Repository navigation
Bump the java-dependencies group with 22 updates - #64
Merged
v-rudkovskiy merged 1 commit intoOct 20, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Snapshot WarningsEnsure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. OpenSSF ScorecardScorecard details
Scanned Files
|
Bumps the java-dependencies group with 22 updates: | Package | From | To | | --- | --- | --- | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.0.0` | `3.6.3` | | [org.apache.maven.plugins:maven-site-plugin](https://github.com/apache/maven-site-plugin) | `3.11.0` | `3.22.0` | | [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.3.2` | `3.12.0` | | [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.2.1` | `3.4.0` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.10.1` | `3.16.0` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.8.0` | `0.12.0` | | [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.1.0` | `3.2.8` | | [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.3.0` | `3.11.0` | | [org.jvnet.jaxb:jaxb-maven-plugin](https://github.com/highsource/jaxb-tools) | `4.0.2` | `4.0.16` | | org.jvnet.jaxb:jaxb-plugins | `4.0.2` | `4.0.16` | | [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.3.0` | `3.6.2` | | [org.apache.maven.plugins:maven-resources-plugin](https://github.com/apache/maven-resources-plugin) | `3.2.0` | `3.5.0` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.2.2` | `3.5.1` | | [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.3.0` | `3.6.2` | | org.apache.felix:maven-bundle-plugin | `5.1.4` | `6.2.0` | | [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.1.2` | `3.6.0` | | [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.6.0.0` | `4.10.5.0` | | [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.16.0` | `3.28.0` | | [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.3.0` | `1.8.0` | | [org.apache.maven.plugins:maven-scm-plugin](https://github.com/apache/maven-scm) | `2.0.1` | `2.2.1` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.6.0` | Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.0.0 to 3.6.3 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.0.0...enforcer-3.6.3) Updates `org.apache.maven.plugins:maven-site-plugin` from 3.11.0 to 3.22.0 - [Release notes](https://github.com/apache/maven-site-plugin/releases) - [Commits](apache/maven-site-plugin@maven-site-plugin-3.11.0...maven-site-plugin-3.22.0) Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.3.2 to 3.12.0 - [Release notes](https://github.com/apache/maven-javadoc-plugin/releases) - [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.3.2...maven-javadoc-plugin-3.12.0) Updates `org.apache.maven.plugins:maven-source-plugin` from 3.2.1 to 3.4.0 - [Release notes](https://github.com/apache/maven-source-plugin/releases) - [Commits](apache/maven-source-plugin@maven-source-plugin-3.2.1...maven-source-plugin-3.4.0) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.10.1 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.10.1...maven-compiler-plugin-3.16.0) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.12.0 - [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases) - [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0) Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.1.0 to 3.2.8 - [Release notes](https://github.com/apache/maven-gpg-plugin/releases) - [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.1.0...maven-gpg-plugin-3.2.8) Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.3.0 to 3.11.0 - [Release notes](https://github.com/apache/maven-dependency-plugin/releases) - [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.3.0...maven-dependency-plugin-3.11.0) Updates `org.jvnet.jaxb:jaxb-maven-plugin` from 4.0.2 to 4.0.16 - [Release notes](https://github.com/highsource/jaxb-tools/releases) - [Commits](highsource/jaxb-tools@4.0.2...4.0.16) Updates `org.jvnet.jaxb:jaxb-plugins` from 4.0.2 to 4.0.16 Updates `org.jvnet.jaxb:jaxb-plugins` from 4.0.2 to 4.0.16 Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.3.0 to 3.6.2 - [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases) - [Commits](mojohaus/build-helper-maven-plugin@build-helper-maven-plugin-3.3.0...3.6.2) Updates `org.apache.maven.plugins:maven-resources-plugin` from 3.2.0 to 3.5.0 - [Release notes](https://github.com/apache/maven-resources-plugin/releases) - [Commits](apache/maven-resources-plugin@maven-resources-plugin-3.2.0...maven-resources-plugin-3.5.0) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.2.2 to 3.5.1 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.2.2...maven-jar-plugin-3.5.1) Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.3.0 to 3.6.2 - [Release notes](https://github.com/apache/maven-shade-plugin/releases) - [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.3.0...maven-shade-plugin-3.6.2) Updates `org.apache.felix:maven-bundle-plugin` from 5.1.4 to 6.2.0 Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.1.2 to 3.6.0 - [Release notes](https://github.com/apache/maven-checkstyle-plugin/releases) - [Commits](apache/maven-checkstyle-plugin@maven-checkstyle-plugin-3.1.2...maven-checkstyle-plugin-3.6.0) Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.6.0.0 to 4.10.5.0 - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.6.0.0...spotbugs-maven-plugin-4.10.5.0) Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.16.0 to 3.28.0 - [Release notes](https://github.com/apache/maven-pmd-plugin/releases) - [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.16.0...maven-pmd-plugin-3.28.0) Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.3.0 to 1.8.0 - [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases) - [Commits](mojohaus/flatten-maven-plugin@flatten-maven-plugin-1.3.0...1.8.0) Updates `org.apache.maven.plugins:maven-scm-plugin` from 2.0.1 to 2.2.1 - [Release notes](https://github.com/apache/maven-scm/releases) - [Commits](apache/maven-scm@maven-scm-2.0.1...v2.2.1) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.14...v0.8.15) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.6.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-site-plugin dependency-version: 3.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-javadoc-plugin dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-gpg-plugin dependency-version: 3.2.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-version: 3.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.jvnet.jaxb:jaxb-maven-plugin dependency-version: 4.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: org.jvnet.jaxb:jaxb-plugins dependency-version: 4.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: org.jvnet.jaxb:jaxb-plugins dependency-version: 4.0.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: org.codehaus.mojo:build-helper-maven-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-resources-plugin dependency-version: 3.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-shade-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.felix:maven-bundle-plugin dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-checkstyle-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-pmd-plugin dependency-version: 3.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.codehaus.mojo:flatten-maven-plugin dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-scm-plugin dependency-version: 2.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: java-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
r-brown
force-pushed
the
dependabot/maven/java-dependencies-daf9d47e70
branch
from
October 20, 2026 09:53
d2df99f to
dda46a0
Compare
v-rudkovskiy
approved these changes
Oct 20, 2026
v-rudkovskiy
left a comment
v-rudkovskiy
left a comment
Member
There was a problem hiding this comment.
I checked all the core unit + functional + regressions tests - everything is green.
v-rudkovskiy
deleted the
dependabot/maven/java-dependencies-daf9d47e70
branch
October 20, 2026 11:19
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the java-dependencies group with 22 updates:
3.0.03.6.33.11.03.22.03.3.23.12.03.2.13.4.03.10.13.16.00.8.00.12.03.1.03.2.83.3.03.11.04.0.24.0.164.0.24.0.163.3.03.6.23.2.03.5.03.2.23.5.13.3.03.6.25.1.46.2.03.1.23.6.04.6.0.04.10.5.03.16.03.28.01.3.01.8.02.0.12.2.10.8.140.8.153.5.43.6.0Updates
org.apache.maven.plugins:maven-enforcer-pluginfrom 3.0.0 to 3.6.3Release notes
Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.
... (truncated)
Commits
c7daff3[maven-release-plugin] prepare release enforcer-3.6.3ee46e78Make bannedDependencies report root and transitive dependency in case both ar...0806924Document the banMavenDefaults option for the requirePluginVersions rule. (#936)8e4f5b9Add better enforceBytecodeVersion rule based on mojohaus (#968)fd4b148Add fix for 21.0.10.0.1 issue (#967)f32d597Deps: Parent POM 48 and align deps (#979)df0f2a6Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#976)2da7a68Add null checks for modelId in PluginWrapper91eb4d9Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#975)b622245Bump mavenVersion from 3.9.14 to 3.9.15 (#973)Updates
org.apache.maven.plugins:maven-site-pluginfrom 3.11.0 to 3.22.0Release notes
Sourced from org.apache.maven.plugins:maven-site-plugin's releases.
... (truncated)
Commits
f9f7cc6[maven-release-plugin] prepare release maven-site-plugin-3.22.0f7b57eaBump org.codehaus.plexus:plexus-interactivity-api from 1.3 to 1.5.1282aa04Several site improvements (#1272)55ebd9fUpgrade to Doxia 2.1.093ecbb6Improve goal description106d259Improve error messagesa7511e9Fix additional PR commentsc3c1c0fRename from "hot-reload" to "auto-refresh"5fb1504Add blocking "hot-reload" goal2d9a489Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1271)Updates
org.apache.maven.plugins:maven-javadoc-pluginfrom 3.3.2 to 3.12.0Release notes
Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.
... (truncated)
Commits
2a06bed[maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0a71ecf9bump version 3.12.0-SNAPSHOT88f2b71[maven-release-plugin] prepare for next development iteration7e18956[maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4c11b76cIn legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...bc9904bremove fix mojo (#1263)f310135Fixpackage {...} does not existinlegacyMode(#1243)c8270f9detectOfflineLinks is now false per default for all jar mojo issue #1258 ...953e609Delete flaky test (#1260)2bba7a4Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0Updates
org.apache.maven.plugins:maven-source-pluginfrom 3.2.1 to 3.4.0Release notes
Sourced from org.apache.maven.plugins:maven-source-plugin's releases.
Commits
ecf937a[maven-release-plugin] prepare release maven-source-plugin-3.4.095b3bf4Revert "[maven-release-plugin] prepare for next development iteration"7a9a770[maven-release-plugin] prepare for next development iteration292c1ceUse plexus-utils version from parentbf79b71Bump m-invoker-p to 3.9.14f3fcb9Bump commons-io:commons-io from 2.20.0 to 2.21.0a867442Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.451c66acBump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5267df46Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3ef85324Bump org.apache.maven.plugin-testing:maven-plugin-testing-harnessUpdates
org.apache.maven.plugins:maven-compiler-pluginfrom 3.10.1 to 3.16.0Release notes
Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.
... (truncated)
Commits
e7bba6e[maven-release-plugin] prepare release maven-compiler-plugin-3.16.0c906809Avoid using deprecated method CompilerConfiguration.setCompilerVersionad74feeReplace adopt-openj9 by semeru JDK distribution on GHbeb0edaRecompile when dependencies change (#1102)a0b689e[MCOMPILER-578] Track outputs across compiler executions (#1091)2e81228Fix incremental detection of empty sources, 3.x (#1075)2132f5bconfigure ATR project5992b77Build fails when annotation processor list is empty (but present) (#1077)acccef7Bump plexusCompilerVersion from 2.16.2 to 2.17.072bc445Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0Updates
org.sonatype.central:central-publishing-maven-pluginfrom 0.8.0 to 0.12.0Release notes
Sourced from org.sonatype.central:central-publishing-maven-plugin's releases.
Commits
Updates
org.apache.maven.plugins:maven-gpg-pluginfrom 3.1.0 to 3.2.8Release notes
Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.
... (truncated)
Commits
8a46455[maven-release-plugin] prepare release maven-gpg-plugin-3.2.87012821Fix issueManagement, ciManagement system and urla9a8c84Make empty classifier null (not empty string) (#287)a8368b0Add .mvnf0e45e0Update parent POM to 45 (#284)cb1236cBump bouncycastleVersion from 1.78.1 to 1.80 (#127)5377a10Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)8b63932Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)54ea518Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1a6a412dRemove old JIRA issue linkUpdates
org.apache.maven.plugins:maven-dependency-pluginfrom 3.3.0 to 3.11.0Release notes
Sourced from org.apache.maven.plugins:maven-dependency-plugin's releases.