Skip to content

Bump the minor-patch group across 1 directory with 11 updates #715

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the minor-patch group across 1 directory with 11 updates #715

dependabot wants to merge 1 commit into from
+10 −10

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the minor-patch group with 11 updates in the / directory:

Package From To
com.sap.cds:cds-services-bom 3.10.7 3.10.8
com.sap.cds:cds-maven-plugin 3.10.7 3.10.8
com.sap.cloud.sdk:sdk-bom 5.24.0 5.25.0
org.junit:junit-bom 6.0.1 6.0.2
org.sonatype.central:central-publishing-maven-plugin 0.9.0 0.10.0
ch.qos.logback:logback-classic 1.4.14 1.5.25
software.amazon.awssdk:s3 2.40.13 2.41.10
software.amazon.awssdk.crt:aws-crt 0.41.0 0.42.2
com.azure:azure-storage-blob 12.32.0 12.33.0
com.google.cloud:google-cloud-storage 2.61.0 2.62.0
org.wiremock.integrations:wiremock-spring-boot 4.0.8 4.0.9

Updates com.sap.cds:cds-services-bom from 3.10.7 to 3.10.8

Updates com.sap.cds:cds-maven-plugin from 3.10.7 to 3.10.8

Updates com.sap.cloud.sdk:sdk-bom from 5.24.0 to 5.25.0

Release notes

Sourced from com.sap.cloud.sdk:sdk-bom's releases.

Release 5.25.0

What's Changed

New Contributors

Full Changelog: https://github.com/SAP/cloud-sdk-java/commits/rel/5.25.0

Commits
  • 17b154e Update to version 5.25.0
  • 2344f63 Revert "fix: Improve Circuit breaker behaviour (#1017)" (#1040)
  • d0175e2 Transparent proxy: TP Loader Cloud SDK native integration (#981)
  • 721e615 chore: Fix bom comment for axis2 (#1033)
  • 6190334 fix: Improve Circuit breaker behaviour (#1017)
  • 08d637d chore: bump org.mozilla:rhino from 1.8.0 to 1.8.1 in /datamodel/openapi/opena...
  • badf212 fix: [OData] TreatserviceNameMappings.properties readonly (#1029)
  • 67b3eb3 fix: [OData] Name mapping bug in NamingUtils (#1026)
  • 17bbcd7 chore: [DevOps] bump net.bytebuddy:byte-buddy from 1.18.1 to 1.18.2 in the te...
  • 64826a5 chore: [DevOps] bump the plugins group with 2 updates (#1022)
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.0.1 to 6.0.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

Commits
  • c5c5de5 Release 6.0.2
  • 98b6f78 Add missing checkout step
  • 732dc27 Finalize 6.0.2 release notes
  • 6a25736 Finalize 5.14.2 release notes
  • 33e66bf Move release notes for #5238 entry to 6.1.0-M2
  • 11f0f82 Update copyright headers
  • 6ce1265 Consistently add license header to all java source files
  • 4d454ee Update dependency @​antora/lunr-extension to v1.0.0-alpha.12
  • faf4a58 Use --since feature of Javadoc
  • 5cc8b05 Mark new recommended APIs as "maintained" rather than "experimental"
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.9.0 to 0.10.0

Commits

Updates com.sap.cds:cds-maven-plugin from 3.10.7 to 3.10.8

Updates ch.qos.logback:logback-classic from 1.4.14 to 1.5.25

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.24

2026-01-06 Release of logback version 1.5.24

• Added ExpressionPropertyCondition a PropertyCondition that can evaluate boolean expressions similar to Java. See the relevant documentation for further details.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 62bc5fc245dd3a52f3dd45e232733f4cefb4806d associated with the tag v_1.5.24. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.21

2025-11-10 Release of logback version 1.5.21

• Invocations of turbo filters in isDebugEnabled, isInfoEnabled()... remain as they were, untouched. However, any installed instances of TurboFilter are now invoked also from within the log(LoggingEvent) method of Logger with the contents of the LoggingEvent, typically via the fluent API. This fixes issues/871.

• Removed reentry-guard in most subclasses of UnsynchronizedAppenderBase where it was not needed.

• Initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• JsonEncoder is now friendlier to derivation by sub-classes as requested in issues/979.

• Fixed XMLLayout thread safety issue reported in LOGBACK-427.

• Removed superfluous buffering in Zip, GZ and XZ compression code.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit fed6f37ffe3449e40f6a9fffe050936a33116bd1 associated with the tag v_1.5.21. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.20

2025-10-19 Release of logback version 1.5.20

• Due to potential vulnerabilities associated with dynamic, i.e. runtime, java code compilation and execution (using Janino), the 'condition' attribute within the <if> element is deprecated and will be removed in 2027.

An online migration service is provided to help with the transition.

... (truncated)

Commits
  • f426e00 prepare release of 1.5.25
  • d28931f restrict object creation to expected supertype
  • aa264f7 test default variable values in appender-ref ref attribute
  • 8fb403a adjust copyright year
  • b294a12 check optionList in start()
  • b65040a Add EpochConverter for milliseconds/seconds since epoch (related to issue #96...
  • 0690174 cla for Duncan Jauncey
  • 71dc2af Removed email address for Tony.
  • 1f97ae1 check for undeclared by referenced appenders
  • b07355e Move the artifact version checking code to VersionUtil in logback-core.
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:s3 from 2.40.13 to 2.41.10

Updates software.amazon.awssdk.crt:aws-crt from 0.41.0 to 0.42.2

Release notes

Sourced from software.amazon.awssdk.crt:aws-crt's releases.

v0.42.2

What's Changed

Full Changelog: awslabs/aws-crt-java@v0.42.1...v0.42.2

v0.42.1

What's Changed

Full Changelog: awslabs/aws-crt-java@v0.42.0...v0.42.1

Revert MacOS Migration

Announcement

Starting with this version, we have reverted the macOS network framework changes. As a result, TLS 1.3 is no longer available on macOS.

What's Changed

Full Changelog: awslabs/aws-crt-java@v0.41.0...v0.42.0

Commits

Updates com.azure:azure-storage-blob from 12.32.0 to 12.33.0

Commits

Updates com.google.cloud:google-cloud-storage from 2.61.0 to 2.62.0

Release notes

Sourced from com.google.cloud:google-cloud-storage's releases.

v2.62.0

2.62.0 (2026-01-15)

Features

  • Add default e2e checksum validation in the final call of resumable uploads (#3450) (37d2bba)

Bug Fixes

  • Update appendable upload retry logic to be able to more gracefully handle slow uploads (#3438) (e660e5a)

Dependencies

  • Update dependency com.google.cloud:sdk-platform-java-config to v3.55.1 (#3461) (7e45b9e)
  • Update googleapis/sdk-platform-java action to v2.65.1 (#3460) (2a42131)

v2.62.0-rc1

2.62.0-rc1 (2025-12-17)

Features

... (truncated)

Changelog

Sourced from com.google.cloud:google-cloud-storage's changelog.

2.62.0 (2026-01-15)

Features

  • Add default e2e checksum validation in the final call of resumable uploads (#3450) (37d2bba)

Bug Fixes

  • Update appendable upload retry logic to be able to more gracefully handle slow uploads (#3438) (e660e5a)

Dependencies

  • Update dependency com.google.cloud:sdk-platform-java-config to v3.55.1 (#3461) (7e45b9e)
  • Update googleapis/sdk-platform-java action to v2.65.1 (#3460) (2a42131)
Commits
  • bbe88d2 chore(main): release 2.62.0 (#3439)
  • 7e45b9e deps: update dependency com.google.cloud:sdk-platform-java-config to v3.55.1 ...
  • 4205665 build(deps): update dependency org.codehaus.mojo:exec-maven-plugin to v3.6.3 ...
  • 2a42131 deps: update googleapis/sdk-platform-java action to v2.65.1 (#3460)
  • fe52bca chore: normalize host URL in MultipartUploadHttpRequestManager (#3452)
  • aefc12f chore: prevent Content-Type header duplication in multipart uploads with Mult...
  • 47fb486 chore: remove build badges (#3449)
  • 37d2bba feat: add default e2e checksum validation in the final call of resumable uplo...
  • 63756b7 chore(deps): update dependency com.google.cloud:libraries-bom to v26.73.0 (#3...
  • e660e5a fix: update appendable upload retry logic to be able to more gracefully handl...
  • Additional commits viewable in compare view

Updates org.wiremock.integrations:wiremock-spring-boot from 4.0.8 to 4.0.9

Release notes

Sourced from org.wiremock.integrations:wiremock-spring-boot's releases.

4.0.9

🐛 Bug Fixes

  • avoid port collision when using static port (045ee Tomas Bjerre) #82

📦 Dependency updates

  • dependencies (b9cce Tomas Bjerre)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-patch group across 1 directory with 11 updates
b7006f0 
Bumps the minor-patch group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| com.sap.cds:cds-services-bom | `3.10.7` | `3.10.8` |
| com.sap.cds:cds-maven-plugin | `3.10.7` | `3.10.8` |
| [com.sap.cloud.sdk:sdk-bom](https://github.com/SAP/cloud-sdk-java) | `5.24.0` | `5.25.0` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.0.2` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.9.0` | `0.10.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.4.14` | `1.5.25` |
| software.amazon.awssdk:s3 | `2.40.13` | `2.41.10` |
| [software.amazon.awssdk.crt:aws-crt](https://github.com/awslabs/aws-crt-java) | `0.41.0` | `0.42.2` |
| [com.azure:azure-storage-blob](https://github.com/Azure/azure-sdk-for-java) | `12.32.0` | `12.33.0` |
| [com.google.cloud:google-cloud-storage](https://github.com/googleapis/java-storage) | `2.61.0` | `2.62.0` |
| [org.wiremock.integrations:wiremock-spring-boot](https://github.com/wiremock/wiremock-spring-boot) | `4.0.8` | `4.0.9` |



Updates `com.sap.cds:cds-services-bom` from 3.10.7 to 3.10.8

Updates `com.sap.cds:cds-maven-plugin` from 3.10.7 to 3.10.8

Updates `com.sap.cloud.sdk:sdk-bom` from 5.24.0 to 5.25.0
- [Release notes](https://github.com/SAP/cloud-sdk-java/releases)
- [Changelog](https://github.com/SAP/cloud-sdk-java/blob/main/release_notes.md)
- [Commits](SAP/cloud-sdk-java@rel/5.24.0...rel/5.25.0)

Updates `org.junit:junit-bom` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.1...r6.0.2)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.9.0 to 0.10.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `com.sap.cds:cds-maven-plugin` from 3.10.7 to 3.10.8

Updates `ch.qos.logback:logback-classic` from 1.4.14 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.4.14...v_1.5.25)

Updates `software.amazon.awssdk:s3` from 2.40.13 to 2.41.10

Updates `software.amazon.awssdk.crt:aws-crt` from 0.41.0 to 0.42.2
- [Release notes](https://github.com/awslabs/aws-crt-java/releases)
- [Commits](awslabs/aws-crt-java@v0.41.0...v0.42.2)

Updates `com.azure:azure-storage-blob` from 12.32.0 to 12.33.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-storage-blob_12.32.0...com.azure+azure-storage-blob_12.33.0)

Updates `com.google.cloud:google-cloud-storage` from 2.61.0 to 2.62.0
- [Release notes](https://github.com/googleapis/java-storage/releases)
- [Changelog](https://github.com/googleapis/java-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/java-storage@v2.61.0...v2.62.0)

Updates `org.wiremock.integrations:wiremock-spring-boot` from 4.0.8 to 4.0.9
- [Release notes](https://github.com/wiremock/wiremock-spring-boot/releases)
- [Commits](wiremock/wiremock-spring-boot@4.0.8...4.0.9)

---
updated-dependencies:
- dependency-name: com.sap.cds:cds-services-bom
  dependency-version: 3.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 3.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: com.sap.cloud.sdk:sdk-bom
  dependency-version: 5.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.sap.cds:cds-maven-plugin
  dependency-version: 3.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.25
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.41.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: software.amazon.awssdk.crt:aws-crt
  dependency-version: 0.42.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.azure:azure-storage-blob
  dependency-version: 12.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: com.google.cloud:google-cloud-storage
  dependency-version: 2.62.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch
- dependency-name: org.wiremock.integrations:wiremock-spring-boot
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant