Skip to content

Update maven - #158

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-main/maven
Open

Update maven#158
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-main/maven

Conversation

@renovate

@renovate renovate Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
org.codehaus.mojo:flatten-maven-plugin (source) 1.7.31.8.0 age adoption passing confidence
io.github.classgraph:classgraph 4.8.1844.8.186 age adoption passing confidence
com.squareup.okio:okio 3.17.03.18.1 age adoption passing confidence
org.jsoup:jsoup (source) 1.22.21.23.1 age adoption passing confidence
org.apache.cassandra:java-driver-metrics-micrometer 4.19.24.19.3 age adoption passing confidence
org.apache.cassandra:java-driver-core 4.19.24.19.3 age adoption passing confidence
org.springdoc:springdoc-openapi-starter-common (source) 3.0.33.1.0 age adoption passing confidence
org.springdoc:springdoc-openapi-starter-webflux-api (source) 3.0.33.1.0 age adoption passing confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) 3.0.33.1.0 age adoption passing confidence
org.springdoc:springdoc-openapi-starter-webmvc-api (source) 3.0.33.1.0 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

mojohaus/flatten-maven-plugin (org.codehaus.mojo:flatten-maven-plugin)

v1.8.0

Compare Source

🚀 New features and improvements
🐛 Bug Fixes
🔧 Build
📦 Dependency updates
lysine-dev/okio (com.squareup.okio:okio)

v3.18.1

2026-07-28

  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced
    the new base64() function, we inadvertently changed the binary signature! Ugh! This is now
    fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

v3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a
    FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in
    NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte,
    UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are
    returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
jhy/jsoup (org.jsoup:jsoup)

v1.23.1

Improvements
  • Reduced retained memory when parsing with source position tracking enabled (Parser#setTrackPosition(true)). Source ranges are now stored in compact parser-owned span records instead of node and attribute user data, and Position objects are created lazily when source ranges are read. This cuts tracked DOM retained size by about 50-60% on representative benchmark documents, while keeping Node#sourceRange(), Element#endSourceRange(), and Attribute#sourceRange() behavior intact. #​2498
  • Added Element#classList(), an immutable snapshot of an element's class names in attribute order. Use hasClass() when you just need to test for one class, classList() when you want to read or iterate classes without needing a mutable result, and classNames() when you want the existing mutable, deduplicated set that can be written back with classNames(Set). The class APIs now share an HTML-whitespace scanner, which also makes classNames() faster and lighter on allocation, especially when walking many elements without class names. #​2500
  • Aligned HTML parser scope classification with the current HTML spec for select, foreignObject, and template. #​2501
  • Simplified the HTML tree builder's scope, implied-end-tag, and special-element checks by caching parser-only options on Tag. That improves HTML parser throughput by about 10% on small inputs and up to about 30% on larger inputs in the benchmark fixtures. #​2502
  • Improved HTML parser throughput stability by making hot tokeniser scan paths compile more predictably. #​2507
  • <noscript> fallback markup is now parsed into an inspectable DOM subtree in both the document head and body. The fallback acts as a contained parsing island, so malformed markup cannot disrupt the surrounding document structure, while normal HTML tokenization still applies within it. This also improves round-trip serialization. #​2537
  • Improved redirect credential handling as a defense-in-depth measure: explicit authorization headers and request cookies are no longer forwarded across origins, reducing exposure through open redirects and aligning with HTTP guidance. Cookies managed by a CookieStore continue to follow their configured scope. #​2540
  • Elements can now append their outer HTML, including their own tags, directly to an Appendable with Node#outerHtml(Appendable), without first creating a String. This complements Element#html(Appendable), which appends inner HTML only. #​2532
  • Aligned CDATA tokenization with the HTML spec: CDATA syntax in HTML content is parsed as a bogus comment, while it remains supported in SVG, MathML, and XML. Also improved namespace-aware fragment parsing so SVG and MathML contexts, HTML integration points, and context-sensitive tokenizer states are handled correctly. #​2542
  • When using the optional re2j regular expression engine, stack overflows caused by complex selector patterns are now normalized to a ValidationException with a Pattern complexity error message. #​2548
Bug Fixes
  • Fixed HTML parsing of mixed-case RCDATA end tags after tag-shaped text. For example, <title><p>Foo</TiTLE> and <textarea><img src=x></TeXtArEa> now keep the tag-shaped content as text instead of promoting it to markup. #​2503
  • Fixed W3CDom XML conversion so plain XML elements don't serialize with the reserved XML namespace as the default namespace. Explicit XML namespaces and xml:* attributes are still preserved. #​2504
  • Preserve control characters in parsed tag names #​2538
  • Updated HTTP redirects to follow the specification: 307 and 308 preserve the request method and content, 301 and 302 only change POST to GET, and Location is followed only for 301, 302, 303, 307, and 308 responses. Streamed request bodies are not buffered; if an automatic redirect requires replaying one, execution fails, so the caller can resend with a fresh stream. #​2540
  • Corrected the Cleaner's same-site link detection to compare hostnames rather than URL prefixes when applying rel=nofollow. #​2543
Build Changes
  • Cleaned up the Maven build for the multi-release JAR so Java 8 and Java 11+ sources compile as separate source sets. This avoids spurious Java 8 compiler warnings from newer-language overlay sources, keeps long-running parser checks behind an explicit profile, and preserves the same published artifacts and runtime behavior.
  • Improved parallelism and tuned timing in our integration tests, so that a full mvn clean verify drops from ~ 1m18s to ~ 21 seconds.
datastax/java-driver (org.apache.cassandra:java-driver-metrics-micrometer)

v4.19.3

Compare Source

Release announcement

Changelog:

  • [bug] CASSJAVA-3: Fix ordering of LIMIT and PER PARTITION LIMIT clauses
  • [bug] PR 2050: Fix race condition in ClockSeqAndNodeContainer
  • [improvement] CASSJAVA-108: Update ESRI (and remove org.json) dependencies
  • [improvement] PR 2076: Bump Jackson to 2.20.1
  • [improvement] PR 2047: Re-work ordering clause support in query builder
  • [improvement] PR 2051, fixup PR 2088: Bump logback to 1.2.13, slf4j to 1.7.26
  • [improvement] CASSJAVA-113: Bump LZ4 to 1.10.1, Netty to 4.1.130.Final
springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-common)

v3.1.0

Added
  • #​3269 – Add mechanism to disable nullable for Kotlin properties
  • Allow request-specific Swagger UI index transformation
Changed
  • Upgrade Spring Boot to version 4.1.0
  • Upgrade Spring AI to version 2.0.0
  • Upgrade swagger-core to version 2.2.52
  • Upgrade swagger-ui to version 5.32.11
  • #​3307 – Act upon SonarQube warnings
  • #​3306 – Act upon SonarQube warnings
Fixed
  • #​3304 – Kotlin parent class's field is not properly marked as nullable
  • #​3294 – Duplicated path getting swagger-config
  • #​3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
  • #​3292 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
  • #​3284 – Upgrade swagger-core from version 2.2.48 to 2.2.49
  • #​3282 – Preserve version from nest() predicate across all routes in nest
  • #​3281 – Stabilize Spring Data Page schema property order
  • #​3274 – Description disappears from the generated json after upgrade to 3.0.3
  • #​3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
  • #​3266 – Upgrade swagger-core from version 2.2.47 to 2.2.48
  • #​3263 – Null key for a Map not allowed in JSON

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from lis0x90 as a code owner July 27, 2026 06:33
@github-actions github-actions Bot added the bug Something isn't working label Jul 27, 2026
@renovate
renovate Bot force-pushed the renovate-main/maven branch 2 times, most recently from a0f7900 to 1779917 Compare July 27, 2026 12:04
@renovate renovate Bot changed the title fix(deps): update maven to v4.19.3 fix(deps): update maven Jul 27, 2026
@renovate
renovate Bot force-pushed the renovate-main/maven branch 4 times, most recently from d59a141 to 2447c1f Compare July 27, 2026 13:53
@renovate renovate Bot changed the title fix(deps): update maven Update maven Jul 27, 2026
@renovate
renovate Bot force-pushed the renovate-main/maven branch 3 times, most recently from 63c7b0d to c0c1758 Compare July 30, 2026 07:29
@renovate
renovate Bot force-pushed the renovate-main/maven branch from c0c1758 to 67689d3 Compare August 2, 2026 01:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant