Merge pull request #990 from hazendaz/fix-deps

Dependency adjustments

Author: hazendaz

.github/dependabot.yml

@@ -8,3 +8,8 @@ updates:
     ignore:
       - dependency-name: 'org.eclipse.jgit:org.eclipse.jgit'
         versions: ["> 6.0.0.202111291000-r"]
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 20

.github/workflows/ci.yaml

@@ -16,14 +16,14 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        java: [17, 21, 24, 25-ea]
+        java: [17, 21, 25, 26-ea]
         distribution: ['temurin']
       fail-fast: false
       max-parallel: 4
     name: Test JDK ${{ matrix.java }}, ${{ matrix.os }}
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up JDK ${{ matrix.java }} ${{ matrix.distribution }}
         uses: actions/setup-java@v5
         with:

.github/workflows/snapshot-report.yml

@@ -16,12 +16,12 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-java@v5
         with:
           cache: 'maven'
           distribution: 'zulu'
-          java-version: '21'
+          java-version: '25'
       - name: Build with Maven
         run: ./mvnw clean install site -B -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn
       - name: Fix eol markers

pom.xml

@@ -164,7 +164,19 @@
       <dependency>
         <groupId>org.apache.maven.plugin-testing</groupId>
         <artifactId>maven-plugin-testing-harness</artifactId>
-        <version>4.0.0-alpha-2</version>
+        <version>3.4.0</version>
+      </dependency>
+
+      <!-- Override to latest commons libraries used at runtime. -->
+      <dependency>
+        <groupId>commons-io</groupId>
+        <artifactId>commons-io</artifactId>
+        <version>2.21.0</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-pool2</artifactId>
+        <version>2.12.1</version>
       </dependency>
 
       <dependency>