Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jul 2, 2025

Bumps com.github.luben:zstd-jni from 1.5.7-3 to 1.5.7-4.

Commits
  • 8250e09 Changes to migrate to the new Sonatype publishing infrastructure
  • 81e0d71 fix: decompressFrame(byte[], int) fixed, throwing exception on get frame cont...
  • 8532971 fix: decompress(byte[]) method now decompresses all frames, new tests added
  • 051e8de refactor: throwing an exception on findFrameCompressedSize0 error
  • ed71d28 feat: decompressFrame and findFrameCompressedSize methods added
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

ppkarwasz and others added 30 commits April 17, 2025 18:50
This is a short workaround for the compatibility issues between `merge-dependabot` and branch protection rules.

Commits pushed by a GitHub workflow don't trigger other workflows, so Dependabot PRs cannot be merged if the workflow manages to add a changelog file.
Bumps `mongodb.version` from 5.4.0 to 5.5.0.

Updates `org.mongodb:bson` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.4.0...r5.5.0)

Updates `org.mongodb:mongodb-driver-core` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.4.0...r5.5.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.4.0...r5.5.0)

---
updated-dependencies:
- dependency-name: org.mongodb:bson
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mongodb:mongodb-driver-core
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
…/2.x/mongodb.version-5.5.0

Bump mongodb.version from 5.4.0 to 5.5.0 in /log4j-mongodb
fix: auto_merge and disable on recursive call
…nt (#538)

* Bump com.github.luben:zstd-jni from 1.5.7-2 to 1.5.7-3 in /log4j-parent

Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-2 to 1.5.7-3.
- [Commits](luben/zstd-jni@v1.5.7-2...v1.5.7-3)

---
updated-dependencies:
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #538

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ASF Logging Services RM <[email protected]>
* Bump the non-breaking group in /log4j-parent with 6 updates

Bumps the non-breaking group in /log4j-parent with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.18.3` | `2.19.0` |
| [org.junit:junit-bom](https://github.com/junit-team/junit5) | `5.12.1` | `5.12.2` |
| commons-io:commons-io | `2.18.0` | `2.19.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.7-jre` | `33.4.8-jre` |
| [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.7-jre` | `33.4.8-jre` |
| [co.elastic.logging:log4j2-ecs-layout](https://github.com/elastic/ecs-logging-java) | `1.6.0` | `1.7.0` |


Updates `com.fasterxml.jackson:jackson-bom` from 2.18.3 to 2.19.0
- [Commits](FasterXML/jackson-bom@jackson-bom-2.18.3...jackson-bom-2.19.0)

Updates `org.junit:junit-bom` from 5.12.1 to 5.12.2
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.12.1...r5.12.2)

Updates `commons-io:commons-io` from 2.18.0 to 2.19.0

Updates `com.google.guava:guava` from 33.4.7-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.7-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.7-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `co.elastic.logging:log4j2-ecs-layout` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/elastic/ecs-logging-java/releases)
- [Commits](elastic/ecs-logging-java@v1.6.0...v1.7.0)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.junit:junit-bom
  dependency-version: 5.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: commons-io:commons-io
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: co.elastic.logging:log4j2-ecs-layout
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #536

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ASF Logging Services RM <[email protected]>
* Revert "Bump the non-breaking group in /log4j-parent with 6 updates (#536)"

This reverts commit e96e07d.

* feat: test Dependabot processing
Bumps the breaking group in /log4j-parent with 1 update: org.apache.kafka:kafka-clients.


Updates `org.apache.kafka:kafka-clients` from 3.9.0 to 4.0.0

---
updated-dependencies:
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: breaking
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ppkarwasz and others added 21 commits June 16, 2025 15:22
Bumps [gradle/develocity-actions](https://github.com/gradle/develocity-actions) from 1.3 to 1.4.
- [Release notes](https://github.com/gradle/develocity-actions/releases)
- [Commits](gradle/develocity-actions@b8d3a57...4a2aed8)

---
updated-dependencies:
- dependency-name: gradle/develocity-actions
  dependency-version: '1.4'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat: reference to reusable workflow

* fix: GPG passphrase
…yaml@rel/12.1.0 from 12.1.0 to 12.1.1 (#545)

* Bump apache/logging-parent/.github/workflows/deploy-release-reusable.yaml@rel/12.1.0

Bumps [apache/logging-parent/.github/workflows/deploy-release-reusable.yaml@rel/12.1.0](https://github.com/apache/logging-parent) from 12.1.0 to 12.1.1.
- [Release notes](https://github.com/apache/logging-parent/releases)
- [Commits](apache/logging-parent@rel/12.1.0...rel/12.1.1)

---
updated-dependencies:
- dependency-name: apache/logging-parent/.github/workflows/deploy-release-reusable.yaml@rel/12.1.0
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #545

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ASF Logging Services RM <[email protected]>
….yaml@rel/12.1.0 from 12.1.0 to 12.1.1 (#543)

* Bump apache/logging-parent/.github/workflows/codeql-analysis-reusable.yaml@rel/12.1.0

Bumps [apache/logging-parent/.github/workflows/codeql-analysis-reusable.yaml@rel/12.1.0](https://github.com/apache/logging-parent) from 12.1.0 to 12.1.1.
- [Release notes](https://github.com/apache/logging-parent/releases)
- [Commits](apache/logging-parent@rel/12.1.0...rel/12.1.1)

---
updated-dependencies:
- dependency-name: apache/logging-parent/.github/workflows/codeql-analysis-reusable.yaml@rel/12.1.0
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #543

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ASF Logging Services RM <[email protected]>
…eusable.yaml@rel/12.1.0 from 12.1.0 to 12.1.1 (#544)

* Bump apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@rel/12.1.0

Bumps [apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@rel/12.1.0](https://github.com/apache/logging-parent) from 12.1.0 to 12.1.1.
- [Release notes](https://github.com/apache/logging-parent/releases)
- [Commits](apache/logging-parent@rel/12.1.0...rel/12.1.1)

---
updated-dependencies:
- dependency-name: apache/logging-parent/.github/workflows/verify-reproducibility-reusable.yaml@rel/12.1.0
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #544

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: ASF Logging Services RM <[email protected]>
* Bump the non-breaking group in /log4j-parent with 13 updates

Bumps the non-breaking group in /log4j-parent with 13 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.groovy:groovy-bom](https://github.com/apache/groovy) | `4.0.26` | `4.0.27` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.18.3` | `2.19.1` |
| [org.junit:junit-bom](https://github.com/junit-team/junit5) | `5.12.1` | `5.13.1` |
| commons-io:commons-io | `2.18.0` | `2.19.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.7-jre` | `33.4.8-jre` |
| [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.7-jre` | `33.4.8-jre` |
| [co.elastic.logging:log4j2-ecs-layout](https://github.com/elastic/ecs-logging-java) | `1.6.0` | `1.7.0` |
| org.apache.maven:maven-core | `3.9.9` | `3.9.10` |
| org.apache.maven:maven-model | `3.9.9` | `3.9.10` |
| [org.eclipse.platform:org.eclipse.osgi](https://github.com/eclipse-equinox/equinox) | `3.23.0` | `3.23.100` |
| [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) | `2.10.0` | `2.10.2` |
| [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit) | `2.10.0` | `2.10.2` |
| [org.apache.logging:logging-parent](https://github.com/apache/logging-parent) | `12.1.0` | `12.1.1` |


Updates `org.apache.groovy:groovy-bom` from 4.0.26 to 4.0.27
- [Commits](https://github.com/apache/groovy/commits)

Updates `com.fasterxml.jackson:jackson-bom` from 2.18.3 to 2.19.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.18.3...jackson-bom-2.19.1)

Updates `org.junit:junit-bom` from 5.12.1 to 5.13.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.12.1...r5.13.1)

Updates `commons-io:commons-io` from 2.18.0 to 2.19.0

Updates `com.google.guava:guava` from 33.4.7-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.7-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava-testlib` from 33.4.7-jre to 33.4.8-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `co.elastic.logging:log4j2-ecs-layout` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/elastic/ecs-logging-java/releases)
- [Commits](elastic/ecs-logging-java@v1.6.0...v1.7.0)

Updates `org.apache.maven:maven-core` from 3.9.9 to 3.9.10

Updates `org.apache.maven:maven-model` from 3.9.9 to 3.9.10

Updates `org.apache.maven:maven-model` from 3.9.9 to 3.9.10

Updates `org.eclipse.platform:org.eclipse.osgi` from 3.23.0 to 3.23.100
- [Commits](https://github.com/eclipse-equinox/equinox/commits)

Updates `org.xmlunit:xmlunit-core` from 2.10.0 to 2.10.2
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.0...v2.10.2)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.0 to 2.10.2
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.0...v2.10.2)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.0 to 2.10.2
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.0...v2.10.2)

Updates `org.apache.logging:logging-parent` from 12.1.0 to 12.1.1
- [Release notes](https://github.com/apache/logging-parent/releases)
- [Commits](apache/logging-parent@rel/12.1.0...rel/12.1.1)

---
updated-dependencies:
- dependency-name: org.apache.groovy:groovy-bom
  dependency-version: 4.0.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.junit:junit-bom
  dependency-version: 5.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: commons-io:commons-io
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.4.8-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: co.elastic.logging:log4j2-ecs-layout
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.apache.maven:maven-model
  dependency-version: 3.9.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.eclipse.platform:org.eclipse.osgi
  dependency-version: 3.23.100
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.apache.logging:logging-parent
  dependency-version: 12.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #552

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Release Manager <[email protected]>
* Bump the non-breaking group across 1 directory with 3 updates

Bumps the non-breaking group with 3 updates in the /log4j-parent directory: [org.eclipse.persistence:org.eclipse.persistence.jpa](https://github.com/eclipse-ee4j/eclipselink), [org.xmlunit:xmlunit-core](https://github.com/xmlunit/xmlunit) and [org.xmlunit:xmlunit-matchers](https://github.com/xmlunit/xmlunit).


Updates `org.eclipse.persistence:org.eclipse.persistence.jpa` from 2.7.15 to 2.7.16
- [Release notes](https://github.com/eclipse-ee4j/eclipselink/releases)
- [Commits](eclipse-ee4j/eclipselink@2.7.15...2.7.16)

Updates `org.xmlunit:xmlunit-core` from 2.10.2 to 2.10.3
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.2...v2.10.3)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.2 to 2.10.3
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.2...v2.10.3)

Updates `org.xmlunit:xmlunit-matchers` from 2.10.2 to 2.10.3
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.10.2...v2.10.3)

---
updated-dependencies:
- dependency-name: org.eclipse.persistence:org.eclipse.persistence.jpa
  dependency-version: 2.7.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-core
  dependency-version: 2.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.xmlunit:xmlunit-matchers
  dependency-version: 2.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #555

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Release Manager <[email protected]>
Try the Bash-based alternative to the typescript workflow.
Apparently `contents` is also required to turn on "auto-merge".
Use `github.head_ref` instead of `github.ref` for the Dependabot workflow.
Delete old changelog entries, so new ones can be added.
Switches to an unprivileged and a privileged workflow.
* fix: input naming convention

* fix: workflow name
Fixes a typo in `analyze-workflow-run-id`.
Tests Dependabot with implicit GitHub token.
* Bump the non-breaking group across 1 directory with 9 updates

Bumps the non-breaking group with 9 updates in the /log4j-parent directory:

| Package | From | To |
| --- | --- | --- |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.1` | `5.13.2` |
| [org.apache.activemq:activemq-broker](https://github.com/apache/activemq) | `6.1.6` | `6.1.7` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.16.0` | `1.18.0` |
| org.apache.commons:commons-compress | `1.25.0` | `1.27.1` |
| [org.apache.commons:commons-csv](https://github.com/apache/commons-csv) | `1.12.0` | `1.14.0` |
| org.apache.commons:commons-dbcp2 | `2.12.0` | `2.13.0` |
| commons-io:commons-io | `2.17.0` | `2.19.0` |
| org.apache.commons:commons-lang3 | `3.15.0` | `3.17.0` |
| commons-logging:commons-logging | `1.2.0` | `1.3.5` |



Updates `org.junit:junit-bom` from 5.13.1 to 5.13.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.1...r5.13.2)

Updates `org.apache.activemq:activemq-broker` from 6.1.6 to 6.1.7
- [Commits](apache/activemq@activemq-6.1.6...activemq-6.1.7)

Updates `commons-codec:commons-codec` from 1.16.0 to 1.18.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.16.0...rel/commons-codec-1.18.0)

Updates `org.apache.commons:commons-compress` from 1.25.0 to 1.27.1

Updates `org.apache.commons:commons-csv` from 1.12.0 to 1.14.0
- [Changelog](https://github.com/apache/commons-csv/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-csv@rel/commons-csv-1.12.0...rel/commons-csv-1.14.0)

Updates `org.apache.commons:commons-dbcp2` from 2.12.0 to 2.13.0

Updates `commons-io:commons-io` from 2.17.0 to 2.19.0

Updates `org.apache.commons:commons-lang3` from 3.15.0 to 3.17.0

Updates `commons-logging:commons-logging` from 1.2.0 to 1.3.5

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-version: 5.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: org.apache.activemq:activemq-broker
  dependency-version: 6.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: non-breaking
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-csv
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: commons-io:commons-io
  dependency-version: 2.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
- dependency-name: commons-logging:commons-logging
  dependency-version: 1.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: non-breaking
...

Signed-off-by: dependabot[bot] <[email protected]>

* Generate changelog entries for PR #566

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Release Manager <[email protected]>
Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) from 1.5.7-3 to 1.5.7-4.
- [Commits](luben/zstd-jni@v1.5.7-3...v1.5.7-4)

---
updated-dependencies:
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants