Bump the gradle-dependencies group across 1 directory with 15 updates #797

dependabot · 2025-10-31T07:26:10Z

Bumps the gradle-dependencies group with 11 updates in the / directory:

Package	From	To
software.amazon.awssdk:sts	`2.33.0`	`2.37.2`
org.commonmark:commonmark	`0.25.1`	`0.27.0`
io.netty:netty-all	`4.2.4.Final`	`4.2.7.Final`
ch.qos.logback:logback-classic	`1.5.18`	`1.5.20`
nl.basjes.gitignore:gitignore-reader	`1.12.0`	`1.12.1`
org.junit.jupiter:junit-jupiter-api	`6.0.0-RC2`	`6.0.0`
org.junit.platform:junit-platform-launcher	`1.13.4`	`6.0.0`
org.projectlombok:lombok	`1.18.38`	`1.18.42`
org.junit.jupiter:junit-jupiter-params	`5.13.4`	`6.0.0`
org.mockito:mockito-core	`5.19.0`	`5.20.0`
org.assertj:assertj-core	`3.27.4`	`3.27.6`

Updates software.amazon.awssdk:sts from 2.33.0 to 2.37.2

Updates software.amazon.awssdk:sso from 2.33.0 to 2.37.2

Updates software.amazon.awssdk:ssooidc from 2.33.0 to 2.37.2

Updates org.commonmark:commonmark from 0.25.1 to 0.27.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.27.0

Added
Autolink extension: Now supports configuration of different link types that should be recognized and converted to links. See AutolinkExtension#builder

Type Default? Description

URL Yes URL with a protocol such as https://example.com

EMAIL Yes Email address such as [email protected]

WWW Yes Address beginning with www such as www.example.com

Note that this changes the behavior of AutolinkExtension.create() to now also include WWW links by default. To re-enable the previous behavior, use:
AutolinkExtension.builder().linkTypes(AutolinkType.URL, AutolinkType.EMAIL).build();
commonmark-java 0.26.0

Changed

A LinkProcessor using replaceWith now also stops outer links from being parsed as links, same as with wrapTextIn. This prevents nested links, see footnotes change below.

Fixed

Fix rendering of image alt text to include contents of code spans (`code`). (#398)

footnotes: Fix footnotes nested within links. Before, both the link and the footnote reference would be parsed and lead to nested <a> elements, which is disallowed. Now, only the footnote is parsed and the outer link becomes plain text; this matches the behavior of links. (#400)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.27.0] - 2025-10-12

Added
Autolink extension: Now supports configuration of different link types that should be recognized and converted to links. See AutolinkExtension#builder

Type Default? Description

URL Yes URL with a protocol such as https://example.com

EMAIL Yes Email address such as [email protected]

WWW Yes Address beginning with www such as www.example.com

Note that this changes the behavior of AutolinkExtension.create() to now also include WWW links by default. To re-enable the previous behavior, use:
AutolinkExtension.builder().linkTypes(AutolinkType.URL, AutolinkType.EMAIL).build();
[0.26.0] - 2025-09-13

Changed

A LinkProcessor using replaceWith now also stops outer links from being parsed as links, same as with wrapTextIn. This prevents nested links, see footnotes change below.

Fixed

Fix rendering of image alt text to include contents of code spans (`code`). (#398)

footnotes: Fix footnotes nested within links. Before, both the link and the footnote reference would be parsed and lead to nested <a> elements, which is disallowed. Now, only the footnote is parsed and the outer link becomes plain text; this matches the behavior of links. (#400)

Commits

70f6819 [maven-release-plugin] prepare release commonmark-parent-0.27.0
d2138af Merge pull request #407 from commonmark/release-0.27.0
9fd4b9a Merge pull request #408 from commonmark/java-25
de91f05 Test on Java 25
c55b0ec Prepare for version 0.27.0
76b2168 Prepare CHANGELOG for version 0.27.0
2a4f4c4 Merge pull request #406 from rdestefa/issue-298-www-links
889709c Typo
53bf47d Fix Test Failure
e49094c Address PR Comments 2
Additional commits viewable in compare view

Updates io.netty:netty-all from 4.2.4.Final to 4.2.7.Final

Commits

511cbac [maven-release-plugin] prepare release netty-4.2.7.Final
bf1cad6 Adjust plugin config to not publish testsuite artifacts
690f56f [maven-release-plugin] rollback the release of netty-4.2.7.Final
63b5232 [maven-release-plugin] prepare for next development iteration
9f99dfd [maven-release-plugin] prepare release netty-4.2.7.Final
551c32a Upgrade publishing plugin
a6660fe [maven-release-plugin] rollback the release of netty-4.2.7.Final
297b7c1 [maven-release-plugin] prepare for next development iteration
2c89a17 [maven-release-plugin] prepare release netty-4.2.7.Final
1782e8c Merge commit from fork
Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.18 to 1.5.20

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.20

2025-10-19 Release of logback version 1.5.20

• Due to potential vulnerabilities associated with dynamic, i.e. runtime, java code compilation and execution (using Janino), the 'condition' attribute within the <if> element is deprecated and will be removed in 2027.

An online migration service is provided to help with the transition.

The <condition> element, new in this version, admits custom PropertyEvaluator as a recommended alternative. See also the updated documentation on conditional configuration.

• Logback-classic's initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 930fb15c993a4344bcecc6ba2225c12a2c38e676 associated with the tag v_1.5.20. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its potential impact on performance.

• In ViewStatusMessagesServlet, restrict processing of "Clear" button to POST method. This change was proposed by Ralf Wiebicke who also provided the relevant PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e572d4f87f06674788eb3ca7148e8d1dffc615fa associated with the tag v_1.5.19. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

930fb15 prepare release 1.5.20
0b4432a provide an alternative to Janino based conditional configuration processing -...
258558f provide an alternative to Janino based conditional configuration processing -...
ee77a70 provide an alternative to Janino based conditional configuration processing -...
5ca7ce8 provide an alternative to Janino based conditional configuration processing -...
728803f fix typo
aa5eeb1 start work on version 1.5.20-SNAPSHOT
e572d4f skip deployment of blackbox and example modules, published as version 1.5.9
4adae8b add plugin for Maven Central deployment
ee70cf4 prepare release 1.5.19
Additional commits viewable in compare view

Updates nl.basjes.gitignore:gitignore-reader from 1.12.0 to 1.12.1

Release notes

Sourced from nl.basjes.gitignore:gitignore-reader's releases.

v1.12.1

What's Changed

fix: Allow email addresses much closer to the official specs. by @nielsbasjes in nielsbasjes/codeowners#277

Full Changelog: nielsbasjes/codeowners@v1.12.0...v1.12.1

Commits

d7ee348 Release: Version v1.12.1
1c55c58 build: Make sure to build under Java 21
247bb30 fix: Allow email addresses much closer to the official specs.
219e79f chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.2
77c68d8 chore(deps): update dependency ch.qos.logback:logback-classic to v1.5.20
c7824bc chore(deps): update dependency org.apache.rat:apache-rat-plugin to v0.17
f0fe7c1 chore(deps): update dependency org.jacoco:jacoco-maven-plugin to v0.8.14
175e321 chore(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.1
4695519 chore(deps): update dependency org.codehaus.mojo:extra-enforcer-rules to v1.11.0
2b6d24d chore(deps): update dependency org.apache.maven.enforcer:enforcer-api to v3.6.2
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 6.0.0-RC2 to 6.0.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

Commits

4f79594 Release 6.0.0
55af30a Revert "Use develop/6.x branch for junit-examples during release build"
df3cfdd Release 5.14.0
fcb84a2 Disable backward compatibility check when offline
c9c8344 Prune 5.14.0 release notes
03d8a72 Update broken link to using API Gaurdian with bndtools
3a0b29b Use temporary JUnit 6 logo
6603caa Rename eclipseClasspath to eclipseConventions to avoid confusion
ab3470b Make sealed MediaType work in Eclipse
a8cd41e Remove annotations not visible in Eclipse
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 6.0.0-RC2 to 6.0.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

Commits

4f79594 Release 6.0.0
55af30a Revert "Use develop/6.x branch for junit-examples during release build"
df3cfdd Release 5.14.0
fcb84a2 Disable backward compatibility check when offline
c9c8344 Prune 5.14.0 release notes
03d8a72 Update broken link to using API Gaurdian with bndtools
3a0b29b Use temporary JUnit 6 logo
6603caa Rename eclipseClasspath to eclipseConventions to avoid confusion
ab3470b Make sealed MediaType work in Eclipse
a8cd41e Remove annotations not visible in Eclipse
Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-launcher from 1.13.4 to 6.0.0

Release notes

Sourced from org.junit.platform:junit-platform-launcher's releases.

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

New Contributors

@eric6iese made their first contribution in junit-team/junit-framework#4717

Full Changelog: junit-team/junit-framework@r6.0.0-M1...r6.0.0-M2

... (truncated)

Commits

See full diff in compare view

Updates org.projectlombok:lombok from 1.18.38 to 1.18.42

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.42 (September 18th, 2025)

FEATURE: All the various @Log annotations now allow you to change their access level (they still default to private). #2280. Thanks to new contributor Liam Pace!

BUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 #3940.

v1.18.40 (September 4th, 2025)

PLATFORM: JDK25 support added #3859.

BUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused java.lang.IllegalArgumentException: Document does not match the AST. [Issue #3886](projectlombok/lombok#3886).

PERFORMANCE: @ExtensionMethod is now significantly faster [Issue #3866](projectlombok/lombok#3866).

BUGFIX: the command line config tool would emit incorrect output for nullity annotations. [Issue #3931](projectlombok/lombok#3931).

FEATURE: @Jacksonized @Accessors(fluent=true) automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue #3265](projectlombok/lombok#3265), [Issue #3270](projectlombok/lombok#3270).

IMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., @JsonProperty) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the config key lombok.copyJacksonAnnotationsToAccessors = true.

Commits

2031eb0 [release] pre-release version bump for v1.18.42
c95a6c1 Merge branch 'logger-access'
71d85ca #2280 Add delivery of this 'access for logging' to the changelog.
99ba3e3 [trivial] Slightly reworded the javadoc on each @Log annotation's `access()...
e9cf11e [trivial][style]
a6d5568 [deprecation] Marked AccessLevel.MODULE as deprecated. It was written for a...
492011d Refactored to use Javac/Eclipse utility function
c1f7f66 Update copyright in logger files
f63f40a Add myself to AUTHORS
9152c34 Fix failing tests
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 5.13.4 to 6.0.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

New Contributors

@eric6iese made their first contribution in junit-team/junit-framework#4717

Full Changelog: junit-team/junit-framework@r6.0.0-M1...r6.0.0-M2

... (truncated)

Commits

4f79594 Release 6.0.0
55af30a Revert "Use develop/6.x branch for junit-examples during release build"
df3cfdd Release 5.14.0
fcb84a2 Disable backward compatibility check when offline
c9c8344 Prune 5.14.0 release notes
03d8a72 Update broken link to using API Gaurdian with bndtools
3a0b29b Use temporary JUnit 6 logo
6603caa Rename eclipseClasspath to eclipseConventions to avoid confusion
ab3470b Make sealed MediaType work in Eclipse
a8cd41e Remove annotations not visible in Eclipse
Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 [(#3730)](mockito/mockito#3730)

Introducing the Ability to Mock Construction of Generic Types (#2401) [(#3729)](mockito/mockito#3729)

Bump com.gradle.develocity from 4.1.1 to 4.2 [(#3726)](mockito/mockito#3726)

Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 [(#3725)](mockito/mockito#3725)

Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 [(#3720)](mockito/mockito#3720)

Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 [(#3719)](mockito/mockito#3719)

Bump actions/setup-java from 4 to 5 [(#3715)](mockito/mockito#3715)

Bump com.gradle.develocity from 4.1 to 4.1.1 [(#3713)](mockito/mockito#3713)

Bump bytebuddy from 1.17.6 to 1.17.7 [(#3712)](mockito/mockito#3712)

test: Use Assume.assumeThat for SequencedCollection tests [(#3711)](mockito/mockito#3711)

Fix #3709 [(#3710)](mockito/mockito#3710)

feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708)

Introducing the Ability to Mock Construction of Generic Types [(#2401)](mockito/mockito#2401)

Commits

3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
37bb3e5 Fix metadata generation on GraalVM (#3710)
ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

2025-09-20 - 11 commit(s) by Adrian-Kim, Giulio Longfils, Rafael Winterhalter, dependabot[bot]

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 [(#3730)](mockito/mockito#3730)

Introducing the Ability to Mock Construction of Generic Types (#2401) [(#3729)](mockito/mockito#3729)

Bump com.gradle.develocity from 4.1.1 to 4.2 [(#3726)](mockito/mockito#3726)

Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 [(#3725)](mockito/mockito#3725)

Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 [(#3720)](mockito/mockito#3720)

Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 [(#3719)](mockito/mockito#3719)

Bump actions/setup-java from 4 to 5 [(#3715)](mockito/mockito#3715)

Bump com.gradle.develocity from 4.1 to 4.1.1 [(#3713)](mockito/mockito#3713)

Bump bytebuddy from 1.17.6 to 1.17.7 [(#3712)](mockito/mockito#3712)

test: Use Assume.assumeThat for SequencedCollection tests [(#3711)](mockito/mockito#3711)

Fix #3709 [(#3710)](mockito/mockito#3710)

feat: Add support for JDK21 Sequenced Collections. [(#3708)](mockito/mockito#3708)

Introducing the Ability to Mock Construction of Generic Types [(#2401)](mockito/mockito#2401)

Commits

3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
37bb3e5 Fix metadata generation on GraalVM (#3710)
ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.4 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@duponter

v3.27.5

⚡ Improvements

Core

ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

Upgrade to Byte Buddy 1.17.7 #3947

Upgrade to JUnit BOM 5.13.4 #3947

Guava

Upgrade to Guava 33.4.8-jre #3947

Commits

716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
e189652 Add missing export for org.assertj.core.annotation (#3951)
0cb489e Update Maven Central URL
7286309 [maven-release-plugin] prepare for next development iteration
dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
1d0defc Add missing permission to release workflow
844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
bdd7106 Add CodeQL custom workflow
a93d7e6 Remove EOL Java 24
26ea866 Update production dependencies (#3947)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | software.amazon.awssdk:sts | `2.33.0` | `2.37.2` | | [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) | `0.25.1` | `0.27.0` | | [io.netty:netty-all](https://github.com/netty/netty) | `4.2.4.Final` | `4.2.7.Final` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.20` | | [nl.basjes.gitignore:gitignore-reader](https://github.com/nielsbasjes/codeowners) | `1.12.0` | `1.12.1` | | [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.0-RC2` | `6.0.0` | | [org.junit.platform:junit-platform-launcher](https://github.com/junit-team/junit-framework) | `1.13.4` | `6.0.0` | | [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.38` | `1.18.42` | | [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.0` | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.19.0` | `5.20.0` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.4` | `3.27.6` | Updates `software.amazon.awssdk:sts` from 2.33.0 to 2.37.2 Updates `software.amazon.awssdk:sso` from 2.33.0 to 2.37.2 Updates `software.amazon.awssdk:ssooidc` from 2.33.0 to 2.37.2 Updates `org.commonmark:commonmark` from 0.25.1 to 0.27.0 - [Release notes](https://github.com/commonmark/commonmark-java/releases) - [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md) - [Commits](commonmark/commonmark-java@commonmark-parent-0.25.1...commonmark-parent-0.27.0) Updates `io.netty:netty-all` from 4.2.4.Final to 4.2.7.Final - [Commits](netty/netty@netty-4.2.4.Final...netty-4.2.7.Final) Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.20 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.18...v_1.5.20) Updates `nl.basjes.gitignore:gitignore-reader` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/nielsbasjes/codeowners/releases) - [Changelog](https://github.com/nielsbasjes/codeowners/blob/main/CHANGELOG.md) - [Commits](nielsbasjes/codeowners@v1.12.0...v1.12.1) Updates `org.junit.jupiter:junit-jupiter-api` from 6.0.0-RC2 to 6.0.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0-RC2...r6.0.0) Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.0-RC2 to 6.0.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0-RC2...r6.0.0) Updates `org.junit.platform:junit-platform-launcher` from 1.13.4 to 6.0.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](https://github.com/junit-team/junit-framework/commits/r6.0.0) Updates `org.projectlombok:lombok` from 1.18.38 to 1.18.42 - [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown) - [Commits](projectlombok/lombok@v1.18.38...v1.18.42) Updates `org.junit.jupiter:junit-jupiter-params` from 5.13.4 to 6.0.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.4...r6.0.0) Updates `org.mockito:mockito-core` from 5.19.0 to 5.20.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.19.0...v5.20.0) Updates `org.mockito:mockito-junit-jupiter` from 5.19.0 to 5.20.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.19.0...v5.20.0) Updates `org.assertj:assertj-core` from 3.27.4 to 3.27.6 - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.6) --- updated-dependencies: - dependency-name: software.amazon.awssdk:sts dependency-version: 2.37.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: software.amazon.awssdk:sso dependency-version: 2.37.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: software.amazon.awssdk:ssooidc dependency-version: 2.37.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.commonmark:commonmark dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: io.netty:netty-all dependency-version: 4.2.7.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: nl.basjes.gitignore:gitignore-reader dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-api dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-engine dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: org.junit.platform:junit-platform-launcher dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: org.projectlombok:lombok dependency-version: 1.18.42 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-params dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gradle-dependencies - dependency-name: org.mockito:mockito-core dependency-version: 5.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-dependencies - dependency-name: org.assertj:assertj-core dependency-version: 3.27.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 31, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the gradle-dependencies group across 1 directory with 15 updates #797

Bump the gradle-dependencies group across 1 directory with 15 updates #797

Uh oh!

dependabot bot commented on behalf of github Oct 31, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Type	Default?	Description
`URL`	Yes	URL with a protocol such as `https://example.com`
`EMAIL`	Yes	Email address such as `[email protected]`
`WWW`	Yes	Address beginning with `www` such as `www.example.com`

Bump the gradle-dependencies group across 1 directory with 15 updates #797

Are you sure you want to change the base?

Bump the gradle-dependencies group across 1 directory with 15 updates #797

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 31, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

commonmark-java 0.27.0

Added

commonmark-java 0.26.0

Changed

Fixed

[0.27.0] - 2025-10-12

Added

[0.26.0] - 2025-09-13

Changed

Fixed

Logback 1.5.20

Logback 1.5.19

v1.12.1

What's Changed

New Contributors

New Contributors

New Contributors

New Contributors

New Contributors

New Contributors

New Contributors

New Contributors

v1.18.42 (September 18th, 2025)

v1.18.40 (September 4th, 2025)

New Contributors

New Contributors

New Contributors

New Contributors

v5.20.0

5.20.0

v5.20.0

5.20.0

v3.27.6

🐛 Bug Fixes

Core

❤️ Contributors

v3.27.5

⚡ Improvements

Core

🔨 Dependency Upgrades

Core

Guava

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 31, 2025 •

edited

Loading