Skip to content

deps(deps): bump the maven-minor-patch group across 11 directories with 14 updates - #565

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/develop/maven-minor-patch-4be49eeef7
Open

deps(deps): bump the maven-minor-patch group across 11 directories with 14 updates#565
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/develop/maven-minor-patch-4be49eeef7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-patch group with 4 updates in the / directory: org.junit:junit-bom, ch.qos.logback:logback-classic, org.junit.jupiter:junit-jupiter and org.apache.maven:apache-maven.
Bumps the maven-minor-patch group with 2 updates in the /benchmarks directory: org.junit:junit-bom and ch.qos.logback:logback-classic.
Bumps the maven-minor-patch group with 2 updates in the /examples directory: org.junit:junit-bom and ch.qos.logback:logback-classic.
Bumps the maven-minor-patch group with 2 updates in the /scripts/release-smoke/s1-graph-compose directory: org.apache.maven.plugins:maven-surefire-plugin and io.github.demchaav:graph-compose.
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s2-core-only directory: org.apache.maven.plugins:maven-enforcer-plugin, org.apache.maven.plugins:maven-surefire-plugin and io.github.demchaav:graph-compose-core.
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s3-core-render-pdf directory: org.apache.maven.plugins:maven-surefire-plugin, io.github.demchaav:graph-compose-core and io.github.demchaav:graph-compose-render-pdf.
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s4-templates directory: org.apache.maven.plugins:maven-surefire-plugin, io.github.demchaav:graph-compose and io.github.demchaav:graph-compose-templates.
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s5-testing directory: org.apache.maven.plugins:maven-surefire-plugin, io.github.demchaav:graph-compose and io.github.demchaav:graph-compose-testing.
Bumps the maven-minor-patch group with 2 updates in the /scripts/release-smoke/s6-bundle directory: org.apache.maven.plugins:maven-surefire-plugin and io.github.demchaav:graph-compose-bundle.
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s7-core-render-pptx directory: org.apache.maven.plugins:maven-surefire-plugin, io.github.demchaav:graph-compose-core and io.github.demchaav:graph-compose-render-pptx.
Bumps the maven-minor-patch group with 4 updates in the /scripts/release-smoke/s8-core-render-docx directory: org.apache.maven.plugins:maven-surefire-plugin, io.github.demchaav:graph-compose-core, io.github.demchaav:graph-compose-render-docx and io.github.demchaav:graph-compose-render-pdf.

Updates org.junit:junit-bom from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.6.1 to 1.6.2

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

  • Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung.

  • Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file:

    <property name="logback.skipCallerContradictionAnalysis" value="true"/>

  • SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access.

  • Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point.

  • Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture.

  • Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12.

  • A bit-wise identical binary of this version can be reproduced by building from source code at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated with the tag v_1.6.2. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e3d7833 prepare release 1.6.2
  • 919127d test for skipping contradiction analysis
  • 67dcd40 allow skipping caller contradiction analysis
  • 2619c6d remove unused message string in CallerContradictionWarnAnalyser
  • 22cfade add support for SMTPAppender in caller data contradiction analysis
  • 656fb6d minor javadoc change in SMTPAppenderBase
  • efb1ce2 cover SocketAppender in caller contradiction analysis
  • d3a01f8 more tests for caller contradiction analysis
  • b1a80d6 more complete logic in caller contradiction analysis
  • 0678954 SimpleSocketServer and SLLSimpleSocketServer now accept whitelisted
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates org.apache.maven:apache-maven from 3.9.12 to 3.9.16

Updates org.junit:junit-bom from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.6.1 to 1.6.2

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

  • Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung.

  • Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file:

    <property name="logback.skipCallerContradictionAnalysis" value="true"/>

  • SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access.

  • Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point.

  • Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture.

  • Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12.

  • A bit-wise identical binary of this version can be reproduced by building from source code at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated with the tag v_1.6.2. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e3d7833 prepare release 1.6.2
  • 919127d test for skipping contradiction analysis
  • 67dcd40 allow skipping caller contradiction analysis
  • 2619c6d remove unused message string in CallerContradictionWarnAnalyser
  • 22cfade add support for SMTPAppender in caller data contradiction analysis
  • 656fb6d minor javadoc change in SMTPAppenderBase
  • efb1ce2 cover SocketAppender in caller contradiction analysis
  • d3a01f8 more tests for caller contradiction analysis
  • b1a80d6 more complete logic in caller contradiction analysis
  • 0678954 SimpleSocketServer and SLLSimpleSocketServer now accept whitelisted
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.6.1 to 1.6.2

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

  • Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung.

  • Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file:

    <property name="logback.skipCallerContradictionAnalysis" value="true"/>

  • SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access.

  • Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point.

  • Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture.

  • Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12.

  • A bit-wise identical binary of this version can be reproduced by building from source code at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated with the tag v_1.6.2. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • e3d7833 prepare release 1.6.2
  • 919127d test for skipping contradiction analysis
  • 67dcd40 allow skipping caller contradiction analysis
  • 2619c6d remove unused message string in CallerContradictionWarnAnalyser
  • 22cfade add support for SMTPAppender in caller data contradiction analysis
  • 656fb6d minor javadoc change in SMTPAppenderBase
  • efb1ce2 cover SocketAppender in caller contradiction analysis
  • d3a01f8 more tests for caller contradiction analysis
  • b1a80d6 more complete logic in caller contradiction analysis
  • 0678954 SimpleSocketServer and SLLSimpleSocketServer now accept whitelisted
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.6

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.6

🚀 New features and improvements

  • Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @​olamy

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

... (truncated)

Commits
  • 25ea054 [maven-release-plugin] prepare release surefire-3.5.6
  • e5f374c Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3
  • dadd55b Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_soc...
  • 39dd250 Bump commons-io:commons-io from 2.21.0 to 2.22.0
  • 2774273 Ensure that the statistics filename is calculated only once. (#3326) (#3327)
  • 0d5df8a 3.5.x/bug/cherry pick embedded mode its (#3328)
  • 04ad9a2 Use surefire 3.5.5 by project itself for testing
  • 37e8f69 Add flakes attribute to use in testsuite report (#3306) (#3308)
  • a970fef Introduce reportTestTimestamp option and include timestamp for test sets and ...
  • e838393 deploy 3.5.x branch to nexus
  • Additional commits viewable in compare view

Updates io.github.demchaav:graph-compose from 2.0.0 to 2.1.1

Release notes

Sourced from io.github.demchaav:graph-compose's releases.

GraphCompose v2.1.1

A maintenance release: no API changes, nothing to learn, nothing to migrate. 2.1.1 is a drop-in replacement for 2.1.0.

<dependency>
    <groupId>io.github.demchaav</groupId>
    <artifactId>graph-compose</artifactId>
    <version>2.1.1</version>
</dependency>

What changed is the confidence you can place in the rest of it. Three things that were quietly wrong are no longer wrong, and each now has a test standing behind it:

  • The API reference exists again. The graph-compose coordinate carries no sources of its own, so its Javadoc jar was built empty and shipped that way through every 2.x release — javadoc.io kept serving 1.9.1. CI now opens the jar before it is published and fails if the pages a reader lands on are missing.
  • The engine deck stopped calling a shipped backend planned. It listed PPTX as Planned beside a v2.1.0 badge — the release that shipped it, and whose own copy of that deck is published as a .pptx.
  • lineSpacing is documented in the units it uses. The authoring cheatsheet called it a leading multiple with a default of 1.0. It is extra space in points, defaulting to 0 — one sentence that had taught the repository to write typographic multiples into a points field.

The rest is that same work applied to the gates themselves: the aggregate CI check now watches the job it depends on, the Javadoc gate covers the entry point every snippet starts from, and the documentation is held to its own links — all 1051 of them, across 99 pages.

Full detail below.

Build

  • The cut installs a module after the things it needs. Step 4 installs each train sibling on its own, so everything it depends on has to be in the local repository at the version the bump just wrote — a version that exists in no reactor and not yet on Central. render-pptx was listed before testing while depending on it, and had been since PPTX gained its text-fidelity suite. That stayed invisible: the cut only fails on it when the local repository does not already hold graph-compose-testing at the new version, which is the normal state of a clean machine and not of one that has been building all week. The 2.1.1 cut hit it and stopped at Step 4 — after the version bump had rewritten thirty files, before any commit, tag or push. testing now installs second, and ReleaseScriptInstallListGuardTest derives the required order from the poms rather than restating it, so a new edge cannot be added without failing the build.

... (truncated)

Changelog

Sourced from io.github.demchaav:graph-compose's changelog.

v2.1.1 — 2026-08-05

Build

  • The cut installs a module after the things it needs. Step 4 installs each train sibling on its own, so everything it depends on has to be in the local repository at the version the bump just wrote — a version that exists in no reactor and not yet on Central. render-pptx was listed before testing while depending on it, and had been since PPTX gained its text-fidelity suite. That stayed invisible: the cut only fails on it when the local repository does not already hold graph-compose-testing at the new version, which is the normal state of a clean machine and not of one that has been building all week. The 2.1.1 cut hit it and stopped at Step 4 — after the version bump had rewritten thirty files, before any commit, tag or push. testing now installs second, and ReleaseScriptInstallListGuardTest derives the required order from the poms rather than restating it, so a new edge cannot be added without failing the build.

  • CI opens the Javadoc jar it is about to publish. The existing step lints the engine's sources, which says nothing about whether the artefact Maven Central serves has anything in it — and that was the failure: graph-compose carries no sources of its own, the javadoc goal found nothing to archive, and every 2.x release shipped an artefact with no pages while javadoc.io went on rendering 1.9.1, the newest version that carried a reference at all. Nothing was red for it. The configuration is guarded by PublishedJavadocCoordinateGuardTest; CI now builds the jar the release profile builds and looks inside, failing if the index, GraphCompose or DocumentSession is missing — the three pages a reader arrives at, standing in for the reference.

  • The Javadoc gate lints the class readers open first. It ran with subpackages set to com.demcha.compose.document, so GraphCompose — the entry point every snippet in the README starts from — sat in the root package outside it, and had done since the module layout moved. It carried a real doclint error the whole time: two <h3> headings under an implicit <h1>, which is the sequence break doclint exists to catch. Nothing else caught it either, because the published Javadoc jar is built with doclint=none so a broken tag never blocks a release. The gate now covers the whole of com.demcha.compose, root package included, and the two headings are <h2>. Widening it also pulls in the @Internal engine package: excludePackageNames does not take effect alongside subpackages, and that costs warnings rather than failures, since failOnError fails on errors only.

  • A CI job the gate guard cannot name is a job it cannot report. The guard that checks every pull-request job is aggregated by CI Gate found those jobs with a pattern admitting lower case and hyphens — everything today's names happen to use. A job added as build_and_test or CodeQL was not matched, and neither was security_scan: # nightly or a name with a space after the colon, because the pattern also required the line to end there. A job the guard never sees is one it cannot report missing: it sits outside the gate's needs, the test stays green, and the aggregate check branch protection requires is blind to it. Job names are now taken structurally, from the YAML's own indentation, rather than from a guess at GitHub's identifier grammar, and the parser takes the workflow as text so CiGateCoverageGuardParsingTest can drive it with the job spellings this repository's own workflow does not happen to contain.

  • A recipe nobody links is a recipe nobody reaches. docs/recipes.md is the page

... (truncated)

Commits
  • 3a94a84 Release v2.1.1
  • 19e33a7 fix(release-script): install a module after the siblings it depends on (#513)
  • a2a3e14 ci: open the Javadoc jar before publishing it (#512)
  • fcadd17 chore(examples): refresh the benchmark snapshot the decks draw from (#511)
  • cce59ff fix(examples): the engine deck stops calling a shipped backend planned (#510)
  • 5fe9a62 feat(examples): the Maven Central banner carries the rest of the story (#509)
  • 2e1a6c7 test(ci-guard): the job parser sees inline mappings and unquotes keys (#507)
  • 01f6b75 chore(build): the gates cover the surfaces they claim (#505)
  • 33731d4 docs: the PowerShell commands run as written (#506)
  • 17d393d chore(benchmarks): time the preview pipeline, stage by stage (#499)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.3

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.3

🚀 New features and improvements

  • Make bannedDependencies report root and transitive dependency in case both are banned. (#940) @​hvoynov
  • Add enforceBytecodeVersion rule based on mojohaus (#968) @​cstamas
  • Improve formatting of deprecated API warning (#951) @​mthmulders

🐛 Bug Fixes

📝 Documentation updates

  • Document the banMavenDefaults option for the requirePluginVersions rule. (#936) @​rpkrajewski

👻 Maintenance

📦 Dependency updates

3.6.2

🐛 Bug Fixes

... (truncated)

Commits
  • c7daff3 [maven-release-plugin] prepare release enforcer-3.6.3
  • ee46e78 Make bannedDependencies report root and transitive dependency in case both ar...
  • 0806924 Document the banMavenDefaults option for the requirePluginVersions rule. (#936)
  • 8e4f5b9 Add better enforceBytecodeVersion rule based on mojohaus (#968)
  • fd4b148 Add fix for 21.0.10.0.1 issue (#967)
  • f32d597 Deps: Parent POM 48 and align deps (#979)
  • df0f2a6 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#976)
  • 2da7a68 Add null checks for modelId in PluginWrapper
  • 91eb4d9 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#975)
  • b622245 Bump mavenVersion from 3.9.14 to 3.9.15 (#973)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.6

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.6

🚀 New features and improvements

  • Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @​olamy

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

  • Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (

@dependabot
deps(deps): bump the maven-minor-patch group across 11 directories wi…
e0ca032 
…th 14 updates

Bumps the maven-minor-patch group with 4 updates in the / directory: [org.junit:junit-bom](https://github.com/junit-team/junit-framework), [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback), [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) and org.apache.maven:apache-maven.
Bumps the maven-minor-patch group with 2 updates in the /benchmarks directory: [org.junit:junit-bom](https://github.com/junit-team/junit-framework) and [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).
Bumps the maven-minor-patch group with 2 updates in the /examples directory: [org.junit:junit-bom](https://github.com/junit-team/junit-framework) and [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).
Bumps the maven-minor-patch group with 2 updates in the /scripts/release-smoke/s1-graph-compose directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [io.github.demchaav:graph-compose](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s2-core-only directory: [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [io.github.demchaav:graph-compose-core](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s3-core-render-pdf directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [io.github.demchaav:graph-compose-core](https://github.com/DemchaAV/GraphCompose) and [io.github.demchaav:graph-compose-render-pdf](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s4-templates directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [io.github.demchaav:graph-compose](https://github.com/DemchaAV/GraphCompose) and [io.github.demchaav:graph-compose-templates](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s5-testing directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [io.github.demchaav:graph-compose](https://github.com/DemchaAV/GraphCompose) and [io.github.demchaav:graph-compose-testing](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 2 updates in the /scripts/release-smoke/s6-bundle directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [io.github.demchaav:graph-compose-bundle](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 3 updates in the /scripts/release-smoke/s7-core-render-pptx directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [io.github.demchaav:graph-compose-core](https://github.com/DemchaAV/GraphCompose) and [io.github.demchaav:graph-compose-render-pptx](https://github.com/DemchaAV/GraphCompose).
Bumps the maven-minor-patch group with 4 updates in the /scripts/release-smoke/s8-core-render-docx directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [io.github.demchaav:graph-compose-core](https://github.com/DemchaAV/GraphCompose), [io.github.demchaav:graph-compose-render-docx](https://github.com/DemchaAV/GraphCompose) and [io.github.demchaav:graph-compose-render-pdf](https://github.com/DemchaAV/GraphCompose).


Updates `org.junit:junit-bom` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `ch.qos.logback:logback-classic` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.1...v_1.6.2)

Updates `org.junit.jupiter:junit-jupiter` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `org.apache.maven:apache-maven` from 3.9.12 to 3.9.16

Updates `org.junit:junit-bom` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `ch.qos.logback:logback-classic` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.1...v_1.6.2)

Updates `org.junit:junit-bom` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `ch.qos.logback:logback-classic` from 1.6.1 to 1.6.2
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.1...v_1.6.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.3
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.6.3)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose-core` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose-core` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-pdf` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-pdf` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-templates` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-testing` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-testing` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose-bundle` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose-core` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-pptx` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-pptx` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.6)

Updates `io.github.demchaav:graph-compose-core` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-docx` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-pdf` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-pdf` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

Updates `io.github.demchaav:graph-compose-render-docx` from 2.0.0 to 2.1.1
- [Release notes](https://github.com/DemchaAV/GraphCompose/releases)
- [Changelog](https://github.com/DemchaAV/GraphCompose/blob/main/CHANGELOG.md)
- [Commits](v2.0.0...v2.1.1)

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-core
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-core
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-pdf
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-pdf
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-templates
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-testing
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-testing
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-bundle
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-core
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-pptx
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-pptx
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-core
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-docx
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-pdf
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-pdf
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: io.github.demchaav:graph-compose-render-docx
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency maven Java/Maven dependency updates labels Aug 15, 2026
@dependabot
dependabot Bot requested a review from DemchaAV as a code owner August 15, 2026 13:00
@dependabot dependabot Bot added dependencies Pull requests that update a dependency maven Java/Maven dependency updates labels Aug 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@DemchaAV DemchaAV Awaiting requested review from DemchaAV DemchaAV is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency maven Java/Maven dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants