Skip to content

Bump the maven-minor-updates group with 24 updates - #479

Merged
github-actions[bot] merged 2 commits into
trunkfrom
dependabot/maven/trunk/maven-minor-updates-c789ef714c
Jul 31, 2026
Merged

Bump the maven-minor-updates group with 24 updates#479
github-actions[bot] merged 2 commits into
trunkfrom
dependabot/maven/trunk/maven-minor-updates-c789ef714c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-updates group with 24 updates:

Package From To
org.bouncycastle:bc-jdk18on-bom 1.84 1.85
commons-cli:commons-cli 1.5.0 1.11.0
com.google.guava:guava 33.4.8-jre 33.6.0-jre
org.apache.logging.log4j:log4j-bom 2.26.0 2.26.1
org.slf4j:slf4j-bom 2.0.17 2.0.18
com.google.protobuf:protobuf-java 4.35.0 4.35.1
org.eclipse.jetty.ee11:jetty-ee11-servlet 12.1.9 12.1.11
org.eclipse.jetty:jetty-security 12.1.9 12.1.11
org.eclipse.jetty:jetty-util 12.1.9 12.1.11
org.eclipse.jetty:jetty-server 12.1.9 12.1.11
org.eclipse.jetty:jetty-jmx 12.1.9 12.1.11
org.apache.httpcomponents:httpclient 4.5.13 4.5.14
org.apache.httpcomponents:httpcore 4.4.15 4.4.16
com.fasterxml.jackson.core:jackson-core 2.22.0 2.22.1
com.fasterxml.jackson.core:jackson-databind 2.22.0 2.22.1
org.apache.mina:mina-core 2.2.8 2.2.9
io.netty:netty-all 4.2.15.Final 4.2.16.Final
io.prometheus:prometheus-metrics-core 1.7.0 1.8.0
io.prometheus:prometheus-metrics-exporter-servlet-jakarta 1.7.0 1.8.0
org.apache.zookeeper:zookeeper 3.9.3 3.9.5
org.mockito:mockito-core 5.18.0 5.23.0
com.google.errorprone:error_prone_annotations 2.48.0 2.50.0
org.apache.maven.plugins:maven-pmd-plugin 3.15.0 3.28.0
net.nicoulaj.maven.plugins:checksum-maven-plugin 1.7 1.11

Updates org.bouncycastle:bc-jdk18on-bom from 1.84 to 1.85

Changelog

Sourced from org.bouncycastle:bc-jdk18on-bom's changelog.

... (truncated)

Commits

Updates commons-cli:commons-cli from 1.5.0 to 1.11.0

Changelog

Sourced from commons-cli:commons-cli's changelog.

Apache Commons CLI 1.11.0 Release Notes

The Apache Commons CLI team is pleased to announce the release of Apache Commons CLI 1.11.0.

Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.

This is a feature and maintenance release. Java 8 or later is required.

New Features

  •       Add CommandLine.getOptionCount() to measure option repetition [#396](https://github.com/apache/commons-cli/issues/396). Thanks to David Larochette, Gary Gregory.

Fixed Bugs

  • CLI-351: Multiple trailing BREAK_CHAR_SET characters cause infinite loop in HelpFormatter. Thanks to Damien Carbonne, Claude Warren, Gary Gregory.
  • CLI-351: Fix issue with groups not being reported in help output. #411. Thanks to Damien Carbonne, Claude Warren, Gary Gregory.

Updates

  •       Bump org.apache.commons:commons-parent from 85 to 91 [#393](https://github.com/apache/commons-cli/issues/393). Thanks to Gary Gregory, Dependabot.

  •       Bump commons-io:commons-io from 2.20.0 to 2.21.0. Thanks to Gary Gregory.

Historical list of changes: https://commons.apache.org/proper/commons-cli/changes.html

For complete information on Apache Commons CLI, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CLI website:

https://commons.apache.org/proper/commons-cli/

Download page: https://commons.apache.org/proper/commons-cli/download_cli.cgi

Have fun! The Apache Commons Team

Apache Commons CLI 1.11.0 Release Notes

The Apache Commons CLI team is pleased to announce the release of Apache Commons CLI 1.11.0.

Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.

This is a feature and maintenance release. Java 8 or later is required.

... (truncated)

Commits

Updates com.google.guava:guava from 33.4.8-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMultimap, and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)

33.5.0

Maven

<dependency>
</tr></table>

... (truncated)

Commits

Updates org.apache.logging.log4j:log4j-bom from 2.26.0 to 2.26.1

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.26.1

This patch release delivers certain fixes on top of 2.26.0.

Changed

  • Improve logging for LinkageError scenarios involving the LMAX Disruptor library (#2250, #4124)

Fixed

  • Fix the createOnDemand behavior of RollingFileAppender to correctly defer file and directory creation until the first log event, while preserving eager creation when disabled. (#2006, #4072)
  • Improve documentation for locale handling in the Pattern Layout date pattern converter (#4129, #4130)
  • Fix handling of non-finite numbers while encoding MapMessage to JSON (#4163)
  • Fix encoding of MSGID and SD-ID fields of StructuredDataMessage to XML (#4136)
  • Fix stack trace rendering for exceptions with identity malfunction (e.g., colliding equals() and/or hashCode() implementations) (#3933, #4133)
  • Fix resource leaks in ConfigurationSource when loading configuration via URL fails (#4127)
  • Fix KafkaAppender reporting error to error handler even after a successful retry (#4125)
Commits
  • dd0f9d2 Release changelog for version 2.26.1
  • efbb638 Update the project.build.outputTimestamp property
  • c9332be Fix handling of non-finite numbers while encoding MapMessage to JSON (#4163)
  • bd8eca1 Fix AsciiDoc typo in pattern-layout.adoc
  • df1c753 tidy up changelogs
  • 0592cff fix version in pom.xml
  • e320257 Release changelog for version 2.26.1
  • 5755541 Update the project.build.outputTimestamp property
  • 6c2d931 Set version to 2.26.1
  • 69d6641 add patch release/2.26.1 liked commits and moved changelog the release/2.26.1...
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-bom from 2.0.17 to 2.0.18

Release notes

Sourced from org.slf4j:slf4j-bom's releases.

SLF4J 2.0.18

2026-05-12 - Release of SLF4J 2.0.18

• In the logViaLocationAwareLoggerAPI() method of slf4j-api/DefaultLoggingEventBuilder the first marker from the markerList is now passed to locationAwareLogger.log() instead of null.

• The renderLevel() method in slf4j-simple/SimpleLogger now uses CONFIG_PARAMS.warnLevelString for WARN instead of hardcoded "WARN". This issue was reported in issues/471.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 58b66c2c7e840f525c07db4509534ea53ef95b82 associated with the tag v_2.0.18. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 58b66c2 update central-publishing-maven-plugin
  • be4841c prepare release 2.0.18
  • d2073be minor refactoring, javadoc changes
  • 32a9854 add a trivial test for CONFIG_PARAMS.warnLevelString
  • 77936c6 CONFIG_PARAMS.warnLevelString should be taken into account
  • 34c9d30 extract first marker when caller locationAwareLogger
  • 902b463 remove cruft
  • b3c2f16 security manager is no longer supported in later JDKs
  • 9468c7a remove unneccessary and unused files
  • 183aaa5 start work on 2.0.18-SNAPSHOT
  • See full diff in compare view

Updates com.google.protobuf:protobuf-java from 4.35.0 to 4.35.1

Commits

Updates org.eclipse.jetty.ee11:jetty-ee11-servlet from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-security from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-util from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-server from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-jmx from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-security from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-util from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-server from 12.1.9 to 12.1.11

Updates org.eclipse.jetty:jetty-jmx from 12.1.9 to 12.1.11

Updates org.apache.httpcomponents:httpclient from 4.5.13 to 4.5.14

Updates org.apache.httpcomponents:httpcore from 4.4.15 to 4.4.16

Updates com.fasterxml.jackson.core:jackson-core from 2.22.0 to 2.22.1

Commits
  • 2451603 [maven-release-plugin] prepare release jackson-core-2.22.1
  • d3180c0 Prep for 2.22.1 release
  • 6c5bae8 Merge branch '2.21' into 2.22
  • fda71aa Post-release dep version bump
  • 4ad6235 [maven-release-plugin] prepare for next development iteration
  • b5f62dd [maven-release-plugin] prepare release jackson-core-2.21.5
  • 11f8b8c Prep for 2.21.5 release
  • 4920004 Post-release version bump
  • 2bb55e8 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.0 to 2.22.1

Commits

Updates org.apache.mina:mina-core from 2.2.8 to 2.2.9

Commits
  • 8b19349 [maven-release-plugin] prepare release 2.2.9
  • fef7534 added some missing javadoc
  • a48effc Merge pull request #57 from ppkarwasz/fix/deflater-inflater-swap
  • cfdb045 fix: create deflater in DEFLATER mode in CompressionFilter
  • d3af7f2 Merge pull request #53 from ppkarwasz/feat/actions-2.2.X
  • c7819ca fix: use -Pserial
  • 705866e fix: use bash as shell
  • 2f5d405 [DIRMINA-1197] Modernize Java CI workflow
  • 1069e94 Fixed a typo
  • d76cd03 Fixed a typo
  • Additional commits viewable in compare view

Updates io.netty:netty-all from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-all's releases.

netty-4.2.16.Final

What's Changed

... (truncated)

Commits
  • 3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
  • 63bbb2c Update rust toolchain - add required parameters
  • ac06c1b Update rust toolchain
  • 5b68c61 Merge branches from forks (#17063)
  • de5d276 Update lz4-java to 1.11.1 (#17061)
  • da22048 Pin github actions to reduce risk (#17043)
  • 0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
  • 7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
  • 06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
  • bc4b983 Implement Adaptive Cumulator (#16731)
  • Additional commits viewable in compare view

Updates io.prometheus:prometheus-metrics-core from 1.7.0 to 1.8.0

Updates io.prometheus:prometheus-metrics-exporter-servlet-jakarta from 1.7.0 to 1.8.0

Updates io.prometheus:prometheus-metrics-exporter-servlet-jakarta from 1.7.0 to 1.8.0

Updates org.apache.zookeeper:zookeeper from 3.9.3 to 3.9.5

Updates org.mockito:mockito-core from 5.18.0 to 5.23.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.23.0

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

Changelog generated by Shipkit Changelog Gradle Plugin

5.23.0

v5.22.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.22.0

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

... (truncated)

Commits
  • a231205 Fix StackOverflowError with AbstractList after using mockSingleton (#3790)
  • f6a91a6 Replace mockito-android mock maker implementation with dexmaker-mockito-inlin...
  • aa2298a fix: make spotless happy
  • a6729d6 chore: update BDDMockito with jspecify annotation
  • bb83c92 chore: move jspecify as a compile only dependency
  • 47a4695 chore: add jspecify with minimal change. Fixes #3503
  • 25f1395 Add core API to enable Kotlin singleton mocking (#3762)
  • ef9ee55 Avoids mocking private static methods, as well as package-private static meth...
  • d16fcfc Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#3780)
  • 27eb8a3 Clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#3773)
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_annotations from 2.48.0 to 2.50.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.50.0

New checks:

Closed issues: #5553, #5649, #5778

Full changelog: google/error-prone@v2.49.0...v2.50.0

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Commits
  • d802cff Release Error Prone 2.50.0
  • b12b5f2 In StringCharset, move the description from explanation to summary.
  • a7ca02a Update AssertThrowsUtils to emit var thrown = assertThrows(...) instead o...
  • 6b56517 Fix handling of nested tags in UnrecognisedJavadocTag
  • d36e74f Remove translation of the fail() message into assertThrows(). We already ...
  • c3581e9 Fix JavacFileManager compiler crash during speculative recompiles in modular ...
  • da1f32b Remove assignments from assertThrows() lambdas. A large percentage of remai...
  • dee62f7 Update AssertThrowsBlockToExpression to re-write single VariableTrees int...
  • 4939448 Only hoist the last statement into the assertThrows() lambda.
  • 30fd05a refactor: Rename JavaLangClash bug pattern to AvoidCommonTypeNames
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-pmd-plugin from 3.15.0 to 3.28.0

Release notes

Sourced from org.apache.maven.plugins:maven-pmd-plugin's releases.

3.28.0

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.27.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

... (truncated)

Commits
  • f152a3a [maven-release-plugin] prepare release maven-pmd-plugin-3.28.0
  • 0678fd1 Update historical PMD version in docs
  • 41d5069 Bump org.apache.commons:commons-lang3 from 3.8.1 to 3.18.0 in ITs (#648)
  • 3ef805b Bump pmdVersion from 7.16.0 to 7.17.0
  • 592d703 Add hacktoberfest label to project
  • ced9373 Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0 (#658)
  • 3cf5bc1 Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#654)
  • 9077c3b Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#655)
  • 12ed57a feat: enable prevent branch protection rules (#653)

@dependabot
Bump the maven-minor-updates group with 24 updates
794d1ed 
Bumps the maven-minor-updates group with 24 updates:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bc-jdk18on-bom](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [commons-cli:commons-cli](https://github.com/apache/commons-cli) | `1.5.0` | `1.11.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.6.0-jre` |
| [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.26.0` | `2.26.1` |
| [org.slf4j:slf4j-bom](https://github.com/qos-ch/slf4j) | `2.0.17` | `2.0.18` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.35.0` | `4.35.1` |
| org.eclipse.jetty.ee11:jetty-ee11-servlet | `12.1.9` | `12.1.11` |
| org.eclipse.jetty:jetty-security | `12.1.9` | `12.1.11` |
| org.eclipse.jetty:jetty-util | `12.1.9` | `12.1.11` |
| org.eclipse.jetty:jetty-server | `12.1.9` | `12.1.11` |
| org.eclipse.jetty:jetty-jmx | `12.1.9` | `12.1.11` |
| org.apache.httpcomponents:httpclient | `4.5.13` | `4.5.14` |
| org.apache.httpcomponents:httpcore | `4.4.15` | `4.4.16` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.0` | `2.22.1` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.22.0` | `2.22.1` |
| [org.apache.mina:mina-core](https://github.com/apache/mina) | `2.2.8` | `2.2.9` |
| [io.netty:netty-all](https://github.com/netty/netty) | `4.2.15.Final` | `4.2.16.Final` |
| io.prometheus:prometheus-metrics-core | `1.7.0` | `1.8.0` |
| io.prometheus:prometheus-metrics-exporter-servlet-jakarta | `1.7.0` | `1.8.0` |
| org.apache.zookeeper:zookeeper | `3.9.3` | `3.9.5` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.18.0` | `5.23.0` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.48.0` | `2.50.0` |
| [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.15.0` | `3.28.0` |
| [net.nicoulaj.maven.plugins:checksum-maven-plugin](https://github.com/nicoulaj/checksum-maven-plugin) | `1.7` | `1.11` |


Updates `org.bouncycastle:bc-jdk18on-bom` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `commons-cli:commons-cli` from 1.5.0 to 1.11.0
- [Changelog](https://github.com/apache/commons-cli/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-cli@commons-cli-1.5.0...rel/commons-cli-1.11.0)

Updates `com.google.guava:guava` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.logging.log4j:log4j-bom` from 2.26.0 to 2.26.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.26.0...rel/2.26.1)

Updates `org.slf4j:slf4j-bom` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](qos-ch/slf4j@v_2.0.17...v_2.0.18)

Updates `com.google.protobuf:protobuf-java` from 4.35.0 to 4.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `org.eclipse.jetty.ee11:jetty-ee11-servlet` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-security` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-util` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-server` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-jmx` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-security` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-util` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-server` from 12.1.9 to 12.1.11

Updates `org.eclipse.jetty:jetty-jmx` from 12.1.9 to 12.1.11

Updates `org.apache.httpcomponents:httpclient` from 4.5.13 to 4.5.14

Updates `org.apache.httpcomponents:httpcore` from 4.4.15 to 4.4.16

Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.0 to 2.22.1
- [Commits](FasterXML/jackson-core@jackson-core-2.22.0...jackson-core-2.22.1)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.0 to 2.22.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.apache.mina:mina-core` from 2.2.8 to 2.2.9
- [Commits](apache/mina@2.2.8...2.2.9)

Updates `io.netty:netty-all` from 4.2.15.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final)

Updates `io.prometheus:prometheus-metrics-core` from 1.7.0 to 1.8.0

Updates `io.prometheus:prometheus-metrics-exporter-servlet-jakarta` from 1.7.0 to 1.8.0

Updates `io.prometheus:prometheus-metrics-exporter-servlet-jakarta` from 1.7.0 to 1.8.0

Updates `org.apache.zookeeper:zookeeper` from 3.9.3 to 3.9.5

Updates `org.mockito:mockito-core` from 5.18.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.18.0...v5.23.0)

Updates `com.google.errorprone:error_prone_annotations` from 2.48.0 to 2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.48.0...v2.50.0)

Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.15.0 to 3.28.0
- [Release notes](https://github.com/apache/maven-pmd-plugin/releases)
- [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.15.0...maven-pmd-plugin-3.28.0)

Updates `net.nicoulaj.maven.plugins:checksum-maven-plugin` from 1.7 to 1.11
- [Commits](nicoulaj/checksum-maven-plugin@1.7...1.11)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bc-jdk18on-bom
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: commons-cli:commons-cli
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.slf4j:slf4j-bom
  dependency-version: 2.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty.ee11:jetty-ee11-servlet
  dependency-version: 12.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-security
  dependency-version: 12.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-util
  dependency-version: 12.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-server
  dependency-version: 12.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-jmx
  dependency-version: 12.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-security
  dependency-version: 12.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-util
  dependency-version: 12.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-server
  dependency-version: 12.1.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.eclipse.jetty:jetty-jmx
  dependency-version: 12.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.apache.httpcomponents:httpclient
  dependency-version: 4.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.apache.httpcomponents:httpcore
  dependency-version: 4.4.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.apache.mina:mina-core
  dependency-version: 2.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: io.netty:netty-all
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: io.prometheus:prometheus-metrics-core
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: io.prometheus:prometheus-metrics-exporter-servlet-jakarta
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: io.prometheus:prometheus-metrics-exporter-servlet-jakarta
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: org.apache.zookeeper:zookeeper
  dependency-version: 3.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-updates
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: org.apache.maven.plugins:maven-pmd-plugin
  dependency-version: 3.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
- dependency-name: net.nicoulaj.maven.plugins:checksum-maven-plugin
  dependency-version: '1.11'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 31, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 31, 2026 20:35
@github-actions
github-actions Bot merged commit 089b171 into trunk Jul 31, 2026
4 of 7 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/trunk/maven-minor-updates-c789ef714c branch July 31, 2026 20:55
@ppkarwasz ppkarwasz mentioned this pull request Jul 31, 2026
Merged
ppkarwasz added a commit that referenced this pull request Jul 31, 2026
@ppkarwasz
Adjust PMD violation ceilings to PMD 7 counts (#485)
f401fa9 
The maven-pmd-plugin 3.15.0 to 3.28.0 bump (#479) switched from PMD 6
to PMD 7.17.0, which finds a different violation mix in most modules.
Ratchet each module's `pmd.maxAllowedViolations` to the new actual
count so the build passes again. The counts rise in some modules and
drop in others (flume-ng-sdk goes from 170 to 30); fixing the
violations themselves remains a TODO.

Assisted-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants