From dadbfe8c2cc9143c77ec725fb407a8300c26a650 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Oct 2025 09:58:26 +0000
Subject: [PATCH 1/3] [12.1.x EE8] Bump the dev-dependencies group

Bumps the dev-dependencies group in /jetty-ee8 with 39 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.shared:maven-filtering](https://github.com/apache/maven-filtering) | `3.3.0` | `3.4.0` |
| org.ow2.asm:asm | `9.8` | `9.9` |
| org.ow2.asm:asm-commons | `9.8` | `9.9` |
| org.ow2.asm:asm-bom | `9.8` | `9.9` |
| org.apache.maven.surefire:surefire-junit47 | `3.5.3` | `3.5.4` |
| org.eclipse.jetty.toolchain:jetty-test-helper | `6.3` | `6.4` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.18.3` | `2.20.0` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.0.Final` | `4.2.6.Final` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.2` | `5.14.0` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.19` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.1` | `2.13.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.18.0` | `1.19.0` |
| [commons-io:commons-io](https://github.com/apache/commons-io) | `2.19.0` | `2.20.0` |
| [io.grpc:grpc-core](https://github.com/grpc/grpc-java) | `1.72.0` | `1.76.0` |
| [io.smallrye.common:smallrye-common-cpu](https://github.com/smallrye/smallrye-common) | `2.8.0` | `2.13.9` |
| [net.java.dev.jna:jna](https://github.com/java-native-access/jna) | `5.17.0` | `5.18.1` |
| [net.java.dev.jna:jna-jpms](https://github.com/java-native-access/jna) | `5.17.0` | `5.18.1` |
| [net.minidev:json-smart](https://github.com/netplex/json-smart-v2) | `2.5.2` | `2.6.0` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.27.1` | `1.28.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.19.0` |
| org.apache.logging.log4j:log4j-api | `2.25.0` | `2.25.2` |
| [org.apache.maven.resolver:maven-resolver-api](https://github.com/apache/maven-resolver) | `1.9.22` | `1.9.24` |
| org.apache.maven.resolver:maven-resolver-supplier | `1.9.22` | `1.9.24` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.82` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.82` |
| [org.bouncycastle:bctls-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.82` |
| [org.bouncycastle:bcutil-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.82` |
| [org.eclipse.jdt:ecj](https://github.com/eclipse-jdt/eclipse.jdt.core) | `3.42.0` | `3.43.0` |
| [org.eclipse.sisu:org.eclipse.sisu.plexus](https://github.com/eclipse-sisu/sisu-project) | `0.9.0.M3` | `0.9.0.M4` |
| [org.jboss.logging:jboss-logging-annotations](https://github.com/jboss-logging/jboss-logging-tools) | `3.0.3.Final` | `3.0.4.Final` |
| [org.jboss.logging:jboss-logging-processor](https://github.com/jboss-logging/jboss-logging-tools) | `3.0.3.Final` | `3.0.4.Final` |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.4` | `3.5.6` |
| [org.junit.platform:junit-platform-engine](https://github.com/junit-team/junit-framework) | `1.13.2` | `1.14.0` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.23.0` | `10.26.1` |
| [eu.maveniverse.maven.njord:extension3](https://github.com/maveniverse/njord) | `0.8.2` | `0.8.4` |
| [eu.maveniverse.maven.plugins:njord](https://github.com/maveniverse/njord) | `0.8.2` | `0.8.4` |
| [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) | `2.8.0` | `2.9.1` |
| org.eclipse.cbi.maven.plugins:eclipse-jarsigner-plugin | `1.4.3` | `1.5.2` |


Updates `org.apache.maven.shared:maven-filtering` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/apache/maven-filtering/releases)
- [Commits](https://github.com/apache/maven-filtering/compare/maven-filtering-3.3.0...maven-filtering-3.4.0)

Updates `org.ow2.asm:asm` from 9.8 to 9.9

Updates `org.ow2.asm:asm-commons` from 9.8 to 9.9

Updates `org.ow2.asm:asm-bom` from 9.8 to 9.9

Updates `org.ow2.asm:asm-commons` from 9.8 to 9.9

Updates `org.apache.maven.surefire:surefire-junit47` from 3.5.3 to 3.5.4

Updates `org.eclipse.jetty.toolchain:jetty-test-helper` from 6.3 to 6.4

Updates `com.fasterxml.jackson:jackson-bom` from 2.18.3 to 2.20.0
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.18.3...jackson-bom-2.20.0)

Updates `io.netty:netty-bom` from 4.2.0.Final to 4.2.6.Final
- [Commits](https://github.com/netty/netty/compare/netty-4.2.0.Final...netty-4.2.6.Final)

Updates `org.junit:junit-bom` from 5.13.2 to 5.14.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](https://github.com/junit-team/junit-framework/compare/r5.13.2...r5.14.0)

Updates `org.ow2.asm:asm-bom` from 9.8 to 9.9

Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.19
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.18...v_1.5.19)

Updates `com.google.code.gson:gson` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google/gson/compare/gson-parent-2.13.1...gson-parent-2.13.2)

Updates `com.google.guava:guava` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `commons-codec:commons-codec` from 1.18.0 to 1.19.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.18.0...rel/commons-codec-1.19.0)

Updates `commons-io:commons-io` from 2.19.0 to 2.20.0
- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-io/compare/rel/commons-io-2.19.0...rel/commons-io-2.20.0)

Updates `io.grpc:grpc-core` from 1.72.0 to 1.76.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.72.0...v1.76.0)

Updates `io.smallrye.common:smallrye-common-cpu` from 2.8.0 to 2.13.9
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.8.0...2.13.9)

Updates `net.java.dev.jna:jna` from 5.17.0 to 5.18.1
- [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md)
- [Commits](https://github.com/java-native-access/jna/compare/5.17.0...5.18.1)

Updates `net.java.dev.jna:jna-jpms` from 5.17.0 to 5.18.1
- [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md)
- [Commits](https://github.com/java-native-access/jna/compare/5.17.0...5.18.1)

Updates `net.java.dev.jna:jna-jpms` from 5.17.0 to 5.18.1
- [Changelog](https://github.com/java-native-access/jna/blob/master/CHANGES.md)
- [Commits](https://github.com/java-native-access/jna/compare/5.17.0...5.18.1)

Updates `net.minidev:json-smart` from 2.5.2 to 2.6.0
- [Release notes](https://github.com/netplex/json-smart-v2/releases)
- [Commits](https://github.com/netplex/json-smart-v2/compare/2.5.2...v2.6.0)

Updates `org.apache.commons:commons-compress` from 1.27.1 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-compress/compare/rel/commons-compress-1.27.1...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.19.0

Updates `org.apache.logging.log4j:log4j-api` from 2.25.0 to 2.25.2

Updates `org.apache.maven.resolver:maven-resolver-api` from 1.9.22 to 1.9.24
- [Release notes](https://github.com/apache/maven-resolver/releases)
- [Commits](https://github.com/apache/maven-resolver/compare/maven-resolver-1.9.22...maven-resolver-1.9.24)

Updates `org.apache.maven.resolver:maven-resolver-supplier` from 1.9.22 to 1.9.24

Updates `org.apache.maven.resolver:maven-resolver-supplier` from 1.9.22 to 1.9.24

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bctls-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bctls-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.eclipse.jdt:ecj` from 3.42.0 to 3.43.0
- [Commits](https://github.com/eclipse-jdt/eclipse.jdt.core/commits)

Updates `org.eclipse.sisu:org.eclipse.sisu.plexus` from 0.9.0.M3 to 0.9.0.M4
- [Release notes](https://github.com/eclipse-sisu/sisu-project/releases)
- [Changelog](https://github.com/eclipse-sisu/sisu-project/blob/main/RELEASE.md)
- [Commits](https://github.com/eclipse-sisu/sisu-project/compare/milestones/0.9.0.M3...milestones/0.9.0.M4)

Updates `org.jboss.logging:jboss-logging-annotations` from 3.0.3.Final to 3.0.4.Final
- [Release notes](https://github.com/jboss-logging/jboss-logging-tools/releases)
- [Commits](https://github.com/jboss-logging/jboss-logging-tools/compare/3.0.3.Final...3.0.4.Final)

Updates `org.jboss.logging:jboss-logging-processor` from 3.0.3.Final to 3.0.4.Final
- [Release notes](https://github.com/jboss-logging/jboss-logging-tools/releases)
- [Commits](https://github.com/jboss-logging/jboss-logging-tools/compare/3.0.3.Final...3.0.4.Final)

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.4 to 3.5.6
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mariadb-corporation/mariadb-connector-j/compare/3.5.4...3.5.6)

Updates `org.junit.platform:junit-platform-engine` from 1.13.2 to 1.14.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](https://github.com/junit-team/junit-framework/commits)

Updates `com.puppycrawl.tools:checkstyle` from 10.23.0 to 10.26.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-10.23.0...checkstyle-10.26.1)

Updates `eu.maveniverse.maven.njord:extension3` from 0.8.2 to 0.8.4
- [Release notes](https://github.com/maveniverse/njord/releases)
- [Commits](https://github.com/maveniverse/njord/compare/release-0.8.2...release-0.8.4)

Updates `eu.maveniverse.maven.plugins:njord` from 0.8.2 to 0.8.4
- [Release notes](https://github.com/maveniverse/njord/releases)
- [Commits](https://github.com/maveniverse/njord/compare/release-0.8.2...release-0.8.4)

Updates `eu.maveniverse.maven.plugins:njord` from 0.8.2 to 0.8.4
- [Release notes](https://github.com/maveniverse/njord/releases)
- [Commits](https://github.com/maveniverse/njord/compare/release-0.8.2...release-0.8.4)

Updates `org.cyclonedx:cyclonedx-maven-plugin` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/CycloneDX/cyclonedx-maven-plugin/releases)
- [Commits](https://github.com/CycloneDX/cyclonedx-maven-plugin/compare/cyclonedx-maven-plugin-2.8.0...cyclonedx-maven-plugin-2.9.1)

Updates `org.eclipse.cbi.maven.plugins:eclipse-jarsigner-plugin` from 1.4.3 to 1.5.2

---
updated-dependencies:
- dependency-name: org.apache.maven.shared:maven-filtering
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.ow2.asm:asm
  dependency-version: '9.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.ow2.asm:asm-commons
  dependency-version: '9.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.ow2.asm:asm-bom
  dependency-version: '9.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.ow2.asm:asm-commons
  dependency-version: '9.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.maven.surefire:surefire-junit47
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.jetty.toolchain:jetty-test-helper
  dependency-version: '6.4'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.6.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 5.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.ow2.asm:asm-bom
  dependency-version: '9.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: commons-io:commons-io
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-core
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-cpu
  dependency-version: 2.13.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: net.java.dev.jna:jna
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: net.java.dev.jna:jna-jpms
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: net.java.dev.jna:jna-jpms
  dependency-version: 5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: net.minidev:json-smart
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-api
  dependency-version: 1.9.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-supplier
  dependency-version: 1.9.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.maven.resolver:maven-resolver-supplier
  dependency-version: 1.9.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bctls-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bctls-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.jdt:ecj
  dependency-version: 3.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.sisu:org.eclipse.sisu.plexus
  dependency-version: 0.9.0.M4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.jboss.logging:jboss-logging-annotations
  dependency-version: 3.0.4.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.jboss.logging:jboss-logging-processor
  dependency-version: 3.0.4.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.junit.platform:junit-platform-engine
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 10.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.njord:extension3
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.plugins:njord
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.plugins:njord
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.cyclonedx:cyclonedx-maven-plugin
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.cbi.maven.plugins:eclipse-jarsigner-plugin
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 jetty-ee8/pom.xml |  2 +-
 pom.xml           | 58 +++++++++++++++++++++++------------------------
 2 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/jetty-ee8/pom.xml b/jetty-ee8/pom.xml
index 30621239bf4..eff621779c3 100644
--- a/jetty-ee8/pom.xml
+++ b/jetty-ee8/pom.xml
@@ -327,7 +327,7 @@
           <dependency>
             <groupId>org.apache.maven.shared</groupId>
             <artifactId>maven-filtering</artifactId>
-            <version>3.3.0</version>
+            <version>3.4.0</version>
           </dependency>
           <dependency>
             <groupId>org.eclipse.jetty.toolchain</groupId>
diff --git a/pom.xml b/pom.xml
index 52af8a42b9d..71805662491 100644
--- a/pom.xml
+++ b/pom.xml
@@ -164,7 +164,7 @@
     <apache.avro.version>1.11.3</apache.avro.version>
     <apache.httpclient.version>4.5.14</apache.httpclient.version>
     <apache.httpcore.version>4.4.16</apache.httpcore.version>
-    <asm.version>9.8</asm.version>
+    <asm.version>9.9</asm.version>
     <awaitility.version>4.3.0</awaitility.version>
     <!--
     DO NOT UPGRADE this except tinybundle upgrade:
@@ -173,26 +173,26 @@
 
     -->
     <bndlib.version>6.4.1</bndlib.version>
-    <bouncycastle.version>1.81</bouncycastle.version>
+    <bouncycastle.version>1.82</bouncycastle.version>
     <brotli4j.version>1.17.0</brotli4j.version>
     <build-helper.maven.plugin.version>3.6.0</build-helper.maven.plugin.version>
     <build-support.version>1.5</build-support.version>
     <buildnumber.maven.plugin.version>3.2.1</buildnumber.maven.plugin.version>
-    <checkstyle.version>10.23.0</checkstyle.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
-    <commons-io.version>2.19.0</commons-io.version>
-    <commons-lang3.version>3.18.0</commons-lang3.version>
-    <commons.compress.version>1.27.1</commons.compress.version>
+    <checkstyle.version>10.26.1</checkstyle.version>
+    <commons-codec.version>1.19.0</commons-codec.version>
+    <commons-io.version>2.20.0</commons-io.version>
+    <commons-lang3.version>3.19.0</commons-lang3.version>
+    <commons.compress.version>1.28.0</commons.compress.version>
     <commons.io.version>2.16.1</commons.io.version>
     <compiler.release>17</compiler.release>
     <compiler.source>17</compiler.source>
     <compiler.target>17</compiler.target>
     <conscrypt.version>2.5.2</conscrypt.version>
-    <cyclonedx.maven.plugin.version>2.8.0</cyclonedx.maven.plugin.version>
+    <cyclonedx.maven.plugin.version>2.9.1</cyclonedx.maven.plugin.version>
     <depends.maven.plugin.version>1.5.0</depends.maven.plugin.version>
     <detectOfflineLinks>false</detectOfflineLinks>
     <duplicate-finder-maven-plugin.version>2.0.1</duplicate-finder-maven-plugin.version>
-    <eclipse.jdt.ecj.version>3.42.0</eclipse.jdt.ecj.version>
+    <eclipse.jdt.ecj.version>3.43.0</eclipse.jdt.ecj.version>
 
     <ee10.jakarta.bom.version>10.0.0</ee10.jakarta.bom.version>
     <ee11.jakarta.bom.version>11.0.0</ee11.jakarta.bom.version>
@@ -208,9 +208,9 @@
     <findbugs.jsr305.version>3.0.2</findbugs.jsr305.version>
     <flatten.maven.plugin.version>1.7.0</flatten.maven.plugin.version>
     <groovy.version>4.0.26</groovy.version>
-    <grpc.version>1.72.0</grpc.version>
-    <gson.version>2.13.1</gson.version>
-    <guava.version>33.4.8-jre</guava.version>
+    <grpc.version>1.76.0</grpc.version>
+    <gson.version>2.13.2</gson.version>
+    <guava.version>33.5.0-jre</guava.version>
     <guice.version>7.0.0</guice.version>
     <hamcrest.version>3.0</hamcrest.version>
     <hazelcast.version>5.5.0</hazelcast.version>
@@ -222,7 +222,7 @@
     <injection.bundle.version>1.2</injection.bundle.version>
     <invoker.mergeUserSettings>false</invoker.mergeUserSettings>
     <it.debug>false</it.debug>
-    <jackson.version>2.18.3</jackson.version>
+    <jackson.version>2.20.0</jackson.version>
     <jacoco.maven.plugin.version>0.8.13</jacoco.maven.plugin.version>
     <javadoc.verbose>false</javadoc.verbose>
     <jboss-logmanager.version>3.1.2.Final</jboss-logmanager.version>
@@ -236,7 +236,7 @@
     <jetty-version.maven.plugin.version>2.7</jetty-version.maven.plugin.version>
     <jetty.perf-helper.version>1.0.7</jetty.perf-helper.version>
     <jetty.surefire.argLine>-Dfile.encoding=UTF-8 -Duser.language=en -Duser.region=US -Djava.io.tmpdir=${project.build.directory} -showversion -Xmx6g -Xms4g -Xlog:gc:stderr:time,level,tags</jetty.surefire.argLine>
-    <jetty.test.version>6.3</jetty.test.version>
+    <jetty.test.version>6.4</jetty.test.version>
     <jetty.testtracker.log>true</jetty.testtracker.log>
     <jetty.unixdomain.dir>/tmp</jetty.unixdomain.dir>
     <jetty.url>https://jetty.org/</jetty.url>
@@ -246,9 +246,9 @@
     <jffi.version>1.3.13</jffi.version>
     <jmh.version>1.37</jmh.version>
     <jmhjar.name>benchmarks</jmhjar.name>
-    <jna.version>5.17.0</jna.version>
+    <jna.version>5.18.1</jna.version>
     <json-simple.version>1.1.1</json-simple.version>
-    <json-smart.version>2.5.2</json-smart.version>
+    <json-smart.version>2.6.0</json-smart.version>
     <junit.jupiter.execution.parallel.config.dynamic.factor>0.8</junit.jupiter.execution.parallel.config.dynamic.factor>
     <junit.jupiter.execution.parallel.config.fixed.parallelism>2</junit.jupiter.execution.parallel.config.fixed.parallelism>
     <junit.jupiter.execution.parallel.config.strategy>dynamic</junit.jupiter.execution.parallel.config.strategy>
@@ -256,16 +256,16 @@
     <junit.jupiter.execution.parallel.mode.classes.default>concurrent</junit.jupiter.execution.parallel.mode.classes.default>
     <junit.jupiter.execution.parallel.mode.default>same_thread</junit.jupiter.execution.parallel.mode.default>
     <junit.jupiter.extensions.autodetection.enabled>true</junit.jupiter.extensions.autodetection.enabled>
-    <junit.platform.version>1.13.2</junit.platform.version>
-    <junit.version>5.13.2</junit.version>
+    <junit.platform.version>1.14.0</junit.platform.version>
+    <junit.version>5.14.0</junit.version>
     <kerb-simplekdc.version>2.1.0</kerb-simplekdc.version>
     <license.maven.plugin.version>4.5</license.maven.plugin.version>
     <localRepoPath>${project.build.directory}/local-repo</localRepoPath>
-    <log4j2.version>2.25.0</log4j2.version>
-    <logback.version>1.5.18</logback.version>
+    <log4j2.version>2.25.2</log4j2.version>
+    <logback.version>1.5.20</logback.version>
     <lucene.version>9.11.1</lucene.version>
     <mariadb.docker.version>10.3.6</mariadb.docker.version>
-    <mariadb.version>3.5.4</mariadb.version>
+    <mariadb.version>3.5.6</mariadb.version>
     <maven-build-cache.version>1.2.0</maven-build-cache.version>
     <maven-plugin.plugin.version>3.13.1</maven-plugin.plugin.version>
     <maven.antrun.plugin.version>3.1.0</maven.antrun.plugin.version>
@@ -288,18 +288,18 @@
     <maven.plugin-tools.version>3.15.1</maven.plugin-tools.version>
     <maven.release.plugin.version>3.1.0</maven.release.plugin.version>
     <maven.remote-resources-plugin.version>3.2.0</maven.remote-resources-plugin.version>
-    <maven.resolver.version>1.9.22</maven.resolver.version>
+    <maven.resolver.version>1.9.24</maven.resolver.version>
     <maven.resources.plugin.version>3.3.1</maven.resources.plugin.version>
     <maven.shade.plugin.version>3.6.0</maven.shade.plugin.version>
     <maven.source.plugin.version>3.3.1</maven.source.plugin.version>
-    <maven.surefire.plugin.version>3.5.3</maven.surefire.plugin.version>
+    <maven.surefire.plugin.version>3.5.4</maven.surefire.plugin.version>
     <maven.version>3.9.9</maven.version>
     <maven.war.plugin.version>3.4.0</maven.war.plugin.version>
     <modify-sources-plugin.version>1.0.13</modify-sources-plugin.version>
     <mongo.docker.version>5.0.26</mongo.docker.version>
     <mongodb.version>5.6.1</mongodb.version>
-    <netty.version>4.2.0.Final</netty.version>
-    <njord.version>0.8.2</njord.version>
+    <netty.version>4.2.7.Final</netty.version>
+    <njord.version>0.8.5</njord.version>
     <openpojo.version>0.9.1</openpojo.version>
     <org.osgi.annotation.version>8.1.0</org.osgi.annotation.version>
     <org.osgi.core.version>8.0.0</org.osgi.core.version>
@@ -330,7 +330,7 @@
     <reactive-streams.version>1.0.4</reactive-streams.version>
     <settings.path></settings.path>
     <settingsPath>src/it/settings.xml</settingsPath>
-    <sisu.plexus.version>0.9.0.M3</sisu.plexus.version>
+    <sisu.plexus.version>0.9.0.M4</sisu.plexus.version>
     <slf4j.version>2.0.17</slf4j.version>
     <spifly.version>1.3.7</spifly.version>
     <surefire.failIfNoSpecifiedTests>false</surefire.failIfNoSpecifiedTests>
@@ -469,7 +469,7 @@
       <dependency>
         <groupId>io.smallrye.common</groupId>
         <artifactId>smallrye-common-cpu</artifactId>
-        <version>2.8.0</version>
+        <version>2.13.9</version>
       </dependency>
       <dependency>
         <groupId>net.java.dev.jna</groupId>
@@ -2263,7 +2263,7 @@
               <dependency>
                 <groupId>org.apache.maven.shared</groupId>
                 <artifactId>maven-filtering</artifactId>
-                <version>3.3.0</version>
+                <version>3.4.0</version>
               </dependency>
               <dependency>
                 <groupId>org.eclipse.jetty.toolchain</groupId>
@@ -2739,7 +2739,7 @@
         </property>
       </activation>
       <properties>
-        <cbi-plugins.version>1.4.3</cbi-plugins.version>
+        <cbi-plugins.version>1.5.2</cbi-plugins.version>
       </properties>
       <pluginRepositories>
         <pluginRepository>

From b9020c4c186f8b2517762030f723ce646c886bca Mon Sep 17 00:00:00 2001
From: Olivier Lamy <olamy@apache.org>
Date: Thu, 23 Oct 2025 14:41:41 +1000
Subject: [PATCH 2/3] sisu-inject upper bound

Signed-off-by: Olivier Lamy <olamy@apache.org>
---
 pom.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pom.xml b/pom.xml
index 71805662491..66096a52362 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1195,6 +1195,11 @@
         <artifactId>org.eclipse.osgi.util</artifactId>
         <version>${osgi-util-version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.eclipse.sisu</groupId>
+        <artifactId>org.eclipse.sisu.inject</artifactId>
+        <version>${sisu.plexus.version}</version>
+      </dependency>
       <dependency>
         <groupId>org.eclipse.sisu</groupId>
         <artifactId>org.eclipse.sisu.plexus</artifactId>

From b2beba8927a2b79f6f5bfa053bff2adff075555d Mon Sep 17 00:00:00 2001
From: Olivier Lamy <olamy@apache.org>
Date: Thu, 23 Oct 2025 16:56:31 +1000
Subject: [PATCH 3/3] fix upperbound

Signed-off-by: Olivier Lamy <olamy@apache.org>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 66096a52362..2a86938b012 100644
--- a/pom.xml
+++ b/pom.xml
@@ -277,7 +277,7 @@
     <maven.compiler.plugin.version>3.13.0</maven.compiler.plugin.version>
     <maven.dependency.plugin.version>3.8.1</maven.dependency.plugin.version>
     <maven.deploy.plugin.version>3.1.3</maven.deploy.plugin.version>
-    <maven.deps.version>3.9.9</maven.deps.version>
+    <maven.deps.version>3.9.10</maven.deps.version>
     <maven.enforcer.plugin.version>3.5.0</maven.enforcer.plugin.version>
     <maven.exec.plugin.version>3.5.0</maven.exec.plugin.version>
     <maven.gpg.plugin.version>3.2.7</maven.gpg.plugin.version>