Skip to content

chore(deps): bump the maven-version-updates group across 1 directory with 29 updates - #117

Closed
dependabot[bot] wants to merge 1 commit into
betafrom
dependabot/maven/maven-version-updates-aef7fa902a
Closed

dependabot[bot] wants to merge 1 commit into
betafrom
dependabot/maven/maven-version-updates-aef7fa902a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven-version-updates group with 29 updates in the / directory:

Package From To
org.bouncycastle:bcprov-jdk18on 1.81 1.83
org.bouncycastle:bcpkix-jdk18on 1.81 1.83
com.google.errorprone:error_prone_core 2.40.0 2.46.0
com.uber.nullaway:nullaway 0.12.7 0.12.15
com.nimbusds:nimbus-jose-jwt 10.4 10.7
com.nimbusds:oauth2-oidc-sdk 11.26 11.31.1
org.apache.httpcomponents.client5:httpclient5 5.5 5.6
com.fasterxml.jackson.core:jackson-core 2.19.2 2.21.0
com.fasterxml.jackson.core:jackson-annotations 2.19.2 2.21.0
com.fasterxml.jackson.core:jackson-databind 2.19.2 2.21.0
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider 2.19.2 2.21.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.2 2.21.0
org.openapitools:jackson-databind-nullable 0.2.6 0.2.8
org.junit.jupiter:junit-jupiter-api 5.13.4 6.0.2
org.testcontainers:testcontainers 1.21.3 2.0.3
org.testcontainers:junit-jupiter 1.21.3 1.21.4
io.github.classgraph:classgraph 4.8.181 4.8.184
com.google.errorprone:error_prone_annotations 2.40.0 2.46.0
com.github.spotbugs:spotbugs-maven-plugin 4.9.3.2 4.9.8.2
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-enforcer-plugin 3.6.1 3.6.2
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 3.12.0
org.apache.maven.plugins:maven-source-plugin 3.3.1 3.4.0
org.jacoco:jacoco-maven-plugin 0.8.13 0.8.14
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
com.diffplug.spotless:spotless-maven-plugin 2.46.0 3.1.0
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.10.0

Updates org.bouncycastle:bcprov-jdk18on from 1.81 to 1.83

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.1.1 Version Release: 1.84 Date:      TBD

2.2.1 Version Release: 1.83 Date:      2025, November 27th.

... (truncated)

Commits

Updates org.bouncycastle:bcpkix-jdk18on from 1.81 to 1.83

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

2.1.1 Version Release: 1.84 Date:      TBD

2.2.1 Version Release: 1.83 Date:      2025, November 27th.

... (truncated)

Commits

Updates com.google.errorprone:error_prone_core from 2.40.0 to 2.46.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.46.0

Changes:

New checks:

Error Prone 2.45.0

Changes:

  • Improved compatibility with latest JDK 26 EA builds.

New checks:

Closed issues: #5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

Error Prone 2.44.0

Changes

Closed issues: #5218, #5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

Error Prone 2.43.0

The minimum supported JDK version to run Error Prone is now JDK 21 (google/error-prone#4867).

Changes:

  • -XepPatchChecks now skips disabled checks (#4943)
  • AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

... (truncated)

Commits
  • 471d512 Release Error Prone 2.46.0
  • 2601319 Unignore a passing test.
  • ad2ec70 simplify the wording of the MissingDefault summary
  • 6c96e8e Implement a NullArgumentForNonNullParameter TODO related to JDK-8225377
  • 5b768ff Require -XDaddTypeAnnotationsToSymbol=true, and remove workaround for JDK-8...
  • 0e004e5 Fix a crash in DuplicateAssertion
  • 8cfa4e5 Add a regression test for b/472686687
  • 18a63d2 Avoid getDeclarationAndTypeAttributes in ClassAndMethod
  • 14b6481 Make CacheLoaderNull check for more kinds of null returns.
  • d3a8c00 Handle sealed and non-sealed in SuggestedFixes.
  • Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.7 to 0.12.15

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.15

NullAway now includes a BOM artifact com.uber.nullaway:nullaway-bom. Otherwise, this release contains a few bug fixes and improvements to JSpecify support.

  • Fix URL for RequireExplicitNullMarking checker (#1369)
  • Handle annotations on type variables in return and field types (#1371)
  • Change how recursive calls to dataflow are detected (#1374)
  • JSpecify: use type on identifier when its type is a type variable (#1378)
  • Include method type parameters in astubx files. by @​haewiful (#1370)
  • Create nullaway-bom project (#1130) by @​lpireyn (#1380)
  • Run dataflow analysis on bodies of lambdas passed to generic methods (#1375)
  • Maintenance
    • Remove BaseNoOpHandler and replace with default methods in Handler (#1376)

NullAway 0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

  • Various optimizations (#1358)
  • Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#1365)
  • Optimize methods that check for annotations on a Symbol (#1362)
  • Tune warning message for RequireExplicitNullMarking (#1366)
  • Maintenance
    • Fix arg concatenation bug in JMH (#1357)
    • Move wildcard-related tests to a separate test class (#1361)

NullAway 0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking, that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @​FxMorin, to tell NullAway to preserve nullability information from the enclosing method when analyzing the body of certain lambdas. See the docs for details.

  • Use passed-in TreePath in one more place when available (#1329)
  • Checker to ensure explicit null marking of every class (#1323)
  • Bound size of alreadyRunAnalyses cache to be consistent (#1334)
  • Improve inference for generic methods with lambda argument containing return statements by @​dhruv-agr (#1337)
  • Add PureExceptLambda annotation by @​FxMorin (#1325)
  • Support marking method type variable upper bounds as @Nullable in library models (#1345)
  • Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @​haewiful (#1344)
  • Better fix for dataflow analysis caching (#1353)
  • Maintenance
    • Add package-info files with @​NullMarked (#1331)
    • Speed up buildWithNullAway task (#1330)
    • Enable the VoidMissingNullable checker and autofix all extant warnings (#1332)
    • Bump JDK version to 25 for integration tests (#1336)
    • Switch Coderabbit to assertive mode (#1338)
    • Enable EqualsMissingNullable check and fix all extant warnings (#1339)
    • Bump to AutoValue 1.11.1 (#1340)
    • Update Caffeine benchmark (#1342)
    • Add a test for a useless @​Contract (#1346)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.15

NullAway now includes a BOM artifact com.uber.nullaway:nullaway-bom. Otherwise, this release contains a few bug fixes and improvements to JSpecify support.

  • Fix URL for RequireExplicitNullMarking checker (#1369)
  • Handle annotations on type variables in return and field types (#1371)
  • Change how recursive calls to dataflow are detected (#1374)
  • JSpecify: use type on identifier when its type is a type variable (#1378)
  • Include method type parameters in astubx files. by @​haewiful (#1370)
  • Create nullaway-bom project (#1130) by @​lpireyn (#1380)
  • Run dataflow analysis on bodies of lambdas passed to generic methods (#1375)
  • Maintenance
    • Remove BaseNoOpHandler and replace with default methods in Handler (#1376)

Version 0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

  • Various optimizations (#1358)
  • Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#1365)
  • Optimize methods that check for annotations on a Symbol (#1362)
  • Tune warning message for RequireExplicitNullMarking (#1366)
  • Maintenance
    • Fix arg concatenation bug in JMH (#1357)
    • Move wildcard-related tests to a separate test class (#1361)

Version 0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking, that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @​FxMorin, to tell NullAway to preserve nullability information from the enclosing method when analyzing the body of certain lambdas. See the docs for details.

  • Use passed-in TreePath in one more place when available (#1329)
  • Checker to ensure explicit null marking of every class (#1323)
  • Bound size of alreadyRunAnalyses cache to be consistent (#1334)
  • Improve inference for generic methods with lambda argument containing return statements by @​dhruv-agr (#1337)
  • Add PureExceptLambda annotation by @​FxMorin (#1325)
  • Support marking method type variable upper bounds as @Nullable in library models (#1345)
  • Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @​haewiful (#1344)
  • Better fix for dataflow analysis caching (#1353)
  • Maintenance

... (truncated)

Commits
  • 0abf298 Prepare for release 0.12.15.
  • 77d1651 Further updates to nullaway-bom POM properties (#1384)
  • 6a29dce Add gradle.properties file for nullaway-bom module (#1383)
  • 92983ce Revert "Prepare for release 0.12.15."
  • adbfac7 Revert "Prepare next development version."
  • 0f861ea Prepare next development version.
  • 9bd0827 Prepare for release 0.12.15.
  • 0430a42 Update changelog for 0.12.15 (#1382)
  • f4f03c0 Run dataflow analysis on bodies of lambdas passed to generic methods (#1375)
  • 3f15e12 Create nullaway-bom project (#1130) (#1380)
  • Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.4 to 10.7

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

10.5 (2025-09-05) * Support for specifying a ScheduledExecutorService instance in RefreshAheadCachingJWKSetSource and JWKSourceBuilder (iss #592).

10.6 (2025-11-06) * Adds static CollectionUtils.containsNull(Set) method. * DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatible with Set.of (iss #499). * The DefaultJWTClaimsVerifier must not include JWT claim values in BadJWTException messages (iss #605).

10.7 (2026-01-08) * Adds MaxCompressedCipherTextLength that implements JWEDecrypterOption, to to configure the maximum allowed length of compressed cipher text. * Adds JWEObject.decrypt(JWEDecrypter, Set) method to support the MaxCompressedCipherTextLength option.

Commits
  • 584951f Adds support for specifying the ScheduledExecutorService-instance in RefreshA...
  • adf2576 [maven-release-plugin] prepare for next development iteration
  • 436fb18 Add tests for JWKSourceBuilder and RefreshAheadCachingJWKSetSource
  • d4137db Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595)
  • c6c8025 [maven-release-plugin] prepare release 10.4.1
  • e7c7a8c [maven-release-plugin] prepare for next development iteration
  • b33b54b Bumps GSon and BouncyCastle
  • 3eeaada [maven-release-plugin] prepare release 10.4.2
  • 2aa473f [maven-release-plugin] prepare for next development iteration
  • d52acf5 Merged in iss592 (pull request #129)
  • Additional commits viewable in compare view

Updates com.nimbusds:oauth2-oidc-sdk from 11.26 to 11.31.1

Changelog

Sourced from com.nimbusds:oauth2-oidc-sdk's changelog.

version 1.0 (2012-05-29) * First official release with authorisation endpoint, token endpoint, check ID endpoint and UserInfo endpoint support. * JSON Web Tokens (JWTs) support through the Nimbus-JWT library. * Language Tags (RFC 5646) support through the Nimbus-LangTag library. * JSON support through the JSON Smart library.

version 2.0 (2013-05-13) * Intermediary development release with Maven build, published to Maven Central.

version 2.1 (2013-06-06) * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect Standard draft 21, OpenID Connect Discovery draft 17 and OpenID Connect Registration draft 19. * Major refactoring of the APIs for greater simplicity. * Adds JUnit tests.

version 2.2 (2013-06-18) * Refactors dynamic OpenID Connect client registration. * Adds partial support of the OAuth 2.0 Dynamic Client Registration Protocol (draft-ietf-oauth-dyn-reg-12). * Optimises parsing of request parameters consisting of one or more tokens (scope, response type, etc).

version 2.3 (2013-06-19) * Renames OAuth 2.0 dynamic client registration package. * Adds ClientInformation.getClientMetadata() method. * Adds OIDCClientInformation class.

version 2.4 (2013-06-20) * Adds static OIDCClientInformation.parse(JSONObject) method.

version 2.5 (2013-06-22) * Adds support OAuth 2.0 dynamic client update. * Adds OpenID Connect dynamic client registration classes.

version 2.6 (2013-06-25) * Enforces order of preference of ACR values in OpenID Connect client metadata, as required by the specification. * Documentation and performance improvements.

version 2.7 (2013-06-26) * Switches Identifier generation to java.security.SecureRandom.

version 2.8 (2013-06-30) * Fixes serialisation and assignment bugs in ClientMetadata. * Switches Secret generation to java.security.SecureRandom.

version 2.9 (2013-09-17)

... (truncated)

Commits
  • bfa8944 [maven-release-plugin] prepare release 11.28
  • 024a2b4 [maven-release-plugin] prepare for next development iteration
  • 6e55677 AuthorizationServerMetadata outputs OpenID Federation 1.0 "signed_jwks_uri" a...
  • f16fc9e [maven-release-plugin] prepare release 11.29
  • 86fde73 [maven-release-plugin] prepare for next development iteration
  • ca275a3 AuthorizationServerMetadata.parse(JSONObject) and OIDCProviderMetadata.parse(...
  • 9490b0a [maven-release-plugin] prepare release 11.29.1
  • 8fa77e7 [maven-release-plugin] prepare for next development iteration
  • ed53677 The deprecated HTTPRequest.getQuery() and setQuery(String) should treat the S...
  • 571a87b [maven-release-plugin] prepare release 11.29.2
  • Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.5 to 5.6

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6 ALPHA1

This is the first ALPHA release in the 5.6 release series. It adds several features such as transport content decompression and content compression for the async transport, support for Unix sockets, experimental support for SCRAM-SHA-256 authentication scheme, and Micrometer/OTel observations & metrics.

Commons Compress, Brotli codec, and ZStd codec are optional dependencies and get wired into the execution pipeline only if present on the classpath.

Notable changes and features included in the 5.6 series:

  • Unix domain socket support.

  • Support for pluggable content codecs via Commons-Compress in the classic transport. (optional).

  • Support for transparent content decompression and content compression with deflate, gzip, zstd (optional), and brotli (optional) codecs in the async transport.

  • Micrometer/OTel observations & metrics (optinal).

  • Off-lock connection disposal by the classic pooling connection manager. Experimental.

  • SCRAM-SHA-256 authentication scheme (RFC 7804). Experimental.

  • Request Priority support (RFC 9218). Experimental.

Compatibility notes:

  • As of this version, HttpClient uses BUILTIN HostnameVerificationPolicy by default, delegating host verification to JSSE security manager. One must explicitly configure the TLS strategy to continue using the hostname verifier shipped with HttpClient.

  • Five-second TCP keep-alive is now enabled by default.

Change Log

  • RequestConfig: Un-deprecate #setProxy. Contributed by Ryan Schmitt

  • Stale connection check support in PoolingAsyncClientConnectionManager. Contributed by Ryan Schmitt

  • ConnectionConfig: #idleTimeout support. Contributed by Ryan Schmitt

... (truncated)

Commits
  • decd193 HttpClient 5.6 release
  • 11ea8e5 Updated release notes for HttpClient 5.6 release
  • 77fa61a Limit the length of content codec list that can be processed automatically
  • 81b7971 Upgraded HttpCore to version 5.4
  • 2c7fe0f Add OFFLOCK pool concurrency policy backed by RouteSegmentedConnPool (#765)
  • 1f4dea7 Fixed Micrometer and OpenTelemetry dependency declaration
  • d2fadd2 Tag TLS handshake timeout tests with slow
  • e52e466 TestTlsHandshakeTimeout: Disable assertions on Java 8
  • 77f52f0 Upgraded HttpClient version to 5.6-alpha2-SNAPSHOT
  • 48e0f25 HttpClient 5.6-alpha1 release
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.21.0

Commits
  • 80fb536 [maven-release-plugin] prepare release jackson-core-2.21.0
  • 9097789 Prep for 2.21.0 release
  • d678c69 Javadoc fix for StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION (defaults to `...
  • 67912b2 Minor improvement to UTF32Reader.read() bounds-checks
  • ecf5de2 ...
  • dbb1765 Merge branch '2.20' into 2.x
  • 66a9467 Merge branch '2.19' into 2.20
  • b46c0bd Merge branch '2.18' into 2.19
  • fae2542 release notes update
  • 70c99ba Update UTF8DataInputJsonParser.java (#1512)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.21.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.21.0

Commits

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.21.0

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.21.0

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.21.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.21.0

Commits

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.21.0

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.21.0

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.8

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.8 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.7...v0.2.8

v0.2.7 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits
  • 108f5bd v0.2.8 release (#92)
  • b2ca809 Update to move away from deprecated methods (#91)
  • 377e8c4 Change the maven compile execution for Java 8 to override the default compile...
  • 5b73076 Fix typos and linguistic errors in documentation (#88)
  • 85e68d4 Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#87)
  • 9dd4094 Build as multi release jar (#62)
  • 6712288 Ignore semver-major Mockito and JUnit updates until Java 17+ is used for buil...
  • f377eda adding the following methods to JsonNullable, based on methods (#68)
  • 09ee5fc Ignore Hibernate Validator updates until Java 17+ is used for builds (#83)
  • 338ccf8 Update GitHub actions to use commit sha instead of tags to avoid supply chain...
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.13.4 to 6.0.2

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

... (truncated)

Commits
  • c5c5de5 Release 6.0.2
  • 98b6f78 Add missing checkout step
  • 732dc27 Finalize 6.0.2 release notes
  • 6a25736 Finalize 5.14.2 release notes
  • 33e66bf Move release notes for #5238 entry to 6.1.0-M2
  • 11f0f82 Update copyright headers
  • 6ce1265 Consistently add license header to all java source files
  • 4d454ee Update dependency @​antora/lunr-extension to v1.0.0-alpha.12
  • faf4a58 Use --since feature of Javadoc
  • 5cc8b05 Mark new recommended APIs as "maintained" rather than "experimental"
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.21.3 to 2.0.3

Release notes

Sourced from org.testcontainers:testcontainers's releases.

2.0.3

What's Changed

🐛 Bug Fixes

📖 Documentation

📦 Dependency updates

2.0.2

What's Changed

…with 29 updates

Bumps the maven-version-updates group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.83` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.83` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.40.0` | `2.46.0` |
| [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.7` | `0.12.15` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.4` | `10.7` |
| [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) | `11.26` | `11.31.1` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.5` | `5.6` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.19.2` | `2.21.0` |
| com.fasterxml.jackson.core:jackson-annotations | `2.19.2` | `2.21.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.19.2` | `2.21.0` |
| com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | `2.19.2` | `2.21.0` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.21.0` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.8` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.2` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `2.0.3` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.181` | `4.8.184` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.40.0` | `2.46.0` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.3.2` | `4.9.8.2` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.12.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.46.0` | `3.1.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.10.0` |



Updates `org.bouncycastle:bcprov-jdk18on` from 1.81 to 1.83
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.81 to 1.83
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.errorprone:error_prone_core` from 2.40.0 to 2.46.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.46.0)

Updates `com.uber.nullaway:nullaway` from 0.12.7 to 0.12.15
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.12.7...v0.12.15)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.4 to 10.7
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.7..10.4)

Updates `com.nimbusds:oauth2-oidc-sdk` from 11.26 to 11.31.1
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.31.1..11.26)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.6
- [Changelog](https://github.com/apache/httpcomponents-client/blob/master/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.6)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.19.2 to 2.21.0
- [Commits](FasterXML/jackson-core@jackson-core-2.19.2...jackson-core-2.21.0)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.21.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.21.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.21.0

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.21.0

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.21.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.21.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.21.0

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.21.0

Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.8)

Updates `org.junit.jupiter:junit-jupiter-api` from 5.13.4 to 6.0.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.2)

Updates `org.testcontainers:testcontainers` from 1.21.3 to 2.0.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...2.0.3)

Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `io.github.classgraph:classgraph` from 4.8.181 to 4.8.184
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.181...classgraph-4.8.184)

Updates `com.google.errorprone:error_prone_annotations` from 2.40.0 to 2.46.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.46.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.3.2 to 4.9.8.2
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.3.2...spotbugs-maven-plugin-4.9.8.2)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.12.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.46.0 to 3.1.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.46.0...lib/3.1.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.10.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.83'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.83'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.12.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.nimbusds:oauth2-oidc-sdk
  dependency-version: 11.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: '5.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 2.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 4.8.184
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.9.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jan 19, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Mar 2, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-version-updates-aef7fa902a branch March 2, 2026 23:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants