Skip to content

Comments

Bump the java group with 9 updates#15

Closed
dependabot[bot] wants to merge 1 commit into2026.1from
dependabot/maven/2026.1/java-e265a1a39f
Closed

Bump the java group with 9 updates#15
dependabot[bot] wants to merge 1 commit into2026.1from
dependabot/maven/2026.1/java-e265a1a39f

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026 •
edited
Loading

Bumps the java group with 9 updates:

Package From To
ch.qos.logback:logback-core 1.5.24 1.5.25
ch.qos.logback:logback-classic 1.5.24 1.5.25
com.fasterxml.jackson.core:jackson-databind 2.20.1 2.21.0
com.fasterxml.jackson.datatype:jackson-datatype-joda 2.20.1 2.21.0
org.springframework:spring-web 7.0.2 7.0.3
com.fasterxml.jackson.datatype:jackson-datatype-hibernate7 2.20.1 2.21.0
org.elasticsearch.client:elasticsearch-rest-client 9.2.3 9.2.4
org.postgresql:postgresql 42.7.8 42.7.9
org.apache.jackrabbit:jackrabbit-jcr-commons 2.22.2 2.22.3

Updates ch.qos.logback:logback-core from 1.5.24 to 1.5.25

Commits
  • f426e00 prepare release of 1.5.25
  • d28931f restrict object creation to expected supertype
  • aa264f7 test default variable values in appender-ref ref attribute
  • 8fb403a adjust copyright year
  • b294a12 check optionList in start()
  • b65040a Add EpochConverter for milliseconds/seconds since epoch (related to issue #96...
  • 0690174 cla for Duncan Jauncey
  • 71dc2af Removed email address for Tony.
  • 1f97ae1 check for undeclared by referenced appenders
  • b07355e Move the artifact version checking code to VersionUtil in logback-core.
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.24 to 1.5.25

Commits
  • f426e00 prepare release of 1.5.25
  • d28931f restrict object creation to expected supertype
  • aa264f7 test default variable values in appender-ref ref attribute
  • 8fb403a adjust copyright year
  • b294a12 check optionList in start()
  • b65040a Add EpochConverter for milliseconds/seconds since epoch (related to issue #96...
  • 0690174 cla for Duncan Jauncey
  • 71dc2af Removed email address for Tony.
  • 1f97ae1 check for undeclared by referenced appenders
  • b07355e Move the artifact version checking code to VersionUtil in logback-core.
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.20.1 to 2.21.0

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-joda from 2.20.1 to 2.21.0

Commits
  • f4c58d7 [maven-release-plugin] prepare release jackson-datatype-joda-2.21.0
  • b1e7530 Prep for 2.21.0 release
  • 6ec0f0c Post-release dep version bump
  • c875c4d Post-release dep version bump
  • 91aabb8 [maven-release-plugin] prepare for next development iteration
  • f3b75fe Merge branch '2.20' into 2.x
  • c699609 Bump the github-actions group with 3 updates (#177)
  • 056cd56 Start 2.20 branch; update 2.x to 2.21
  • See full diff in compare view

Updates org.springframework:spring-web from 7.0.2 to 7.0.3

Release notes

Sourced from org.springframework:spring-web's releases.

v7.0.3

⭐ New Features

  • DisconnectedClientHelper should detect presence of RestClientException and WebClientException separately #36141
  • Deprecate PagedListHolder and PropertyComparator for removal #36139
  • Add DataAccessException and MessagingException to the excluded outermost exceptions in DisconnectedClientHelper #36134
  • Support property placeholders in HTTP service registry #36126
  • Introduce Spring property to disable context pausing for tests #36117
  • Retain original requested bean class for SpringContainedBean #36116
  • Add task rejection support to SyncTaskExecutor's concurrency throttle #36114
  • Precompute PropertyDescriptor array in SimpleBeanInfoFactory #36112
  • Add option for @ConcurrencyLimit to throw rejection exception #36109
  • Support HttpComponents 5.6 #36100
  • Fix double encoding in DefaultApiVersionInserter #36097
  • Optimize single-char wildcard path matching performance #36095
  • Allow WebFlux ApiVersionResolver to return a Mono #36084
  • Configure HttpMessageConverters as a list #36083
  • HTTP Interface with an @RequestBody Object method parameter should use class of actual value #36078
  • Consistently declare @Nullable on parameter in equals() implementations #36075
  • Support listener registration for @Transactional triggered method rollbacks #36073
  • Introduce generalized MethodFailureEvent for use in EventPublicationInterceptor #36072
  • Avoid duplicate flushes in StringHttpMessageConverter #36065
  • When no API version is provided, static resources fail to load #36059
  • When no API version is provided, /error requests also fail. #36058
  • Declare TaskCallback return value as potentially nullable #36057
  • Fix case-insensitive semantics for LinkedCaseInsensitiveMap entrySet #36056
  • Update to NullAway 0.12.15 and fix new warnings #36054
  • Provide alternative to execute(Retryable) which avoids RetryException in favor of rethrowing the last original RuntimeException #36052
  • Avoid unnecessary pausing of application contexts in the TestContext framework #36044
  • Simplify TransactionalOperator.executeAndAwait by removing Optional #36039
  • Deprecated MockMvcClientHttpRequestFactory is required for tests with HTTP service interface proxy #35989
  • Introduce Jackson XML codecs #35752
  • Support listener registration for @Retryable triggered retry executions #35382

🐞 Bug Fixes

  • Fix SmartFactoryBean type matching for ResolvableType.NONE #36123
  • AbstractMessageSendingTemplate ignores headers in convertAndSend() variant #36120
  • JmsClient.sendAndReceive() fails if headers are included #36118
  • PropertyDescriptorUtils does not reliably resolve overloaded write methods #36113
  • Fix context class resolution for nested types in AbstractJacksonHttpMessageConverter #36111
  • DefaultApiVersionInserter encodes already encoded URI #36080
  • ConverterFactory nullness mismatch with Converter #36063
  • WiretapConnector leaks data buffers when response body not consumed #36050
  • CompilationException should not use -1 for line or column numbers when they are unknown #36041
  • org.springframework.core.test.tools.TestCompiler.Errors should handle case where warnings are turned into errors #36037
  • UriComponentsBuilder loses the fragment when it consists of only a single character #36029
  • Parameter names of the handler method are null in HandlerInterceptor::preHandle during first invocation of an endpoint #36024
  • PropertyDescriptorUtils does not reliably resolve read/write methods in type hierarchies with generics #36019
  • Illegal reflection use against Hibernate Validator 9 on module path #36012

... (truncated)

Commits
  • 02cdd36 Release v7.0.3
  • 62fd09d Polishing
  • 9df19de Revise wording for PauseMode documentation
  • 01a57a7 Simplify DefaultContextCache implementation by using entrySet().removeIf()
  • b5c2003 Fix variable name
  • 5f5da06 Upgrade to JUnit 6.0.2
  • 9f19b40 Exclude DataAccessException and MessagingException in DisconnectedClientHelper
  • a784eb0 Improve DisconnectedClientHelper to better guard ClassNotFoundException
  • fa40406 Avoid unnecessary pausing of application contexts for tests
  • 948af8b Fix typo in Javadoc
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-hibernate7 from 2.20.1 to 2.21.0

Commits
  • ce9832c [maven-release-plugin] prepare release jackson-datatype-hibernate-parent-2.21.0
  • ffe854c Prep for 2.21.0 release
  • ea6a7ca Post-release dep version bump
  • 081a601 Revise Jackson compatibility details in README
  • 04e56ec Merge branch '2.20' into 2.x
  • 4340e55 Post-release dep version bump
  • 2d65062 [maven-release-plugin] prepare for next development iteration
  • 02a51b9 Correct Hibernate 7.x dependency version details
  • a81d426 Update README wrt Deprecation via [JSTEP-9]
  • 890a5d9 Merge pull request #189 from FasterXML/dependabot/github_actions/github-actio...
  • Additional commits viewable in compare view

Updates org.elasticsearch.client:elasticsearch-rest-client from 9.2.3 to 9.2.4

Release notes

Sourced from org.elasticsearch.client:elasticsearch-rest-client's releases.

Elasticsearch 9.2.4

Downloads: https://elastic.co/downloads/elasticsearch Release notes: https://www.elastic.co/docs/release-notes/elasticsearch#elasticsearch-9.2.4-release-notes

Commits
  • dfc5c38 Fix ST_DISTANCE handling of invalid geometry literals that fold to null (#140...
  • 355b1f4 rest-api-spec: fix required annotations (#138147) (#139351)
  • b7713b2 Add busy assertion to avoid race condition for testStalledShardMigrationPrope...
  • 3ec0066 [9.2] [Inference API] Fix auth exception listener not called bug (#139966) (#...
  • 72cc6df Overload randomIdentifier to accept prefix (#140220)
  • 04478d0 Add debug logging for reindex shutdown test (#140093)
  • 56a3e15 Mute org.elasticsearch.packaging.test.DockerTests test140CgroupOsStatsAreAvai...
  • 4e8a5e1 Removed dash (#140182) (#140187)
  • 32ae318 Revert "Attempt to clean up index before remote transfer (#115142)" (#139569)...
  • 2a8d305 Reject updating low-priority model deployments to more than 1 allocation (#13...
  • Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.7.8 to 42.7.9

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.9

Changes

🐛 Bug Fixes

  • fix: close temporary lob descriptors that are used internally in PreparedStatement#setBlob @​vlsi (#3903)
  • fix: avoid memory leaks in Java <= 21 caused by Thread.inheritedAccessControlContext @​vlsi (#3886)

📝 Documentation

  • doc: add the new PGP signing key to the official documentation @​vlsi (#3813)

🧰 Maintenance

  • chore: remove unused com.github.spotbugs Gradle plugin dependency @​vlsi (#3868)
  • chore: drop SpotBugs as we do not seem to use it @​vlsi (#3834)
  • chore: bump version to 42.7.9 after 42.7.8 release @​vlsi (#3810)

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.9] (2026-01-14)

Added

Changed

  • perf: optimize PGInterval.getValue() by replacing String.format with StringBuilder
  • doc: update property quoteReturningIdentifiers default value [PR #3847](pgjdbc/pgjdbc#3847)
  • security: Use a static method forName to load all user supplied classes. Use the Class.forName 3 parameter method and do not initilize it unless it is a subclass of the expected class

Fixed

Commits
  • 79b784e Added changelogs for version 42.7.9 (#3908)
  • 1c00ffc doc: add the new PGP signing key to the official documentation
  • f774000 chore(deps): update actions/create-github-app-token digest to 29824e6
  • 27daf3b chore(deps): update actions/setup-java digest to c1e3236
  • 6eb01ff chore(deps): update codecov/codecov-action digest to 671740a
  • dbf1e57 the classloader is nullable, and remove a space (#3907)
  • 6a20574 Merge commit from fork
  • c07721a fix: incorrect pg_stat_replication.reply_time calculation (#3906)
  • 83023f3 fix: close temporary lob descriptors that are used internally in PreparedStat...
  • 62c9805 fix: issue #3892, PGXAConnection.prepare(Xid) should return XA_RDONLY if the ...
  • Additional commits viewable in compare view

Updates org.apache.jackrabbit:jackrabbit-jcr-commons from 2.22.2 to 2.22.3

Changelog

Sourced from org.apache.jackrabbit:jackrabbit-jcr-commons's changelog.

Changes in Jackrabbit 2.22.3

Sub-task

[JCR-5160] - Create jacoco reports compliant with SonarQube Cloud
[JCR-5172] - Exclude test sources from SonarQube analysis
[JCR-5173] - Create aggregate jacoco report
[JCR-5174] - Exclude jackrabbit-jcr-tests from coverage calculation

Bug

[JCR-5141] - Deprecate org.apache.jackrabbit.commons.json
[JCR-5196] - Some test classes are not executed by default because they haven't been added to a test suite

Improvement

[JCR-5154] - Replace deprecated call of Class.newInstance()

Task

[JCR-5132] - webapp: update tomcat dependency to 9.0.104
[JCR-5133] - Update easymock dependency to 5.5.0
[JCR-5140] - Improve support for generating namespace prefixes
[JCR-5148] - remove (comment out) mysql test profile
[JCR-5156] - webapp: update tomcat dependency to 9.0.112
[JCR-5163] - Update commons file-upload dependency to 1.6.0
[JCR-5175] - Update Mockito dependency to 5.20.0
[JCR-5176] - Update commons-io dependency to 2.21.0
[JCR-5178] - Update easymock dependency to 5.6.0
[JCR-5182] - Update pax-exam test dependency to 4.14.0
[JCR-5183] - Vote Template should be clear about the fact that running the check script in "sh" will not work
[JCR-5185] - Update oak-jackrabbit-api.version.implemented in trunk to Oak 1.86.0
[JCR-5187] - Update commons-cli dependency to 1.11.0
[JCR-5188] - Update h2db dependency to 2.3.232
[JCR-5189] - update Jetty to 9.4.58.v20250814
[JCR-5190] - webapp: bump htmlunit to 4.19.0
[JCR-5191] - remove JEXL dependency
[JCR-5192] - update aws java sdk version to 1.12.791
[JCR-5193] - update Apache parent pom to version 35
[JCR-5195] - Utilities for 'safe' creation of XML document builders
[JCR-5197] - cleanup o.a.j.util.Base64 and update Javadoc
[JCR-5200] - Update h2db dependency to 2.4.240
[JCR-5201] - Update oak-jackrabbit-api.version.implemented in trunk to Oak 1.88.0

For more detailed information about all the changes in this and other Jackrabbit releases, please see the Jackrabbit issue tracker at

https://issues.apache.org/jira/browse/JCR

... (truncated)

Commits
  • 5dce857 [maven-release-plugin] prepare release jackrabbit-2.22.3
  • b6da2b3 JCR-5214: Release Jackrabbit 2.22.3 - Candidate Release Notes (#321)
  • d241fae JCR-5174 Use SonarQube path patterns which should work with multimodule
  • d96fb2f trivial: Remove prerequisites from POM
  • 0fbedf4 JCR-5174 Exclude jackrabbit-jcr-tests from coverage calculation
  • dadb919 JCR-5173 Create aggregated coverage report
  • 7a90a41 Fix a typo: @​peop -> @​prop
  • be3a79f JCR-5160 Generate Jacoco Report in default location to be picked up by
  • 76c7cd0 JCR-5174 Exclude jackrabbit-jcr-tests from coverage calculation
  • ace0186 JCR-5201: Update oak-jackrabbit-api.version.implemented in trunk to Oak 1.88....
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the java group with 9 updates
2cb8794 
Bumps the java group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.24` | `1.5.25` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.24` | `1.5.25` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.20.1` | `2.21.0` |
| [com.fasterxml.jackson.datatype:jackson-datatype-joda](https://github.com/FasterXML/jackson-datatype-joda) | `2.20.1` | `2.21.0` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `7.0.2` | `7.0.3` |
| [com.fasterxml.jackson.datatype:jackson-datatype-hibernate7](https://github.com/FasterXML/jackson-datatype-hibernate) | `2.20.1` | `2.21.0` |
| [org.elasticsearch.client:elasticsearch-rest-client](https://github.com/elastic/elasticsearch) | `9.2.3` | `9.2.4` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.8` | `42.7.9` |
| [org.apache.jackrabbit:jackrabbit-jcr-commons](https://github.com/apache/jackrabbit) | `2.22.2` | `2.22.3` |


Updates `ch.qos.logback:logback-core` from 1.5.24 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.24...v_1.5.25)

Updates `ch.qos.logback:logback-classic` from 1.5.24 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.24...v_1.5.25)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.20.1 to 2.21.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-joda` from 2.20.1 to 2.21.0
- [Commits](FasterXML/jackson-datatype-joda@jackson-datatype-joda-2.20.1...jackson-datatype-joda-2.21.0)

Updates `org.springframework:spring-web` from 7.0.2 to 7.0.3
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v7.0.2...v7.0.3)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-hibernate7` from 2.20.1 to 2.21.0
- [Commits](FasterXML/jackson-datatype-hibernate@jackson-datatype-hibernate-parent-2.20.1...jackson-datatype-hibernate-parent-2.21.0)

Updates `org.elasticsearch.client:elasticsearch-rest-client` from 9.2.3 to 9.2.4
- [Release notes](https://github.com/elastic/elasticsearch/releases)
- [Changelog](https://github.com/elastic/elasticsearch/blob/main/CHANGELOG.md)
- [Commits](elastic/elasticsearch@v9.2.3...v9.2.4)

Updates `org.postgresql:postgresql` from 42.7.8 to 42.7.9
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.8...REL42.7.9)

Updates `org.apache.jackrabbit:jackrabbit-jcr-commons` from 2.22.2 to 2.22.3
- [Changelog](https://github.com/apache/jackrabbit/blob/jackrabbit-2.22.3/RELEASE-NOTES.txt)
- [Commits](apache/jackrabbit@jackrabbit-2.22.2...jackrabbit-2.22.3)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-joda
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-hibernate7
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.elasticsearch.client:elasticsearch-rest-client
  dependency-version: 9.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.jackrabbit:jackrabbit-jcr-commons
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 19, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 23, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 23, 2026
@dependabot dependabot bot deleted the dependabot/maven/2026.1/java-e265a1a39f branch January 23, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants