Skip to content

build(deps): bump the production-dependencies group across 1 directory with 12 updates - #1329

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/production-dependencies-4f62be4d1b
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/production-dependencies-4f62be4d1b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 12 updates in the / directory:

Package From To
com.google.code.gson:gson 2.14.0 2.15.0
org.mozilla:rhino 1.9.1 1.9.2
org.mozilla:rhino-xml 1.9.1 1.9.2
org.mozilla:rhino-xml 1.9.1 1.9.2
org.aspectj:aspectjrt 1.9.25.1 1.9.26
org.aspectj:aspectjweaver 1.9.25.1 1.9.26
org.aspectj:aspectjweaver 1.9.25.1 1.9.26
net.bytebuddy:byte-buddy 1.18.15 1.18.17
io.swagger.core.v3:swagger-core 2.2.55 3.0.0
io.swagger.core.v3:swagger-models 2.2.55 3.0.0
io.swagger.core.v3:swagger-annotations 2.2.55 3.0.0
io.swagger.core.v3:swagger-models 2.2.55 3.0.0
io.swagger.core.v3:swagger-annotations 2.2.55 3.0.0
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.apache.maven.plugins:maven-failsafe-plugin 3.6.0 3.6.1
org.apache.maven.plugins:maven-failsafe-plugin 3.6.0 3.6.1
org.springframework.boot:spring-boot-dependencies 4.1.1 4.1.2

Updates com.google.code.gson:gson from 2.14.0 to 2.15.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.15.0

What's Changed

These are some of the more important changes

API addition:

Behaviour changes and bugfixes:

New Contributors

Full Changelog: google/gson@gson-parent-2.14.0...gson-parent-2.15.0

Commits
  • fcd4169 [maven-release-plugin] prepare release gson-parent-2.15.0
  • 828cbe0 Update protobuf-maven-plugin dependency. (#3153)
  • 66dd98a Disable Spotless plugin before Java 21. (#3152)
  • 094f500 Fix typo in comment (#3148)
  • 881d2b5 Consistently use "Gson" instead of "GSON" as project name (#3150)
  • e2292f9 Address a few static analysis findings. (#3141)
  • 67427c4 Bump the github-actions group across 1 directory with 5 updates (#3133)
  • 845664b Correct logic for BOM detection. (#3137)
  • 216c41b Bump com.fasterxml.jackson.core:jackson-databind (#3136)
  • 854c825 Simplify key removal in LegacyProtoTypeAdapterFactoryTest (#3124)
  • Additional commits viewable in compare view

Updates org.mozilla:rhino from 1.9.1 to 1.9.2

Release notes

Sourced from org.mozilla:rhino's releases.

Rhino 1.9.2

All objects in Rhino now prevent Java serialization, in line with other libraries. Projects that depend on serializing Rhino objects must explicitly enable it, either by setting the "rhino.serialization.enabled" property in "RhinoConfig", or by enabling the "FEATURE_JAVA_SERIALIZATION" flag in the "ContextFactory".

Other changes include:

  • Add OSGi bundle metadata so that Rhino can be used as an OSGi bundle.
  • Fix inconsistencies in the "Math" object by backporting algorithms from V8, and fix a few out-of-range constants.
  • Fix "Object.fromEntries()" storing array index keys as named properties.
  • Fix Java object conversion in "ScriptEngine" bindings so that native "JavaObject" values are converted in the correct direction.
  • Fix a memory leak caused by the const optimization in compiled mode.
  • Fix "Generator.prototype.return()" to include the value when the generator is already complete.
  • Fix a register count bug in the bytecode compiler.
  • The build now works with Java 25. (Rhino still targets Java 11, so users of the published JARs do not need to change anything.)

Thanks to all who contributed!

Commits

Updates org.mozilla:rhino-xml from 1.9.1 to 1.9.2

Release notes

Sourced from org.mozilla:rhino-xml's releases.

Rhino 1.9.2

All objects in Rhino now prevent Java serialization, in line with other libraries. Projects that depend on serializing Rhino objects must explicitly enable it, either by setting the "rhino.serialization.enabled" property in "RhinoConfig", or by enabling the "FEATURE_JAVA_SERIALIZATION" flag in the "ContextFactory".

Other changes include:

  • Add OSGi bundle metadata so that Rhino can be used as an OSGi bundle.
  • Fix inconsistencies in the "Math" object by backporting algorithms from V8, and fix a few out-of-range constants.
  • Fix "Object.fromEntries()" storing array index keys as named properties.
  • Fix Java object conversion in "ScriptEngine" bindings so that native "JavaObject" values are converted in the correct direction.
  • Fix a memory leak caused by the const optimization in compiled mode.
  • Fix "Generator.prototype.return()" to include the value when the generator is already complete.
  • Fix a register count bug in the bytecode compiler.
  • The build now works with Java 25. (Rhino still targets Java 11, so users of the published JARs do not need to change anything.)

Thanks to all who contributed!

Commits

Updates org.mozilla:rhino-xml from 1.9.1 to 1.9.2

Release notes

Sourced from org.mozilla:rhino-xml's releases.

Rhino 1.9.2

All objects in Rhino now prevent Java serialization, in line with other libraries. Projects that depend on serializing Rhino objects must explicitly enable it, either by setting the "rhino.serialization.enabled" property in "RhinoConfig", or by enabling the "FEATURE_JAVA_SERIALIZATION" flag in the "ContextFactory".

Other changes include:

  • Add OSGi bundle metadata so that Rhino can be used as an OSGi bundle.
  • Fix inconsistencies in the "Math" object by backporting algorithms from V8, and fix a few out-of-range constants.
  • Fix "Object.fromEntries()" storing array index keys as named properties.
  • Fix Java object conversion in "ScriptEngine" bindings so that native "JavaObject" values are converted in the correct direction.
  • Fix a memory leak caused by the const optimization in compiled mode.
  • Fix "Generator.prototype.return()" to include the value when the generator is already complete.
  • Fix a register count bug in the bytecode compiler.
  • The build now works with Java 25. (Rhino still targets Java 11, so users of the published JARs do not need to change anything.)

Thanks to all who contributed!

Commits

Updates org.aspectj:aspectjrt from 1.9.25.1 to 1.9.26

Release notes

Sourced from org.aspectj:aspectjrt's releases.

1.9.26

AspectJ 1.9.26 supporting Java 26

Commits

Updates org.aspectj:aspectjweaver from 1.9.25.1 to 1.9.26

Release notes

Sourced from org.aspectj:aspectjweaver's releases.

1.9.26

AspectJ 1.9.26 supporting Java 26

Commits

Updates org.aspectj:aspectjweaver from 1.9.25.1 to 1.9.26

Release notes

Sourced from org.aspectj:aspectjweaver's releases.

1.9.26

AspectJ 1.9.26 supporting Java 26

Commits

Updates net.bytebuddy:byte-buddy from 1.18.15 to 1.18.17

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.17

  • Resolve Android classes jars for AAR Byte Buddy plugins on AGP 9.5

Byte Buddy 1.18.16

  • Correct detection of a dropped implicit this frame in constructors with long or double parameters when using Advice.
  • Detect a dropped uninitialized this frame in constructors after full frames when using Advice with copied arguments.
  • Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.
  • Use a valid tag for the Gradle plugin portal.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

1. November 2026: version 1.18.17

  • Resolve Android classes jars for AAR Byte Buddy plugins on AGP 9.5

23. October 2026: version 1.18.16

  • Correct detection of a dropped implicit this frame in constructors with long or double parameters when using Advice.
  • Detect a dropped uninitialized this frame in constructors after full frames when using Advice with copied arguments.
  • Update ASM to version 9.11.1 and the ASM to Class File API bridge to version 0.0.14.
  • Use a valid tag for the Gradle plugin portal.
Commits
  • b85b6d4 [publish] Releasing Byte Buddy 1.18.17
  • f757ce8 [release] Release new version
  • 5bef794 Update MacOS
  • a7d4140 [release] Release new version
  • 33993e3 Add missing checksums
  • f885750 Resolve Android classes jars for AAR Byte Buddy plugins on AGP 9.5 (#1942)
  • 1129f6a Update release notes and internal Byte Buddy.
  • 1df8920 Revert "[release] Complete failed release from where it failed."
  • 959ef61 [publish] Start next development iteration 1.18.17-SNAPSHOT
  • 0229449 [publish] Releasing Byte Buddy 1.18.16
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-core from 2.2.55 to 3.0.0

Release notes

Sourced from io.swagger.core.v3:swagger-core's releases.

Swagger-core 3.0.0 released!

  • feat: ModelCopy.deepCopy, an exact deep copy of OpenAPI models (#5364)
  • docs: MIGRATION.md notes from a downstream (springdoc-openapi) migration (#5363)
  • fix: thread-safe ModelConverters.getInstance(boolean), refresh mappers derived from replaced shared mappers (#5362)
  • fix: don't add an empty property for a required @JsonUnwrapped member (OpenAPI 3.1) (#5361)
  • chore: update migration documentation for Jackson 3 changes (#5359)
  • chore: update Jackson dependencies to version 3.2.3 in migration docu… (#5354)
  • Upgrade dependency-review-action to v5 (#5349)
  • Move the Jakarta APIs from EE 10 to EE 11 (#5348)
  • chore: update dependencies, build plugins and CI for 3.0.0 (#5347)
  • chore: Make Jackson 2 compatibility of Swagger mappers opt-in (#5344)
  • docs: document retired Swagger artifact IDs in MIGRATION.md (#5343)
  • chore: prepare workflows for 3.x line (#5341)
  • refactor: move REST API from io.swagger.v3.jaxrs2 to io.swagger.v3.rest (#5336)
  • feat: Improve Jackson 2 compatibility for Swagger mappers (#5334)
  • fix: deduplicate subtypes before composing oneOf (#5332)
  • fix: keep oneOf when WRAPPER_OBJECT wrapping is applied (#5331)
  • fix: prevent examples duplication in Schema model (#5330)
  • refactor: drop unused httpclient and ant dependencies (#5329)
  • refactor: drop commons-io dependency (#5328)
  • chore: update documentation for version 3.0 (#5327)
  • feat: Set Swagger mapper defaults after the Jackson 3 migration (#5325)
  • feat: API to add Jackson modules / customize immutable Jackson 3 mappers (#5324)
  • refactor: drop commons-lang3 dependency (#5323)
  • fix: skip resolveSubtypes for sealed classes with @Schema(oneOf) (#5322)
  • fix: respect explicit @JsonProperty value in ModelResolver property name resolution (#5321)
  • feat: optionally compose @JsonSubTypes parents into oneOf (#5320)
  • chore: migrate swagger-core 3.x runtime from javax to jakarta, update … (#5319)
  • chore: rename modules (#5317)
  • chore: remove unused modules after migration to Jakarta (#5316)
  • chore: remove Java 17 support module (#5315) (#5315)
  • Update to jackson 3 (#5314)
Changelog

Sourced from io.swagger.core.v3:swagger-core's changelog.

[3.0.0] - 2026-10-28

First release of the 3.x line. The runtime moves from Jackson 2 to Jackson 3, the minimum Java version is 17, and the REST API supports jakarta.* only. See https://github.com/swagger-api/swagger-core/blob/v3.0.0/MIGRATION.md for the upgrade guide.

Changed (breaking)

  • Java 17+ is required (previously Java 8+).
  • Jackson 3.2.3. Core, databind and dataformat moved to the tools.jackson groupId. jackson-annotations stays on com.fasterxml.jackson.core (2.22). Json.mapper(), Yaml.mapper() and the other mapper accessors return tools.jackson.databind.ObjectMapper. JacksonException is unchecked and replaces JsonProcessingException. ObjectMapperProcessor method signatures and custom serializer/deserializer classes changed.
  • Artifact IDs renamed. *-jakarta, swagger-jaxrs2* and swagger-jaxrs2-servlet-initializer-v2* are retired. New IDs: swagger-annotations, swagger-models, swagger-core, swagger-integration, swagger-rest, swagger-rest-servlet-initializer.
  • REST API packages and types renamed: io.swagger.v3.jaxrs2 to io.swagger.v3.rest, Jaxrs* to Rest*.
  • jakarta.* only. javax.* support removed. Jakarta APIs moved from EE 10 to EE 11.
  • Mapper defaults follow Jackson 3 (for example FAIL_ON_NULL_FOR_PRIMITIVES, FAIL_ON_TRAILING_TOKENS, ONE_BASED_MONTHS). Jackson 2 compatibility is opt-in via ObjectMapperFactory.setJackson2Compatibility(true).

Removed

  • Dependencies: commons-lang3, commons-io, snakeyaml (replaced by snakeyaml-engine), httpclient, ant.
  • Modules: swagger-java17-support and unused modules left over from before the Jakarta migration.

Added

  • API to register Jackson modules and customize the immutable Jackson 3 mappers through ObjectMapperFactory.
  • Opt-in oneOf composition for @JsonSubTypes parents. Enable it with -Djson-subtypes-oneof or ModelResolver.jsonSubTypesOneOf = true. When enabled, a parent class with @JsonSubTypes gets a oneOf that lists its resolved subtypes, and the subtypes keep their allOf reference to the parent. An explicit @Schema(oneOf = ...) on the parent takes priority. The default is off, so the generated schemas do not change unless you enable it. Use it for abstract classes and interfaces. A concrete parent class is not listed in its own oneOf, so an instance of the parent itself does not match the schema. Note: the result has a cycle (allOf from subtype to parent, oneOf from parent to subtype). Some tools, such as swagger-ui and openapi-generator, may not handle this shape well.

Fixed

  • Respect an explicit @JsonProperty value when ModelResolver resolves the property name.
  • Skip resolveSubtypes for sealed classes with @Schema(oneOf).
  • Deduplicate subtypes before composing oneOf.

... (truncated)

Commits
  • 34447d5 prepare release 3.0.0 (#5366)
  • a9e1fae feat: ModelCopy.deepCopy, an exact deep copy of OpenAPI models (#5364)
  • 9ee4aa3 fix: don't add an empty property for a required @​JsonUnwrapped member (OpenAP...
  • 1a87894 fix: thread-safe ModelConverters.getInstance(boolean), refresh mappers derive...
  • 5086388 docs: MIGRATION.md notes from a downstream (springdoc-openapi) migration (#5363)
  • 21cde34 docs: update migration documentation for Jackson 3 changes (#5359)
  • 51deb21 chore: update Jackson dependencies to version 3.2.3 in migration documentatio...
  • c0f7a52 fix: keep oneOf when WRAPPER_OBJECT wrapping is applied (#5331)
  • 6e29b02 feat: optionally compose @​JsonSubTypes parents into oneOf (#5320)
  • 9d83dc2 fix: deduplicate subtypes before composing oneOf (#5332)
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-models from 2.2.55 to 3.0.0

Updates io.swagger.core.v3:swagger-annotations from 2.2.55 to 3.0.0

Updates io.swagger.core.v3:swagger-models from 2.2.55 to 3.0.0

Updates io.swagger.core.v3:swagger-annotations from 2.2.55 to 3.0.0

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

…y with 12 updates

Bumps the production-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.14.0` | `2.15.0` |
| [org.mozilla:rhino](https://github.com/mozilla/rhino) | `1.9.1` | `1.9.2` |
| [org.mozilla:rhino-xml](https://github.com/mozilla/rhino) | `1.9.1` | `1.9.2` |
| [org.mozilla:rhino-xml](https://github.com/mozilla/rhino) | `1.9.1` | `1.9.2` |
| [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) | `1.9.25.1` | `1.9.26` |
| [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) | `1.9.25.1` | `1.9.26` |
| [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) | `1.9.25.1` | `1.9.26` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.15` | `1.18.17` |
| [io.swagger.core.v3:swagger-core](https://github.com/swagger-api/swagger-core) | `2.2.55` | `3.0.0` |
| io.swagger.core.v3:swagger-models | `2.2.55` | `3.0.0` |
| io.swagger.core.v3:swagger-annotations | `2.2.55` | `3.0.0` |
| io.swagger.core.v3:swagger-models | `2.2.55` | `3.0.0` |
| io.swagger.core.v3:swagger-annotations | `2.2.55` | `3.0.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |



Updates `com.google.code.gson:gson` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.14.0...gson-parent-2.15.0)

Updates `org.mozilla:rhino` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `org.mozilla:rhino-xml` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `org.mozilla:rhino-xml` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `org.aspectj:aspectjrt` from 1.9.25.1 to 1.9.26
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `org.aspectj:aspectjweaver` from 1.9.25.1 to 1.9.26
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `org.aspectj:aspectjweaver` from 1.9.25.1 to 1.9.26
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `net.bytebuddy:byte-buddy` from 1.18.15 to 1.18.17
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.15...byte-buddy-1.18.17)

Updates `io.swagger.core.v3:swagger-core` from 2.2.55 to 3.0.0
- [Release notes](https://github.com/swagger-api/swagger-core/releases)
- [Changelog](https://github.com/swagger-api/swagger-core/blob/v3.0.0/CHANGELOG.md)
- [Commits](swagger-api/swagger-core@v2.2.55...v3.0.0)

Updates `io.swagger.core.v3:swagger-models` from 2.2.55 to 3.0.0

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.55 to 3.0.0

Updates `io.swagger.core.v3:swagger-models` from 2.2.55 to 3.0.0

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.55 to 3.0.0

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.mozilla:rhino
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.mozilla:rhino-xml
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.mozilla:rhino-xml
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.aspectj:aspectjrt
  dependency-version: 1.9.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.aspectj:aspectjweaver
  dependency-version: 1.9.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.aspectj:aspectjweaver
  dependency-version: 1.9.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: io.swagger.core.v3:swagger-core
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: io.swagger.core.v3:swagger-models
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: io.swagger.core.v3:swagger-models
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants