Skip to content

Bump the minor-and-patch group across 1 directory with 16 updates - #530

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/minor-and-patch-5d6749bf71
Open

Bump the minor-and-patch group across 1 directory with 16 updates#530
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/minor-and-patch-5d6749bf71

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the minor-and-patch group with 16 updates in the / directory:

Package From To
jakarta.servlet:jakarta.servlet-api 6.0.0 6.1.0
org.glassfish.jersey.connectors:jersey-apache-connector 3.1.11 3.1.12
commons-codec:commons-codec 1.22.0 1.23.0
com.google.guava:guava 33.6.0-jre 33.8.0-jre
org.apache.jena:jena-shacl 6.1.0 6.2.0
org.apache.jena:jena-arq 6.1.0 6.2.0
org.slf4j:slf4j-reload4j 2.0.18 2.0.20
com.auth0:java-jwt 4.6.0 4.6.2
org.jsoup:jsoup 1.23.2 1.24.1
org.junit.jupiter:junit-jupiter 6.1.0 6.1.3
org.mockito:mockito-core 5.23.0 5.24.0
org.mockito:mockito-junit-jupiter 5.23.0 5.24.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.6 3.6.1
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0
org.sonatype.central:central-publishing-maven-plugin 0.11.0 0.12.0
org.codehaus.mojo:exec-maven-plugin 3.6.3 3.6.4

Updates jakarta.servlet:jakarta.servlet-api from 6.0.0 to 6.1.0

Commits
  • fe6e12a Prepare release jakarta.servlet:servlet-parent:6.1.0
  • b09f123 Add missing JARs to webapp - Part of fix for #638
  • e93b9bf Remove unused code. Part of fix for #638
  • 04ad5c7 Update copyright date used in Javadoc footer
  • 3154612 Remove text incorrectly added when originally addressing #18
  • 314c6ed Revert Dependabot's JRuby update - it breaks the spec build
  • 28a4bbe ---
  • 7a912a8 ---
  • 72d4380 ---
  • f203652 Merge pull request #635 from jakartaee/dependabot/maven/org.apache.maven.plug...
  • Additional commits viewable in compare view

Updates org.glassfish.jersey.connectors:jersey-apache-connector from 3.1.11 to 3.1.12

Updates commons-codec:commons-codec from 1.22.0 to 1.23.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.23.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.23.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  •         Add and use PhoneticEngine.Builder and deprecate old constructors. Thanks to Gary Gregory.

  •         Add BeiderMorseEncoder.Builder and deprecate old constructor. Thanks to Gary Gregory.

  •         Add PhoneticEngine.Builder.setMaxInputLength(int). Thanks to Yu Bao, Gary Gregory.

  •         Add Base45 support. Thanks to Gary Gregory.

  •         Add URLCodec.decodeUrl(BitSet, byte[]) to decode with a custom safe set. Thanks to Gary Gregory.

Fixed Bugs

  •         GitIdentifiers orders tree entries by unsigned UTF-8 bytes, as Git does, instead of UTF-16 code units. Thanks to Jeff Lenamon.

  •         Optimize PhoneticEngine.encode(String, LanguageSet) for speed. Thanks to Yu Bao, Gary Gregory.

  •         RFC1522Codec.decodeText(String) now throws a DecoderException instead of a StringIndexOutOfBoundsException when a separator is missing. Thanks to Yu Bao, Gary Gregory.

  •         Optimize Base58.convertFromBase58(byte[], Context) for speed and temporary object allocation. Thanks to Yu Bao, Gary Gregory.

  •         Allocate a single MessageDigest and use it in Sha2Crypt.sha2Crypt(byte[], String, String, int, String). Thanks to Yu Bao, Gary Gregory.

  •         Javadoc improvements. Thanks to Gary Gregory.

  •         Throw IOException instead of IllegalArgumentException in BaseNCodecOutputStream and BaseNCodecOutputStream IO methods. Thanks to Gary Gregory.

  •         Throw DecoderException instead of IllegalArgumentException in RFC1522Codec.decodeText(String). Thanks to Gary Gregory.

  •         Fix Blake3 KDF example and clarify finalization semantics. Thanks to Gary Gregory.

  •         Base32 and Base64 STRICT decoding now require the encoder's canonical alphabet, padding, and line separators, and validate streams through EOF. Use LENIENT to retain permissive decoding. Thanks to Gary Gregory.

  •         Limit Base58 decoding to 8192 encoded bytes by default, checking cumulative stream input before buffering. Use Base58.Builder.setMaxDecodeLength(int) for larger trusted input. Encoding defaults to a configurable 8192-byte binary input limit through Base58.Builder.setMaxEncodeLength(int). Thanks to Gary Gregory.

  •         Grow Base58 accumulation buffers geometrically within the configured input limits and validate actual accumulated length. Thanks to Gary Gregory.

  •         Implement Base58 encoded-length calculation and explicitly reject unsupported line chunking. Thanks to Gary Gregory.

  •         Close the underlying BaseNCodecOutputStream output even when final conversion or flushing fails, preserving suppressed close exceptions. Thanks to Gary Gregory.

  •         Reject invalid GitIdentifiers tree entry names and file/directory name conflicts to prevent ambiguous tree serialization and colliding identifiers. Thanks to Gary Gregory.

  •         Hex decoding now accepts only ASCII hexadecimal characters (0-9, A-F, a-f). Previously accepted non-ASCII Unicode digits and fullwidth letters now cause DecoderException, including when supplied as UTF-8 bytes or ByteBuffers. Thanks to Gary Gregory.

