Bump the maven-dependencies group with 6 updates #406

dependabot · 2025-11-01T03:01:48Z

Bumps the maven-dependencies group with 6 updates:

Package	From	To
ch.qos.logback:logback-classic	`1.5.19`	`1.5.20`
org.junit.jupiter:junit-jupiter-api	`6.0.0`	`6.0.1`
org.junit.jupiter:junit-jupiter-params	`6.0.0`	`6.0.1`
org.junit.jupiter:junit-jupiter-engine	`6.0.0`	`6.0.1`
org.apache.maven.plugins:maven-enforcer-plugin	`3.6.1`	`3.6.2`
org.jacoco:jacoco-maven-plugin	`0.8.13`	`0.8.14`

Updates ch.qos.logback:logback-classic from 1.5.19 to 1.5.20

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.20

2025-10-19 Release of logback version 1.5.20

• Due to potential vulnerabilities associated with dynamic, i.e. runtime, java code compilation and execution (using Janino), the 'condition' attribute within the <if> element is deprecated and will be removed in 2027.

An online migration service is provided to help with the transition.

The <condition> element, new in this version, admits custom PropertyEvaluator as a recommended alternative. See also the updated documentation on conditional configuration.

• Logback-classic's initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 930fb15c993a4344bcecc6ba2225c12a2c38e676 associated with the tag v_1.5.20. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

930fb15 prepare release 1.5.20
0b4432a provide an alternative to Janino based conditional configuration processing -...
258558f provide an alternative to Janino based conditional configuration processing -...
ee77a70 provide an alternative to Janino based conditional configuration processing -...
5ca7ce8 provide an alternative to Janino based conditional configuration processing -...
728803f fix typo
aa5eeb1 start work on version 1.5.20-SNAPSHOT
See full diff in compare view

Updates org.junit.jupiter:junit-jupiter-api from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.2

🐛 Bug Fixes

Use SessionData for cache storage (#930) @slawekjaranowski

📝 Documentation updates

Update Version Ranges link in site.xml (#926) @ctubbsii

Fix formatting typo in dependencyConvergence.apt.vm (#928) @ascopes

Correct support parameters documentation for banned repositories rule (#922) @Harmelodic

👻 Maintenance

Fixes #920 - Remove usage of Stack (#921) @khmarbaise

feat: enable prevent branch protection rules (#925) @sebtiem

Fixes #917 - Remove usage of Hashtable (#918) @khmarbaise

📦 Dependency updates

Bump m-invoker-p to 3.9.1 (#935) @slawekjaranowski

Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#933) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#932) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#931) @dependabot[bot]

Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0 (#923) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#919) @dependabot[bot]

Bump commons-codec:commons-codec from 1.18.0 to 1.19.0 (#915) @dependabot[bot]

Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#914) @dependabot[bot]

Bump mavenVersion from 3.9.10 to 3.9.11 (#912) @dependabot[bot]

Commits

82ba770 [maven-release-plugin] prepare release enforcer-3.6.2
5313c70 Bump m-invoker-p to 3.9.1
ee5abee Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0
6c5a152 Bump org.assertj:assertj-core from 3.27.5 to 3.27.6
89ccb70 Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#931)
03ed82d Update Version Ranges link in site.xml (#926)
d282dc4 Fixes #920 - Remove usage of Stack
27e1f46 Use SessionData for cache storage (#930)
a1bac9b Fix formatting typo in dependencyConvergence.apt.vm
870a1ed Correct support parameters documentation for banned repositories rule
Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.13 to 0.8.14

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.14

New Features

JaCoCo now officially supports Java 25 (GitHub #1950).

Experimental support for Java 26 class files (GitHub #1870).

Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).

Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).

Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).

Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).

Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).

Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).

Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).

Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).

Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

JaCoCo now depends on ASM 9.9 (GitHub #1965).

Commits

2eb2483 Prepare release v0.8.14
de76181 KotlinSerializableFilter should filter more methods (#1971)
89c4bd5 Fix NPE in KotlinSerializableFilter (#1970)
0981128 Migrate release staging to the Central Publisher Portal (#1968)
d07bc6b Add filter for bytecode generated by Kotlin serialization compiler plugin (#1...
5e35fd5 Upgrade maven-dependency-plugin to 3.9.0 (#1966)
c2fe5cc Upgrade ASM to 9.9 (#1965)
b0f8e23 KotlinSafeCallOperatorFilter should filter "unoptimized" safe call followed b...
c7bd3f4 Upgrade spotless-maven-plugin to 3.0.0 (#1961)
faa289d KotlinSafeCallOperatorFilter should not be affected by presence of pseudo ins...
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
ch.qos.logback:logback-classic	[< 1.3, > 1.2.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.19` | `1.5.20` | | [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` | | [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` | | [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.1` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` | Updates `ch.qos.logback:logback-classic` from 1.5.19 to 1.5.20 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.19...v_1.5.20) Updates `org.junit.jupiter:junit-jupiter-api` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0...r6.0.1) Updates `org.junit.jupiter:junit-jupiter-params` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0...r6.0.1) Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0...r6.0.1) Updates `org.junit.jupiter:junit-jupiter-params` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0...r6.0.1) Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.0...r6.0.1) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.13...v0.8.14) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-api dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-params dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-engine dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-params dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-engine dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 1, 2025

Blackdread merged commit ff3985c into master Nov 16, 2025
1 check failed

dependabot bot deleted the dependabot/maven/maven-dependencies-b3675c3485 branch November 16, 2025 18:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the maven-dependencies group with 6 updates #406

Bump the maven-dependencies group with 6 updates #406

Uh oh!

dependabot bot commented on behalf of github Nov 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Bump the maven-dependencies group with 6 updates #406

Bump the maven-dependencies group with 6 updates #406

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 1, 2025

Logback 1.5.20

3.6.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

0.8.14

New Features

Fixed bugs

Non-functional Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants