Skip to content

build(deps): bump the patches group across 1 directory with 53 updates - #44

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/patches-42b0813984
Open

build(deps): bump the patches group across 1 directory with 53 updates#44
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/patches-42b0813984

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patches group with 53 updates in the / directory:

Package From To
com.fasterxml.jackson.core:jackson-core 2.18.3 2.22
com.fasterxml.jackson.core:jackson-databind 2.18.3 2.22
com.fasterxml.jackson.core:jackson-annotations 2.18.3 2.22
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.18.3 2.22
org.testng:testng 7.11.0 7.12.0
org.mockito:mockito-core 5.16.1 5.23.0
org.testcontainers:testcontainers 1.20.6 1.21.4
org.testcontainers:kafka 1.20.6 1.21.4
org.slf4j:slf4j-api 2.0.17 2.0.18
org.slf4j:jul-to-slf4j 2.0.17 2.0.18
ch.qos.logback:logback-classic 1.5.18 1.5.38
com.github.valfirst:slf4j-test 3.0.1 3.0.3
com.github.ben-manes.caffeine:caffeine 3.2.0 3.2.4
org.apache.kafka:kafka-clients 4.0.0 4.3.1
org.apache.commons:commons-lang3 3.17.0 3.20.0
org.apache.commons:commons-collections4 4.4 4.5.0
commons-io:commons-io 2.18.0 2.22.0
com.github.rvesse:airline 3.0.0 3.3.0
org.glassfish.jersey.containers:jersey-container-servlet-core 3.1.10 3.1.12
org.glassfish.jersey.media:jersey-media-json-jackson 3.1.10 3.1.12
org.glassfish.jersey.inject:jersey-hk2 3.1.10 3.1.12
org.glassfish.jersey.ext:jersey-bean-validation 3.1.10 3.1.12
org.glassfish.jersey.core:jersey-client 3.1.10 3.1.12
org.glassfish.jersey.core:jersey-server 3.1.10 3.1.12
org.glassfish.jersey.containers:jersey-container-grizzly2-http 3.1.10 3.1.12
org.glassfish.jersey.containers:jersey-container-grizzly2-servlet 3.1.10 3.1.12
io.jsonwebtoken:jjwt-api 0.12.6 0.13.0
io.jsonwebtoken:jjwt-jackson 0.12.6 0.13.0
io.github.resilience4j:resilience4j-ratelimiter 2.3.0 2.4.0
io.opentelemetry:opentelemetry-sdk 1.48.0 1.64.0
io.opentelemetry:opentelemetry-api 1.48.0 1.64.0
io.opentelemetry:opentelemetry-sdk-metrics 1.48.0 1.64.0
io.opentelemetry:opentelemetry-sdk-common 1.48.0 1.64.0
io.opentelemetry:opentelemetry-context 1.48.0 1.64.0
io.opentelemetry.semconv:opentelemetry-semconv 1.29.0-alpha 1.43.0
io.opentelemetry.javaagent:opentelemetry-javaagent 2.14.0 2.29.0
org.projectlombok:lombok 1.18.36 1.18.46
org.apache.maven.plugins:maven-enforcer-plugin 3.5.0 3.6.3
org.codehaus.mojo:buildnumber-maven-plugin 3.2.1 3.3.0
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.15.0
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.apache.maven.plugins:maven-source-plugin 3.3.1 3.4.0
org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 3.12.0
org.cyclonedx:cyclonedx-maven-plugin 2.9.1 2.9.2
org.apache.maven.plugins:maven-gpg-plugin 3.2.7 3.2.8
org.apache.maven.plugins:maven-dependency-plugin 3.8.1 3.11.0
org.jacoco:jacoco-maven-plugin 0.8.12 0.8.15
org.codehaus.mojo:versions-maven-plugin 2.18.0 2.21.0
org.apache.maven.plugins:maven-clean-plugin 3.4.1 3.5.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.6
org.codehaus.mojo:exec-maven-plugin 3.5.0 3.6.3
org.jetbrains:annotations 26.0.2 26.1.0
org.apache.maven.plugins:maven-assembly-plugin 3.7.1 3.8.0

Updates com.fasterxml.jackson.core:jackson-core from 2.18.3 to 2.22

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.22

Updates com.fasterxml.jackson.core:jackson-annotations from 2.18.3 to 2.22

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.18.3 to 2.22

Updates org.testng:testng from 7.11.0 to 7.12.0

Release notes

Sourced from org.testng:testng's releases.

7.12.0

What's Changed

New Contributors

Full Changelog: testng-team/testng@7.11.0...7.12.0

Changelog

Sourced from org.testng:testng's changelog.

7.12.0 Fixed: GITHUB-3231: TestNG retry is going into infinite loop when the data provider returned object is modified before failure (Bartek Florczak) Update: Updated GitHub Actions test matrix to include JDK 25 and JDK 26 EA (Bartek Florczak) Fixed: GITHUB-3236: DataProvider parameters are not refreshed on retry when cacheDataForTestRetries=false (Bartek Florczak) Fixed: GITHUB-3227: assertEqualsNoOrder false positive when collection has same size and actual Collection is subset of expected collection (Krishnan Mahadevan) Fixed: GITHUB-3177: Method org.testng.xml.XmlSuite#toXml do not save new properties like "share-thread-pool-for-data-providers" (Krishnan Mahadevan) Fixed: GITHUB-3179: ClassCastException when use shouldUseGlobalThreadPool(true) property (Krishnan Mahadevan) Fixed: GITHUB-2765: Test timeouts using existing Executor now propagate the stack trace to the ThreadTimeoutException (Charlie Hayes)

Commits
  • a21a584 Fix Release process (#3255)
  • be97321 Fix: issue 3231 retry infinite loop (#3251)
  • bad4cb5 Improve/test workflow jdk25 (#3253)
  • 61068a1 Fix: Ensure DataProvider parameters are refreshed on retry when cacheDataForT...
  • d50b2ad Ensure assertions is contents aware
  • 02d223d Use a composite key instead of String as key
  • 58b3824 Add DynamicImport-Package to load classes by name
  • 40cd805 chore: use pax-logging for osgi tests so it does not require runtime bytecode...
  • 0fdf868 chore: setup-java Oracle action supports Java 21+ only
  • 6a25754 test: improve osgi tests
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.16.1 to 5.23.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.23.0

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

Changelog generated by Shipkit Changelog Gradle Plugin

5.23.0

v5.22.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.22.0

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

... (truncated)

Commits
  • a231205 Fix StackOverflowError with AbstractList after using mockSingleton (#3790)
  • f6a91a6 Replace mockito-android mock maker implementation with dexmaker-mockito-inlin...
  • aa2298a fix: make spotless happy
  • a6729d6 chore: update BDDMockito with jspecify annotation
  • bb83c92 chore: move jspecify as a compile only dependency
  • 47a4695 chore: add jspecify with minimal change. Fixes #3503
  • 25f1395 Add core API to enable Kotlin singleton mocking (#3762)
  • ef9ee55 Avoids mocking private static methods, as well as package-private static meth...
  • d16fcfc Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#3780)
  • 27eb8a3 Clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#3773)
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.20.6 to 1.21.4

Release notes

Sourced from org.testcontainers:testcontainers's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

... (truncated)

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • bebbb2c Update testcontainers/sshd version to 1.3.0 (#10377)
  • 2f64a44 Support docker/mcp-gateway image (#10378)
  • b2b404a [create-pull-request] automated change (#10369)
  • c47afa8 [create-pull-request] automated change (#10368)
  • 2bdd299 Add DockerMcpGatewayContainer (#10364)
  • 7d83019 Update Gradle Wrapper from undefined to 8.14.2 (#10352)
  • Additional commits viewable in compare view

Updates org.testcontainers:kafka from 1.20.6 to 1.21.4

Release notes

Sourced from org.testcontainers:kafka's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

... (truncated)

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • bebbb2c Update testcontainers/sshd version to 1.3.0 (#10377)
  • 2f64a44 Support docker/mcp-gateway image (#10378)
  • b2b404a [create-pull-request] automated change (#10369)
  • c47afa8 [create-pull-request] automated change (#10368)
  • 2bdd299 Add DockerMcpGatewayContainer (#10364)
  • 7d83019 Update Gradle Wrapper from undefined to 8.14.2 (#10352)
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates org.slf4j:jul-to-slf4j from 2.0.17 to 2.0.18

Updates ch.qos.logback:logback-classic from 1.5.18 to 1.5.38

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.37

2026-06-26 Release of logback version 1.5.37

  1. • Given the numerous vulnerabilities related to conditional configuration processing based on the evaluation of Java expressions using the Janino library, support for such expressions has been removed. Users are offered the an online migration service or the <condition> element introduced in version 1.5.20. See the relevant documentation for more details.

• A bitwise identical binary of this version can be reproduced by building from source code at commit c1df7f522e648eec7b4ef6a12c8758fec0f00048 associated with the tag v_1.5.37. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.36

2026-06-25 Release of logback version 1.5.36

• The 'condition' attribute in <if> elements now reject certain references that are associated with ACE attacks. This issue was reported by "yulate" (yulate531@gmail.com.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 9b94c37562bf25a6a944146701d42ee6c4eee888 associated with the tag v_1.5.36. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.35

026-06-23 Release of logback version 1.5.35

• The 'condition' attribute in <if> elements now rejects unicode escape sequences (\u and \U). This closes a bypass of the existing prohibition on the new operator in Janino-evaluated conditions. This issue was reported by IcySun (icysun@qq.com) and registered as CVE-2026-13006. Please note that version 1.5.37 provides the full fix to this vulnerability.

• Added ConfiguratorRank.AUTHENTICATING (rank 100), the highest configurator rank, for certified/authenticating configurators discovered via the ServiceLoader mechanism. ContextInitializer now requires that at most one such configurator exist on the classpath; if more than one is found, initialization aborts with an error.

• ConsoleCharsetPropertyDefiner is no longer shipped. The Java 21 multi-release compilation of logback-core has been disabled, which removes this class from the published artifact. Configurations that referenced ch.qos.logback.core.property.ConsoleCharsetPropertyDefiner will need an alternative approach for console charset detection.

• The logback-examples module is now included in artifacts published to Maven Central.

• JoranConfigurator.makeAnotherInstance() and DefaultJoranConfigurator.performMultiStepConfigurationFileSearch() are now protected, allowing derived configurators to override these methods.

• A bitwise identical binary of this version can be reproduced by building from source code at commit 08bd1598d565d83444f72983935e7da4746783b7 associated with the tag v_1.5.35. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.34

2026-06-01 Release of logback version 1.5.34

• In case certain StackTraceElement values returned by the Throwable.getStackTrace method are null, StackTraceElementProxy substitutes a dummy instance instead of throwing an IllegalArgumentException. This resolves [issues #1040](qos-ch/logback#1040), reported by Naotsugu Kobayashi.

• HardenedObjectInputStream will now throw an InvalidClassException during deserialization attempts of Proxy classes. This change addresses potential deserialization whitelist bypass vulnerability reported by York Shen and registered as CVE-2026-10532.

• A bitwise identical binary of this version can be reproduced by building from source code at commit e62272ac152469aec1ede056c3c7d0d7314e7bfe associated with the tag v_1.5.34. This release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.33

2026-05-27 Release of logback version 1.5.33

• PropertiesConfiguratorModelHandler now registers properties file URLs to the ConfigurationWatchList when scan is enabled (via local scan="true" attribute or top-level configuration scan), ensuring changes are detected and reconfiguration occurs. This problem was reported in issues/1034.

... (truncated)

Commits
  • d04984a prepare release 1.5.38
  • 4fffda6 updateversion of maven-gpg-plugin
  • 7ee48a1 Fixed a typo where java,lang.Throwable was written with a comma instead of a ...
  • 84580a2 remove license profile
  • f817c8d start work on 1.5.28-SNAPSHOT
  • c1df7f5 prepare release 1.5.37
  • a189967 remove conditional based on janino
  • aaa9052 start work on 1.5.37-SNAPSHOT
  • 9b94c37 prepare release 1.5.36
  • e6a8280 prevent attacks using disallowed references
  • Additional commits viewable in compare view

Updates com.github.valfirst:slf4j-test from 3.0.1 to 3.0.3

Release notes

Sourced from com.github.valfirst:slf4j-test's releases.

v3.0.3

slf4j-test-3.0.3 (2025-08-21)

Full Changelog

Fixes:

v3.0.2

slf4j-test-3.0.2 (2025-08-20)

Full Changelog

Known issues:

Fixes:

  • #596 via #600 Optimize performance: replace CopyOnWriteArrayList with Collections.synchronizedList in TestLogger (by @​valfirst)
  • #601 Optimize performance: pass empty array to Collection#toArray calls (by @​valfirst)

Updates:

  • Bump org.slf4j:slf4j-api from 2.0.7 to 2.0.17
  • Bump org.assertj:assertj-core from 3.24.2 to 3.27.4
Commits
  • 485f08d [maven-release-plugin] prepare release slf4j-test-3.0.3
  • a4b074a Prepare 3.0.3 release
  • f95038e Fix generation of POM (#602)
  • d05fd87 [docs] Add TOC to Usage page
  • 5e27072 [docs] Apply highlighting for code blocks
  • ef46d0a [docs] Bump maven-fluido-skin from 2.0.0-M11 to 2.1.0
  • ae8cbef [docs] Fix typo in Chagelog
  • b7b67c2 [maven-release-plugin] prepare for next development iteration
  • f2c297a [maven-release-plugin] prepare release slf4j-test-3.0.2
  • 78e4e57 Migrate from OSSRH to Central Portal
  • Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.0 to 3.2.4

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.2.4

  • Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update
  • Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)
  • Fixed various minor issues found using AI audits
  • Added ObjectInputFilter support to JCache

3.2.3

  • Fixed frequency tracking of weak keys to use the object's identity hash code (#1902)
  • Added support for underscores in CaffeineSpec when using numeric literals (#1890)
  • Improved the external api to no longer lock when querying for the maximum size or weighted size (#1897)
  • Added detection and recovery when a custom CompletableFuture is in an inconsistent state (quarkus#50513)

3.2.2

  • Fixed characteristics returned by Spliterators (#1883)

3.2.1

  • Fixed computeIfAbsent for an async cache's synchronous view to retry if incomplete
  • Improved CaffeineSpec when being reflectively constructed (#1839)
  • Improved the handling of negative durations with variable expiration
  • Fixed intermittent null after replacing a weak/soft value (#1820)
Commits
  • 836b65c use a consistent expiration tolerance calculation
  • 0dc7daf resurrect in-flight async entries on expiration
  • 0bac8b5 handle head-of-line blocking of expiration queues (fixes #1954)
  • ff25836 test polish
  • f3a6176 Fix JCache close/createCache races and recursive teardown
  • 622fbe7 Fix removal in identity views and widen hill-climber counters
  • 8da5a7a defer weighing the entry until after the putIfAbsent hit fast-path
  • 94ad0ff Record eviction stats before notifying the removal listener consistently
  • f94c011 Auto-assert eviction stats alongside notifications.withCause.exclusively
  • 2e945e0 Skip timestamp writes within tolerance on the read path.
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 4.0.0 to 4.3.1

Updates org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0

Updates org.apache.commons:commons-collections4 from 4.4 to 4.5.0

Updates commons-io:commons-io from 2.18.0 to 2.22.0

Updates com.github.rvesse:airline from 3.0.0 to 3.3.0

Release notes

Sourced from com.github.rvesse:airline's releases.

3.2.0

  • Type Conversion improvements:
    • When converting to types DefaultTypeConverter now considers overloads of valueOf(), fromString() and constructors that take a CharSequence argument
  • Code Modernisation
  • Build Cleanup
    • The Maven Plugin build dependencies were updated to avoid warnings during the build process (#152) (thanks to @​khmarbaise)
    • Various other build warnings eliminated (thanks to @​khmarbaise)
  • Dependency Updates
    • Apache Commons Lang upgraded to 3.18.0

3.1.0

This is a maintenance release to bring dependencies up to date and switch over to the new Maven Central publishing process due to Sonatype sunsetting support for the old OSSRH publishing process.

  • Dependency Updates
    • Apache Commons Collections upgraded to 4.5.0
    • Apache Commons Lang upgraded to 3.17.0
    • Classgraph upgraded to 4.8.179
    • Various build and test dependencies upgraded to latest available
Changelog

Sourced from com.github.rvesse:airline's changelog.

3.3.0

  • Prompt improvements
    • Fixes a formatting bug where space between prompt message and user input was not reliably generated
    • Adds ability to configure a default option that is returned by promptForOption() when empty input is received from the prompt
    • Adds new overload of promptForValue() that allows supplying a default fallback value to return when empty input is received
    • promptForValue() now throws PromptException in the case of type conversion failure rather than throwing the underlying Airline parser exception
    • Built-in PromptFormatter will now indicate the default option if that is configured for a prompt
    • PromptBuilder, and some Prompts helper methods now allow specifying options via a Collection
    • Applies some code modernisation to various parts of the airline-prompts module
    • BREAKING - Internal ListFormat and QuestionFormat types no longer require class level type parameters, most usage of these classes should be indirect and this change should be transparent to most users
  • Build improvements:
    • Apache Commons CSV upgraded to 1.14.1
    • Apache Commons Lang upgraded to 3.20.0
    • Classgraph upgraded to 4.8.184
    • Various build and test dependencies upgraded to latest available

3.2.0

  • Type Conversion improvements:
    • When converting to types DefaultTypeConverter now considers overloads of valueOf(), fromString() and constructors that take a CharSequence argument
  • Code Modernisation
  • Build Cleanup
    • The Maven Plugin build dependencies were updated to avoid warnings during the build process (#152) (thanks to @​khmarbaise)
    • Various other build warnings eliminated (thanks to @​khmarbaise)
  • Dependency Updates
    • Apache Commons Lang upgraded to 3.18.0

3.1.0

This is a maintenance release to bring dependencies up to date and switch over to the new Maven Central publishing process due to Sonatype sunsetting support for the old OSSRH publishing process.

  • Dependency Updates
    • Apache Commons Collections upgraded to 4.5.0
    • Apache Commons Lang upgraded to 3.17.0
    • Classgraph upgraded to 4.8.179
    • Various build and test dependencies upgraded to latest available
Commits
  • 7584921 [maven-release-plugin] prepare release 3.3.0
  • a96c8e2 More pre-release prep
  • cc59d95 Pre-release preparation
  • d8f171c Don't publish some modules
  • 3975e3f Grammer/phrasing improvements in docs
  • f4b765a Merge pull request #161 from rvesse/prompt-improvements
  • e3c4484 Additional prompt improvements
  • 1301bea Assorted prompt improvements
  • 8159a14 Merge pull request #160 from rvesse/dependabot/maven/airline-maven-plugin/org...
  • 9e28d07 Bump org.codehaus.plexus:plexus-utils in /airline-maven-plugin
  • Additional commits viewable in compare view

Updates org.glassfish.jersey.containers:jersey-container-servlet-core from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.media:jersey-media-json-jackson from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.inject:jersey-hk2 from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.ext:jersey-bean-validation from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.core:jersey-client from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.core:jersey-server from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.containers:jersey-container-grizzly2-http from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.containers:jersey-container-grizzly2-servlet from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.media:jersey-media-json-jackson from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.inject:jersey-hk2 from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.ext:jersey-bean-validation from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.core:jersey-client from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.core:jersey-server from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.containers:jersey-container-grizzly2-http from 3.1.10 to 3.1.12

Updates org.glassfish.jersey.containers:jersey-container-grizzly2-servlet from 3.1.10 to 3.1.12

Updates io.jsonwebtoken:jjwt-api from 0.12.6 to 0.13.0

Release notes

Sourced from io.jsonwebtoken:jjwt-api's releases.

0.13.0

This is the last minor JJWT release branch that will support Java 7.

Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

What's Changed

This release contains a single change:

  • The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claim...

    Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 13, 2026
@sonarqubecloud

sonarqubecloud Bot commented Jul 17, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@dependabot
dependabot Bot changed the base branch from main to develop July 17, 2026 16:06
@dependabot
dependabot Bot force-pushed the dependabot/maven/patches-42b0813984 branch from 3021876 to e1c0a76 Compare July 17, 2026 16:06
@dependabot
build(deps): bump the patches group across 1 directory with 53 updates
860a816 
Bumps the patches group with 53 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| com.fasterxml.jackson.core:jackson-core | `2.18.3` | `2.22` |
| com.fasterxml.jackson.core:jackson-databind | `2.18.3` | `2.22` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.18.3` | `2.22` |
| com.fasterxml.jackson.dataformat:jackson-dataformat-yaml | `2.18.3` | `2.22` |
| [org.testng:testng](https://github.com/testng-team/testng) | `7.11.0` | `7.12.0` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.16.1` | `5.23.0` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.4` |
| [org.testcontainers:kafka](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.4` |
| org.slf4j:slf4j-api | `2.0.17` | `2.0.18` |
| org.slf4j:jul-to-slf4j | `2.0.17` | `2.0.18` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.38` |
| [com.github.valfirst:slf4j-test](https://github.com/valfirst/slf4j-test) | `3.0.1` | `3.0.3` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.0` | `3.2.4` |
| org.apache.kafka:kafka-clients | `4.0.0` | `4.3.1` |
| org.apache.commons:commons-lang3 | `3.17.0` | `3.20.0` |
| org.apache.commons:commons-collections4 | `4.4` | `4.5.0` |
| commons-io:commons-io | `2.18.0` | `2.22.0` |
| [com.github.rvesse:airline](https://github.com/rvesse/airline) | `3.0.0` | `3.3.0` |
| org.glassfish.jersey.containers:jersey-container-servlet-core | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.media:jersey-media-json-jackson | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.inject:jersey-hk2 | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.ext:jersey-bean-validation | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.core:jersey-client | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.core:jersey-server | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.containers:jersey-container-grizzly2-http | `3.1.10` | `3.1.12` |
| org.glassfish.jersey.containers:jersey-container-grizzly2-servlet | `3.1.10` | `3.1.12` |
| [io.jsonwebtoken:jjwt-api](https://github.com/jwtk/jjwt) | `0.12.6` | `0.13.0` |
| io.jsonwebtoken:jjwt-jackson | `0.12.6` | `0.13.0` |
| [io.github.resilience4j:resilience4j-ratelimiter](https://github.com/resilience4j/resilience4j) | `2.3.0` | `2.4.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.48.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.48.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-sdk-metrics](https://github.com/open-telemetry/opentelemetry-java) | `1.48.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-sdk-common](https://github.com/open-telemetry/opentelemetry-java) | `1.48.0` | `1.64.0` |
| [io.opentelemetry:opentelemetry-context](https://github.com/open-telemetry/opentelemetry-java) | `1.48.0` | `1.64.0` |
| [io.opentelemetry.semconv:opentelemetry-semconv](https://github.com/open-telemetry/semantic-conventions-java) | `1.29.0-alpha` | `1.43.0` |
| [io.opentelemetry.javaagent:opentelemetry-javaagent](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.14.0` | `2.29.0` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.36` | `1.18.46` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.5.0` | `3.6.3` |
| [org.codehaus.mojo:buildnumber-maven-plugin](https://github.com/mojohaus/buildnumber-maven-plugin) | `3.2.1` | `3.3.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.15.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.12.0` |
| [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) | `2.9.1` | `2.9.2` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.7` | `3.2.8` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.8.1` | `3.11.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.15` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.18.0` | `2.21.0` |
| [org.apache.maven.plugins:maven-clean-plugin](https://github.com/apache/maven-clean-plugin) | `3.4.1` | `3.5.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.6` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.0` | `3.6.3` |
| [org.jetbrains:annotations](https://github.com/JetBrains/java-annotations) | `26.0.2` | `26.1.0` |
| [org.apache.maven.plugins:maven-assembly-plugin](https://github.com/apache/maven-assembly-plugin) | `3.7.1` | `3.8.0` |



Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.3 to 2.22

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.3 to 2.22

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.18.3 to 2.22
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.18.3 to 2.22

Updates `org.testng:testng` from 7.11.0 to 7.12.0
- [Release notes](https://github.com/testng-team/testng/releases)
- [Changelog](https://github.com/testng-team/testng/blob/master/CHANGES.txt)
- [Commits](testng-team/testng@7.11.0...7.12.0)

Updates `org.mockito:mockito-core` from 5.16.1 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.16.1...v5.23.0)

Updates `org.testcontainers:testcontainers` from 1.20.6 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.4)

Updates `org.testcontainers:kafka` from 1.20.6 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.4)

Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18

Updates `org.slf4j:jul-to-slf4j` from 2.0.17 to 2.0.18

Updates `org.slf4j:jul-to-slf4j` from 2.0.17 to 2.0.18

Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.38)

Updates `com.github.valfirst:slf4j-test` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/valfirst/slf4j-test/releases)
- [Commits](valfirst/slf4j-test@slf4j-test-3.0.1...slf4j-test-3.0.3)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.0 to 3.2.4
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.2.0...v3.2.4)

Updates `org.apache.kafka:kafka-clients` from 4.0.0 to 4.3.1

Updates `org.apache.commons:commons-lang3` from 3.17.0 to 3.20.0

Updates `org.apache.commons:commons-collections4` from 4.4 to 4.5.0

Updates `commons-io:commons-io` from 2.18.0 to 2.22.0

Updates `com.github.rvesse:airline` from 3.0.0 to 3.3.0
- [Release notes](https://github.com/rvesse/airline/releases)
- [Changelog](https://github.com/rvesse/airline/blob/main/CHANGELOG.md)
- [Commits](rvesse/airline@3.0.0...3.3.0)

Updates `org.glassfish.jersey.containers:jersey-container-servlet-core` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.media:jersey-media-json-jackson` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.inject:jersey-hk2` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.ext:jersey-bean-validation` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.core:jersey-client` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.core:jersey-server` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.containers:jersey-container-grizzly2-http` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.containers:jersey-container-grizzly2-servlet` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.media:jersey-media-json-jackson` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.inject:jersey-hk2` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.ext:jersey-bean-validation` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.core:jersey-client` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.core:jersey-server` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.containers:jersey-container-grizzly2-http` from 3.1.10 to 3.1.12

Updates `org.glassfish.jersey.containers:jersey-container-grizzly2-servlet` from 3.1.10 to 3.1.12

Updates `io.jsonwebtoken:jjwt-api` from 0.12.6 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.12.6...0.13.0)

Updates `io.jsonwebtoken:jjwt-jackson` from 0.12.6 to 0.13.0

Updates `io.github.resilience4j:resilience4j-ratelimiter` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/resilience4j/resilience4j/releases)
- [Changelog](https://github.com/resilience4j/resilience4j/blob/master/RELEASENOTES.adoc)
- [Commits](resilience4j/resilience4j@v2.3.0...v2.4.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk-metrics` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk-common` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-context` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-api` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry.semconv:opentelemetry-semconv` from 1.29.0-alpha to 1.43.0
- [Release notes](https://github.com/open-telemetry/semantic-conventions-java/releases)
- [Changelog](https://github.com/open-telemetry/semantic-conventions-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/semantic-conventions-java/commits/v1.43.0)

Updates `io.opentelemetry.javaagent:opentelemetry-javaagent` from 2.14.0 to 2.29.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.14.0...v2.29.0)

Updates `org.projectlombok:lombok` from 1.18.36 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.36...v1.18.46)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.5.0 to 3.6.3
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.5.0...enforcer-3.6.3)

Updates `org.codehaus.mojo:buildnumber-maven-plugin` from 3.2.1 to 3.3.0
- [Release notes](https://github.com/mojohaus/buildnumber-maven-plugin/releases)
- [Commits](mojohaus/buildnumber-maven-plugin@3.2.1...buildnumber-maven-plugin-3.3.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.12.0)

Updates `org.cyclonedx:cyclonedx-maven-plugin` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/CycloneDX/cyclonedx-maven-plugin/releases)
- [Commits](CycloneDX/cyclonedx-maven-plugin@cyclonedx-maven-plugin-2.9.1...cyclonedx-maven-plugin-2.9.2)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.7...maven-gpg-plugin-3.2.8)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.8.1 to 3.11.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.8.1...maven-dependency-plugin-3.11.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.15
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.15)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.18.0 to 2.21.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.18.0...2.21.0)

Updates `org.apache.maven.plugins:maven-clean-plugin` from 3.4.1 to 3.5.0
- [Release notes](https://github.com/apache/maven-clean-plugin/releases)
- [Commits](apache/maven-clean-plugin@maven-clean-plugin-3.4.1...maven-clean-plugin-3.5.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.6)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.0 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.0...3.6.3)

Updates `org.jetbrains:annotations` from 26.0.2 to 26.1.0
- [Release notes](https://github.com/JetBrains/java-annotations/releases)
- [Changelog](https://github.com/JetBrains/java-annotations/blob/master/CHANGELOG.md)
- [Commits](JetBrains/java-annotations@26.0.2...26.1.0)

Updates `org.apache.maven.plugins:maven-assembly-plugin` from 3.7.1 to 3.8.0
- [Release notes](https://github.com/apache/maven-assembly-plugin/releases)
- [Commits](apache/maven-assembly-plugin@maven-assembly-plugin-3.7.1...v3.8.0)

Updates `io.jsonwebtoken:jjwt-jackson` from 0.12.6 to 0.13.0

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.18.3 to 2.22

Updates `io.opentelemetry:opentelemetry-sdk-metrics` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-sdk-common` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

Updates `io.opentelemetry:opentelemetry-context` from 1.48.0 to 1.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.48.0...v1.64.0)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: com.github.rvesse:airline
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: com.github.valfirst:slf4j-test
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.github.resilience4j:resilience4j-ratelimiter
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.jsonwebtoken:jjwt-api
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.jsonwebtoken:jjwt-jackson
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.jsonwebtoken:jjwt-jackson
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry.javaagent:opentelemetry-javaagent
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry.semconv:opentelemetry-semconv
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-context
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-context
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-sdk-common
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-sdk-common
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-sdk-metrics
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: io.opentelemetry:opentelemetry-sdk-metrics
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.commons:commons-collections4
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-assembly-plugin
  dependency-version: 3.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-clean-plugin
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.codehaus.mojo:buildnumber-maven-plugin
  dependency-version: 3.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.21.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.cyclonedx:cyclonedx-maven-plugin
  dependency-version: 2.9.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.containers:jersey-container-grizzly2-http
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.containers:jersey-container-grizzly2-http
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.containers:jersey-container-grizzly2-servlet
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.containers:jersey-container-grizzly2-servlet
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.containers:jersey-container-servlet-core
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.core:jersey-client
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.core:jersey-client
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.core:jersey-server
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.core:jersey-server
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.ext:jersey-bean-validation
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.ext:jersey-bean-validation
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.inject:jersey-hk2
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.inject:jersey-hk2
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.media:jersey-media-json-jackson
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.glassfish.jersey.media:jersey-media-json-jackson
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.jetbrains:annotations
  dependency-version: 26.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.slf4j:jul-to-slf4j
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.slf4j:jul-to-slf4j
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patches
- dependency-name: org.testcontainers:kafka
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
- dependency-name: org.testng:testng
  dependency-version: 7.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patches
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/patches-42b0813984 branch from e1c0a76 to 860a816 Compare July 20, 2026 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants