fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.plugins:maven-gpg-plugin (source)	3.1.0 -> 3.2.8
org.jacoco:jacoco-maven-plugin (source)	0.8.11 -> 0.8.14
org.sonatype.central:central-publishing-maven-plugin (source)	0.7.0 -> 0.9.0
org.codehaus.mojo:versions-maven-plugin (source)	2.16.2 -> 2.19.1
org.springframework.security:spring-security-web (source)	5.7.13 -> 5.8.16
org.springframework.security:spring-security-core (source)	5.7.14 -> 5.8.16
org.springframework.security:spring-security-config (source)	5.4.10 -> 5.8.16
org.apache.maven.plugins:maven-surefire-plugin (source)	3.2.2 -> 3.5.4
org.springframework.boot:spring-boot-test-autoconfigure (source)	2.3.12.RELEASE -> 2.7.18
org.springframework.boot:spring-boot-test (source)	2.3.12.RELEASE -> 2.7.18
org.apache.maven.plugins:maven-source-plugin (source)	3.3.0 -> 3.3.1
org.springframework.boot:spring-boot (source)	2.3.12.RELEASE -> 2.7.18
org.springframework:spring-webmvc	5.2.22.RELEASE -> 5.3.39
org.springframework:spring-test	5.2.22.RELEASE -> 5.3.39
org.springframework:spring-context	5.2.22.RELEASE -> 5.3.39
org.apache.maven.plugins:maven-javadoc-plugin (source)	3.6.3 -> 3.12.0
org.springframework:spring-beans	5.2.22.RELEASE -> 5.3.39
org.apache.maven.plugins:maven-failsafe-plugin (source)	3.2.2 -> 3.5.4
org.thymeleaf:thymeleaf (source)	3.0.15.RELEASE -> 3.1.3.RELEASE
org.springframework.boot:spring-boot-configuration-processor (source)	2.3.12.RELEASE -> 2.7.18
org.mockito:mockito-core	5.8.0 -> 5.20.0
org.apache.maven.plugins:maven-compiler-plugin (source)	3.11.0 -> 3.14.1
com.spotify.fmt:fmt-maven-plugin	2.21.1 -> 2.29
org.junit.jupiter:junit-jupiter (source)	5.10.1 -> 5.14.0
org.assertj:assertj-core (source)	3.24.2 -> 3.27.6
io.micrometer:micrometer-registry-prometheus	1.12.0 -> 1.15.5
io.micrometer:micrometer-core	1.12.0 -> 1.15.5
com.fasterxml.jackson.core:jackson-databind (source)	2.13.4.2 -> 2.20.0
io.jsonwebtoken:jjwt	0.9.1 -> 0.13.0
com.maxmind.geoip2:geoip2 (source)	2.14.0 -> 2.17.0
org.springframework.data:spring-data-commons (source)	2.7.2 -> 2.7.18
com.fasterxml.jackson.core:jackson-annotations (source)	2.13.4 -> 2.20

---

Release Notes

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.14: 0.8.14

Compare Source

New Features

• JaCoCo now officially supports Java 25 (GitHub #​1950).
• Experimental support for Java 26 class files (GitHub #​1870).
• Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #​1655).
• Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #​1814, #​1954).
• Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #​1956).
• Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #​1929).
• Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #​1945).
• Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #​1871).
• Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #​1911).
• Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #​1885, #​1970, #​1971).

Fixed bugs

• Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #​1813, #​1940).
• Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #​1813, #​1940).
  Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #​1819).

Non-functional Changes

• JaCoCo now depends on ASM 9.9 (GitHub #​1965).

v0.8.13: 0.8.13

Compare Source

New Features

• JaCoCo now officially supports Java 23 and Java 24 (GitHub #​1757, #​1631, #​1867).
• Experimental support for Java 25 class files (GitHub #​1807).
• Calculation of line coverage for Kotlin inline functions (GitHub #​1670).
• Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #​1670, #​1700).
• Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #​1700).
• Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #​1616).
• Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #​1475).
• Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #​1283).
• Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #​1774).
• Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #​1769).
• Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #​1810, #​1818).
• Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #​1625).
• Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #​1768).

Fixed bugs

• Fixed interpretation of Kotlin SMAP (GitHub #​1525).
• File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #​1660).

Non-functional Changes

• JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #​1708, #​1707, #​1681).
• JaCoCo now depends on ASM 9.8 (GitHub #​1862).
• More context information when IllegalArgumentException occurs during reading of zip file (GitHub #​1833).

v0.8.12: 0.8.12

Compare Source

New Features

• JaCoCo now officially supports Java 22 (GitHub #​1596).
• Experimental support for Java 23 class files (GitHub #​1553).

Fixed bugs

• Branches added by the Kotlin compiler for functions with default arguments and having more than 32 parameters are filtered out during generation of report (GitHub #​1556).
• Branch added by the Kotlin compiler version 1.5.0 and above for reading from lateinit property is filtered out during generation of report (GitHub #​1568).

Non-functional Changes

• JaCoCo now depends on ASM 9.7 (GitHub #​1600).

mojohaus/versions (org.codehaus.mojo:versions-maven-plugin)

v2.19.1

Compare Source

🐛 Bug Fixes

• Resolves #​1270: Ensuring thread safety when creating VersionsHelper (#​1273) @​andrzejj0
• Resolves #​1266: Applying the include filter during association resolution (#​1274) @​andrzejj0

📝 Documentation updates

• Resolves #​1271: Fixed broken Site links (#​1275) @​andrzejj0

v2.19.0

Compare Source

💥 Breaking changes

• Removed numeric and mercury comparators, further refactoring (#​1222) @​andrzejj0

🚀 New features and improvements

• Parallel version updates (#​1207) @​andrzejj0
• Fixes #​1140: Added showVersionless (default true) (#​1187) @​andrzejj0

🐛 Bug Fixes

• Resolves #​1227: revert working in case of a non-standard "pom.xml" filename (#​1263) @​andrzejj0
• Resolves #​1255: set-property special case when a property has no value (#​1261) @​andrzejj0
• Resolves #​1251: nextSnapshotIndexToIncrement should zeros on the right (#​1262) @​andrzejj0
• Fixed #​1233- set-property in profile without module property (#​1234) @​mcarlett
• Fix closing code tags (#​1206) @​pzygielo
• Resolves #​1197: Handling a no-version case in dependencyManagement for CompareDependenciesMojo (#​1198) @​andrzejj0
• Fixed the failed release build (#​1194) @​andrzejj0
• Fixed #​1191: Processes (all) profiles from original model if transitive is false (#​1193) @​andrzejj0
• Fixes #​1140 for reports (#​1188) @​andrzejj0
• Fixes #​1140: Added showVersionless (default true) (#​1187) @​andrzejj0
• Fixes #​1182 and #​1184: Bug fixes (#​1185) @​andrzejj0

👻 Maintenance

• Remove manual default from docs for parameters (#​1264) @​slawekjaranowski
• Use default configuration for release-drafter (#​1256) @​slawekjaranowski
• Bump project version to 2.19.0-SNAPSHOT (#​1237) @​slawekjaranowski
• Exposing the problem causing artifact if Resolver throws an exception (#​1224) @​andrzejj0
• Site fix for rule-2.1.0.xsd and rule-2.0.0.xsd; getOutputPath() for reports (#​1223) @​andrzejj0
• Removed numeric and mercury comparators, further refactoring (#​1222) @​andrzejj0
• Pom helper refactoring (#​1221) @​andrzejj0
• PR Automation only on close event (#​1220) @​slawekjaranowski
• Refactoring: ArtifactFactory and ArtifactVersionService (#​1218) @​andrzejj0
• Versions refactor 2 (#​1204) @​andrzejj0
• Refactoring: coalesce use-- goals. (#​1202) @​andrzejj0
• PR Automation - must use pull_request_target (#​1205) @​slawekjaranowski
• Add PR Automation (#​1201) @​slawekjaranowski

📦 Dependency updates

• Bump actions/stale from 9 to 10 (#​1265) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#​1260) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#​1259) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.6 to 1.17.7 (#​1258) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#​1257) @​dependabot[bot]
• Bump org.apache.commons:commons-text from 1.13.1 to 1.14.0 (#​1254) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.18.0 to 1.19.0 (#​1253) @​dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#​1252) @​dependabot[bot]
• Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#​1249) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#​1248) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.5 to 1.17.6 (#​1247) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 87 to 91 (#​1246) @​dependabot[bot]
• Bump com.fasterxml.woodstox:woodstox-core from 7.1.0 to 7.1.1 (#​1244) @​dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.10.1 to 1.11.0 (#​1243) @​dependabot[bot]
• Bump org.apache.commons:commons-collections4 from 4.4 to 4.5.0 (#​1236) @​dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#​1235) @​dependabot[bot]
• Bump org.apache.commons:commons-text from 1.13.0 to 1.13.1 (#​1232) @​dependabot[bot]
• Bump org.apache.poi:poi-ooxml from 3.17 to 5.4.0 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#​1231) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-interactivity-api from 1.3 to 1.4 (#​1230) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.4 to 1.17.5 (#​1228) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.2 to 1.17.4 (#​1226) @​dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.10.0 to 1.10.1 (#​1215) @​dependabot[bot]
• Bump byteBuddyVersion from 1.17.1 to 1.17.2 (#​1219) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.17.2 to 1.18.0 (#​1211) @​dependabot[bot]
• Bump byteBuddyVersion from 1.16.1 to 1.17.1 (#​1216) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 86 to 87 (#​1214) @​dependabot[bot]
• Bump byteBuddyVersion from 1.15.11 to 1.16.1 (#​1210) @​dependabot[bot]
• Bump commons-beanutils:commons-beanutils from 1.9.4 to 1.10.0 (#​1208) @​dependabot[bot]
• Bump commons-codec:commons-codec from 1.17.1 to 1.17.2 (#​1209) @​dependabot[bot]
• Bump byteBuddyVersion from 1.15.10 to 1.15.11 (#​1195) @​dependabot[bot]
• Bump org.apache.commons:commons-text from 1.12.0 to 1.13.0 (#​1196) @​dependabot[bot]
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#​1186) @​dependabot[bot]

v2.18.0

Compare Source

❗ NOTICE

Due to Doxia 2.x stack maven-site-plugin 3.20+ is required.
https://cwiki.apache.org/confluence/display/MAVEN/Towards+Doxia+2.0.0+Stack

Direct reports execution store reports in directory target/reports instead of target/site

Changes

🚀 New features and improvements

• Upgrade to Doxia 2.x stack (#​1180) @​slawekjaranowski
• Remove implementation of dynamic version goal (#​1179) @​slawekjaranowski
• fix: Removed non-fully functional dynamic version goal (#​1172) @​jimisola
• Resolves #​1131: Suppress logging when allowMajorUpdates, allowMinorUp… (#​1132) @​gmshake
• Move expression: {blah} no value System.out to logs (#​1119) @​JackPGreen
• Improve speed of versions:resolve-ranges in case parents contain many version properties (#​1122) @​m-schutte-ohra-nl

🐛 Bug Fixes

• Resolves #​1060: Bugfix in UpdateParentMojo + add tests (#​1181) @​andrzejj0
• Resolves#1066: Fixed a possible NPE in interpolateVersion (#​1166) @​andrzejj0
• Resolves #​1067: Bug fix: incorrect arguments of PomHelper::createProjectBuilderRequest (#​1164) @​andrzejj0
• Resolves #​1137: using PomHelper.getGroupId if groupId of the current project root is empty (#​1162) @​andrzejj0
• bugix/ protect internal data in multi thread env. (#​1133) @​jgraglia
• Fixed #​1123 - Missing link in examples to recoding changes and use dy… (#​1124) @​khmarbaise

📦 Dependency updates

• Upgrade to Doxia 2.x stack (#​1180) @​slawekjaranowski
• Bump byteBuddyVersion from 1.15.7 to 1.15.10 (#​1173) @​dependabot
• Bump com.fasterxml.woodstox:woodstox-core from 7.0.0 to 7.1.0 (#​1171) @​dependabot
• Bump org.codehaus.groovy:groovy-all from 2.0.0 to 2.4.21 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#​1161) @​dependabot
• Bump byteBuddyVersion from 1.15.5 to 1.15.7 (#​1163) @​dependabot
• Bump byteBuddyVersion from 1.15.4 to 1.15.5 (#​1160) @​dependabot
• Bump byteBuddyVersion from 1.15.3 to 1.15.4 (#​1156) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 85 to 86 (#​1139) @​dependabot
• Bump byteBuddyVersion from 1.15.1 to 1.15.3 (#​1151) @​dependabot
• Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (#​1148) @​dependabot
• Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#​1143) @​dependabot
• Bump byteBuddyVersion from 1.15.0 to 1.15.1 (#​1135) @​dependabot
• Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 (#​1136) @​dependabot
• Bump byteBuddyVersion from 1.14.19 to 1.15.0 (#​1134) @​dependabot
• Bump byteBuddyVersion from 1.14.18 to 1.14.19 (#​1129) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 84 to 85 (#​1128) @​dependabot
• Bump org.apache.commons:commons-lang3 from 3.15.0 to 3.16.0 (#​1126) @​dependabot
• Bump org.hamcrest:hamcrest from 2.2 to 3.0 (#​1125) @​dependabot
• Bump commons-codec:commons-codec from 1.17.0 to 1.17.1 (#​1117) @​dependabot
• Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.15.0 (#​1118) @​dependabot

📝 Documentation updates

• Fix #​1144 / appends .+ to .+-(alpha|beta) (#​1145) @​onacit

👻 Maintenance

• Drop Maven Wrapper from project (#​1178) @​slawekjaranowski
• Bump project version to 2.18.0-SNAPSHOT (#​1177) @​slawekjaranowski
• Move to modello-stax (#​1176) @​andrzejj0
• Using Stax2 (Woodstox) instead of plexus-xml (Xpp) to process XML (#​1174) @​andrzejj0
• Resolves#1169: Clean-up, remove deprecated methods, remove Plexus StringUtils in favour of Apache Commons (#​1170) @​andrzejj0
• Update site descriptor to 2.x (#​1167) @​slawekjaranowski
• Disable ITs with not set CI Friendly with newer Maven version (#​1152) @​slawekjaranowski

🔧 Build

• Use shared release drafter GH Action (#​1127) @​slawekjaranowski

v2.17.1

Compare Source

Changes

🐛 Bug Fixes

• Revert #​1051 - fix #​1110, #​1103 (#​1115) @​slawekjaranowski
• Fix includeParent field value not matching Parameter#defaultValue (#​1104) @​Marcono1234

📦 Dependency updates

• Bump byteBuddyVersion from 1.14.17 to 1.14.18 (#​1114) @​dependabot
• Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#​1108) @​dependabot

👻 Maintenance

• Extract Pattern.compile to static variable (#​1116) @​slawekjaranowski
• Improve ITs for set goal (#​1112) @​slawekjaranowski
• Remove default values from invoker.properties (#​1111) @​slawekjaranowski
• Remove default value for invoker.buildResult (#​1109) @​slawekjaranowski
• Improve ITs for set goal (#​1107) @​slawekjaranowski

v2.17.0

Compare Source

Changes

🚀 New features and improvements

• feat: Add Dynamic Versioning SCM plugin (#​1082) @​jimisola
• Add range type in ignoreVersion (#​1093) @​slawekjaranowski
• Require Maven 3.6.3, dependencies cleanups (#​1089) @​slawekjaranowski
• Use new Enforcer Api (#​1056) @​slawekjaranowski

🐛 Bug Fixes

• Resolves #​1042: Fixed set logic wrt processAllModules (#​1051) @​jarmoniuk

📦 Dependency updates

• Bump com.fasterxml.woodstox:woodstox-core from 6.6.2 to 7.0.0 (#​1099) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 82 to 84 (#​1087) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 80 to 82 (#​1078) @​dependabot
• Bump org.apache.maven.shared:maven-common-artifact-filters from 3.3.2 to 3.4.0 (#​1086) @​dependabot
• Bump byteBuddyVersion from 1.14.16 to 1.14.17 (#​1084) @​dependabot
• Bump byteBuddyVersion from 1.14.15 to 1.14.16 (#​1081) @​dependabot
• Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (#​1080) @​dependabot
• Bump byteBuddyVersion from 1.14.14 to 1.14.15 (#​1075) @​dependabot
• Bump byteBuddyVersion from 1.14.13 to 1.14.14 (#​1072) @​dependabot
• Bump commons-codec:commons-codec from 1.16.1 to 1.17.0 (#​1074) @​dependabot
• Bump org.apache.commons:commons-text from 1.11.0 to 1.12.0 (#​1069) @​dependabot
• Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#​1068) @​dependabot
• Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#​1065) @​dependabot
• Bump byteBuddyVersion from 1.14.12 to 1.14.13 (#​1063) @​dependabot
• Bump commons-io:commons-io from 2.15.1 to 2.16.0 (#​1064) @​dependabot
• Bump com.fasterxml.woodstox:woodstox-core from 6.6.1 to 6.6.2 (#​1062) @​dependabot
• Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2 (#​1061) @​dependabot
• Bump apache/maven-gh-actions-shared from 3 to 4 (#​1059) @​dependabot
• Bump com.fasterxml.woodstox:woodstox-core from 6.6.0 to 6.6.1 (#​1058) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 78 to 80 (#​1054) @​dependabot
• Bump org.postgresql:postgresql from 42.4.3 to 42.7.2 in /versions-maven-plugin/src/it/it-property-updates-report-002-slow (#​1053) @​dependabot
• Bump byteBuddyVersion from 1.14.11 to 1.14.12 (#​1050) @​dependabot
• Bump org.codehaus.plexus:plexus-interactivity-api from 1.2 to 1.3 (#​1045) @​dependabot
• Bump commons-codec:commons-codec from 1.16.0 to 1.16.1 (#​1049) @​dependabot
• Bump com.fasterxml.woodstox:woodstox-core from 6.5.1 to 6.6.0 (#​1041) @​dependabot
• Bump release-drafter/release-drafter from 5 to 6 (#​1044) @​dependabot
• Bump org.codehaus.mojo:mojo-parent from 77 to 78 (#​1038) @​dependabot
• Bump org.codehaus.plexus:plexus-interactivity-api from 1.1 to 1.2 (#​1036) @​dependabot
• Manage byte-buddy version in order to support build with JDK 21 (#​1040) @​slawekjaranowski
• Bump actions/stale from 8 to 9 (#​1032) @​dependabot
• Bump org.codehaus.plexus:plexus-archiver from 4.9.0 to 4.9.1 ([#&

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.