dependabot[bot] opened a new pull request, #2919: URL: https://github.com/apache/shiro/pull/2919
Bumps the maven-dependencies group with 9 updates: | Package | From | To | | --- | --- | --- | | [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.14` | `1.18.15` | | [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) | `1.18.14` | `1.18.15` | | [org.owasp.encoder:encoder](https://github.com/OWASP/owasp-java-encoder) | `1.5.0` | `1.5.1` | | [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) | `0.26.3` | `0.26.5` | | [jakarta.json.bind:jakarta.json.bind-api](https://github.com/jakartaee/jsonb-api) | `3.0.3` | `3.0.4` | | [io.openliberty.tools:liberty-maven-plugin](https://github.com/OpenLiberty/ci.maven) | `3.12.3` | `3.12.4` | | [com.flowlogix.depchain:integration-test](https://github.com/flowlogix/depchain) | `132` | `133` | | [com.flowlogix:flowlogix-jee](https://github.com/flowlogix/flowlogix) | `11.7.1` | `11.7.3` | | [fish.payara.extras:payara-micro](https://github.com/payara/payara) | `7.2026.9` | `7.2026.10` | Updates `net.bytebuddy:byte-buddy` from 1.18.14 to 1.18.15 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy's changelog</a>.</em></p> <blockquote> <h2>Byte Buddy release notes</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/f2dffef0ed83b65924b699d27e22975e4b338996";><code>f2dffef</code></a> [publish] Releasing Byte Buddy 1.18.15</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7af339e06c81a907b86c4ae0b436a1d528a28a97";><code>7af339e</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/74b23dcaae436f29e46ae082c364c576f8069d27";><code>74b23dc</code></a> Update ASM.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/807fb56674daf54d8bb01a578e84bac4130b5e1c";><code>807fb56</code></a> Remove the sigstore dry run from the build pipeline.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2efd25cbd353cb38ed2a00be8ca70843086f34d1";><code>2efd25c</code></a> Break the build on binary incompatibility again.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/29a92ee1d077dd378471f929261e417532466d0f";><code>29a92ee</code></a> Update internal Byte Buddy and release notes.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/b6ebdb3762e3737f9c0ec5a72ccafa1c7e0f017b";><code>b6ebdb3</code></a> [publish] Start next development iteration 1.18.15-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy-agent's changelog</a>.</em></p> <blockquote> <h2>Byte Buddy release notes</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/f2dffef0ed83b65924b699d27e22975e4b338996";><code>f2dffef</code></a> [publish] Releasing Byte Buddy 1.18.15</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7af339e06c81a907b86c4ae0b436a1d528a28a97";><code>7af339e</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/74b23dcaae436f29e46ae082c364c576f8069d27";><code>74b23dc</code></a> Update ASM.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/807fb56674daf54d8bb01a578e84bac4130b5e1c";><code>807fb56</code></a> Remove the sigstore dry run from the build pipeline.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2efd25cbd353cb38ed2a00be8ca70843086f34d1";><code>2efd25c</code></a> Break the build on binary incompatibility again.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/29a92ee1d077dd378471f929261e417532466d0f";><code>29a92ee</code></a> Update internal Byte Buddy and release notes.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/b6ebdb3762e3737f9c0ec5a72ccafa1c7e0f017b";><code>b6ebdb3</code></a> [publish] Start next development iteration 1.18.15-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15";>compare view</a></li> </ul> </details> <br /> Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/raphw/byte-buddy/blob/master/release-notes.md";>net.bytebuddy:byte-buddy-agent's changelog</a>.</em></p> <blockquote> <h2>Byte Buddy release notes</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/raphw/byte-buddy/commit/f2dffef0ed83b65924b699d27e22975e4b338996";><code>f2dffef</code></a> [publish] Releasing Byte Buddy 1.18.15</li> <li><a href="https://github.com/raphw/byte-buddy/commit/7af339e06c81a907b86c4ae0b436a1d528a28a97";><code>7af339e</code></a> [release] Release new version</li> <li><a href="https://github.com/raphw/byte-buddy/commit/74b23dcaae436f29e46ae082c364c576f8069d27";><code>74b23dc</code></a> Update ASM.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/807fb56674daf54d8bb01a578e84bac4130b5e1c";><code>807fb56</code></a> Remove the sigstore dry run from the build pipeline.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/2efd25cbd353cb38ed2a00be8ca70843086f34d1";><code>2efd25c</code></a> Break the build on binary incompatibility again.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/29a92ee1d077dd378471f929261e417532466d0f";><code>29a92ee</code></a> Update internal Byte Buddy and release notes.</li> <li><a href="https://github.com/raphw/byte-buddy/commit/b6ebdb3762e3737f9c0ec5a72ccafa1c7e0f017b";><code>b6ebdb3</code></a> [publish] Start next development iteration 1.18.15-SNAPSHOT</li> <li>See full diff in <a href="https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15";>compare view</a></li> </ul> </details> <br /> Updates `org.owasp.encoder:encoder` from 1.5.0 to 1.5.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/OWASP/owasp-java-encoder/releases";>org.owasp.encoder:encoder's releases</a>.</em></p> <blockquote> <p>OWASP Java Encoder 1.5.1 is a documentation and build-maintenance patch. <strong>Encoding behavior, public APIs, runtime dependencies, and Java 8 support are unchanged from 1.5.0.</strong></p> <h3>What changed</h3> <ul> <li>Clarify JavaScript encoding modes, output growth, and where encoded values can safely be inserted.</li> <li>Explain why script-letter escapes remain necessary in the general and block modes; Source mode already leaves the URL in <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/243";>#243</a> unchanged.</li> <li>Distinguish JSON whole-string HTML embedding from JavaScript fragment protection, with clearer surrounding-template requirements.</li> <li>Strengthen parser regression tests and include the build/test maintenance recorded in <a href="https://github.com/OWASP/owasp-java-encoder/blob/v1.5.1/CHANGELOG.md";>CHANGELOG.md</a>.</li> </ul> <p>The documentation changes are in <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/244";>#244</a>. The release preparation is in <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/245";>#245</a>. This patch preserves the security fixes from 1.5.0 and introduces no new encoder security fix. Users upgrading from versions older than 1.5.0 should read the <a href="https://github.com/OWASP/owasp-java-encoder/releases/tag/v1.5.0";>1.5.0 migration notes</a> and <a href="https://github.com/OWASP/owasp-java-encoder/security/advisories/GHSA-g8p6-7r8f-qrpv";>security advisory</a>.</p> <h3>Maven Central</h3> <p>Version <strong>1.5.1</strong> is published under <code>org.owasp.encoder</code>:</p> <ul> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder/1.5.1/";><code>encoder</code></a></li> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder-jsp/1.5.1/";><code>encoder-jsp</code></a></li> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder-jakarta-jsp/1.5.1/";><code>encoder-jakarta-jsp</code></a></li> <li><a href="https://repo.maven.apache.org/maven2/org/owasp/encoder/encoder-parent/1.5.1/";><code>encoder-parent</code></a></li> </ul> <p>Keep core and adapter versions aligned. The retired ESAPI adapter and optional Jakarta test WAR are not included. The Javadoc JARs are attached. Hosted <a href="https://javadoc.io/doc/org.owasp.encoder/encoder/1.5.1/";>core</a>, <a href="https://javadoc.io/doc/org.owasp.encoder/encoder-jsp/1.5.1/";>JSP</a>, and <a href="https://javadoc.io/doc/org.owasp.encoder/encoder-jakarta-jsp/1.5.1/";>Jakarta</a> documentation is live and was checked against the released Javadoc content.</p> <h3>Verification</h3> <p>Exact tested source: <code>1ab0cfbececf9969452fe03cbf5b5504b03a8b1b</code>; signed tag: <code>v1.5.1</code>.</p> <p>All 26 downloaded Central payload/signature files match the retained originals byte for byte. All 13 payload signatures verify with the project key, full fingerprint <strong><code>1C5F632B86809F2F5DB25092BEA0075F94074A9B</code></strong>. The attached bundle SHA-256 is <strong><code>fcb226abfee84db155f27d40fe78173a96524d74dfc14a577eb1106ef57337f8</code></strong>.</p> <p>The signed build passed 2,290 tests; the separate browser/WAR build passed 2,297, with zero failures/errors/skips. All 13 unsigned payloads match two independent clean builds using Temurin 17.0.20.1+1 and Maven 3.10.0. Required CI passed, including packaged consumers on Java 8/11/17/21/25, Java 8 tests, and CodeQL.</p> <p>Verify signatures and signed checksum manifests using the attached <code>KEYS</code>, <code>SHA256SUMS</code>, and <code>SHA512SUMS</code> and <a href="https://github.com/OWASP/owasp-java-encoder/blob/v1.5.1/VERIFYING.md";>these instructions</a>. Pending notices in the immutable source tag describe its preparation stage; this release confirms publication without changing those sources or signatures.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/OWASP/owasp-java-encoder/blob/main/CHANGELOG.md";>org.owasp.encoder:encoder's changelog</a>.</em></p> <blockquote> <h2>1.5.1 — 2026-10-15 UTC</h2> <p>Documentation and build-maintenance patch; publication is verified in the <a href="https://github.com/OWASP/owasp-java-encoder/blob/main/releases/1.5.1-central-publication.md";>publication record</a>. Encoding behavior and public APIs are unchanged.</p> <ul> <li> <p>Clarify JavaScript encoding modes, output growth, and insertion-boundary requirements for <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/243";>#243</a>; distinguish JSON whole-string HTML embedding from JavaScript fragment protection. Correct internal HTML/XML comments and strengthen parser tests to verify script text, not only absence of a marker. Encoding behavior is unchanged.</p> </li> <li> <p>Verify public API compatibility against immutable 1.5.0 artifacts and their matching support APIs. Minimum-consumer fixtures are unchanged.</p> </li> <li> <p>Discover release tags independently of commit ancestry so squash merges cannot leave the compatibility baseline stale; add isolated Git regressions.</p> </li> <li> <p>Record verified 1.5.0 publication and replace pending-availability notices.</p> </li> <li> <p>Update Jackson core/databind to 3.1.7 in the unpublished Jakarta fixture's Spring Boot Maven plugin realm for GHSA-q4xh-88c3-wmh7, GHSA-wjgm-6hv5-3cvf, GHSA-wv8q-qhhj-9h54 and GHSA-cxp5-3px4-pw24. Published library dependencies and release artifacts are unchanged.</p> </li> <li> <p>Route Jackson plugin-realm pins and Maven wrapper upgrades out of the grouped Dependabot PR for individual review, and keep Jackson on its 3.1 line until the Boot parent moves. Security updates remain eligible.</p> </li> <li> <p>Build with Maven 3.10.0 through the committed wrapper and require it for signed releases. Ordinary builds still accept Maven 3.9.16 or later. Library JARs and module POMs are byte-identical to 3.9.16 builds (<a href="https://github.com/OWASP/owasp-java-encoder/blob/main/releases/maven-3.10.0-validation.md";>validation</a>).</p> </li> <li> <p>Update isolated Tomcat/Jasper test engines to 9.0.123 and 10.1.61 and give each its own Dependabot scan (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/241";>#241</a>, <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/242";>#242</a>). These are test tooling, not dependencies shipped inside the encoder libraries.</p> </li> <li> <p>Update reviewed build tooling and pinned Actions, including japicmp 0.26.3, Commons Lang 3.21.0, and the publisher's HttpClient 5.6.5 (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/234";>#234</a>, <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/237";>#237</a>, <a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/240";>#240</a>).</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/1ab0cfbececf9969452fe03cbf5b5504b03a8b1b";><code>1ab0cfb</code></a> release: prepare Java Encoder 1.5.1 documentation patch</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/ba3aaded6434bd5a3cd104649eb49f01f2445505";><code>ba3aade</code></a> Clarify JavaScript encoding contracts and strengthen boundary tests (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/244";>#244</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/cb18f7e498e0219ad5a339706f3b7d4627f6f149";><code>cb18f7e</code></a> Give each Tomcat JSP engine its own Dependabot scan (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/242";>#242</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/07539316003680be73e67d7c592b055ccad9c54a";><code>0753931</code></a> Update Tomcat JSP fixtures to 9.0.123 and 10.1.61 (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/241";>#241</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/1c08c6a007289c977c92342aa79613ebd27642a9";><code>1c08c6a</code></a> Bump the maven-dependencies group across 1 directory with 2 updates (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/237";>#237</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/0d4cb886518682e6c4f889497cfb109897b9095c";><code>0d4cb88</code></a> Bump the actions group with 4 updates (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/240";>#240</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/f200faee499f1c342dc8922f83774eb819b88e3c";><code>f200fae</code></a> Move the Maven wrapper to 3.10.0 (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/236";>#236</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/914bd27c994f40417a8211aeee07a4e163076531";><code>914bd27</code></a> Bump org.apache.commons:commons-lang3 (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/234";>#234</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/ee1e2a88893b43c5b494dcc86cb83be4d0d68660";><code>ee1e2a8</code></a> Update fixture Jackson to 3.1.7 and route pinned Dependabot updates (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/233";>#233</a>)</li> <li><a href="https://github.com/OWASP/owasp-java-encoder/commit/454a07c4631966db033974b908a58012ca95b15f";><code>454a07c</code></a> Complete 1.5.0 post-release cleanup (<a href="https://redirect.github.com/OWASP/owasp-java-encoder/issues/230";>#230</a>)</li> <li>Additional commits viewable in <a href="https://github.com/OWASP/owasp-java-encoder/compare/v1.5.0...v1.5.1";>compare view</a></li> </ul> </details> <br /> Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.26.3 to 0.26.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/siom79/japicmp/releases";>com.github.siom79.japicmp:japicmp-maven-plugin's releases</a>.</em></p> <blockquote> <h2>japicmp-base-0.26.5</h2> <p>Reproducible reports <a href="https://redirect.github.com/siom79/japicmp/pull/531";>#531</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/siom79/japicmp/commit/df5cec402ad0600b6ab5aec6542d2dbcd2fa083c";><code>df5cec4</code></a> [maven-release-plugin] prepare release japicmp-base-0.26.5</li> <li><a href="https://github.com/siom79/japicmp/commit/89eaf3559f9b8e728c0a4f75068ea4940c562951";><code>89eaf35</code></a> update publishing plugin</li> <li><a href="https://github.com/siom79/japicmp/commit/0d9e62a59ea334527f1284b9a432763c05229d0f";><code>0d9e62a</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/siom79/japicmp/commit/5ac0e967b1633eb12661342b4eeb10b7fe81cd5b";><code>5ac0e96</code></a> [maven-release-plugin] prepare release japicmp-base-0.26.4</li> <li><a href="https://github.com/siom79/japicmp/commit/2e4fe78b049c0f80cd9c62b67085ef46f5cf949d";><code>2e4fe78</code></a> upgraded version in *.md files to 0.26.4</li> <li><a href="https://github.com/siom79/japicmp/commit/99cf5d73a80136ec291edf1368ec4e3baa501281";><code>99cf5d7</code></a> Update japicmp jar version in README</li> <li><a href="https://github.com/siom79/japicmp/commit/06354fc30f231c6dc25b30732e2831f3855a000a";><code>06354fc</code></a> Add release notes for version 0.26.4</li> <li><a href="https://github.com/siom79/japicmp/commit/b0338e44458886eba9233fe0aa5ef308ae63f0ce";><code>b0338e4</code></a> Merge pull request <a href="https://redirect.github.com/siom79/japicmp/issues/532";>#532</a> from siom79/ccr-8233ddde-hng43h</li> <li><a href="https://github.com/siom79/japicmp/commit/b3a4ca4220d76103662e3ef7af7fdb44306eed33";><code>b3a4ca4</code></a> Add option to generate reproducible reports (<a href="https://redirect.github.com/siom79/japicmp/issues/531";>#531</a>)</li> <li><a href="https://github.com/siom79/japicmp/commit/de476fb44bc2536e69d7bba4cf2bc540bc772b68";><code>de476fb</code></a> Merge pull request <a href="https://redirect.github.com/siom79/japicmp/issues/530";>#530</a> from siom79/release-v0.26.3</li> <li>Additional commits viewable in <a href="https://github.com/siom79/japicmp/compare/japicmp-base-0.26.3...japicmp-base-0.26.5";>compare view</a></li> </ul> </details> <br /> Updates `jakarta.json.bind:jakarta.json.bind-api` from 3.0.3 to 3.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jakartaee/jsonb-api/releases";>jakarta.json.bind:jakarta.json.bind-api's releases</a>.</em></p> <blockquote> <h2>3.0.4</h2> <h2>What's Changed</h2> <ul> <li>fix: OSGi yasson in 3.0 by <a href="https://github.com/KyleAure";><code>@KyleAure</code></a> in <a href="https://redirect.github.com/jakartaee/jsonb-api/pull/432";>jakartaee/jsonb-api#432</a></li> <li>dep: update parent [3.0] by <a href="https://github.com/KyleAure";><code>@KyleAure</code></a> in <a href="https://redirect.github.com/jakartaee/jsonb-api/pull/478";>jakartaee/jsonb-api#478</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/jakartaee/jsonb-api/compare/3.0.3...3.0.4";>https://github.com/jakartaee/jsonb-api/compare/3.0.3...3.0.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jakartaee/jsonb-api/commit/499e095b69d1c3b74eb6f42e58dcf05430e1eaab";><code>499e095</code></a> Prepare release jakarta.json.bind:jakarta.json.bind-parent:3.0.4</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/002c7031796ad0f41ef5e76203bb5ee65085ec63";><code>002c703</code></a> dep: update enforcer plugin</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/3221c51d8570f9cc6e77e2a566fd74c4f0959eda";><code>3221c51</code></a> Merge pull request <a href="https://redirect.github.com/jakartaee/jsonb-api/issues/478";>#478</a> from KyleAure/3.0.3-BRANCH</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/8c5b8a0647d6d4f568749b53c98e6786941ee92c";><code>8c5b8a0</code></a> dep: update parent</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/cc33a86e07b2a4b30f959da8518b74d6f2ea5c4c";><code>cc33a86</code></a> Merge pull request <a href="https://redirect.github.com/jakartaee/jsonb-api/issues/432";>#432</a> from KyleAure/426-yasson-in-manifest</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/744cf1fd0a86a210a5117ed8c1daa92cb0200dd5";><code>744cf1f</code></a> fix: remove maven-scm-publish-plugin from tck-user-guide</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/e4f98c50c6e5825c08d5d52c3cda1b723158c492";><code>e4f98c5</code></a> fix: <a href="https://redirect.github.com/jakartaee/jsonb-api/issues/425";>#425</a> OSGi yasson in 3.0</li> <li><a href="https://github.com/jakartaee/jsonb-api/commit/59333e0c31b1cc88c01dc7fe0989647d2d488adb";><code>59333e0</code></a> Prepare next development cycle jakarta.json.bind:jakarta.json.bind-parent:3.0...</li> <li>See full diff in <a href="https://github.com/jakartaee/jsonb-api/compare/3.0.3...3.0.4";>compare view</a></li> </ul> </details> <br /> Updates `io.openliberty.tools:liberty-maven-plugin` from 3.12.3 to 3.12.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/OpenLiberty/ci.maven/releases";>io.openliberty.tools:liberty-maven-plugin's releases</a>.</em></p> <blockquote> <h2>Liberty Maven Plug-in 3.12.4</h2> <p>Version 3.12.4 of the Liberty Maven Plugin is a minor release with a bug fix</p> <h2>What's Changed</h2> <ul> <li>Add devc multimodule container IT and workflow support in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2095";>OpenLiberty/ci.maven#2095</a></li> <li>Fix liberty:dev dependency resolution failure for rar-packaged upstream modules in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2097";>OpenLiberty/ci.maven#2097</a></li> <li>Add DevcEmptyLooseAppTest IT for empty/malformed loose-app XML fix in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2099";>OpenLiberty/ci.maven#2099</a></li> <li>fix: restore ci.common checkout to OpenLiberty/<a href="mailto:[email protected]";>[email protected]</a> in workflow in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2100";>OpenLiberty/ci.maven#2100</a></li> <li>Changes the log level for variable expansion messages in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2108";>OpenLiberty/ci.maven#2108</a></li> <li>Devc port resolution fixes in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2101";>OpenLiberty/ci.maven#2101</a></li> <li>Update liberty-ant-tasks version to 1.9.19 in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2110";>OpenLiberty/ci.maven#2110</a></li> <li>Fix/gh2111 zos ant copy encoding in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2114";>OpenLiberty/ci.maven#2114</a></li> <li>Update ci.common dependency version to 1.8.44 in <a href="https://redirect.github.com/OpenLiberty/ci.maven/pull/2123";>OpenLiberty/ci.maven#2123</a></li> </ul> <p>See the <a href="https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.3...liberty-maven-3.12.4";>commit log</a> for the full set of the changes since the previous release.</p> <p>The Liberty Maven Plugin 3.12.4 release is available on the <a href="https://central.sonatype.com/artifact/io.openliberty.tools/liberty-maven-plugin/3.12.4";>Maven Central</a> repository.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/752fbccdd692e43585d3d5b2564c5882b144fec7";><code>752fbcc</code></a> [maven-release-plugin] prepare release liberty-maven-3.12.4</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/90d47dca71c90903500bb15b9ee3f5850b33b718";><code>90d47dc</code></a> Merge pull request <a href="https://redirect.github.com/OpenLiberty/ci.maven/issues/2123";>#2123</a> from OpenLiberty/venmanyarun-patch-1</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/9ac80db81d316c8566247b7ec52a0edd78ecaa1c";><code>9ac80db</code></a> Update ci.common dependency version to 1.8.44</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/3c8121f3d5b43c62df573f2ba136dc277b54cae4";><code>3c8121f</code></a> Merge pull request <a href="https://redirect.github.com/OpenLiberty/ci.maven/issues/2122";>#2122</a> from venmanyarun/fix/GH-generate-features-tests</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/7cad598e356a4e9030a97790207cfe372ec897dc";><code>7cad598</code></a> revert workflow</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/dc3e90b18dcd79f15c0271c3cc98a718e126f06b";><code>dc3e90b</code></a> Fix generate-features and dev-it tests broken by ci.common 28cfab5c</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/f136851e98cdb6823e6afccc47ff2f9c7d57dc4c";><code>f136851</code></a> Merge pull request <a href="https://redirect.github.com/OpenLiberty/ci.maven/issues/2114";>#2114</a> from venmanyarun/fix/gh2111-zos-ant-copy-encoding</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/90d500758d4ca858acef37647861160e589d1052";><code>90d5007</code></a> Revert "Use FileUtils.copyDirectory with CopyOption for configDirectory bulk ...</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/d441b3e52ffc556748a10f8364e7e52ace0e8620";><code>d441b3e</code></a> Use FileUtils.copyDirectory with CopyOption for configDirectory bulk copy</li> <li><a href="https://github.com/OpenLiberty/ci.maven/commit/f9bbfa009eff840aae746bf146ca1fb7fd4cc65c";><code>f9bbfa0</code></a> Fix z/OS USS file corruption by replacing Ant Copy with NIO Files.copy</li> <li>Additional commits viewable in <a href="https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.3...liberty-maven-3.12.4";>compare view</a></li> </ul> </details> <br /> Updates `com.flowlogix.depchain:integration-test` from 132 to 133 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/flowlogix/depchain/commits";>compare view</a></li> </ul> </details> <br /> Updates `com.flowlogix:flowlogix-jee` from 11.7.1 to 11.7.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/flowlogix/flowlogix/releases";>com.flowlogix:flowlogix-jee's releases</a>.</em></p> <blockquote> <h2>11.7.3</h2> <h2>Improvenemt</h2> <ul> <li><a href="https://github.com/flowlogix/flowlogix/commit/91a4e9e4c7e6376befd0e684e4a56e4dc0a2c87d";>feat: enhance console logging to separate output by log level</a> - issue <a href="https://redirect.github.com/flowlogix/flowlogix/issues/1733";>#1733</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/flowlogix/flowlogix/compare/Version-11.7.2...Version-11.7.3";>https://github.com/flowlogix/flowlogix/compare/Version-11.7.2...Version-11.7.3</a></p> <h2>11.7.2</h2> <h2>Improvement</h2> <ul> <li><a href="https://github.com/flowlogix/flowlogix/commit/6a1e021ade57cf5f2486307458cd8a527f2b5460";>feat: add ArquillianSuiteLogSuppressionExtension to suppress Arquillian suite Maven warnings during tests</a> - fix for <a href="https://redirect.github.com/flowlogix/flowlogix/issues/1732";>#1732</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/flowlogix/flowlogix/compare/Version-11.7.1...Version-11.7.2";>https://github.com/flowlogix/flowlogix/compare/Version-11.7.1...Version-11.7.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/flowlogix/flowlogix/commit/9878754dccf89fe5663d9820dbf62481c601f60c";><code>9878754</code></a> [maven-release-plugin] prepare release Version-11.7.3</li> <li><a href="https://github.com/flowlogix/flowlogix/commit/91a4e9e4c7e6376befd0e684e4a56e4dc0a2c87d";><code>91a4e9e</code></a> feat: enhance console logging to separate output by log level</li> <li><a href="https://github.com/flowlogix/flowlogix/commit/d9b833b77075960fc2ed8a4797a58241f5ff2004";><code>d9b833b</code></a> feat: redirect console logging to stdout to avoid Maven warnings in error output</li> <li><a href="https://github.com/flowlogix/flowlogix/commit/6a1e021ade57cf5f2486307458cd8a527f2b5460";><code>6a1e021</code></a> feat: add ArquillianSuiteLogSuppressionExtension to suppress Arquillian suite...</li> <li><a href="https://github.com/flowlogix/flowlogix/commit/0fa006dc8bbdcb8c817fd92ab1cd05251351cd2e";><code>0fa006d</code></a> build(deps): bump the maven-dependencies group with 4 updates (<a href="https://redirect.github.com/flowlogix/flowlogix/issues/1729";>#1729</a>)</li> <li><a href="https://github.com/flowlogix/flowlogix/commit/ae1ca6b6421cfdae2cf30800055504700b8ce853";><code>ae1ca6b</code></a> build(deps): bump the github-actions-dependencies group with 3 updates (<a href="https://redirect.github.com/flowlogix/flowlogix/issues/1730";>#1730</a>)</li> <li><a href="https://github.com/flowlogix/flowlogix/commit/b5b7688e1ba7613d4cadb0828d5fe8e42db9fbd7";><code>b5b7688</code></a> Use pull_request with Dependabot secret instead of pull_request_target (<a href="https://redirect.github.com/flowlogix/flowlogix/issues/1728";>#1728</a>)</li> <li>See full diff in <a href="https://github.com/flowlogix/flowlogix/compare/Version-11.7.1...Version-11.7.3";>compare view</a></li> </ul> </details> <br /> Updates `fish.payara.extras:payara-micro` from 7.2026.9 to 7.2026.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/payara/payara/releases";>fish.payara.extras:payara-micro's releases</a>.</em></p> <blockquote> <h2>Azul Payara Community 7.2026.10</h2> <h1>Supported APIs and Applications</h1> <ul> <li> <p>Jakarta EE 11</p> </li> <li> <p>Jakarta EE 11 Applications</p> </li> <li> <p>MicroProfile 7.1</p> </li> </ul> <h1>Bug Fixes</h1> <ul> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/7902";>FISH-12192</a>] [Community Contribution - <a href="https://github.com/lprimak";>lprimak</a>] Fix Restarting the Domain Causing Applications That Use MicroProfile REST Client to Not Deploy</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8275";>FISH-13968</a>] [Community Contribution - <a href="https://github.com/lprimak";>lprimak</a>] WAR Libs JAX-RS Client Leak Prevention</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8402";>FISH-14053</a>] Fix <code>InitialContext</code> Contact List Including an Extra Hostname(s) [IIOP, CORBA]</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8413";>FISH-14056</a>] Fix Admin Console Warning Message "command create-deployment-group was not replicated to that instance"</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8475";>FISH-14579</a>] Fix Request Tracing Service Not Disabling Random UUID Generation Even When Turned Off</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8473";>FISH-14596</a>] Fix <code>start-domain</code> Admin-Password Recovery Prompt Broken: <code>auth-realm-name</code> Dropped from <code>domain.xml</code> on Rewrite (<code>MiniXmlParser</code>)</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8437";>FISH-14605</a>] Fix Concurrent Deployments Failing Because <code>SaxParserHandlerBundled</code> Is Stateful Singleton</p> </li> </ul> <h1>Improvements</h1> <ul> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8431";>FISH-9066</a>] Improve EclipseLink Class <code>CollectionChangeRecord</code> to Log Exceptions</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8251";>FISH-13913</a>] SSH Nodes No Longer Require Elevated Permissions</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8404";>FISH-14237</a>] Review Agentic AI Implementation OSGi Exports</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8424";>FISH-14383</a>] Update Payara Resources Descriptor DTDs to New Versioning</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8412";>FISH-14417</a>] Add <code>delete-jvm-option</code> Command</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8421";>FISH-14418</a>] Add <code>delete-system-properties</code> Command</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8415";>FISH-14641</a>] [Community Contribution - <a href="https://github.com/mkarg";>mkarg</a>] JNDI Context Should Throw <code>NameNotFoundException</code></p> </li> </ul> <h1>Component Upgrades</h1> <ul> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/7833";>FISH-12696</a>] Upgrade <code>soteria.version</code> from 4.0.1.payara-p1 to 4.0.2</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8431";>FISH-13970</a>] Upgrade EclipseLink to 5.0.1</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8344";>FISH-14195</a>] Upgrade <code>org.eclipse:yasson</code> from 3.0.4 to 3.0.5</p> </li> <li> <p>[<a href="https://redirect.github.com/payara/Payara/pull/8390";>FISH-14486</a>] Upgrade Mojarra from 4.1.14 to 4.1.16</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/payara/Payara/commit/27bec824499a9849322e02711cd459004ba6f3af";><code>27bec82</code></a> Increment version numbers for Release</li> <li><a href="https://github.com/payara/Payara/commit/facadff1b500d8f8b8f4332381f4e7e738bf4799";><code>facadff</code></a> Merge pull request <a href="https://redirect.github.com/payara/payara/issues/8473";>#8473</a> from luiseufrasio/FISH-14596-community</li> <li><a href="https://github.com/payara/Payara/commit/0e4f3afefcebeb2bb8374cb6be74a1065da2d775";><code>0e4f3af</code></a> Merge pull request <a href="https://redirect.github.com/payara/payara/issues/8480";>#8480</a> from payara/dependabot/maven/main/hk2.version-4.0.3</li> <li><a href="https://github.com/payara/Payara/commit/53fed48736620546b1fcb7d7522fdee56d129908";><code>53fed48</code></a> Bump hk2.version from 4.0.2 to 4.0.3</li> <li><a href="https://github.com/payara/Payara/commit/bdfd7d91302a9c219870ac9db031bc5974af4df1";><code>bdfd7d9</code></a> Merge pull request <a href="https://redirect.github.com/payara/payara/issues/8475";>#8475</a> from breakponchito/FISH-14579-preventing-span-conten...</li> <li><a href="https://github.com/payara/Payara/commit/a765d1bdef7a06ff89b970ea3bb637f8cad5b5bc";><code>a765d1b</code></a> Merge remote-tracking branch 'luiseufrasio/FISH-14596-community' into fork/lu...</li> <li><a href="https://github.com/payara/Payara/commit/382609d1ba83276e3102656b2647c7fe84f547c9";><code>382609d</code></a> FISH-14596 <jmx-connector auth-realm-name> manual edits will never persist lo...</li> <li><a href="https://github.com/payara/Payara/commit/22f2108ee0ee86e3f151a7df8f1229d1e3ff908b";><code>22f2108</code></a> FISH-14596 Update all the domain.xml templates to avoid any confusion about w...</li> <li><a href="https://github.com/payara/Payara/commit/cfb6e1eaf506597d1e7758cf03da67e55f885ab6";><code>cfb6e1e</code></a> FISH-14596 Changes to <jmx-connector admin-realm-name> get discarded when any...</li> <li><a href="https://github.com/payara/Payara/commit/46869325d9366c885cd074fb3a93068a374a3126";><code>4686932</code></a> FISH-14596 : Dropped the redundant local var</li> <li>Additional commits viewable in <a href="https://github.com/payara/payara/compare/payara-server-7.2026.9...payara-server-7.2026.10";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
