Bump the maven-dependencies group with 4 updates #411

dependabot · 2026-01-01T03:01:26Z

Bumps the maven-dependencies group with 4 updates: org.mockito:mockito-core, org.mockito:mockito-junit-jupiter, ch.qos.logback:logback-classic and org.apache.maven.plugins:maven-release-plugin.

Updates org.mockito:mockito-core from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]

Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 [(#3768)](mockito/mockito#3768)

Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 [(#3767)](mockito/mockito#3767)

Bump actions/checkout from 5 to 6 [(#3765)](mockito/mockito#3765)

Adds output of matchers to potential mismatch; Fixes #2468 [(#3760)](mockito/mockito#3760)

Forbid mocking WeakReference with inline mock maker [(#3759)](mockito/mockito#3759)

StackOverflowError when mocking WeakReference [(#3758)](mockito/mockito#3758)

Bump actions/upload-artifact from 4 to 5 [(#3756)](mockito/mockito#3756)

Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 [(#3755)](mockito/mockito#3755)

Support primitives in GenericArrayReturnType. [(#3753)](mockito/mockito#3753)

ClassNotFoundException when stubbing array of primitive type on Android [(#3752)](mockito/mockito#3752)

Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 [(#3744)](mockito/mockito#3744)

Bump gradle/actions from 4 to 5 [(#3743)](mockito/mockito#3743)

Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 [(#3738)](mockito/mockito#3738)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 [(#3735)](mockito/mockito#3735)

Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 [(#3734)](mockito/mockito#3734)

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 [(#3733)](mockito/mockito#3733)

Bump errorprone from 2.41.0 to 2.42.0 [(#3732)](mockito/mockito#3732)

Feat: automatically detect class to mock in mockStatic and mockConstruction [(#3731)](mockito/mockito#3731)

Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues [(#3727)](mockito/mockito#3727)

automatically detect class to mock [(#2779)](mockito/mockito#2779)

Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers [(#2468)](mockito/mockito#2468)

Commits

09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
04a6e9f Bump actions/checkout from 5 to 6 (#3765)
756a3cf Add description of matchers to potential mismatch (#3760)
58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
cffddd4 Bump gradle/actions from 4 to 5 (#3743)
Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]

Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 [(#3768)](mockito/mockito#3768)

Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 [(#3767)](mockito/mockito#3767)

Bump actions/checkout from 5 to 6 [(#3765)](mockito/mockito#3765)

Adds output of matchers to potential mismatch; Fixes #2468 [(#3760)](mockito/mockito#3760)

Forbid mocking WeakReference with inline mock maker [(#3759)](mockito/mockito#3759)

StackOverflowError when mocking WeakReference [(#3758)](mockito/mockito#3758)

Bump actions/upload-artifact from 4 to 5 [(#3756)](mockito/mockito#3756)

Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 [(#3755)](mockito/mockito#3755)

Support primitives in GenericArrayReturnType. [(#3753)](mockito/mockito#3753)

ClassNotFoundException when stubbing array of primitive type on Android [(#3752)](mockito/mockito#3752)

Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 [(#3744)](mockito/mockito#3744)

Bump gradle/actions from 4 to 5 [(#3743)](mockito/mockito#3743)

Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 [(#3738)](mockito/mockito#3738)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 [(#3735)](mockito/mockito#3735)

Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 [(#3734)](mockito/mockito#3734)

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 [(#3733)](mockito/mockito#3733)

Bump errorprone from 2.41.0 to 2.42.0 [(#3732)](mockito/mockito#3732)

Feat: automatically detect class to mock in mockStatic and mockConstruction [(#3731)](mockito/mockito#3731)

Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues [(#3727)](mockito/mockito#3727)

automatically detect class to mock [(#2779)](mockito/mockito#2779)

Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers [(#2468)](mockito/mockito#2468)

Commits

09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
04a6e9f Bump actions/checkout from 5 to 6 (#3765)
756a3cf Add description of matchers to potential mismatch (#3760)
58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
cffddd4 Bump gradle/actions from 4 to 5 (#3743)
Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]

Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 [(#3768)](mockito/mockito#3768)

Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 [(#3767)](mockito/mockito#3767)

Bump actions/checkout from 5 to 6 [(#3765)](mockito/mockito#3765)

Adds output of matchers to potential mismatch; Fixes #2468 [(#3760)](mockito/mockito#3760)

Forbid mocking WeakReference with inline mock maker [(#3759)](mockito/mockito#3759)

StackOverflowError when mocking WeakReference [(#3758)](mockito/mockito#3758)

Bump actions/upload-artifact from 4 to 5 [(#3756)](mockito/mockito#3756)

Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 [(#3755)](mockito/mockito#3755)

Support primitives in GenericArrayReturnType. [(#3753)](mockito/mockito#3753)

ClassNotFoundException when stubbing array of primitive type on Android [(#3752)](mockito/mockito#3752)

Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 [(#3744)](mockito/mockito#3744)

Bump gradle/actions from 4 to 5 [(#3743)](mockito/mockito#3743)

Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 [(#3738)](mockito/mockito#3738)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 [(#3735)](mockito/mockito#3735)

Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 [(#3734)](mockito/mockito#3734)

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 [(#3733)](mockito/mockito#3733)

Bump errorprone from 2.41.0 to 2.42.0 [(#3732)](mockito/mockito#3732)

Feat: automatically detect class to mock in mockStatic and mockConstruction [(#3731)](mockito/mockito#3731)

Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues [(#3727)](mockito/mockito#3727)

automatically detect class to mock [(#2779)](mockito/mockito#2779)

Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers [(#2468)](mockito/mockito#2468)

Commits

09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
04a6e9f Bump actions/checkout from 5 to 6 (#3765)
756a3cf Add description of matchers to potential mismatch (#3760)
58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
cffddd4 Bump gradle/actions from 4 to 5 (#3743)
Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.21 to 1.5.23

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

0bcc3fe prepare release 1.5.23
4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
299f091 add collision test in presence of conditional processing
b446f3f In Context, remove collision map
a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
681b2be remove unused method, minor comment edits
17a3edf start work on 1.5.23-SNAPSHOT
572379a prepare release 1.5.22
39d17ea fix status printing of variable substitution when the variable name contains ...
75509a9 fix PR 404, LOGBACK-543
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-release-plugin from 3.2.0 to 3.3.1

Release notes

Sourced from org.apache.maven.plugins:maven-release-plugin's releases.

3.3.1

💥 Breaking changes

Revert inclusion of ci skip in release commit msg (#1445) @rvesse

🐛 Bug Fixes

Revert inclusion of ci skip in release commit msg (#1445) @rvesse

📦 Dependency updates

Bump org.codehaus.plexus:plexus-testing from 2.0.1 to 2.0.2 (#1444) @dependabot[bot]

3.3.0

💥 Breaking changes

Include "[ci skip]" by default in scmReleaseCommitComment (#1423) @kwin

🚀 New features and improvements

Fixed #1426 : Replace archived org.semver:api with custom SemVer implementation (#1430) @HarshMehta112

Introduce new SemVer policies (#1424) @slawekjaranowski

Include "[ci skip]" by default in scmReleaseCommitComment (#1423) @kwin

🐛 Bug Fixes

Check all project parents for SCM information. (#1421) @slawekjaranowski

👻 Maintenance

Fix license header in xml files (#1443) @slawekjaranowski

Make implementation of new SemVer policies private for project (#1440) @slawekjaranowski

Resolve todo that led to pointless asserts (#1442) @elharo

Prefer JDK join method (#1434) @elharo

Remove old-style plexus annotation (#1432) @elharo

Clean up exceptions (#1433) @elharo

Replace deprecated classes (#1438) @elharo

Simplify code (#1429) @elharo

Fix spelling typo (#1431) @elharo

Prefer JDK join method (#1428) @elharo

Fixed #1410 [DOCS] Update Javadoc return tags in ReleaseDescriptor.java (#1427) @HarshMehta112

Remove manual configuration for plugin requirementsHistories (#1425) @slawekjaranowski

Correct misleading @return descriptions in Javadoc (#1413) @HarshMehta112

Migrate JUnit 3/4 to JUnit 5 (#1414) @slawekjaranowski

Add tag-template to release-drafter configuration (#1415) @slawekjaranowski

Fix assertions and cleanups in Mojo Tests (#1412) @slawekjaranowski

Fix Javadoc issues per Oracle conventions (#1408) @elharo

Migrate JUnit 3/4 to JUnit 5 (#1411) @slawekjaranowski

... (truncated)

Commits

7e8ebac [maven-release-plugin] prepare release maven-release-3.3.1
f0f28e5 Revert inclusion of ci skip in release commit msg
2a82901 Bump org.codehaus.plexus:plexus-testing from 2.0.1 to 2.0.2 (#1444)
c8613d2 [maven-release-plugin] prepare for next development iteration
2b8adaa [maven-release-plugin] prepare release maven-release-3.3.0
88630f9 Fixed #1426 : Replace archived org.semver:api with custom SemVer implemen...
7af8ace Fix license header in xml files
8914b84 Make implementation of new SemVer policies private for project
7e861f0 Resolve todo that led to pointless asserts (#1442)
422f895 Prefer JDK join method (#1434)
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
ch.qos.logback:logback-classic	[< 1.3, > 1.2.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 4 updates: [org.mockito:mockito-core](https://github.com/mockito/mockito), [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito), [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) and [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release). Updates `org.mockito:mockito-core` from 5.20.0 to 5.21.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.20.0...v5.21.0) Updates `org.mockito:mockito-junit-jupiter` from 5.20.0 to 5.21.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.20.0...v5.21.0) Updates `org.mockito:mockito-junit-jupiter` from 5.20.0 to 5.21.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.20.0...v5.21.0) Updates `ch.qos.logback:logback-classic` from 1.5.21 to 1.5.23 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.21...v_1.5.23) Updates `org.apache.maven.plugins:maven-release-plugin` from 3.2.0 to 3.3.1 - [Release notes](https://github.com/apache/maven-release/releases) - [Commits](apache/maven-release@maven-release-3.2.0...maven-release-3.3.1) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-version: 5.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: org.apache.maven.plugins:maven-release-plugin dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 1, 2026

Blackdread merged commit 8211b22 into master Jan 1, 2026
1 check failed

dependabot bot deleted the dependabot/maven/maven-dependencies-d044c848f7 branch January 1, 2026 21:40

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the maven-dependencies group with 4 updates #411

Bump the maven-dependencies group with 4 updates #411

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Bump the maven-dependencies group with 4 updates #411

Bump the maven-dependencies group with 4 updates #411

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026

v5.21.0

5.21.0

v5.21.0

5.21.0

v5.21.0

5.21.0

Logback 1.5.23

Logback 1.5.22

3.3.1

💥 Breaking changes

🐛 Bug Fixes

📦 Dependency updates

3.3.0

💥 Breaking changes

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants