Skip to content

build(deps): bump the dependencies group with 24 updates - #4018

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/dependencies-c8cc85df02
Open

build(deps): bump the dependencies group with 24 updates#4018
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/dependencies-c8cc85df02

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 24 updates:

Package From To
io.modelcontextprotocol.sdk:mcp-bom 2.0.1 2.1.0
com.github.ben-manes.caffeine:caffeine 3.3.0 3.3.1
jakarta.json.bind:jakarta.json.bind-api 3.0.3 3.0.4
org.hibernate.orm:hibernate-core 7.4.12.Final 7.4.13.Final
org.hibernate.orm:hibernate-scan-jandex 7.4.12.Final 7.4.13.Final
io.rest-assured:rest-assured 6.0.1 6.1.0
com.google.testing.compile:compile-testing 0.23.0 0.24.0
io.lettuce:lettuce-core 7.8.0.RELEASE 7.9.0.RELEASE
org.apache.kafka:kafka-clients 4.3.1 4.4.0
io.repaint.maven:tiles-maven-plugin 2.45.1 2.47.0
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0
org.sonatype.central:central-publishing-maven-plugin 0.11.0 0.12.0
net.bytebuddy:byte-buddy 1.18.14 1.18.15
io.github.classgraph:classgraph 4.8.197 6.0.0
io.grpc:grpc-protobuf 1.84.2 1.85.0
io.grpc:grpc-stub 1.84.2 1.85.0
io.grpc:grpc-inprocess 1.84.2 1.85.0
io.grpc:grpc-services 1.84.2 1.85.0
io.grpc:grpc-servlet 1.84.2 1.85.0
io.grpc:grpc-netty-shaded 1.84.2 1.85.0
io.grpc:grpc-okhttp 1.84.2 1.85.0
software.amazon.awssdk:bom 2.55.13 2.56.0
io.opentelemetry:opentelemetry-bom 1.66.0 1.67.0
io.opentelemetry:opentelemetry-bom-alpha 1.66.0-alpha 1.67.0-alpha

Updates io.modelcontextprotocol.sdk:mcp-bom from 2.0.1 to 2.1.0

Release notes

Sourced from io.modelcontextprotocol.sdk:mcp-bom's releases.

v2.1.0

Highlights

Enhancements

Bug fixes

New contributors

@​slachiewicz, @​YousefHaggy, @​kamisheng, @​itzjb, @​neerajbhatt and @​nquinquenel

Full Changelog: modelcontextprotocol/java-sdk@v2.0.1...v2.1.0

Changelog

Sourced from io.modelcontextprotocol.sdk:mcp-bom's changelog.

Changelog

All notable changes to the MCP Java SDK are documented in the GitHub Releases, which serve as the canonical, detailed changelog for every version. This file summarizes the release history and the currently maintained release lines.

Versioning follows Semantic Versioning; see https://github.com/modelcontextprotocol/java-sdk/blob/main/VERSIONING.md for the breaking-change policy and https://github.com/modelcontextprotocol/java-sdk/blob/main/SECURITY.md for the supported-versions security policy.

Release lines

Line Latest Spec revision Status
2.0.x 2.0.1 (2026-08-19) 2025-11-25 Active development
1.1.x 1.1.4 (2026-08-19) 2025-06-18 Security patches only
0.18.x 0.18.4 (2026-08-19) 2025-06-18 Security patches only
Commits
  • 53574e2 Use the Maven wrapper in all GitHub workflows
  • 1078d36 Exclude conformance tests from the Maven Central release build
  • 47da1ad Release version 2.1.0
  • df3124e Put content-length header tests in specific test classes (#1186)
  • 7aa05da Remove aggregate exception from JSONRPCErrorResponse, log instead (#1182)
  • 52df971 Fix NPE in addRoot/removeRoot when roots listChanged is unset (#1179)
  • 1f3bdfe Fix NPE when adding or removing features on a server with derived capabilitie...
  • 5be23a9 Create the reduce accumulator per subscription in the list* methods (#1175)
  • e6c532e Report malformed request bodies as 400 INVALID_REQUEST with jackson3 (#1168)
  • 88863fc Publish snapshot credentials scoped with ID only
  • Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.3.0 to 3.3.1

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.3.1

  • Added a workaround for ForkJoinPool queue corruption caused by resubmitting a reusable ForkJoinTask (#2021)
  • Improved JCache read performance when using access expiration
  • Fixed various minor issues found using AI audits
Commits
  • aabb242 record the prefix-cache and warm-up findings
  • 0117302 stop JCache access expiry from writing every hit
  • 27fc6b8 skip rewriting an unchanged deadline on a read
  • 7f87a7e restore coverage lost to recent fixes
  • 75e2dc0 minor polish
  • 5155a5a use nullRef() for null futures rejected by NullAway's generic inference (#2023)
  • 998978c Avoid reusing a ForkJoinTask for maintenance (fixes #2021)
  • 6999bfd add the Qwen Bailian prefix-cache traces
  • 76dcbb5 fix canary test races and misc cleanups
  • 7f46a43 pad the eviction sizes off the hit path's lines
  • Additional commits viewable in compare view

Updates jakarta.json.bind:jakarta.json.bind-api from 3.0.3 to 3.0.4

Release notes

Sourced from jakarta.json.bind:jakarta.json.bind-api's releases.

3.0.4

What's Changed

Full Changelog: jakartaee/jsonb-api@3.0.3...3.0.4

Commits
  • 499e095 Prepare release jakarta.json.bind:jakarta.json.bind-parent:3.0.4
  • 002c703 dep: update enforcer plugin
  • 3221c51 Merge pull request #478 from KyleAure/3.0.3-BRANCH
  • 8c5b8a0 dep: update parent
  • cc33a86 Merge pull request #432 from KyleAure/426-yasson-in-manifest
  • 744cf1f fix: remove maven-scm-publish-plugin from tck-user-guide
  • e4f98c5 fix: #425 OSGi yasson in 3.0
  • 59333e0 Prepare next development cycle jakarta.json.bind:jakarta.json.bind-parent:3.0...
  • See full diff in compare view

Updates org.hibernate.orm:hibernate-core from 7.4.12.Final to 7.4.13.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.13

Hibernate ORM 7.4.13.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.13.Final.

You can find the full list of 7.4.13.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.13.Final (October 11, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40491

** Bug * HHH-20906 Bug in combination of @​Audited, Joined Inheritance and @​SecondaryTable * HHH-17354 HQL queries do not handle quoted identifiers from sub-queries

** Task * HHH-20957 Upgrade ByteBuddy to 1.18.14 (latest micro update) for Java 27

Commits
  • ba8526a [Jenkins release job] Preparing release 7.4.13.Final
  • 16c973a [Jenkins release job] changelog.txt updated by release build 7.4.13.Final
  • a6c432d HHH-20906 Retain audited secondary table references
  • c80991a Add test to detect unnecessary net.bytebuddy.experimental=true in CI
  • ed82665 HHH-17354 Fix SqmCteTable import after cherry-pick to 7.4
  • 9d13ef7 HHH-17354 - HQL queries do not handle quoted identifiers from sub-queries
  • 2cf4f47 Skip Checker Framework on JDK 28 builds
  • 110a305 HHH-20957 Also remove net.bytebuddy.experimental=true in Jenkinsfile on Java 27
  • 243e332 HHH-20957 Try upgrading ByteBuddy to 1.18.14 (latest micro update) for Java 2...
  • 1d07d24 [Jenkins release job] Preparing next development iteration
  • See full diff in compare view

Updates org.hibernate.orm:hibernate-scan-jandex from 7.4.12.Final to 7.4.13.Final

Release notes

Sourced from org.hibernate.orm:hibernate-scan-jandex's releases.

Release 7.4.13

Hibernate ORM 7.4.13.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.13.Final.

You can find the full list of 7.4.13.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-scan-jandex's changelog.

Changes in 7.4.13.Final (October 11, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40491

** Bug * HHH-20906 Bug in combination of @​Audited, Joined Inheritance and @​SecondaryTable * HHH-17354 HQL queries do not handle quoted identifiers from sub-queries

** Task * HHH-20957 Upgrade ByteBuddy to 1.18.14 (latest micro update) for Java 27

Commits
  • ba8526a [Jenkins release job] Preparing release 7.4.13.Final
  • 16c973a [Jenkins release job] changelog.txt updated by release build 7.4.13.Final
  • a6c432d HHH-20906 Retain audited secondary table references
  • c80991a Add test to detect unnecessary net.bytebuddy.experimental=true in CI
  • ed82665 HHH-17354 Fix SqmCteTable import after cherry-pick to 7.4
  • 9d13ef7 HHH-17354 - HQL queries do not handle quoted identifiers from sub-queries
  • 2cf4f47 Skip Checker Framework on JDK 28 builds
  • 110a305 HHH-20957 Also remove net.bytebuddy.experimental=true in Jenkinsfile on Java 27
  • 243e332 HHH-20957 Try upgrading ByteBuddy to 1.18.14 (latest micro update) for Java 2...
  • 1d07d24 [Jenkins release job] Preparing next development iteration
  • See full diff in compare view

Updates io.rest-assured:rest-assured from 6.0.1 to 6.1.0

Changelog

Sourced from io.rest-assured:rest-assured's changelog.

Changelog 6.1.0 (2026-10-09)

  • Strip sensitive headers (Authorization and Cookie) when a redirect crosses to a different host, so a token or session isn't leaked to the redirect target. This is on by default and can be turned off with RedirectConfig.stripSensitiveHeadersOnCrossHostRedirect(false) (#1873). Thanks to the University of Sydney security research team (Liyi Zhou, Ziyue Wang, Strick, Maurice, and Chenchen Yu) for the report.
  • Fix JsonPath "properties" spread over a list of objects returning null when the first element lacks a "properties" key (e.g. a GeoJSON feature carrying only a geometry), a regression from the Groovy 5 migration (fixes #1875) (thanks to HDPark95 for PR #1878). Thanks to haskiindahouse for the report.
  • Fix JsonPath returning null or Groovy meta-data for a nested "properties" navigation over a list of objects (e.g. items.properties.properties.x) on Groovy 5, because the list spread result was a plain list instead of the proxy list that carries the "properties" workaround forward (fixes #1879) (thanks to kdelay for PR #1880)
  • Fix JsonPath returning -Infinity for finite negative JSON numbers whose magnitude exceeds Float.MAX_VALUE under the default FLOAT_AND_DOUBLE number configuration. The float/double selection compared the signed value against Float.MAX_VALUE, so any such negative number fell into the float branch and overflowed; it now compares the magnitude and promotes to double regardless of sign (fixes #1874) (thanks to kdelay for PR #1877). Thanks to haskiindahouse for the report.
  • Decode JSON responses without an explicit charset as UTF-8 also when the content-type has parameters (e.g. "application/json; version=1") or is a "+json" type (e.g. "application/problem+json", "application/hal+json"). These used to fall back to the default content charset, which garbled non-ASCII characters in the body and in logged responses (related to #1885)
  • Fix MalformedURLException when a request URL has no slash before a query string that contains another URL, e.g. get("https://example.com?redirect=https://example.com/callback") (fixes #1836) (thanks to renechoi for PR #1881)
  • Apply user-configured SSL settings (such as relaxed HTTPS validation, trust/key stores and certificate authentication) when an http request is redirected to https. Previously they were only applied if the original request used https, so the redirected request failed with "PKIX path building failed". For a request that starts as http the SSL settings are only applied when REST Assured's default http client factory is used, so an https scheme registered by a custom HttpClientConfig.httpClientFactory is kept (fixes #790)
  • Don't let request specific SSL settings (SSLConfig such as relaxed HTTPS validation, or certificate authentication) leak into later requests when the http client instance is reused (HttpClientConfig.reuseHttpClientInstance()). The client's original https scheme is restored after each request and https connections established with request specific SSL settings are no longer kept alive for reuse.
  • json-schema-validator now supports JSON Schema draft-06, draft-07, 2019-09 and 2020-12 (e.g. const, if/then/else, propertyNames, prefixItems, $defs) using the networknt json-schema-validator (com.networknt:json-schema-validator 2.0.8, which is now a dependency of the module, together with slf4j-api). The draft is taken from the "$schema" keyword of the schema, so draft-03/draft-04 schemas are validated exactly as before. Schemas without "$schema" are still validated as draft-04 unless another version is configured, e.g. matchesJsonSchemaInClasspath("schema.json").using(JsonSchemaVersion.DRAFT_2020_12) or JsonSchemaValidatorSettings.schemaVersion(..). Note that: (1) schemas that already declared a draft-06+ "$schema" were previously validated with draft-04 semantics (newer keywords were ignored) and are now validated according to their declared draft, (2) a configured JsonSchemaFactory and checkedValidation only apply to draft-03/draft-04 schemas, (3) "format" is annotation-only (not validated) in 2019-09 and 2020-12, as required by those specifications (fixes #1823)
  • Add ResponseSpecBuilder.expectHeader(String, ResponseAwareMatcher) and ResponseSpecification.header(String, ResponseAwareMatcher), so a reusable response specification can match a header against a value taken from the response, e.g. expectHeader("Location", response -> endsWith("/users/" + response.path("id"))) (fixes #1884) (thanks to seethinajayadileep for PR #1887)
  • java.time values (LocalDate, Instant, OffsetDateTime, Duration, ZoneId and so on) used as path, query or form parameters, headers or cookies are now sent as their ISO-8601 toString() instead of being run through the object mapper, which quoted them or failed without the JSR-310 module (fixes #1781) (thanks to seethinajayadileep for PR #1888)
  • A value object used as a parameter, header or cookie value that the object mapper serializes to a plain JSON string (for example a record with a @​JsonValue accessor) is now sent without the surrounding JSON quotes (fixes #1818)
  • Add support for the HTTP QUERY method (a safe, idempotent method that carries a request body), e.g. given().body(..).when().query("/search"). Method.QUERY and query(..) overloads are added to RestAssured, RequestSender/RequestSpecification, RestAssuredMockMvc and RestAssuredWebTestClient (fixes #1872)
  • Fix path parameters in the Spring WebTestClient module: an unnamed path parameter that isn't a String, e.g. get("/posts/{id}", 42L), no longer fails with a ClassCastException and is serialized the same way as a named path parameter, and path parameter values are no longer encoded twice, so a value such as "John Doe" or "100%" reaches the server unchanged instead of as "John%20Doe" or "100%25" (fixes #1824) (thanks to hantsy for PR #1825)
  • Fix failures when the default locale is Turkish (tr-TR), such as an exception for every response with status code 400 or above and OPTIONS requests sent from a filter or HTTP methods given in lower case, e.g. request("options", ..), not working, by using Locale.ROOT for internal upper and lower case conversions. Cookie.toString() now also formats the Expires attribute as "EEE, dd MMM yyyy HH:mm:ss zzz" in English instead of using the default locale's short date format (thanks to rdmrtn for PR #1889)
  • MultiPartSpecBuilder.charset(Charset) now rejects byte[] and InputStream content with an IllegalArgumentException, like charset(String) already did, instead of silently ignoring the charset (fixes #1691) (thanks to seethinajayadileep for PR #1886)
  • Fix XmlPath and JsonPath not handling a hyphenated element or key name combined with a negative (from-the-end) list index, e.g. "root.some-list[-1]". XmlPath threw "The parameter ... was used but not defined" and JsonPath returned null (fixes #1876) (thanks to kdelay for PR #1882)
  • Fix unnamed path parameters in the Spring MockMvc module not being serialized like named ones, so a value object such as a record with a @​JsonValue accessor passed by position, e.g. get("/users/{id}", new Id(42)), was sent as its toString() ("Id[42]") instead of its serialized value ("42"). Note that, as for named path parameters, any other object that isn't a simple value (number, string, boolean, enum, UUID, java.time value etc) passed by position is now serialized by the object mapper instead of using its toString(). In both the Spring MockMvc and WebTestClient modules this also works for multipart requests, since unnamed path parameters are serialized using the explicitly set content type, like named ones, and not the derived "multipart/form-data" (fixes #1905)
  • Fix query parameters in the Spring WebTestClient module not reaching the server as given: a value containing "+", "&", "=" or "{...}", e.g. queryParam("name", "a+b"), was received as "a b", truncated at "&" or failed as a missing URI variable. Query parameters, as well as params and form params that are added to the query string, are now strictly encoded (so reserved characters such as "!" or "," in a value are now sent percent-encoded), and a query parameter without a value, e.g. queryParam("flag"), is sent as "flag" instead of the name of an internal class (fixes #1904)
  • The charset given to MultiPartSpecBuilder.charset(..) is now sent in the Content-Type of a File multi-part (e.g. "text/plain; charset=UTF-8"). Previously it was silently ignored for File content and only applied to String content. Other parameters of the part mime-type (e.g. "application/xml; version=2") are now also kept when a charset is specified, instead of being dropped (fixes #1903)
  • Fix XmlPath and JsonPath not handling a list range with a negative end that is followed by more path, e.g. "root.some-list[0..-1].sub-el" or "list[-2..-1].x". The dots in the range were treated as path separators, so XmlPath threw "The parameter ... was used but not defined" (or a Groovy compilation error) and JsonPath returned null or failed. JsonPath now also supports a range on a root array, e.g. "[0..1].x", and chained indexes after a hyphenated name, e.g. "some-list[0][1].x" (fixes #1906)
Commits
  • 7765379 [maven-release-plugin] prepare release rest-assured-6.1.0
  • a52e86f [ci skip] Preparing changelog for release
  • d9e1a3e Serialize unnamed path params like named ones in MockMvc (#1910)
  • a78ec80 Strictly encode query parameters in WebTestClient (#1908)
  • 549260a Send the multipart charset in the Content-Type of File parts (#1909)
  • 9335c59 Handle list ranges with a negative end followed by more path in XmlPath and J...
  • 88410f2 Support non-string path params and stop double encoding in WebTestClient (#1902)
  • 1437357 Use a fixed locale for case conversions so REST Assured works under Turkish l...
  • ffe66bb Validate charset in MultiPartSpecBuilder.charset(Charset) (#1900)
  • 9db3677 Escape hyphenated XmlPath and JsonPath names with a negative list index (#1899)
  • Additional commits viewable in compare view

Updates com.google.testing.compile:compile-testing from 0.23.0 to 0.24.0

Release notes

Sourced from com.google.testing.compile:compile-testing's releases.

v0.24.0

  • Fixed Java 8 build configuration to work for downstream users of Maven 3.10.0. (63b2b79)
Commits
  • 52534e3 Set version number for compile-testing to 0.24.0.
  • 63b2b79 Fix issue for downstream users of Maven 3.10.0, and clean up obsolete profile.
  • bd7fa05 Bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group
  • e52ff3d Bump Guava to 33.7.2.
  • f16e086 Format some Markdown.
  • fb0fe9c Bump the dependencies group with 2 updates
  • f4f9176 Bump actions/setup-java from 5.6.0 to 6.0.0 in the github-actions group
  • 2e1523a Bump Guava to 33.7.1.
  • 05fb3dd Bump Guava to 33.7.0.
  • add841b Update links from the legacy search.maven.org to the new central.sonatype.com.
  • Additional commits viewable in compare view

Updates io.lettuce:lettuce-core from 7.8.0.RELEASE to 7.9.0.RELEASE

Release notes

Sourced from io.lettuce:lettuce-core's releases.

7.9.0.RELEASE

The Lettuce team is pleased to announce the Lettuce 7.9.0 minor release!

Lettuce 7.9.0 supports Redis 2.6+ up to Redis 8.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 24. The driver is tested against Redis 8.10, Redis 8.8, Redis 8.6, Redis 8.4, Redis 8.2, Redis 8.0, Redis 7.4 and Redis 7.2.

Thanks to all contributors who made Lettuce 7.9.0.RELEASE possible.

📗 Links Reference documentation: https://lettuce.io/core/7.9.0.RELEASE

🐞 Bug Fixes

⚙️ Maintenance

💡 Other

❤️ New Contributors - Welcome to the Lettuce family!

Full Changelog: redis/lettuce@7.8.0.RELEASE...7.9.0.RELEASE

Changelog

Sourced from io.lettuce:lettuce-core's changelog.

Lettuce 8.0.0.BETA1

The Lettuce team is pleased to announce the first beta release of Lettuce 8.0!

This release makes Project Reactor not-required: applications that use only the synchronous and asynchronous APIs can exclude reactor-core:

<dependency>
    <groupId>io.lettuce</groupId>
    <artifactId>lettuce-core</artifactId>
    <version>8.0.0.BETA1</version>
    <exclusions>
        <exclusion>
            <groupId>io.projectreactor</groupId>
            <artifactId>reactor-core</artifactId>
        </exclusion>
    </exclusions>
</dependency>

Lettuce 8.0 also removes Reactor-based APIs, most of them deprecated in 7.8 and 7.9, and changes Reactor-typed extension points. See What's new in Lettuce 8.0 for details and the breaking changes.

PR: [reactor-optional] Make 'Project Reactor' optional dependency by @​atakavci in redis/lettuce#3731

Lettuce 8.0.0.BETA1 supports Redis 2.6+ up to Redis 8.x and requires Java 8 or newer. The driver is tested against Redis 8.12, 8.10, 8.8, 8.6, 8.4, 8.2, 7.4 and 7.2.

We encourage you to try out this beta, in particular with Reactor excluded, and to provide feedback ahead of the general availability release.

Full Changelog: redis/lettuce@7.9.0.RELEASE...8.0.0.BETA1

Commits
  • 1d7b2b2 Add maven wrapper (#3951)
  • 1334184 Upgrade javaparser-core to 3.28.0 #3073 (#3948)
  • b1fefdd add Benchmark (jmh) benchmark result for 7fb983ada2afa4e8da8aac8b256a0ac0af01...
  • 7fb983a Release 7.9.0 (#3950)
  • 207c416 Prepare 7.9 users for the Lettuce 8.0 credentials and connection changes (#3949)
  • 39e67ea add Benchmark (jmh) benchmark result for c930d70d22473c288db5ac46b6a8da581701...
  • c930d70 RedisPublisher must not drop an error when the state changes concurrently #39...
  • 3576c0a add Benchmark (jmh) benchmark result for 0eeff0f3a3d414b3ce9929d79c714f1ec67a...
  • 0eeff0f add Benchmark (jmh) benchmark result for 16a382aece6d92cea87f3b46faebe14890f5...
  • 16a382a add Benchmark (jmh) benchmark result for 84f1d83df2b57a4e7cabac012f7f2eb48dc9...
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 4.3.1 to 4.4.0

Updates io.repaint.maven:tiles-maven-plugin from 2.45.1 to 2.47.0

Release notes

Sourced from io.repaint.maven:tiles-maven-plugin's releases.

Release v2.47.0

Changelog

  • c40ed4a Fix tileVersionFilter on Maven 3.10 and add ITs
  • e285509 Add tileVersionFilter to filter tile version ranges
  • 027eeca Pin JReleaser GitHub release branch to master
  • 9499634 Bump sharp, @​astrojs/starlight and astro in /docs
  • 57c3fda Bump source-map-js from 1.2.1 to 1.2.2 in /docs
  • ca6e3b5 Bump smol-toml from 1.8.0 to 1.9.1 in /docs

Contributors

We'd like to thank the following people for their contributions:

Release tiles-maven-plugin-2.46

Changelog

  • 25af956 Upgrade to Groovy 6.0.0
  • 9499634 Bump sharp, @​astrojs/starlight and astro in /docs
  • 57c3fda Bump source-map-js from 1.2.1 to 1.2.2 in /docs
  • ca6e3b5 Bump smol-toml from 1.8.0 to 1.9.1 in /docs
  • 72e414f Bump devalue from 5.9.2 to 5.9.4 in /docs
  • fb361d9 Skip GPG on GHA
  • b507281 Actually added missing extension config
  • deffbd5 Added missing extension config
  • 6ee431a Fixed pom.xml formatting
  • 1c0aa0a Updated release/build to use njord/nisse
  • c858b01 Updated maven plugins
  • 9bea77b Updated Groovy to 5.1.2, now targetting Java 17
  • 99c3246 Updated astro versions
  • ab76bd5 Fix Java 8 workflow
  • 1a90405 Bump postcss-selector-parser from 6.1.2 to 6.1.4 in /docs
  • 9a08ceb Updated astro versions
  • 9097ef3 Bump js-yaml from 4.1.1 to 4.3.0 in /docs
  • e3ae5c3 Bump devalue from 5.7.1 to 5.8.1 in /docs
  • b1f860a Bump svgo from 4.0.1 to 4.0.2 in /docs
  • 0e36c2c Bump postcss from 8.5.10 to 8.5.25 in /docs
  • e861720 [maven-release-plugin] prepare for next development iteration

Contributors

We'd like to thank the following people for their contributions:

Commits
  • c40ed4a Fix tileVersionFilter on Maven 3.10 and add ITs
  • e285509 Add tileVersionFilter to filter tile version ranges
  • 027eeca Pin JReleaser GitHub release branch to master
  • 988f97a Merged dependabot with release
  • 25af956 Upgrade to Groovy 6.0.0
  • 9499634 Bump sharp, @​astrojs/starlight and astro in /docs
  • 57c3fda Bump source-map-js from 1.2.1 to 1.2.2 in /docs
  • ca6e3b5 Bump smol-toml from 1.8.0 to 1.9.1 in /docs
  • 72e414f Bump devalue from 5.9.2 to 5.9.4 in /docs
  • See full diff in compare view

Updates org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.23.0

Versions Maven Plugin 2.23.0 makes the property goals more reliable on multi-module projects and adds a few options people have asked for over the years. It still runs on Java 8 and Maven 3.6.3 or later.

Property updates

  • update-property and update-properties now update a property that is defined in a reactor parent POM, rather than leaving it untouched (#997).
  • A property shared by a plugin and an excluded dependency is no longer updated behind the exclude's back (#1199).
  • The property goals look up all properties in parallel, which shortens runs on POMs with many version properties (#1157).
  • A dependency whose type or classifier is itself a property, such as ${native.classifier}, no longer breaks the property goals on Maven 3.10 and 4 (#1409).
  • lock-snapshots and unlock-snapshots now rewrite snapshot versions held in properties, where that is safe (#1269).

Other fixes and additions

  • versions:set with selected projects (-pl) updates the modules that inherit the version again, on Maven 3 and Maven 4 (#1338, #1339, #1357).
  • Includes and excludes now filter the candidate versions too, so an excluded version is never proposed as an update (#1378).
  • display-dependency-updates -Dversions.showNewestPerSegment lists the newest incremental, minor and major version, for example 1.0.3 -> 1.0.9, 1.3.9, 4.0.6 (#1043).
  • parent-updates-report supports formats, including XML (#975), and the XML property updates report now fills in the current version (#976).
  • The plugin update reports share their lookup with display-plugin-updates and include plugins declared only in <reporting> (#1250).

Thanks to @​wilx and @​adityaanikam for their contributions to this release.

🚀 New features and improvements

🐛 Bug Fixes

@dependabot
build(deps): bump the dependencies group with 24 updates
82c9e7f 
Bumps the dependencies group with 24 updates:

| Package | From | To |
| --- | --- | --- |
| [io.modelcontextprotocol.sdk:mcp-bom](https://github.com/modelcontextprotocol/java-sdk) | `2.0.1` | `2.1.0` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.3.0` | `3.3.1` |
| [jakarta.json.bind:jakarta.json.bind-api](https://github.com/jakartaee/jsonb-api) | `3.0.3` | `3.0.4` |
| [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `7.4.12.Final` | `7.4.13.Final` |
| [org.hibernate.orm:hibernate-scan-jandex](https://github.com/hibernate/hibernate-orm) | `7.4.12.Final` | `7.4.13.Final` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `6.0.1` | `6.1.0` |
| [com.google.testing.compile:compile-testing](https://github.com/google/compile-testing) | `0.23.0` | `0.24.0` |
| [io.lettuce:lettuce-core](https://github.com/redis/lettuce) | `7.8.0.RELEASE` | `7.9.0.RELEASE` |
| org.apache.kafka:kafka-clients | `4.3.1` | `4.4.0` |
| [io.repaint.maven:tiles-maven-plugin](https://github.com/repaint-io/maven-tiles) | `2.45.1` | `2.47.0` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.14` | `1.18.15` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.197` | `6.0.0` |
| [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| [io.grpc:grpc-stub](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| [io.grpc:grpc-inprocess](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| [io.grpc:grpc-services](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| [io.grpc:grpc-servlet](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| [io.grpc:grpc-okhttp](https://github.com/grpc/grpc-java) | `1.84.2` | `1.85.0` |
| software.amazon.awssdk:bom | `2.55.13` | `2.56.0` |
| [io.opentelemetry:opentelemetry-bom](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-bom-alpha](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0-alpha` | `1.67.0-alpha` |


Updates `io.modelcontextprotocol.sdk:mcp-bom` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases)
- [Changelog](https://github.com/modelcontextprotocol/java-sdk/blob/main/CHANGELOG.md)
- [Commits](modelcontextprotocol/java-sdk@v2.0.1...v2.1.0)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.3.0...v3.3.1)

Updates `jakarta.json.bind:jakarta.json.bind-api` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/jakartaee/jsonb-api/releases)
- [Commits](jakartaee/jsonb-api@3.0.3...3.0.4)

Updates `org.hibernate.orm:hibernate-core` from 7.4.12.Final to 7.4.13.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.13/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.4.12...7.4.13)

Updates `org.hibernate.orm:hibernate-scan-jandex` from 7.4.12.Final to 7.4.13.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.13/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.4.12...7.4.13)

Updates `io.rest-assured:rest-assured` from 6.0.1 to 6.1.0
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-6.0.1...rest-assured-6.1.0)

Updates `com.google.testing.compile:compile-testing` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/google/compile-testing/releases)
- [Commits](google/compile-testing@v0.23.0...v0.24.0)

Updates `io.lettuce:lettuce-core` from 7.8.0.RELEASE to 7.9.0.RELEASE
- [Release notes](https://github.com/redis/lettuce/releases)
- [Changelog](https://github.com/redis/lettuce/blob/main/RELEASE-NOTES.md)
- [Commits](redis/lettuce@7.8.0.RELEASE...7.9.0.RELEASE)

Updates `org.apache.kafka:kafka-clients` from 4.3.1 to 4.4.0

Updates `io.repaint.maven:tiles-maven-plugin` from 2.45.1 to 2.47.0
- [Release notes](https://github.com/repaint-io/maven-tiles/releases)
- [Changelog](https://github.com/repaint-io/maven-tiles/blob/master/CHANGELOG.adoc)
- [Commits](repaint-io/maven-tiles@v2.45.1...v2.47.0)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases)
- [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0)

Updates `net.bytebuddy:byte-buddy` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.14...byte-buddy-1.18.15)

Updates `io.github.classgraph:classgraph` from 4.8.197 to 6.0.0
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.197...classgraph-6.0.0)

Updates `io.grpc:grpc-protobuf` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-stub` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-inprocess` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-services` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-servlet` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-netty-shaded` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-okhttp` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-stub` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-inprocess` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-services` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `org.hibernate.orm:hibernate-scan-jandex` from 7.4.12.Final to 7.4.13.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.13/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.4.12...7.4.13)

Updates `software.amazon.awssdk:bom` from 2.55.13 to 2.56.0

Updates `io.opentelemetry:opentelemetry-bom` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-bom-alpha` from 1.66.0-alpha to 1.67.0-alpha
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-java/commits)

Updates `io.grpc:grpc-servlet` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-netty-shaded` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

Updates `io.grpc:grpc-okhttp` from 1.84.2 to 1.85.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](grpc/grpc-java@v1.84.2...v1.85.0)

---
updated-dependencies:
- dependency-name: io.modelcontextprotocol.sdk:mcp-bom
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: jakarta.json.bind:jakarta.json.bind-api
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 7.4.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.hibernate.orm:hibernate-scan-jandex
  dependency-version: 7.4.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.testing.compile:compile-testing
  dependency-version: 0.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.lettuce:lettuce-core
  dependency-version: 7.9.0.RELEASE
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.repaint.maven:tiles-maven-plugin
  dependency-version: 2.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-protobuf
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-inprocess
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-servlet
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-okhttp
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-stub
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-inprocess
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-services
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.hibernate.orm:hibernate-scan-jandex
  dependency-version: 7.4.13.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-bom-alpha
  dependency-version: 1.67.0-alpha
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-servlet
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.grpc:grpc-okhttp
  dependency-version: 1.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 19, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants