Skip to content

build(deps): bump the dependencies group with 26 updates #3785

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
jknack merged 1 commit into from
Oct 14, 2025
Merged

build(deps): bump the dependencies group with 26 updates #3785

jknack merged 1 commit into from
Oct 14, 2025
+15 −15

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 13, 2025

Bumps the dependencies group with 26 updates:

Package From To
com.amazonaws:aws-java-sdk-bom 1.12.791 1.12.792
org.ow2.asm:asm 9.8 9.9
org.ow2.asm:asm-util 9.8 9.9
ch.qos.logback:logback-classic 1.5.18 1.5.19
io.swagger.core.v3:swagger-annotations 2.2.37 2.2.38
io.swagger.core.v3:swagger-models 2.2.37 2.2.38
org.jdbi:jdbi3-core 3.49.5 3.49.6
com.squareup.okhttp3:okhttp-jvm 5.1.0 5.2.1
com.squareup.okhttp3:okhttp-sse 5.1.0 5.2.1
com.squareup.okhttp3:okhttp-tls 5.1.0 5.2.1
io.undertow:undertow-core 2.3.19.Final 2.3.20.Final
org.eclipse.jetty:jetty-server 12.1.1 12.1.2
org.eclipse.jetty.websocket:jetty-websocket-core-server 12.1.1 12.1.2
org.eclipse.jetty.websocket:jetty-websocket-jetty-api 12.1.1 12.1.2
org.eclipse.jetty.websocket:jetty-websocket-jetty-server 12.1.1 12.1.2
org.eclipse.jetty.http2:jetty-http2-server 12.1.1 12.1.2
org.eclipse.jetty:jetty-alpn-java-server 12.1.1 12.1.2
org.eclipse.jetty.http2:jetty-http2-client 12.1.1 12.1.2
org.jacoco:org.jacoco.agent 0.8.13 0.8.14
org.jacoco:jacoco-maven-plugin 0.8.13 0.8.14
org.codehaus.mojo:exec-maven-plugin 3.5.1 3.6.1
org.apache.maven.plugins:maven-enforcer-plugin 3.6.1 3.6.2
com.puppycrawl.tools:checkstyle 11.1.0 12.0.1
net.bytebuddy:byte-buddy 1.17.7 1.17.8
com.github.kagkarlsson:db-scheduler 16.1.0 16.2.0
software.amazon.awssdk:bom 2.34.5 2.35.5

Updates com.amazonaws:aws-java-sdk-bom from 1.12.791 to 1.12.792

Changelog

Sourced from com.amazonaws:aws-java-sdk-bom's changelog.

1.12.792 2025-10-01

Amazon DynamoDB

  • Bugfixes

    • Prevent overriding client endpoint with dual-stack regional endpoint

Amazon S3

  • Bugfixes

    • Add additional validations for multipart download operations of S3 client
    • Add additional validations for multipart upload operations of S3 client.
Commits

Updates org.ow2.asm:asm from 9.8 to 9.9

Updates org.ow2.asm:asm-util from 9.8 to 9.9

Updates org.ow2.asm:asm-util from 9.8 to 9.9

Updates ch.qos.logback:logback-classic from 1.5.18 to 1.5.19

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.19

2025-09-30 Release of logback version 1.5.19

• Disallow "new" operator in the condition attribute of <if> elements. This fixes an ACE vulnerability recorded as CVE-2025-11226.

• At initialization time, slightly better reporting about watched configuration files.

• Softer message regarding usage of ConsoleAppender and its potential impact on performance.

• In ViewStatusMessagesServlet, restrict processing of "Clear" button to POST method. This change was proposed by Ralf Wiebicke who also provided the relevant PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e572d4f87f06674788eb3ca7148e8d1dffc615fa associated with the tag v_1.5.19. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e572d4f skip deployment of blackbox and example modules, published as version 1.5.9
  • 4adae8b add plugin for Maven Central deployment
  • ee70cf4 prepare release 1.5.19
  • 20802cf mindor javadoc changes
  • 8116069 comment out code in COWArrayListConcurrencyTest to make IDE happy
  • 7f65340 minor changes
  • 8d2262d soften warning on using ConsoleAppender
  • c76fed3 ViewStatusMessagesServlet requires method POST for button 'Clear' (#971)
  • 61f6a25 disallow new in if condition attribute in config files
  • a07cfd5 logback-core: fix spelling errors (#956)
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-annotations from 2.2.37 to 2.2.38

Updates io.swagger.core.v3:swagger-models from 2.2.37 to 2.2.38

Updates io.swagger.core.v3:swagger-models from 2.2.37 to 2.2.38

Updates org.jdbi:jdbi3-core from 3.49.5 to 3.49.6

Release notes

Sourced from org.jdbi:jdbi3-core's releases.

3.49.6

We have some problems with our upstream parent POM. There are changes to Maven Central that require us to roll the parent POM into the Jdbi project. This is a temporary thing and will go away as soon as uploading parent poms to Central has been reenabled.

  • Add support for PGvector types (#2830)
  • Improve concurrency of statement cache loading (#2834)
  • ExtensionHandler interface pulls out handling of target object into new AttachedExtensionHandler interface (#2828)
  • collectInto supports types that do not implement Collection ( #2849, thanks @​mattbertolini !)

Note that with the release of Java 25, this will be the last release to support Java 11!

Changelog

Sourced from org.jdbi:jdbi3-core's changelog.

3.49.6

We have some problems with our upstream parent POM. There are changes to Maven Central that require us to roll the parent POM into the Jdbi project. This is a temporary thing and will go away as soon as uploading parent poms to Central has been reenabled.

  • Add support for PGvector types (#2830)
  • Improve concurrency of statement cache loading (#2834)
  • ExtensionHandler interface pulls out handling of target object into new AttachedExtensionHandler interface (#2828)
  • collectInto supports types that do not implement Collection ( #2849, thanks @​mattbertolini !)
Commits
  • a06ea6c [maven-release-plugin] prepare release v3.49.6
  • 3b2b9a7 add 3.49.6 to docs
  • 15beb5d update release notes
  • f671a37 Merge pull request #2851 from hgschmie/basepom-workaround
  • 46ca9e4 use newer javadoc plugin
  • a12feda turn off japicmp checks for 3.49.x release
  • 2570345 fixes for pmd 7.17.0
  • 0123b4f Roll basepom temporarily into jdbi
  • 97e650e not yet 3.50.0 ...
  • 3959af8 Merge pull request #2853 from hgschmie/oracle-runner-fix
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp-jvm from 5.1.0 to 5.2.1

Changelog

Sourced from com.squareup.okhttp3:okhttp-jvm's changelog.

Version 5.2.1

2025-10-09

  • Fix: Don't crash when calling Socket.shutdownOutput() or shutdownInput() on an SSLSocket on Android API 21 through 23. This method throws an UnsupportedOperationException, so we now catch that and close the underlying stream instead.

  • Upgrade: [Okio 3.16.1][okio_3_16_1].

Version 5.2.0

2025-10-07

  • New: Support [HTTP 101] responses with Response.socket. This mechanism is only supported on HTTP/1.1. We also reimplemented our websocket client to use this new mechanism.

  • New: The okhttp-zstd module negotiates [Zstandard (zstd)][zstd] compression with servers that support it. It integrates a new (unstable) [ZSTD-KMP] library, also from Square. Enable it like this:

    val client = OkHttpClient.Builder()
  .addInterceptor(CompressionInterceptor(Zstd, Gzip))
  .build()

  • New: Support the QUERY HTTP method. You will need to set the Request.cacheUrlOverride property to cache calls made with this method. The RequestBody.sha256() may be helpful here; use it to compose a cache URL from the query body.

  • New: Publish events when calls must wait to execute. EventListener.dispatcherQueueStart() is invoked when a call starts waiting, and dispatcherQueueEnd() is invoked when it's done.

  • New: Request.toCurl() returns a copy-pasteable [curl] command consistent with Chrome’s and Firefox’s ‘copy as cURL’ features.

  • New: Support [JPMS]. We replaced our Automatic-Module-Name metadata with proper module-info.java files.

  • Fix: Recover gracefully when worker threads are interrupted. When we introduced fast fallback in OkHttp 5.0, we started using background threads while connecting. Sadly that code didn't handle interruptions well. This is now fixed.

  • Upgrade: [Kotlin 2.2.20][kotlin_2_2_20].

  • Upgrade: [Okio 3.16.0][okio_3_16_0].

Commits
  • a8b8dc5 Prepare for release 5.2.1.
  • 7d7bdc6 Upgrade to Okio 3.16.1 (#9131)
  • 2a95ed0 Prepare for release 5.2.0.
  • acfae32 Revert "Add minimal HttpLoggingInterceptor support for streaming request and ...
  • d82e875 Put Brotli and Gzip in top-level files (#9116)
  • d4a5be1 Fix RequestBody events on upgraded connections (#8970)
  • 112a19d Add RequestBody.sha256() (#9109)
  • d41a755 Start publishing dispatcher queue events (#9111)
  • c06ff31 Get Content-Type from the request body (#9113)
  • fdac86b Make Request.toCurl work more like Chrome's 'copy as cURL' (#9112)
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp-sse from 5.1.0 to 5.2.1

Changelog

Sourced from com.squareup.okhttp3:okhttp-sse's changelog.

Version 5.2.1

2025-10-09

  • Fix: Don't crash when calling Socket.shutdownOutput() or shutdownInput() on an SSLSocket on Android API 21 through 23. This method throws an UnsupportedOperationException, so we now catch that and close the underlying stream instead.

  • Upgrade: [Okio 3.16.1][okio_3_16_1].

Version 5.2.0

2025-10-07

  • New: Support [HTTP 101] responses with Response.socket. This mechanism is only supported on HTTP/1.1. We also reimplemented our websocket client to use this new mechanism.

  • New: The okhttp-zstd module negotiates [Zstandard (zstd)][zstd] compression with servers that support it. It integrates a new (unstable) [ZSTD-KMP] library, also from Square. Enable it like this:

    val client = OkHttpClient.Builder()
  .addInterceptor(CompressionInterceptor(Zstd, Gzip))
  .build()

  • New: Support the QUERY HTTP method. You will need to set the Request.cacheUrlOverride property to cache calls made with this method. The RequestBody.sha256() may be helpful here; use it to compose a cache URL from the query body.

  • New: Publish events when calls must wait to execute. EventListener.dispatcherQueueStart() is invoked when a call starts waiting, and dispatcherQueueEnd() is invoked when it's done.

  • New: Request.toCurl() returns a copy-pasteable [curl] command consistent with Chrome’s and Firefox’s ‘copy as cURL’ features.

  • New: Support [JPMS]. We replaced our Automatic-Module-Name metadata with proper module-info.java files.

  • Fix: Recover gracefully when worker threads are interrupted. When we introduced fast fallback in OkHttp 5.0, we started using background threads while connecting. Sadly that code didn't handle interruptions well. This is now fixed.

  • Upgrade: [Kotlin 2.2.20][kotlin_2_2_20].

  • Upgrade: [Okio 3.16.0][okio_3_16_0].

Commits
  • a8b8dc5 Prepare for release 5.2.1.
  • 7d7bdc6 Upgrade to Okio 3.16.1 (#9131)
  • 2a95ed0 Prepare for release 5.2.0.
  • acfae32 Revert "Add minimal HttpLoggingInterceptor support for streaming request and ...
  • d82e875 Put Brotli and Gzip in top-level files (#9116)
  • d4a5be1 Fix RequestBody events on upgraded connections (#8970)
  • 112a19d Add RequestBody.sha256() (#9109)
  • d41a755 Start publishing dispatcher queue events (#9111)
  • c06ff31 Get Content-Type from the request body (#9113)
  • fdac86b Make Request.toCurl work more like Chrome's 'copy as cURL' (#9112)
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp-tls from 5.1.0 to 5.2.1

Changelog

Sourced from com.squareup.okhttp3:okhttp-tls's changelog.

Version 5.2.1

2025-10-09

  • Fix: Don't crash when calling Socket.shutdownOutput() or shutdownInput() on an SSLSocket on Android API 21 through 23. This method throws an UnsupportedOperationException, so we now catch that and close the underlying stream instead.

  • Upgrade: [Okio 3.16.1][okio_3_16_1].

Version 5.2.0

2025-10-07

  • New: Support [HTTP 101] responses with Response.socket. This mechanism is only supported on HTTP/1.1. We also reimplemented our websocket client to use this new mechanism.

  • New: The okhttp-zstd module negotiates [Zstandard (zstd)][zstd] compression with servers that support it. It integrates a new (unstable) [ZSTD-KMP] library, also from Square. Enable it like this:

    val client = OkHttpClient.Builder()
  .addInterceptor(CompressionInterceptor(Zstd, Gzip))
  .build()

  • New: Support the QUERY HTTP method. You will need to set the Request.cacheUrlOverride property to cache calls made with this method. The RequestBody.sha256() may be helpful here; use it to compose a cache URL from the query body.

  • New: Publish events when calls must wait to execute. EventListener.dispatcherQueueStart() is invoked when a call starts waiting, and dispatcherQueueEnd() is invoked when it's done.

  • New: Request.toCurl() returns a copy-pasteable [curl] command consistent with Chrome’s and Firefox’s ‘copy as cURL’ features.

  • New: Support [JPMS]. We replaced our Automatic-Module-Name metadata with proper module-info.java files.

  • Fix: Recover gracefully when worker threads are interrupted. When we introduced fast fallback in OkHttp 5.0, we started using background threads while connecting. Sadly that code didn't handle interruptions well. This is now fixed.

  • Upgrade: [Kotlin 2.2.20][kotlin_2_2_20].

  • Upgrade: [Okio 3.16.0][okio_3_16_0].

Commits
  • a8b8dc5 Prepare for release 5.2.1.
  • 7d7bdc6 Upgrade to Okio 3.16.1 (#9131)
  • 2a95ed0 Prepare for release 5.2.0.
  • acfae32 Revert "Add minimal HttpLoggingInterceptor support for streaming request and ...
  • d82e875 Put Brotli and Gzip in top-level files (#9116)
  • d4a5be1 Fix RequestBody events on upgraded connections (#8970)
  • 112a19d Add RequestBody.sha256() (#9109)
  • d41a755 Start publishing dispatcher queue events (#9111)
  • c06ff31 Get Content-Type from the request body (#9113)
  • fdac86b Make Request.toCurl work more like Chrome's 'copy as cURL' (#9112)
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp-sse from 5.1.0 to 5.2.1

Changelog

Sourced from com.squareup.okhttp3:okhttp-sse's changelog.

Version 5.2.1

2025-10-09

  • Fix: Don't crash when calling Socket.shutdownOutput() or shutdownInput() on an SSLSocket on Android API 21 through 23. This method throws an UnsupportedOperationException, so we now catch that and close the underlying stream instead.

  • Upgrade: [Okio 3.16.1][okio_3_16_1].

Version 5.2.0

2025-10-07

  • New: Support [HTTP 101] responses with Response.socket. This mechanism is only supported on HTTP/1.1. We also reimplemented our websocket client to use this new mechanism.

  • New: The okhttp-zstd module negotiates [Zstandard (zstd)][zstd] compression with servers that support it. It integrates a new (unstable) [ZSTD-KMP] library, also from Square. Enable it like this:

    val client = OkHttpClient.Builder()
  .addInterceptor(CompressionInterceptor(Zstd, Gzip))
  .build()

  • New: Support the QUERY HTTP method. You will need to set the Request.cacheUrlOverride property to cache calls made with this method. The RequestBody.sha256() may be helpful here; use it to compose a cache URL from the query body.

  • New: Publish events when calls must wait to execute. EventListener.dispatcherQueueStart() is invoked when a call starts waiting, and dispatcherQueueEnd() is invoked when it's done.

  • New: Request.toCurl() returns a copy-pasteable [curl] command consistent with Chrome’s and Firefox’s ‘copy as cURL’ features.

  • New: Support [JPMS]. We replaced our Automatic-Module-Name metadata with proper module-info.java files.

  • Fix: Recover gracefully when worker threads are interrupted. When we introduced fast fallback in OkHttp 5.0, we started using background threads while connecting. Sadly that code didn't handle interruptions well. This is now fixed.

  • Upgrade: [Kotlin 2.2.20][kotlin_2_2_20].

  • Upgrade: [Okio 3.16.0][okio_3_16_0].

Commits
  • a8b8dc5 Prepare for release 5.2.1.
  • 7d7bdc6 Upgrade to Okio 3.16.1 (#9131)
  • 2a95ed0 Prepare for release 5.2.0.
  • acfae32 Revert "Add minimal HttpLoggingInterceptor support for streaming request and ...
  • d82e875 Put Brotli and Gzip in top-level files (#9116)
  • d4a5be1 Fix RequestBody events on upgraded connections (#8970)
  • 112a19d Add RequestBody.sha256() (#9109)
  • d41a755 Start publishing dispatcher queue events (#9111)
  • c06ff31 Get Content-Type from the request body (#9113)
  • fdac86b Make Request.toCurl work more like Chrome's 'copy as cURL' (#9112)
  • Additional commits viewable in compare view

Updates io.undertow:undertow-core from 2.3.19.Final to 2.3.20.Final

Release notes

Sourced from io.undertow:undertow-core's releases.

v2.3.20.Final

Release 2.3.20.Final fixes CVE-2025-9784 Full list of issues: view in Jira

    Release Notes - Undertow - Version 2.3.20.Final
Commits
  • 5e6c73d Prepare 2.3.20.Final
  • 967ec02 Merge pull request #1803 from fl4via/backport-fixes_2.3.x
  • 2448f7a [UNDERTOW-2598] Replace the delayed cleaning algorithm in DirectByteBufferDea...
  • e7c28ac Merge pull request #1802 from fl4via/backport-fixes_2.3.x
  • 39fcfbe [UNDERTOW-2598] CVE-2025-9784 At AbstractFramedStreamSinkChannel, safeguard a...
  • 1d013b2 [UNDERTOW-2598] CVE-2025-9784 Add a delay in the actual direct byte buffer de...
  • afbd244 [UNDERTOW-2598] CVE-2025-9784 Prevent the dispatch of an exchange if the conn...
  • 4610806 [UNDERTOW-2598] CVE-2025-9784 Prevent a MadeYouReset HTTP2 attack by sending ...
  • c5a9817 [UNDERTOW-2235] Properly handle non servlet methods dispatched as error into ...
  • 5756047 [UNDERTOW-2604] fix potential NPE from alternate ctor
  • Additional commits viewable in compare view

Updates org.eclipse.jetty:jetty-server from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.websocket:jetty-websocket-core-server from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-api from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-server from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.http2:jetty-http2-server from 12.1.1 to 12.1.2

Updates org.eclipse.jetty:jetty-alpn-java-server from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.http2:jetty-http2-client from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.websocket:jetty-websocket-core-server from 12.1.1 to 12.1.2

Updates org.jacoco:org.jacoco.agent from 0.8.13 to 0.8.14

Release notes

Sourced from org.jacoco:org.jacoco.agent's releases.

0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #1950).
  • Experimental support for Java 26 class files (GitHub #1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #1965).
Commits
  • 2eb2483 Prepare release v0.8.14
  • de76181 KotlinSerializableFilter should filter more methods (#1971)
  • 89c4bd5 Fix NPE in KotlinSerializableFilter (#1970)
  • 0981128 Migrate release staging to the Central Publisher Portal (#1968)
  • d07bc6b Add filter for bytecode generated by Kotlin serialization compiler plugin (#1...
  • 5e35fd5 Upgrade maven-dependency-plugin to 3.9.0 (#1966)
  • c2fe5cc Upgrade ASM to 9.9 (#1965)
  • b0f8e23 KotlinSafeCallOperatorFilter should filter "unoptimized" safe call followed b...
  • c7bd3f4 Upgrade spotless-maven-plugin to 3.0.0 (#1961)
  • faa289d KotlinSafeCallOperatorFilter should not be affected by presence of pseudo ins...
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #1950).
  • Experimental support for Java 26 class files (GitHub #1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #1965).
Commits
  • 2eb2483 Prepare release v0.8.14
  • de76181 KotlinSerializableFilter should filter more methods (#1971)
  • 89c4bd5 Fix NPE in KotlinSerializableFilter (#1970)
  • 0981128 Migrate release staging to the Central Publisher Portal (#1968)
  • d07bc6b Add filter for bytecode generated by Kotlin serialization compiler plugin (#1...
  • 5e35fd5 Upgrade maven-dependency-plugin to 3.9.0 (#1966)
  • c2fe5cc Upgrade ASM to 9.9 (#1965)
  • b0f8e23 KotlinSafeCallOperatorFilter should filter "unoptimized" safe call followed b...
  • c7bd3f4 Upgrade spotless-maven-plugin to 3.0.0 (#1961)
  • faa289d KotlinSafeCallOperatorFilter should not be affected by presence of pseudo ins...
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.5.1 to 3.6.1

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.1

🐛 Bug Fixes

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 53087eb [maven-release-plugin] prepare release 3.6.1
  • 02e72e2 Revert change from #480 - plugin dependencies must be resolved from plugin re...
  • 18a21ea Bump org.codehaus.mojo:mojo-parent from 93 to 94
  • 3b6b9c5 [maven-release-plugin] prepare for next development iteration
  • febfc6f [maven-release-plugin] prepare release 3.6.0
  • ed19086 fix inheritIo option (#488)
  • a4297c6 Use JSR-330 for component injection
  • 5d90977 Use Maven 3.9.11 in dependencies, still requires 3.6.3 as minimum
  • b55f906 Re-run failed tests
  • 664d788 [ExecMojo]Add getShebang method to correctly set the command line executabl...
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 82ba770 [maven-release-plugin] prepare release enforcer-3.6.2
  • 5313c70 Bump m-invoker-p to 3.9.1
  • ee5abee Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
  • 6c5a152 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
  • 89ccb70 Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#931)
  • 03ed82d Update Version Ranges link in site.xml (#926)
  • d282dc4 Fixes #920 - Remove usage of Stack
  • 27e1f46 Use SessionData for cache storage (#930)
  • a1bac9b Fix formatting typo in dependencyConvergence.apt.vm
  • 870a1ed Correct support parameters documentation for banned repositories rule
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #1950).
  • Experimental support for Java 26 class files (GitHub #1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #1965).
Commits
  • 2eb2483 Prepare release v0.8.14
  • de76181 KotlinSerializableFilter should filter more methods (#1971)
  • 89c4bd5 Fix NPE in KotlinSerializableFilter (#1970)
  • 0981128 Migrate release staging to the Central Publisher Portal (#1968)
  • d07bc6b Add filter for bytecode generated by Kotlin serialization compiler plugin (#1...
  • 5e35fd5 Upgrade maven-dependency-plugin to 3.9.0 (#1966)
  • c2fe5cc Upgrade ASM to 9.9 (#1965)
  • b0f8e23 KotlinSafeCallOperatorFilter should filter "unoptimized" safe call followed b...
  • c7bd3f4 Upgrade spotless-maven-plugin to 3.0.0 (#1961)
  • faa289d KotlinSafeCallOperatorFilter should not be affected by presence of pseudo ins...
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-api from 12.1.1 to 12.1.2

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-server from 12.1.1...

Description has been truncated

@dependabot
build(deps): bump the dependencies group with 26 updates
cfd1065 
Bumps the dependencies group with 26 updates:

| Package | From | To |
| --- | --- | --- |
| [com.amazonaws:aws-java-sdk-bom](https://github.com/aws/aws-sdk-java) | `1.12.791` | `1.12.792` |
| org.ow2.asm:asm | `9.8` | `9.9` |
| org.ow2.asm:asm-util | `9.8` | `9.9` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.19` |
| io.swagger.core.v3:swagger-annotations | `2.2.37` | `2.2.38` |
| io.swagger.core.v3:swagger-models | `2.2.37` | `2.2.38` |
| [org.jdbi:jdbi3-core](https://github.com/jdbi/jdbi) | `3.49.5` | `3.49.6` |
| [com.squareup.okhttp3:okhttp-jvm](https://github.com/square/okhttp) | `5.1.0` | `5.2.1` |
| [com.squareup.okhttp3:okhttp-sse](https://github.com/square/okhttp) | `5.1.0` | `5.2.1` |
| [com.squareup.okhttp3:okhttp-tls](https://github.com/square/okhttp) | `5.1.0` | `5.2.1` |
| [io.undertow:undertow-core](https://github.com/undertow-io/undertow) | `2.3.19.Final` | `2.3.20.Final` |
| org.eclipse.jetty:jetty-server | `12.1.1` | `12.1.2` |
| org.eclipse.jetty.websocket:jetty-websocket-core-server | `12.1.1` | `12.1.2` |
| org.eclipse.jetty.websocket:jetty-websocket-jetty-api | `12.1.1` | `12.1.2` |
| org.eclipse.jetty.websocket:jetty-websocket-jetty-server | `12.1.1` | `12.1.2` |
| org.eclipse.jetty.http2:jetty-http2-server | `12.1.1` | `12.1.2` |
| org.eclipse.jetty:jetty-alpn-java-server | `12.1.1` | `12.1.2` |
| org.eclipse.jetty.http2:jetty-http2-client | `12.1.1` | `12.1.2` |
| [org.jacoco:org.jacoco.agent](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.1` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `11.1.0` | `12.0.1` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.17.7` | `1.17.8` |
| [com.github.kagkarlsson:db-scheduler](https://github.com/kagkarlsson/db-scheduler) | `16.1.0` | `16.2.0` |
| software.amazon.awssdk:bom | `2.34.5` | `2.35.5` |


Updates `com.amazonaws:aws-java-sdk-bom` from 1.12.791 to 1.12.792
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.791...1.12.792)

Updates `org.ow2.asm:asm` from 9.8 to 9.9

Updates `org.ow2.asm:asm-util` from 9.8 to 9.9

Updates `org.ow2.asm:asm-util` from 9.8 to 9.9

Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.19
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.19)

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.37 to 2.2.38

Updates `io.swagger.core.v3:swagger-models` from 2.2.37 to 2.2.38

Updates `io.swagger.core.v3:swagger-models` from 2.2.37 to 2.2.38

Updates `org.jdbi:jdbi3-core` from 3.49.5 to 3.49.6
- [Release notes](https://github.com/jdbi/jdbi/releases)
- [Changelog](https://github.com/jdbi/jdbi/blob/master/RELEASE_NOTES.md)
- [Commits](jdbi/jdbi@v3.49.5...v3.49.6)

Updates `com.squareup.okhttp3:okhttp-jvm` from 5.1.0 to 5.2.1
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.1.0...parent-5.2.1)

Updates `com.squareup.okhttp3:okhttp-sse` from 5.1.0 to 5.2.1
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.1.0...parent-5.2.1)

Updates `com.squareup.okhttp3:okhttp-tls` from 5.1.0 to 5.2.1
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.1.0...parent-5.2.1)

Updates `com.squareup.okhttp3:okhttp-sse` from 5.1.0 to 5.2.1
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.1.0...parent-5.2.1)

Updates `io.undertow:undertow-core` from 2.3.19.Final to 2.3.20.Final
- [Release notes](https://github.com/undertow-io/undertow/releases)
- [Commits](undertow-io/undertow@2.3.19.Final...2.3.20.Final)

Updates `org.eclipse.jetty:jetty-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.websocket:jetty-websocket-core-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-api` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.http2:jetty-http2-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty:jetty-alpn-java-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.http2:jetty-http2-client` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.websocket:jetty-websocket-core-server` from 12.1.1 to 12.1.2

Updates `org.jacoco:org.jacoco.agent` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.1
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.1...3.6.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-api` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.websocket:jetty-websocket-jetty-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty.http2:jetty-http2-server` from 12.1.1 to 12.1.2

Updates `org.eclipse.jetty:jetty-alpn-java-server` from 12.1.1 to 12.1.2

Updates `com.puppycrawl.tools:checkstyle` from 11.1.0 to 12.0.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-11.1.0...checkstyle-12.0.1)

Updates `net.bytebuddy:byte-buddy` from 1.17.7 to 1.17.8
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.7...byte-buddy-1.17.8)

Updates `com.github.kagkarlsson:db-scheduler` from 16.1.0 to 16.2.0
- [Release notes](https://github.com/kagkarlsson/db-scheduler/releases)
- [Changelog](https://github.com/kagkarlsson/db-scheduler/blob/master/jreleaser.yml)
- [Commits](kagkarlsson/db-scheduler@v16.1.0...v16.2.0)

Updates `software.amazon.awssdk:bom` from 2.34.5 to 2.35.5

Updates `com.squareup.okhttp3:okhttp-tls` from 5.1.0 to 5.2.1
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.1.0...parent-5.2.1)

Updates `org.eclipse.jetty.http2:jetty-http2-client` from 12.1.1 to 12.1.2

---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-bom
  dependency-version: 1.12.792
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm
  dependency-version: '9.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm-util
  dependency-version: '9.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm-util
  dependency-version: '9.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 2.2.38
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.core.v3:swagger-models
  dependency-version: 2.2.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.core.v3:swagger-models
  dependency-version: 2.2.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jdbi:jdbi3-core
  dependency-version: 3.49.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.squareup.okhttp3:okhttp-jvm
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.squareup.okhttp3:okhttp-sse
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.squareup.okhttp3:okhttp-tls
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.squareup.okhttp3:okhttp-sse
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.undertow:undertow-core
  dependency-version: 2.3.20.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty:jetty-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.websocket:jetty-websocket-core-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-api
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.http2:jetty-http2-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty:jetty-alpn-java-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.http2:jetty-http2-client
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.websocket:jetty-websocket-core-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jacoco:org.jacoco.agent
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-api
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.websocket:jetty-websocket-jetty-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.http2:jetty-http2-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty:jetty-alpn-java-server
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 12.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.17.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.kagkarlsson:db-scheduler
  dependency-version: 16.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.35.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.squareup.okhttp3:okhttp-tls
  dependency-version: 5.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.http2:jetty-http2-client
  dependency-version: 12.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 13, 2025
@jknack jknack added this to the 4.0.8 milestone Oct 13, 2025
@jknack jknack merged commit 19e0a64 into main Oct 14, 2025
0 of 5 checks passed
@dependabot dependabot bot deleted the dependabot/maven/dependencies-dd3bbb6272 branch October 14, 2025 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

4.0.9

Development

Successfully merging this pull request may close these issues.

2 participants

@jknack