Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2025

Bumps the build-dependencies group with 10 updates:

Package From To
org.apache.groovy:groovy-jsr223 5.0.0 5.0.1
org.apache.groovy:groovy 5.0.0 5.0.1
org.apache.groovy:groovy-ant 5.0.0 5.0.1
org.springframework:spring-expression 6.2.10 6.2.11
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-surefire-report-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.1
org.apache.maven.plugins:maven-wrapper-plugin 3.3.3 3.3.4
com.gradle:common-custom-user-data-maven-extension 2.0.5 2.0.6

Updates org.apache.groovy:groovy-jsr223 from 5.0.0 to 5.0.1

Commits

Updates org.apache.groovy:groovy from 5.0.0 to 5.0.1

Commits

Updates org.apache.groovy:groovy-ant from 5.0.0 to 5.0.1

Commits

Updates org.springframework:spring-expression from 6.2.10 to 6.2.11

Release notes

Sourced from org.springframework:spring-expression's releases.

v6.2.11

⭐ New Features

  • Missing @Nullable on JsonPathAssertions.isEqualTo #35445
  • Graceful fallback for non-default NIO.2 FileSystems #35443
  • Avoid thread pinning in SseEmitter, ResponseBodyEmitter #35423
  • Detect Informix error codes as DuplicateKeyException #35400
  • Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #35377
  • Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #35372
  • StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #35371

🐞 Bug Fixes

  • "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #35409
  • Annotation not found on parameter in overridden method unless method is public #35349
  • Annotations on overridden methods not found in type hierarchy with unresolved generics #35342
  • Performance degradation when using singleton beans with Provider #35330
  • JettyClientHttpConnector buffer leak in Spring Framework 6.2 #35319
  • Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #35316

📔 Documentation

  • Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #35410
  • Fix links to Reactive Libraries and RestTemplate #35392
  • Fix broken link in WebDriver docs #35374
  • Document Web DataBinder support for RouterFunction #35367
  • Improve documentation for ApplicationEvents to clarify recommended usage #35335
  • Document terms and units in DataSize.parse() #35298
  • Refine @Contract Javadoc #35285
  • Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #35212

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.11 #35455
  • Upgrade to Reactor 2024.0.10 #35454

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

Commits
  • 4c13425 Release v6.2.11
  • d17601e Upgrade to Undertow 2.3.19, RxJava 3.1.11, Aalto 1.3.3
  • 5b38761 Clarify intended nestedTransactionAllowed default in JpaTransactionManager
  • 0e3e34b Find annotations on parameters in overridden non-public methods
  • 4745c7c Name local variables consistently
  • 275fb52 Upgrade to Reactor 2024.0.10 and Micrometer 1.14.11
  • 7f9aa39 Polishing
  • c788554 Avoid thread pinning in SseEmitter, ResponseBodyEmitter
  • 9e8c640 Make JsonPathAssertions#isEqualTo parameter nullable
  • ebb8e34 Upgrade to Jetty 12.0.26, Jetty Reactive HttpClient 4.0.11, Netty 4.1.127, Ht...
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-report-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-report-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-shade-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-shade-plugin's releases.

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 9662c98 [maven-release-plugin] prepare for next development iteration
  • 06902bd [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 29e9a9d add .git
  • 844e61a use github
  • 43101f9 [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 2ffb28d use release drafter v4 and dependabot to updade gha as well (#750)
  • f5b590e Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • eee0319 Bump org.hamcrest:hamcrest-core from 2.2 to 3.0
  • 0d5a7a4 fix upgrade, remove those useless final
  • 6e5f0f3 Bump org.apache.maven.plugins:maven-plugins from 42 to 45
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-wrapper-plugin from 3.3.3 to 3.3.4

Release notes

Sourced from org.apache.maven.plugins:maven-wrapper-plugin's releases.

3.3.4

🐛 Bug Fixes

👻 Maintenance

  • Ensure Path Traversal is fully addressed in MavenWrapperDownloader (#363) @​hazendaz
Commits
  • 524486a [maven-release-plugin] prepare release maven-wrapper-3.3.4
  • 17c1ec9 Revert wrapper version removal (#365)
  • 366207f Ensure Path Traversal is fully addressed in MavenWrapperDownloader
  • 086b1c9 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.gradle:common-custom-user-data-maven-extension from 2.0.5 to 2.0.6

Release notes

Sourced from com.gradle:common-custom-user-data-maven-extension's releases.

2.0.6

  • [FIX] GitHub Actions build link doesn't include run attempt
Commits
  • 1d91ded [maven-release-plugin] prepare release v2.0.6
  • ed8dd90 Prepare for 2.0.6 release
  • 4a04ad0 Merge pull request #313 from gradle/guylabs/remove-enterprise-samples-gradle-...
  • 5c6ab39 Remove references to enterprise-samples.gradle.com
  • 1ea051f Combined PRs (#312)
  • 6ca5c40 Merge pull request #309 from gradle/erichaagdev/github-rerun-support
  • 0dd90ed Add better support for GitHub Actions reruns
  • 122cd60 Update to use version 2.0.5 of the Common Custom User Data Maven Extension
  • c8129b7 Prepare for next round of development
  • ec25348 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 16, 2025
@marko-bekhta
Copy link
Member

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Bumps the build-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.groovy:groovy-jsr223](https://github.com/apache/groovy) | `5.0.0` | `5.0.1` |
| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `5.0.0` | `5.0.1` |
| [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) | `5.0.0` | `5.0.1` |
| [org.springframework:spring-expression](https://github.com/spring-projects/spring-framework) | `6.2.10` | `6.2.11` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-surefire-report-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.1` |
| [org.apache.maven.plugins:maven-wrapper-plugin](https://github.com/apache/maven-wrapper) | `3.3.3` | `3.3.4` |
| [com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension) | `2.0.5` | `2.0.6` |


Updates `org.apache.groovy:groovy-jsr223` from 5.0.0 to 5.0.1
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy` from 5.0.0 to 5.0.1
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.0.0 to 5.0.1
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.springframework:spring-expression` from 6.2.10 to 6.2.11
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.10...v6.2.11)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...v3.6.1)

Updates `org.apache.maven.plugins:maven-wrapper-plugin` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](apache/maven-wrapper@maven-wrapper-3.3.3...maven-wrapper-3.3.4)

Updates `com.gradle:common-custom-user-data-maven-extension` from 2.0.5 to 2.0.6
- [Release notes](https://github.com/gradle/common-custom-user-data-maven-extension/releases)
- [Commits](gradle/common-custom-user-data-maven-extension@v2.0.5...v2.0.6)

---
updated-dependencies:
- dependency-name: org.apache.groovy:groovy-jsr223
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.groovy:groovy
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.springframework:spring-expression
  dependency-version: 6.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.apache.maven.plugins:maven-wrapper-plugin
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: com.gradle:common-custom-user-data-maven-extension
  dependency-version: 2.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@marko-bekhta marko-bekhta force-pushed the dependabot/maven/build-dependencies-14d64d7f06 branch from c138525 to e903b71 Compare September 16, 2025 07:25
to help dependabot "deal" with versions

Signed-off-by: marko-bekhta <[email protected]>
with the new plugin version

Signed-off-by: marko-bekhta <[email protected]>
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@marko-bekhta marko-bekhta merged commit 3e51a2a into main Sep 16, 2025
9 checks passed
@dependabot dependabot bot deleted the dependabot/maven/build-dependencies-14d64d7f06 branch September 16, 2025 13:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file java Pull requests that update Java code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant