Skip to content

[12.0.x EE10] Bump the dev-dependencies group across 1 directory with 6 updates #14392

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 1 commit into from
Closed

[12.0.x EE10] Bump the dev-dependencies group across 1 directory with 6 updates #14392

dependabot wants to merge 1 commit into from
+5 −5

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 24, 2026 •
edited
Loading

Bumps the dev-dependencies group with 6 updates in the /jetty-ee10 directory:

Package From To
org.apache.lucene:lucene-core 9.11.1 9.12.0
com.fasterxml.jackson:jackson-bom 2.20.1 2.21.0
ch.qos.logback:logback-core 1.5.24 1.5.25
org.testng:testng 7.11.0 7.12.0
eu.maveniverse.maven.njord:extension3 0.9.2 0.9.3
eu.maveniverse.maven.plugins:njord 0.9.2 0.9.3

Updates org.apache.lucene:lucene-core from 9.11.1 to 9.12.0

Updates com.fasterxml.jackson:jackson-bom from 2.20.1 to 2.21.0

Commits

Updates ch.qos.logback:logback-core from 1.5.24 to 1.5.25

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.25

2026-01-17 Release of logback version 1.5.25

• When processing configuration files, logback-core will now only instantiate components compatible with the class expected by the encapsulating class. This fixes an ACE vulnerability recorded as CVE-2026-1225.

• In configuration files, referencing a single undeclared appender would cause all referenced appenders to be skipped. This issue was discovered in issues/997.

• Added VersionUtil class to logback-core. This utility class checks for version compatibility issues and alerts the user if need be.

• Added EpochConverter to output milliseconds/seconds since epoch. This enhancement was requested by Duncan Jauncey in issues/1000 who also provided the relevant implementation PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit f426e0002800cfb507f393fcacffe0761a425220 associated with the tag v_1.5.25. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • f426e00 prepare release of 1.5.25
  • d28931f restrict object creation to expected supertype
  • aa264f7 test default variable values in appender-ref ref attribute
  • 8fb403a adjust copyright year
  • b294a12 check optionList in start()
  • b65040a Add EpochConverter for milliseconds/seconds since epoch (related to issue #96...
  • 0690174 cla for Duncan Jauncey
  • 71dc2af Removed email address for Tony.
  • 1f97ae1 check for undeclared by referenced appenders
  • b07355e Move the artifact version checking code to VersionUtil in logback-core.
  • Additional commits viewable in compare view

Updates org.testng:testng from 7.11.0 to 7.12.0

Release notes

Sourced from org.testng:testng's releases.

7.12.0

What's Changed

New Contributors

Full Changelog: testng-team/testng@7.11.0...7.12.0

Changelog

Sourced from org.testng:testng's changelog.

7.12.0 Fixed: GITHUB-3231: TestNG retry is going into infinite loop when the data provider returned object is modified before failure (Bartek Florczak) Update: Updated GitHub Actions test matrix to include JDK 25 and JDK 26 EA (Bartek Florczak) Fixed: GITHUB-3236: DataProvider parameters are not refreshed on retry when cacheDataForTestRetries=false (Bartek Florczak) Fixed: GITHUB-3227: assertEqualsNoOrder false positive when collection has same size and actual Collection is subset of expected collection (Krishnan Mahadevan) Fixed: GITHUB-3177: Method org.testng.xml.XmlSuite#toXml do not save new properties like "share-thread-pool-for-data-providers" (Krishnan Mahadevan) Fixed: GITHUB-3179: ClassCastException when use shouldUseGlobalThreadPool(true) property (Krishnan Mahadevan) Fixed: GITHUB-2765: Test timeouts using existing Executor now propagate the stack trace to the ThreadTimeoutException (Charlie Hayes)

Commits
  • a21a584 Fix Release process (#3255)
  • be97321 Fix: issue 3231 retry infinite loop (#3251)
  • bad4cb5 Improve/test workflow jdk25 (#3253)
  • 61068a1 Fix: Ensure DataProvider parameters are refreshed on retry when cacheDataForT...
  • d50b2ad Ensure assertions is contents aware
  • 02d223d Use a composite key instead of String as key
  • 58b3824 Add DynamicImport-Package to load classes by name
  • 40cd805 chore: use pax-logging for osgi tests so it does not require runtime bytecode...
  • 0fdf868 chore: setup-java Oracle action supports Java 21+ only
  • 6a25754 test: improve osgi tests
  • Additional commits viewable in compare view

Updates eu.maveniverse.maven.njord:extension3 from 0.9.2 to 0.9.3

Release notes

Sourced from eu.maveniverse.maven.njord:extension3's releases.

0.9.3

IMPORTANT: Breaking changes

This release merely improves correctness of publishers and fixes some Maven specific issues.

What's Changed

Full Changelog: maveniverse/njord@release-0.9.2...release-0.9.3

Commits

Updates eu.maveniverse.maven.plugins:njord from 0.9.2 to 0.9.3

Release notes

Sourced from eu.maveniverse.maven.plugins:njord's releases.

0.9.3

IMPORTANT: Breaking changes

This release merely improves correctness of publishers and fixes some Maven specific issues.

What's Changed

Full Changelog: maveniverse/njord@release-0.9.2...release-0.9.3

Commits

Updates eu.maveniverse.maven.plugins:njord from 0.9.2 to 0.9.3

Release notes

Sourced from eu.maveniverse.maven.plugins:njord's releases.

0.9.3

IMPORTANT: Breaking changes

This release merely improves correctness of publishers and fixes some Maven specific issues.

What's Changed

Full Changelog: maveniverse/njord@release-0.9.2...release-0.9.3

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[12.0.x EE10] Bump the dev-dependencies group across 1 directory with…
16bfaf7 
… 6 updates

Bumps the dev-dependencies group with 6 updates in the /jetty-ee10 directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.lucene:lucene-core | `9.11.1` | `9.12.0` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.20.1` | `2.21.0` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.24` | `1.5.25` |
| [org.testng:testng](https://github.com/testng-team/testng) | `7.11.0` | `7.12.0` |
| [eu.maveniverse.maven.njord:extension3](https://github.com/maveniverse/njord) | `0.9.2` | `0.9.3` |
| [eu.maveniverse.maven.plugins:njord](https://github.com/maveniverse/njord) | `0.9.2` | `0.9.3` |



Updates `org.apache.lucene:lucene-core` from 9.11.1 to 9.12.0

Updates `com.fasterxml.jackson:jackson-bom` from 2.20.1 to 2.21.0
- [Commits](FasterXML/jackson-bom@jackson-bom-2.20.1...jackson-bom-2.21.0)

Updates `ch.qos.logback:logback-core` from 1.5.24 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.24...v_1.5.25)

Updates `org.testng:testng` from 7.11.0 to 7.12.0
- [Release notes](https://github.com/testng-team/testng/releases)
- [Changelog](https://github.com/testng-team/testng/blob/master/CHANGES.txt)
- [Commits](testng-team/testng@7.11.0...7.12.0)

Updates `eu.maveniverse.maven.njord:extension3` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/maveniverse/njord/releases)
- [Commits](maveniverse/njord@release-0.9.2...release-0.9.3)

Updates `eu.maveniverse.maven.plugins:njord` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/maveniverse/njord/releases)
- [Commits](maveniverse/njord@release-0.9.2...release-0.9.3)

Updates `eu.maveniverse.maven.plugins:njord` from 0.9.2 to 0.9.3
- [Release notes](https://github.com/maveniverse/njord/releases)
- [Commits](maveniverse/njord@release-0.9.2...release-0.9.3)

---
updated-dependencies:
- dependency-name: org.apache.lucene:lucene-core
  dependency-version: 9.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.testng:testng
  dependency-version: 7.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.njord:extension3
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.plugins:njord
  dependency-version: 0.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.plugins:njord
  dependency-version: 0.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 24, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 26, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 26, 2026
@dependabot dependabot bot deleted the dependabot/maven/jetty-ee10/jetty-12.0.x/dev-dependencies-20161c0517 branch January 26, 2026 12:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant