Skip to content

chore(deps): bump the maven-version-updates group across 1 directory with 27 updates - #112

Closed
dependabot[bot] wants to merge 1 commit into
betafrom
dependabot/maven/maven-version-updates-78c26184c9
Closed

chore(deps): bump the maven-version-updates group across 1 directory with 27 updates#112
dependabot[bot] wants to merge 1 commit into
betafrom
dependabot/maven/maven-version-updates-78c26184c9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 17, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the maven-version-updates group with 27 updates in the / directory:

Package From To
org.bouncycastle:bcprov-jdk18on 1.81 1.82
org.bouncycastle:bcpkix-jdk18on 1.81 1.82
com.google.errorprone:error_prone_core 2.40.0 2.44.0
com.uber.nullaway:nullaway 0.12.7 0.12.12
com.nimbusds:nimbus-jose-jwt 10.4 10.6
com.nimbusds:oauth2-oidc-sdk 11.26 11.30.1
org.apache.httpcomponents.client5:httpclient5 5.5 5.5.1
com.fasterxml.jackson.core:jackson-core 2.19.2 2.20
com.fasterxml.jackson.core:jackson-annotations 2.19.2 2.20
com.fasterxml.jackson.core:jackson-databind 2.19.2 2.20
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider 2.19.2 2.20
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.2 2.20
org.openapitools:jackson-databind-nullable 0.2.6 0.2.8
org.junit.jupiter:junit-jupiter-api 5.13.4 6.0.1
org.testcontainers:testcontainers 1.21.3 2.0.2
io.github.classgraph:classgraph 4.8.181 4.8.184
com.google.errorprone:error_prone_annotations 2.40.0 2.44.0
com.github.spotbugs:spotbugs-maven-plugin 4.9.3.2 4.9.8.1
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-enforcer-plugin 3.6.1 3.6.2
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 3.12.0
org.jacoco:jacoco-maven-plugin 0.8.13 0.8.14
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
com.diffplug.spotless:spotless-maven-plugin 2.46.0 3.0.0
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.9.0

Updates org.bouncycastle:bcprov-jdk18on from 1.81 to 1.82

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.1.1 Version Release: 1.83 Date:      TBD

2.2.1 Version Release: 1.82 Date:      2025, 17th September.

... (truncated)

Commits

Updates org.bouncycastle:bcpkix-jdk18on from 1.81 to 1.82

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

2.1.1 Version Release: 1.83 Date:      TBD

2.2.1 Version Release: 1.82 Date:      2025, 17th September.

... (truncated)

Commits

Updates com.google.errorprone:error_prone_core from 2.40.0 to 2.44.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.44.0

Changes

Closed issues: #5218, #5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

Error Prone 2.43.0

The minimum support JDK version to run Error Prone is now JDK 21 (google/error-prone#4867).

Changes:

  • -XepPatchChecks now skips disabled checks (#4943)
  • AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

Closed issues: #4943, #5102, #5107, #5121, #5158, #5217, #5239

Full changelog: google/error-prone@v2.42.0...v2.43.0

Error Prone 2.42.0

New checks:

Changes:

  • The return type of ASTHelpers.asFlagSet has changed. The previous type was EnumSet<Flags.Flag>, where Flags.Flag is an enum in the javac class Flags. A recent JDK change has replaced that enum with a new top-level enum called FlagsEnum. It is not possible to change ASTHelpers.asFlagSet in a way that would be type-safe and compatible with the enums from JDKs both before and after the change. Instead, the method now returns ImmutableSet<String>, where the strings come from the toString() of the enum constants. That means they are "native", "abstract", etc.
  • Flag IO.print[ln]() in SystemOut.

Full changelog: google/error-prone@v2.41.0...v2.42.0

Error Prone 2.41.0

New checks:

  • EffectivelyPrivate: Detect declarations that have public or protected modifiers, but are effectively private

Changes:

  • Skip BooleanLiteral findings if the target type is boxed (#5134)

... (truncated)

Commits
  • 4016e04 Release Error Prone 2.44.0
  • 8255d1e Avoid overlaps in UnnecessaryAsync fixes
  • 4c0f01b Report InvalidLink diagnostics for links that are so invalid they crash javac
  • b5690c9 Refresh Java8ApiChecker diff
  • 54ed3d8 Finalise removing GuardedByFlags.
  • bc26f7b TruthConstantAsserts: treat static identifiers as constants.
  • 7692fb4 Rollforward of google/error-prone@3272246036db6fc15...
  • 9c5f725 Optimize snippet logic
  • b063711 Improve TruthConstantAsserts to detect more constant-like expressions.
  • de35cc9 Automated rollback of commit 09c78e01573334cee793b67346ca0f3175fd47a3.
  • Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.7 to 0.12.12

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.12

This release fixes a severe performance regression introduced in NullAway 0.12.11 and we encourage all users of 0.12.11 to upgrade.

  • Address severe performance regression in dataflow analysis (#1328)
  • Maintenance
    • Fix test args for SuggestedFixesTests (#1324)
    • Stop passing -processorpath to CompilationTestHelper in NullAway tests (#1326)

NullAway 0.12.11

Version 0.12.11

In this release, NullAway checks the requirement that JSpecify mode is only run on a compatible javac version / configuration, and fails if it detects an incompatibility. See https://github.com/uber/NullAway/wiki/JSpecify-Support#supported-jdk-versions for details.

  • Use inference for generic call passed as receiver to instance method (#1293)
  • Accept any annotation with simple name Contract, and change reporting of invalid contract annotations (#1295)
  • Properly model AtomicReference.get() in JSpecify mode (#1298)
  • Improve handling and error messages when using this inside an anonymous class (#1305)
  • Generate astubx from JSON output of jdk-javac-plugin by @​haewiful (#1243)
  • Improve inference for generic method with void-returning lambda argument by @​dhruv-agr (#1312)
  • Use refined types from dataflow analysis in generic method inference (#1309)
  • Fail if NullAway is run in JSpecify mode with an incompatible javac version / configuration (#1317)
  • Jdk javac plugin: don't serialize info for classes / methods without annotations by @​haewiful (#1316)
  • Maintenance
    • [Cleanup] Refactor away unnecessary Predicate by @​lazaroclapp (#1297)
    • Update to Error Prone 2.42.0 (#1299)
    • Update to Gradle 9.1.0 (#1302)
    • Test on JDK 25 (#1301)
    • Compile with JDK 25 (#1303)
    • Add CodeRabbit config (#1306)
    • Update Gradle command used for integration tests (#1311)
    • Disable CodeRabbit review status comments (#1313)
    • Gradle fixes for jar-infer-lib (#1314)
    • Enable building NullAway on JDK 25 (#1315)

NullAway 0.12.10

This release contains significant improvements to inference support for generic method calls in JSpecify mode (#1075). We expect that many more valid calls will pass NullAway, but that some new bugs may have been introduced. Please report any issues that you see. There is also a new flag, -XepOpt:NullAway:WarnOnGenericInferenceFailure to make NullAway report a warning when inference fails, to help identify any issues.

  • Improved inference for generic method calls (#1244)
  • Suppress CastToNonNull warnings for @NullUnmarked method calls by @​raccoonback (#1258)
  • JSpecify: Fix crash when overriding with raw types (#1265)
  • Better handle calls to super constructors and superclass methods in JSpecify mode (#1248)
  • issue-1250 pattern matching for instanceof in switch case by @​dhruv-agr (#1259)
  • Account for annotations in extends / implements when computing view as supertype (#1266)
  • Bug fix with type substitutions after inference (#1277)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.12

This release fixes a severe performance regression introduced in NullAway 0.12.11 and we encourage all users of 0.12.11 to upgrade.

  • Address severe performance regression in dataflow analysis (#1328)
  • Maintenance
    • Fix test args for SuggestedFixesTests (#1324)
    • Stop passing -processorpath to CompilationTestHelper in NullAway tests (#1326)

Version 0.12.11

In this release, NullAway checks the requirement that JSpecify mode is only run on a compatible javac version / configuration, and fails if it detects an incompatibility. See https://github.com/uber/NullAway/wiki/JSpecify-Support#supported-jdk-versions for details.

  • Use inference for generic call passed as receiver to instance method (#1293)
  • Accept any annotation with simple name Contract, and change reporting of invalid contract annotations (#1295)
  • Properly model AtomicReference.get() in JSpecify mode (#1298)
  • Improve handling and error messages when using this inside an anonymous class (#1305)
  • Generate astubx from JSON output of jdk-javac-plugin by @​haewiful (#1243)
  • Improve inference for generic method with void-returning lambda argument by @​dhruv-agr (#1312)
  • Use refined types from dataflow analysis in generic method inference (#1309)
  • Fail if NullAway is run in JSpecify mode with an incompatible javac version / configuration (#1317)
  • Jdk javac plugin: don't serialize info for classes / methods without annotations by @​haewiful (#1316)
  • Maintenance
    • [Cleanup] Refactor away unnecessary Predicate by @​lazaroclapp (#1297)
    • Update to Error Prone 2.42.0 (#1299)
    • Update to Gradle 9.1.0 (#1302)
    • Test on JDK 25 (#1301)
    • Compile with JDK 25 (#1303)
    • Add CodeRabbit config (#1306)
    • Update Gradle command used for integration tests (#1311)
    • Disable CodeRabbit review status comments (#1313)
    • Gradle fixes for jar-infer-lib (#1314)
    • Enable building NullAway on JDK 25 (#1315)

Version 0.12.10

This release contains significant improvements to inference support for generic method calls in JSpecify mode (#1075). We expect that many more valid calls will pass NullAway, but that some new bugs may have been introduced. Please report any issues that you see. There is also a new flag, -XepOpt:NullAway:WarnOnGenericInferenceFailure to make NullAway report a warning when inference fails, to help identify any issues.

  • Improved inference for generic method calls (#1244)
  • Suppress CastToNonNull warnings for @NullUnmarked method calls by @​raccoonback (#1258)
  • JSpecify: Fix crash when overriding with raw types (#1265)
  • Better handle calls to super constructors and superclass methods in JSpecify mode (#1248)

... (truncated)

Commits
  • 27a029c Prepare for release 0.12.12.
  • 77c85a6 Address severe performance regression in dataflow analysis (#1328)
  • 38a7561 Stop passing -processorpath to CompilationTestHelper in NullAway tests (#...
  • 334479c Fix test args for SuggestedFixesTests (#1324)
  • 7923ea2 Prepare next development version.
  • f22da56 Prepare for release 0.12.11.
  • 06a7690 Add changelog for 0.12.11 (#1321)
  • f2e6c58 Jdk javac plugin: don't serialize info for classes / methods without annotati...
  • bb14d56 Fail if NullAway is run in JSpecify mode with an incompatible javac version /...
  • 9907586 Use refined types from dataflow analysis in generic method inference (#1309)
  • Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.4 to 10.6

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

10.5 (2025-09-05) * Support for specifying a ScheduledExecutorService instance in RefreshAheadCachingJWKSetSource and JWKSourceBuilder (iss #592).

10.6 (2025-11-06) * Adds static CollectionUtils.containsNull(Set) method. * DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatible with Set.of (iss #499). * The DefaultJWTClaimsVerifier must not include JWT claim values in BadJWTException messages (iss #605).

Commits
  • 584951f Adds support for specifying the ScheduledExecutorService-instance in RefreshA...
  • adf2576 [maven-release-plugin] prepare for next development iteration
  • 436fb18 Add tests for JWKSourceBuilder and RefreshAheadCachingJWKSetSource
  • d4137db Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595)
  • c6c8025 [maven-release-plugin] prepare release 10.4.1
  • e7c7a8c [maven-release-plugin] prepare for next development iteration
  • b33b54b Bumps GSon and BouncyCastle
  • 3eeaada [maven-release-plugin] prepare release 10.4.2
  • 2aa473f [maven-release-plugin] prepare for next development iteration
  • d52acf5 Merged in iss592 (pull request #129)
  • Additional commits viewable in compare view

Updates com.nimbusds:oauth2-oidc-sdk from 11.26 to 11.30.1

Changelog

Sourced from com.nimbusds:oauth2-oidc-sdk's changelog.

version 1.0 (2012-05-29) * First official release with authorisation endpoint, token endpoint, check ID endpoint and UserInfo endpoint support. * JSON Web Tokens (JWTs) support through the Nimbus-JWT library. * Language Tags (RFC 5646) support through the Nimbus-LangTag library. * JSON support through the JSON Smart library.

version 2.0 (2013-05-13) * Intermediary development release with Maven build, published to Maven Central.

version 2.1 (2013-06-06) * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect Standard draft 21, OpenID Connect Discovery draft 17 and OpenID Connect Registration draft 19. * Major refactoring of the APIs for greater simplicity. * Adds JUnit tests.

version 2.2 (2013-06-18) * Refactors dynamic OpenID Connect client registration. * Adds partial support of the OAuth 2.0 Dynamic Client Registration Protocol (draft-ietf-oauth-dyn-reg-12). * Optimises parsing of request parameters consisting of one or more tokens (scope, response type, etc).

version 2.3 (2013-06-19) * Renames OAuth 2.0 dynamic client registration package. * Adds ClientInformation.getClientMetadata() method. * Adds OIDCClientInformation class.

version 2.4 (2013-06-20) * Adds static OIDCClientInformation.parse(JSONObject) method.

version 2.5 (2013-06-22) * Adds support OAuth 2.0 dynamic client update. * Adds OpenID Connect dynamic client registration classes.

version 2.6 (2013-06-25) * Enforces order of preference of ACR values in OpenID Connect client metadata, as required by the specification. * Documentation and performance improvements.

version 2.7 (2013-06-26) * Switches Identifier generation to java.security.SecureRandom.

version 2.8 (2013-06-30) * Fixes serialisation and assignment bugs in ClientMetadata. * Switches Secret generation to java.security.SecureRandom.

version 2.9 (2013-09-17)

... (truncated)

Commits

Updates org.apache.httpcomponents.client5:httpclient5 from 5.5 to 5.5.1

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.5.1

This is a maintenance release that fixes several defects in the connection management code and a regression in the DIGEST authentication reported since the previous release. It also upgrades HttpCore to version 5.3.6.

Change Log

  • HTTPCLIENT-2391: Improved GRACEGUL shutdown of ExecutorService used internally by async clients. Contributed by Oleg Kalnichevski

  • Bug fix: Use a 1 second timeout when closing out connections inside a connection pool lock. Contributed by Oleg Kalnichevski

  • Clarified the behavior of the protocol-level responseTimeout and the connection management level socketTimeout and their interrelation. Contributed by ChangYong

  • Bug fix: Connection managers to ensure open connections have a socket timeout set based on ConnectionConfig upon lease. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2393: Remove rspauth attribute from Authorization DIGEST header (#716) RFC 7616 compliance: rspauth is server-side (Authentication-Info 3.5) only. Contributed by Arturo Bernal

  • HTTPCLIENT-2386: Classic transport to use the connect timeout as a default if the TLS timeout has not been explicitly set. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2384: Socket options related to TcpKeepAlive are ignored. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2371: Logging of request re-execution at INFO priority. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2379: Fixed a defect in H2SharingConnPool causing an IllegalStateException when releasing the same connection from multiple threads. (#663) Contributed by Arturo Bernal abernal@apache.org

  • Fixed the behavior of the validateAfterInactivity connection setting by the async connection manager. Contributed by Ryan Schmitt

  • HTTPCLIENT-2376: Fixed the problem with ContentCompressionExec not taking acceptEncoding parameter into account.

... (truncated)

Commits
  • 6a3d332 HttpClient 5.5.1 release
  • 66dea80 Updated release notes for HttpClient 5.5.1 release
  • 61f21a5 Upgraded HttpCore to version 5.3.6
  • 694394c HTTPCLIENT-2391: improved GRACEGUL shutdown of ExecutorService used internall...
  • 038b74f Bug fix: Use 1 second timeout when closing out connections inside a connectio...
  • 6675520 Clarify behavior of the protocol level responseTimeout and the connection man...
  • cb2ccda Bug fix: connections managers to ensure open connections have socket timeout ...
  • 4466cca HTTPCLIENT-2393 - remove rspauth from Authorization (#716)
  • da1a8e0 Imporved TestAsyncClient wiring; added internal methods to get the underlying...
  • ab40ec9 Upgraded HttpCore to version 5.3.5
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.20

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.20

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.20

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.20

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.8

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.8 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.7...v0.2.8

v0.2.7 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits
  • 108f5bd v0.2.8 release (#92)
  • b2ca809 Update to move away from deprecated methods (#91)
  • 377e8c4 Change the maven compile execution for Java 8 to override the default compile...
  • 5b73076 Fix typos and linguistic errors in documentation (#88)
  • 85e68d4 Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#87)
  • 9dd4094 Build as multi release jar (#62)
  • 6712288 Ignore semver-major Mockito and JUnit updates until Java 17+ is used for buil...
  • f377eda adding the following methods to JsonNullable, based on methods (#68)
  • 09ee5fc Ignore Hibernate Validator updates until Java 17+ is used for builds (#83)
  • 338ccf8 Update GitHub actions to use commit sha instead of tags to avoid supply chain...
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.13.4 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

Updates org.testcontainers:testcontainers from 1.21.3 to 2.0.2

Release notes

Sourced from org.testcontainers:testcontainers's releases.

2.0.2

What's Changed

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

  • Add getBaseUrl() to NginxContainer using NGINX_DEFAULT_PORT (#11137) @​ghusta

📦 Dependency updates

2.0.1

What's Changed

🐛 Bug Fixes

  • Add MySQLR2DBCDatabaseContainer compatible with org.testcontainers.mysql.MySQLContainer (#11119) @​eddumelendez
  • Add MariaDBR2DBCDatabaseContainer compatible with org.testcontainers.mariadb.MariaDBContainer (#11117) @​eddumelendez
  • Add MSSQLR2DBCDatabaseContainer compatible with org.testcontainers.mssqlserver.MSSQLServerContainer (#11118) @​eddumelendez
  • Add PostgreSQLR2DBCDatabaseContainer compatible with org.testcontainers.postgresql.PostgreSQLContainer (#11120) @​eddumelendez

📖 Documentation

🧹 Housekeeping

2.0.0

Testcontainers 2.0.0

... (truncated)

Commits
  • 623ea96 Update docker image version to 25.0.5 (#11219)
  • 9dcf4f0 Add docker version input in moby-latest workflow
  • a434e35 Set version to moby-latest workflow
  • f3e4cd5 Update docker-java version to 3.7.0 (#11218)
  • 58119ed Set default docker API version to 1.44 (

@dependabot
chore(deps): bump the maven-version-updates group across 1 directory …
a116838 
…with 27 updates

Bumps the maven-version-updates group with 27 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.82` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.82` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.40.0` | `2.44.0` |
| [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.7` | `0.12.12` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.4` | `10.6` |
| [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) | `11.26` | `11.30.1` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.5` | `5.5.1` |
| com.fasterxml.jackson.core:jackson-core | `2.19.2` | `2.20` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.19.2` | `2.20` |
| com.fasterxml.jackson.core:jackson-databind | `2.19.2` | `2.20` |
| com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | `2.19.2` | `2.20` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.20` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.8` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.1` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `2.0.2` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.181` | `4.8.184` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.40.0` | `2.44.0` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.3.2` | `4.9.8.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.12.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.46.0` | `3.0.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` |



Updates `org.bouncycastle:bcprov-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.81 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.errorprone:error_prone_core` from 2.40.0 to 2.44.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.44.0)

Updates `com.uber.nullaway:nullaway` from 0.12.7 to 0.12.12
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.12.7...v0.12.12)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.4 to 10.6
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.6..10.4)

Updates `com.nimbusds:oauth2-oidc-sdk` from 11.26 to 11.30.1
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.30.1..11.26)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.5.1
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.5.1/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.5.1)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.20
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20

Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.8)

Updates `org.junit.jupiter:junit-jupiter-api` from 5.13.4 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.1)

Updates `org.testcontainers:testcontainers` from 1.21.3 to 2.0.2
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...2.0.2)

Updates `io.github.classgraph:classgraph` from 4.8.181 to 4.8.184
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.181...classgraph-4.8.184)

Updates `com.google.errorprone:error_prone_annotations` from 2.40.0 to 2.44.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.44.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.3.2 to 4.9.8.1
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.3.2...spotbugs-maven-plugin-4.9.8.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.12.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.46.0 to 3.0.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.46.0...lib/3.0.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.12.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.nimbusds:oauth2-oidc-sdk
  dependency-version: 11.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 2.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 4.8.184
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.9.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 17, 2025
@dependabot @github

dependabot Bot commented on behalf of github Dec 8, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Dec 8, 2025
@dependabot
dependabot Bot deleted the dependabot/maven/maven-version-updates-78c26184c9 branch December 8, 2025 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants