Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2025

Bumps the other-dependencies group with 11 updates in the / directory:

Package From To
ch.qos.logback:logback-classic 1.5.21 1.5.22
org.mockito:mockito-core 5.20.0 5.21.0
org.mockito:mockito-junit-jupiter 5.20.0 5.21.0
org.sonarsource.scanner.maven:sonar-maven-plugin 5.3.0.6276 5.5.0.6356
org.apache.maven.plugins:maven-source-plugin 3.3.1 3.4.0
org.apache.maven.plugins:maven-release-plugin 3.2.0 3.3.1
org.apache.maven.resolver:maven-resolver-connector-basic 1.9.24 1.9.25
org.apache.maven.resolver:maven-resolver-transport-http 1.9.24 1.9.25
org.jetbrains.kotlin:kotlin-stdlib 2.2.21 2.3.0
org.jetbrains.kotlin:kotlin-reflect 2.2.21 2.3.0
org.jetbrains.kotlin:kotlin-maven-plugin 2.2.21 2.3.0

Updates ch.qos.logback:logback-classic from 1.5.21 to 1.5.22

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 572379a prepare release 1.5.22
  • 39d17ea fix status printing of variable substitution when the variable name contains ...
  • 75509a9 fix PR 404, LOGBACK-543
  • 8eb9356 remove unused import
  • 6131a3a use a slightly more sophisticated guard for printing status messages
  • 9efca21 add no-args constructor to support various serialization frameworks
  • 1bea580 minor comment edits
  • bd07fdd update angus, greenmail versions
  • aef993c start work on 1.5.22-SNAPSHOT
  • See full diff in compare view

Updates org.mockito:mockito-core from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

Commits
  • 09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
  • df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
  • 04a6e9f Bump actions/checkout from 5 to 6 (#3765)
  • 756a3cf Add description of matchers to potential mismatch (#3760)
  • 58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
  • 966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
  • 632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
  • 8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
  • bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
  • cffddd4 Bump gradle/actions from 4 to 5 (#3743)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

Commits
  • 09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
  • df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
  • 04a6e9f Bump actions/checkout from 5 to 6 (#3765)
  • 756a3cf Add description of matchers to potential mismatch (#3760)
  • 58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
  • 966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
  • 632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
  • 8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
  • bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
  • cffddd4 Bump gradle/actions from 4 to 5 (#3743)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

Commits
  • 09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
  • df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
  • 04a6e9f Bump actions/checkout from 5 to 6 (#3765)
  • 756a3cf Add description of matchers to potential mismatch (#3760)
  • 58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
  • 966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
  • 632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
  • 8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
  • bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
  • cffddd4 Bump gradle/actions from 4 to 5 (#3743)
  • Additional commits viewable in compare view

Updates org.sonarsource.scanner.maven:sonar-maven-plugin from 5.3.0.6276 to 5.5.0.6356

Release notes

Sourced from org.sonarsource.scanner.maven:sonar-maven-plugin's releases.

5.5.0.6356

Release notes - Sonar Scanner for Maven - 5.5

Task

SCANMAVEN-339 Update parent pom to 86.0.0.3040 and scanner-java-library to 3.5.2.1586

5.4.0.6343

Release notes - Sonar Scanner for Maven - 5.4

Task

SCANMAVEN-323 Split build and SQ scan to speed-up the pipeline

SCANMAVEN-328 Create unified dogfooding GitHub action

SCANMAVEN-329 Prepare next development iteration

SCANMAVEN-331 Add Maven 4.0.0-rc5 to the test suite

SCANMAVEN-337 Update the scanner library to 3.5.1.1568

SCANMAVEN-338 Update parent pom

Commits
  • d2d74f6 SCANMAVEN-339 Update parent pom to 86.0.0.3040 and scanner-java-library to 3....
  • 7497842 Prepare next development iteration 5.5.0-SNAPSHOT (#354)
  • d7a7107 SCANMAVEN-338 Update parent pom to 85.0.0.3035 (#352)
  • 8855fe3 SCANMAVEN-337 update the scanner library to 3.5.0.539 (#350)
  • 7ffc271 SCANMAVEN-331 Add Maven 4.0.0-rc5 to the test suite (#349)
  • 117243b SCANMAVEN-323 Split build and SQ scan to speed-up the pipeline
  • 4150f94 SCANMAVEN-328 Create unified dogfooding GitHub action (#347)
  • e76f85d SCANMAVEN-329 Prepare next development iteration 5.4.0-SNAPSHOT (#348)
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-source-plugin's releases.

3.4.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • ecf937a [maven-release-plugin] prepare release maven-source-plugin-3.4.0
  • 95b3bf4 Revert "[maven-release-plugin] prepare for next development iteration"
  • 7a9a770 [maven-release-plugin] prepare for next development iteration
  • 292c1ce Use plexus-utils version from parent
  • bf79b71 Bump m-invoker-p to 3.9.1
  • 4f3fcb9 Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • a867442 Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • 51c66ac Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5
  • 267df46 Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3
  • ef85324 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.1

Release notes

Sourced from org.apache.maven.plugins:maven-release-plugin's releases.

3.3.1

💥 Breaking changes

🐛 Bug Fixes

📦 Dependency updates

3.3.0

💥 Breaking changes

  • Include "[ci skip]" by default in scmReleaseCommitComment (#1423) @​kwin

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

... (truncated)

Commits
  • 7e8ebac [maven-release-plugin] prepare release maven-release-3.3.1
  • f0f28e5 Revert inclusion of ci skip in release commit msg
  • 2a82901 Bump org.codehaus.plexus:plexus-testing from 2.0.1 to 2.0.2 (#1444)
  • c8613d2 [maven-release-plugin] prepare for next development iteration
  • 2b8adaa [maven-release-plugin] prepare release maven-release-3.3.0
  • 88630f9 Fixed #1426 : Replace archived org.semver:api with custom SemVer implemen...
  • 7af8ace Fix license header in xml files
  • 8914b84 Make implementation of new SemVer policies private for project
  • 7e861f0 Resolve todo that led to pointless asserts (#1442)
  • 422f895 Prefer JDK join method (#1434)
  • Additional commits viewable in compare view

Updates org.apache.maven.resolver:maven-resolver-connector-basic from 1.9.24 to 1.9.25

Release notes

Sourced from org.apache.maven.resolver:maven-resolver-connector-basic's releases.

1.9.25

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e8891ef [maven-release-plugin] prepare release maven-resolver-1.9.25
  • 16072f5 Fix javadocs
  • 645cb05 Add scope support for trusted checksums
  • af1a12a Updated the documentation to reflect the current list of name mappers
  • 82766b0 [1.9.x] TrackingFileManager changes (#1695)
  • 028404f Bump com.github.siom79.japicmp:japicmp-maven-plugin (#1690)
  • ace32f6 [1.9.x] Maven filters daemon friendly (#1682)
  • 09c3fa9 [1.9.x] Remove hack from Basic connector (#1675)
  • c1a8e85 [1.9.x] Name mappers cleanup and new GAECV mapper (#1674)
  • f181c06 [1.9.x] Fix locking issues (#1662)
  • Additional commits viewable in compare view

Updates org.apache.maven.resolver:maven-resolver-transport-http from 1.9.24 to 1.9.25

Updates org.jetbrains.kotlin:kotlin-stdlib from 2.2.21 to 2.3.0

Release notes

Sourced from org.jetbrains.kotlin:kotlin-stdlib's releases.

Kotlin 2.3.0-RC3

Changelog

Compiler

  • KT-82869 Green-to-Red change in 2.3 after prioritizing non-suspend-function-type overloads

Libraries

  • KT-82901 Long.MIN_VALUE.milliseconds produces invalid denormalized Duration

Kotlin 2.3.0-RC2

Changelog

Compiler

  • KT-82590 ClassCastException when instantiating class with generics implemented by fun interface and lambda

Tools. Compiler Plugin API

  • KT-82563 Improve compiler error messages to identify incompatible plugins causing compilation failures

Kotlin 2.3.0-RC

Changelog

Backend. Wasm

  • KT-82075 K/Wasm: kotlin.wasm.internal.getSimpleName crashes on iOS Safari older than 26

Compiler

  • KT-82138 Debugger: Cannot evaluate JvmInline value class parameter
  • KT-78413 Kotlin Debugger: value classes as context parameters have incorrect names in Variables View during debugging
  • KT-80549 Call of Java method with type parameter bounds: Expected FirResolvedTypeRef with ConeKotlinType but was FirJavaTypeRef
  • KT-82132 False-positive type mismatch with -language-version 2.2
  • KT-81988 K2: Any?.toString() causes NPE inside lambda with Java
  • KT-82022 K/N: Unexpected "Annotation @JvmInline is missing on actual declaration" warning with value classes

Compose compiler

  • CMP-9167 iOS: Platform declaration clash: The following functions have the same IR signature

IR. Actualizer

  • KT-77337 IrNoExpectSymbolsHandler finds expect class reference after enabling annotation traversal in IR

IR. Tree

  • KT-81952 "IllegalStateException: Callable reference with vararg should not appear at this stage" for callable references to functions with generic vararg parameters

... (truncated)

Commits

Updates org.jetbrains.kotlin:kotlin-reflect from 2.2.21 to 2.3.0

Release notes

Sourced from org.jetbrains.kotlin:kotlin-reflect's releases.

Kotlin 2.3.0-RC3

Changelog

Compiler

  • KT-82869 Green-to-Red change in 2.3 after prioritizing non-suspend-function-type overloads

Libraries

  • KT-82901 Long.MIN_VALUE.milliseconds produces invalid denormalized Duration

Kotlin 2.3.0-RC2

Changelog

Compiler

  • KT-82590 ClassCastException when instantiating class with generics implemented by fun interface and lambda

Tools. Compiler Plugin API

  • KT-82563 Improve compiler error messages to identify incompatible plugins causing compilation failures

Kotlin 2.3.0-RC

Changelog

Backend. Wasm

  • KT-82075 K/Wasm: kotlin.wasm.internal.getSimpleName crashes on iOS Safari older than 26

Compiler

  • KT-82138 Debugger: Cannot evaluate JvmInline value class parameter
  • KT-78413 Kotlin Debugger: value classes as context parameters have incorrect names in Variables View during debugging
  • KT-80549 Call of Java method with type parameter bounds: Expected FirResolvedTypeRef with ConeKotlinType but was FirJavaTypeRef
  • KT-82132 False-positive type mismatch with -language-version 2.2
  • KT-81988 K2: Any?.toString() causes NPE inside lambda with Java
  • KT-82022 K/N: Unexpected "Annotation @JvmInline is missing on actual declaration" warning with value classes

Compose compiler

  • CMP-9167 iOS: Platform declaration clash: The following functions have the same IR signature

IR. Actualizer

  • KT-77337 IrNoExpectSymbolsHandler finds expect class reference after enabling annotation traversal in IR

IR. Tree

  • KT-81952 "IllegalStateException: Callable reference with vararg should not appear at this stage" for callable references to functions with generic vararg parameters

... (truncated)

Commits

Updates org.jetbrains.kotlin:kotlin-maven-plugin from 2.2.21 to 2.3.0

Updates org.jetbrains.kotlin:kotlin-reflect from 2.2.21 to 2.3.0

Release notes

Sourced from

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 16, 2025
…h 11 updates

Bumps the other-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.21` | `1.5.22` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.20.0` | `5.21.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.20.0` | `5.21.0` |
| [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven) | `5.3.0.6276` | `5.5.0.6356` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.2.0` | `3.3.1` |
| [org.apache.maven.resolver:maven-resolver-connector-basic](https://github.com/apache/maven-resolver) | `1.9.24` | `1.9.25` |
| org.apache.maven.resolver:maven-resolver-transport-http | `1.9.24` | `1.9.25` |
| [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.2.21` | `2.3.0` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.2.21` | `2.3.0` |



Updates `ch.qos.logback:logback-classic` from 1.5.21 to 1.5.22
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.21...v_1.5.22)

Updates `org.mockito:mockito-core` from 5.20.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.21.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.20.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.21.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.20.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.21.0)

Updates `org.sonarsource.scanner.maven:sonar-maven-plugin` from 5.3.0.6276 to 5.5.0.6356
- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)
- [Commits](SonarSource/sonar-scanner-maven@5.3.0.6276...5.5.0.6356)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.2.0 to 3.3.1
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.2.0...maven-release-3.3.1)

Updates `org.apache.maven.resolver:maven-resolver-connector-basic` from 1.9.24 to 1.9.25
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](apache/maven-resolver@maven-resolver-1.9.24...maven-resolver-1.9.25)

Updates `org.apache.maven.resolver:maven-resolver-transport-http` from 1.9.24 to 1.9.25

Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.21 to 2.3.0

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.21 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/commits)

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.21 to 2.3.0

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin
  dependency-version: 5.5.0.6356
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-connector-basic
  dependency-version: 1.9.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-transport-http
  dependency-version: 1.9.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/other-dependencies-b4a0cb0a84 branch from 3aba117 to b9cc8d8 Compare December 16, 2025 10:47
@sonarqubecloud
Copy link

@jjjasper jjjasper merged commit 2c1edc7 into main Dec 16, 2025
3 checks passed
@dependabot dependabot bot deleted the dependabot/maven/other-dependencies-b4a0cb0a84 branch December 16, 2025 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants