c155b2</code></a> revert broken IT updates from <a href="https://redirect.github.com/apache/maven-help-plugin/issues/344";>#344</a></li> <li><a href="https://github.com/apache/maven-help-plugin/commit/1e716e14a981c1cd2fdfe58dc030d277fca14704";><code>1e716e1</code></a> Use version properties in IT (<a href="https://redirect.github.com/apache/maven-help-plugin/issues/368";>#368</a>)</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-help-plugin/compare/maven-help-plugin-3.5.1...maven-help-plugin-3.5.2";>compare view</a></li> </ul> </details> <br /> Updates `org.codehaus.gmavenplus:gmavenplus-plugin` from 5.0.0 to 5.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/groovy/GMavenPlus/releases";>org.codehaus.gmavenplus:gmavenplus-plugin's releases</a>.</em></p> <blockquote> <h2>5.1.0</h2> <h2>Bugs</h2> <ul> <li>fix: Use Maven source-root removal APIs (<a href="https://redirect.github.com/groovy/GMavenPlus/issues/341";>#341</a>)</li> <li>Drop warnings about missing dependencies down to debug (<a href="https://redirect.github.com/groovy/GMavenPlus/issues/390";>#390</a>)</li> </ul> <h2>Enhancements</h2> <ul> <li>Add to Java 25 enum LanguageLevel by <a href="https://github.com/jonesbusy";><code>@jonesbusy</code></a> in <a href="https://redirect.github.com/groovy/GMavenPlus/issues/346";>#346</a></li> <li>feat: Honor compiler release for Groovy bytecode (<a href="https://redirect.github.com/groovy/GMavenPlus/issues/387";>#387</a>)</li> </ul> <h2>Potentially breaking changes</h2> <p>None.</p> <h2>Notes</h2> <p>None.</p> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jonesbusy";><code>@jonesbusy</code></a> made their first contribution in <a href="https://redirect.github.com/groovy/GMavenPlus/issues/346";>#346</a></li> </ul> <h2>Full Changelog</h2> <p><a href="https://github.com/groovy/GMavenPlus/compare/5.0.0...5.1.0";>https://github.com/groovy/GMavenPlus/compare/5.0.0...5.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/groovy/GMavenPlus/commit/33ac4f5d495bd08189ba4744fd6d831a20d7d2cf";><code>33ac4f5</code></a> [maven-release-plugin] prepare release 5.1.0</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/fadc578b4f7bd6e992c2ad6af1025bd43a8a2710";><code>fadc578</code></a> Merge pull request <a href="https://redirect.github.com/groovy/GMavenPlus/issues/391";>#391</a> from groovy/adjust-dependency-logging</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/2180de9b4a9d04f5e0b1bc5211263418fce758ef";><code>2180de9</code></a> Drop warnings about missing dependencies down to debug (closes <a href="https://redirect.github.com/groovy/GMavenPlus/issues/390";>#390</a>)</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/3991ff8975af37c1b6f04a63069dd8c032ed319e";><code>3991ff8</code></a> Merge pull request <a href="https://redirect.github.com/groovy/GMavenPlus/issues/389";>#389</a> from groovy/feat/honor-compiler-release</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/3d29b11f9167cacbe605da14d46984a27833b51c";><code>3d29b11</code></a> feat: Honor compiler release for Groovy bytecode (closes <a href="https://redirect.github.com/groovy/GMavenPlus/issues/387";>#387</a>)</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/b7bb980c645ccb9087eeb7c9a82e8d8335fce99c";><code>b7bb980</code></a> build: Bump version</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/5622987ace2d306580c11c4dfadd8610f16487c6";><code>5622987</code></a> doc: Update redeploy instructions</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/0951225afcbdbd09451b37cc642411a719dacc54";><code>0951225</code></a> doc: Add a skill for updating everything</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/e510e4540dd38eda47b67336f408a124defd221c";><code>e510e45</code></a> doc: Add a skill for updating everything</li> <li><a href="https://github.com/groovy/GMavenPlus/commit/aec8eb1348ef552626be867d006765203d1224de";><code>aec8eb1</code></a> doc: Update developer documentation</li> <li>Additional commits viewable in <a href="https://github.com/groovy/GMavenPlus/compare/5.0.0...5.1.0";>compare view</a></li> </ul> </details> <br /> Updates `com.mycila:license-maven-plugin` from 5.0.0 to 5.1.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/mathieucarbou/license-maven-plugin/releases";>com.mycila:license-maven-plugin's releases</a>.</em></p> <blockquote> <h2>v5.1.1</h2> <h2>What's Changed</h2> <ul> <li>Revert "fix(git): follow renames across merges in copyright creation year (#bug)" by <a href="https://github.com/mathieucarbou";><code>@mathieucarbou</code></a> in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/1078";>mathieucarbou/license-maven-plugin#1078</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/mathieucarbou/license-maven-plugin/compare/v5.1.0...v5.1.1";>https://github.com/mathieucarbou/license-maven-plugin/compare/v5.1.0...v5.1.1</a></p> <h2>v5.1.0</h2> <h2>What's Changed</h2> <ul> <li>Bump com.google.guava:guava from 33.4.0-jre to 33.4.5-jre by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/922";>mathieucarbou/license-maven-plugin#922</a></li> <li>Bump com.google.guava:guava from 33.4.5-jre to 33.4.6-jre by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/924";>mathieucarbou/license-maven-plugin#924</a></li> <li>Bump surefire.version from 3.5.2 to 3.5.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/925";>mathieucarbou/license-maven-plugin#925</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.21.4 to 10.22.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/927";>mathieucarbou/license-maven-plugin#927</a></li> <li>Bump org.codehaus.mojo:extra-enforcer-rules from 1.9.0 to 1.10.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/928";>mathieucarbou/license-maven-plugin#928</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.22.0 to 10.23.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/929";>mathieucarbou/license-maven-plugin#929</a></li> <li>Bump org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.13 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/930";>mathieucarbou/license-maven-plugin#930</a></li> <li>Bump org.mockito:mockito-bom from 5.16.1 to 5.17.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/931";>mathieucarbou/license-maven-plugin#931</a></li> <li>Bump com.google.guava:guava from 33.4.6-jre to 33.4.7-jre by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/932";>mathieucarbou/license-maven-plugin#932</a></li> <li>Bump junit.version from 5.12.1 to 5.12.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/933";>mathieucarbou/license-maven-plugin#933</a></li> <li>Bump com.google.code.gson:gson from 2.12.1 to 2.13.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/934";>mathieucarbou/license-maven-plugin#934</a></li> <li>Bump com.google.guava:guava from 33.4.7-jre to 33.4.8-jre by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/935";>mathieucarbou/license-maven-plugin#935</a></li> <li>Bump fr.jcgay.maven:maven-profiler from 3.2 to 3.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/937";>mathieucarbou/license-maven-plugin#937</a></li> <li>Bump com.google.code.gson:gson from 2.13.0 to 2.13.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/936";>mathieucarbou/license-maven-plugin#936</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.23.0 to 10.23.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/938";>mathieucarbou/license-maven-plugin#938</a></li> <li>Bump org.mockito:mockito-bom from 5.17.0 to 5.18.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/939";>mathieucarbou/license-maven-plugin#939</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.23.1 to 10.24.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/940";>mathieucarbou/license-maven-plugin#940</a></li> <li>Bump groovy.version from 4.0.26 to 4.0.27 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/942";>mathieucarbou/license-maven-plugin#942</a></li> <li>Bump org.eclipse.jgit:org.eclipse.jgit from 6.10.0.202406032230-r to 6.10.1.202505221210-r in /license-maven-plugin-git in the maven group across 1 directory by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/943";>mathieucarbou/license-maven-plugin#943</a></li> <li>Bump junit.version from 5.12.2 to 5.13.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/944";>mathieucarbou/license-maven-plugin#944</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.24.0 to 10.25.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/947";>mathieucarbou/license-maven-plugin#947</a></li> <li>Bump org.apache.maven.plugins:maven-clean-plugin from 3.4.1 to 3.5.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/946";>mathieucarbou/license-maven-plugin#946</a></li> <li>Bump junit.version from 5.13.0 to 5.13.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/949";>mathieucarbou/license-maven-plugin#949</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.25.0 to 10.25.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/951";>mathieucarbou/license-maven-plugin#951</a></li> <li>Bump junit.version from 5.13.1 to 5.13.2 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/952";>mathieucarbou/license-maven-plugin#952</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.25.1 to 10.26.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/953";>mathieucarbou/license-maven-plugin#953</a></li> <li>Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.0 to 3.9.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/955";>mathieucarbou/license-maven-plugin#955</a></li> <li>Bump com.puppycrawl.tools:checkstyle from 10.26.0 to 10.26.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/954";>mathieucarbou/license-maven-plugin#954</a></li> <li>Bump maven.version from 3.9.9 to 3.9.10 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/948";>mathieucarbou/license-maven-plugin#948</a></li> <li>Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/958";>mathieucarbou/license-maven-plugin#958</a></li> <li>Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/957";>mathieucarbou/license-maven-plugin#957</a></li> <li>Build updates by <a href="https://github.com/hazendaz";><code>@hazendaz</code></a> in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/945";>mathieucarbou/license-maven-plugin#945</a></li> <li>Bump junit.version from 5.13.2 to 5.13.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/959";>mathieucarbou/license-maven-plugin#959</a></li> <li>Bump maven.version from 3.9.10 to 3.9.11 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/960";>mathieucarbou/license-maven-plugin#960</a></li> <li>Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.0 to 3.6.1 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/961";>mathieucarbou/license-maven-plugin#961</a></li> <li>Bump junit.version from 5.13.3 to 5.13.4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/962";>mathieucarbou/license-maven-plugin#962</a></li> <li>Bump groovy.version from 4.0.27 to 4.0.28 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/963";>mathieucarbou/license-maven-plugin#963</a></li> <li>Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/965";>mathieucarbou/license-maven-plugin#965</a></li> <li>Bump org.mockito:mockito-bom from 5.18.0 to 5.19.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/966";>mathieucarbou/license-maven-plugin#966</a></li> <li>Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/967";>mathieucarbou/license-maven-plugin#967</a></li> <li>Bump groovy.version from 4.0.28 to 5.0.0 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/pull/968";>mathieucarbou/license-maven-plugin#968</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/602a083d5fa0e9307a3a87516117af32478bcdc3";><code>602a083</code></a> [maven-release-plugin] prepare release v5.1.1</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/590c91fe87690ca9747496d8f33c57c3e13e4fb0";><code>590c91f</code></a> Merge pull request <a href="https://redirect.github.com/mathieucarbou/license-maven-plugin/issues/1078";>#1078</a> from mathieucarbou/revert-1077-fix/git</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/b485d43f63cc4bdd17829a5b5abda2591e37a390";><code>b485d43</code></a> Revert "fix(git): follow renames across merges in copyright creation year (#b...</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/ce2cb810bf51f41fc1be7a8ce3aec2797e9164a1";><code>ce2cb81</code></a> Rolback to 5.0.0 for now</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/d0e644ee18178d8b0a51d8eab7214fc94fd79b37";><code>d0e644e</code></a> Doc update</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/f80e1b7315278bfadc4dc3f01d173bf7eb3980d8";><code>f80e1b7</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/f26d4bd68f156e7cb9f2fcb8f4e58e23d6f33dde";><code>f26d4bd</code></a> [maven-release-plugin] prepare release v5.1.0</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/6ca1342382c342eb90f3ac7b2fac9852c771e6fa";><code>6ca1342</code></a> Fix release process</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/a082fc1e6697659eaf424e6ecb9b7e3766ed5f2a";><code>a082fc1</code></a> [maven-release-plugin] rollback the release of v5.1.0</li> <li><a href="https://github.com/mathieucarbou/license-maven-plugin/commit/7049b92f85b723a3e77cb989dd002a8e510cba3c";><code>7049b92</code></a> Fix release process</li> <li>Additional commits viewable in <a href="https://github.com/mathieucarbou/license-maven-plugin/compare/v5.0.0...v5.1.1";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat:tomcat-catalina` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.119 to 9.0.120 Updates `org.omnifaces:omnifaces` from 3.14.21 to 3.14.23 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/omnifaces/omnifaces/commits";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.119 to 9.0.120 Updates `org.apache.tomcat:tomcat-catalina` from 9.0.119 to 9.0.120 Updates `io.openliberty.tools:liberty-maven-plugin` from 3.12.0 to 3.12.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/OpenLiberty/ci.maven/releases";>io.openliberty.tools:liberty-maven-plugin's releases</a>.</em></p> <blockquote> <h2>Liberty Maven Plug-in 3.12.1</h2> <p>Version 3.12.1 of the Liberty Maven Plugin is a minor release with new features and fixes.</p> <h2>New Features</h2> <ul> <li>Expansion variable for server.env in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/1968";>OpenLiberty/ci.maven#1968</a></li> <li>Adding ltpa_keys_password to common-server-parameters.md and merge server env logic in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2016";>OpenLiberty/ci.maven#2016</a></li> <li>Changes to start hotkey reader earlier before server is fully started in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2019";>OpenLiberty/ci.maven#2019</a></li> <li>Added annotation processor support for dev mode hot reload in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2026";>OpenLiberty/ci.maven#2026</a></li> <li>Adding spring boot 4 support in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2028";>OpenLiberty/ci.maven#2028</a></li> <li>Resolves transitive dependencies of annotationProcessorPaths entries during hot reload recompilation in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2043";>OpenLiberty/ci.maven#2043</a></li> <li>Added support for maven-compiler-plugin compilerArgs in Liberty dev mode hot reload in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2045";>OpenLiberty/ci.maven#2045</a></li> </ul> <p>See the <a href="https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.0...liberty-maven-3.12.1";>commit log</a> for the full set of the changes since the previous release.</p> <p>The Liberty Maven Plugin 3.12.1 release is available on the <a href="https://central.sonatype.com/artifact/io.openliberty.tools/liberty-maven-plugin/3.12.1";>Maven Central</a> repository.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/d8fc17550604a6c5241401f5bb69d43d781cd86e";><code>d8fc175</code></a> [maven-release-plugin] prepare release liberty-maven-3.12.1</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/3fa940d1497bfb54f118a4070e79112920756ff6";><code>3fa940d</code></a> Merge pull request <a href="https://redirect.github.com/OpenLiberty/ci.maven/issues/2059";>#2059</a> from venmanyarun/3.x_common_update</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/8aee01d9acb284d4560efe713a9b7af035dc53b5";><code>8aee01d</code></a> changing workflow</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/ec53c288959546c5de16023390db6bcffce6a267";><code>ec53c28</code></a> changing ci.common version</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/ec8040e6794c13d6e9f6ea0b3e185736ebf65cfe";><code>ec8040e</code></a> Merge pull request <a href="https://redirect.github.com/OpenLiberty/ci.maven/issues/2045";>#2045</a> from sajeerzeji/feature/GH2044-compiler-args-support</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/11859664a187659302b888afb35e4c7576b2092e";><code>1185966</code></a> Fixed the test failure by adding a delay in the test</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/c2166307e6d185184b83e1fa0f2f014dfcff7b60";><code>c216630</code></a> Merge pull request <a href="https://redirect.github.com/OpenLiberty/ci.maven/issues/2047";>#2047</a> from venmanyarun/test_jdk_semetu_test</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/a56d05fd2797c928c2e066c27e10abe84d34eda2";><code>a56d05f</code></a> changing test jdk to semeru instead of temurin</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/dec0a5299f9e8b43098f74b5dfd7a79aacda0d7d";><code>dec0a52</code></a> Fixed compiler options logging to check for non-empty list before logging rec...</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/13d62572bfe5c506a05f7bf0792a39a575b043fd";><code>13d6257</code></a> Workflow reverted</li> <li>Additional commits viewable in <a href="https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.0...liberty-maven-3.12.1";>compare view</a></li> </ul> </details> <br /> Updates `org.apache.tomcat.embed:tomcat-embed-core` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat.embed:tomcat-embed-el` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat:tomcat-jaspic-api` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat:tomcat-catalina` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat:tomcat-jasper` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.56 to 10.1.57 Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.56 to 10.1.57 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