  •         Restrict Hex decoding to ASCII hexadecimal characters. Thanks to Gary Gregory.

  •         Validate BinaryCodec input while preserving leading-bit truncation. Thanks to Gary Gregory.

  •         Reject oversized Beider-Morse input before language guessing. Thanks to Gary Gregory.

  •         QuotedPrintableCodec decoding now preserves hard CRLF line breaks and, leniently, unpaired CR and LF bytes instead of discarding them. Soft line breaks require the full =CRLF sequence; previously accepted =CR without LF now throws DecoderException. This affects both constructor modes and QCodec, which shares the decoder. Thanks to Gary Gregory.

  •         Bound Sha2Crypt rounds from caller-supplied salts. Thanks to Gary Gregory.

  •         Bound Sha2Crypt password length to prevent quadratic CPU DoS. Thanks to Gary Gregory.

  •         Make the @param names in BaseNCodec match the parameters they document ([#444](https://github.com/apache/commons-codec/issues/444)). Thanks to geonseok, Gary Gregory.
  • CODEC-345: Restore URLCodec.encodeUrl(BitSet, byte[]) support for custom safe sets containing percent and plus, and document the decoding limitations. Thanks to Ganesh Gautam, Gary Gregory.
  • CODEC-245: Reject malformed Sha2Crypt salt syntax (#445). Thanks to Efe, Gary Gregory.

... (truncated)

Commits
  • 1147e78 Add github.autolink_jira
  • 129a289 Prepare for the release candidate 1.23.0 RC1
  • d7bff67 Prepare for the release candidate
  • 89d6498 Update GH CI from Java 26 to 27
  • 5444a15 [test] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0
  • 6685826 Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#446)
  • 7221073 Parameterize some unit tests
  • cb9c04d Parameterize some unit tests
  • 6837802 [CODEC-245] Reject malformed Sha2Crypt salt syntax
  • 3e05f66 [CODEC-245] Reject malformed Sha2Crypt salt syntax (#445)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.6.0-jre to 33.8.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.8.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.8.0-jre</version>
  <!-- or, for Android: -->
  <version>33.8.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • collect: Enhanced HashBiMap and LinkedHashMultimap.ValueSet to defend against hash flooding (forthcoming CVE-2026-118042). (7cd44b3506)
  • collect: Accidentally changed a few methods in ForwardingMap.StandardValues to be final. No Google-internal or GitHub-public code appears to be affected, but we will fix this in the next release. If it causes you problems, let us know.
  • net: Added MediaType.APPLICATION_GZIP (application/gzip) to be used in preference to GZIP (application/x-gzip). (6393ebbdb6)
  • primitives: Added Doubles.MIN_POSITIVE_VALUE and Floats.MIN_POSITIVE_VALUE as more clearly named aliases for Double.MIN_VALUE and Float.MIN_VALUE. (adf5554e7e)
  • testlib: Added AbstractClassInitializationTest. (80fd5c114d)
  • and, among the usual changes, a larger than usual number of small fixes (4afb1e04a4246c261be4742e1f2e2c39ebaf6266, 79152348ece2de85559eb2eb18133862d492c892, a279b884fe9890a3869142919352156f2a67a705, 786bb1a9b44685875ebe7b83f1404a1f07ac653c, 6b3a8d7498a7fde122967ba37a023ba3dcb47792, de57a419b56bcd887f51bb99103d91c65b7c5e86, fa64cc7c2b320aca9219981952bbb544f8f6ccff, 7b64964048948de3b5633a75d6e64f98cf8fcece, 5ae56d77e64305752b919ff2c96713f47ac0c94c, 37535d73f0416f30e0301efe61a8eb8ede44c1b7, ca8aedb2fdaf40fd6937a0643180aea51ca4154e, c0a8a1edc69393e8141424037571d9825f5fc0f4, 51246d06bb85ccc182a0aeb6a7adcbd55f759ae5, 81c7d030f8f144a4885ccf8efdc72c92605b4eec, 2b86a8216627a807ce8520abc6ae55437dbb85fb, 669a232b4e20ae6e8bc6efc62caaf2f830d56327, b157643c41f9ee6a38732b4fa1a590ba187912d9, ad73fbb9beff220aa26390630724855ef92fc50b, 1e6eb68f2ee8dc6cb164c285f7fe6ad5e8bc0905, 3d5be86651ec58b3f9d15c76cf888ade15aba39b)

33.7.2

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.2-jre</version>
</tr></table>

... (truncated)

Commits

Updates org.apache.jena:jena-shacl from 6.1.0 to 6.2.0

Updates org.apache.jena:jena-arq from 6.1.0 to 6.2.0

Updates org.slf4j:slf4j-reload4j from 2.0.18 to 2.0.20

Updates com.auth0:java-jwt from 4.6.0 to 4.6.2

Release notes

Sourced from com.auth0:java-jwt's releases.

4.6.2

Added

  • Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3 in /lib #811 (dependabot[bot]

Fixed

  • Security Fix: Uncaught DateTimeException in java-jwt PayloadDeserializer.getInstantFromSeconds() commit (tanya732)

4.6.1

Added

Changelog

Sourced from com.auth0:java-jwt's changelog.

4.6.2 (2026-10-13)

Full Changelog

Added

  • Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3 in /lib #811 (dependabot[bot]) Fixed
  • Security Fix: Uncaught DateTimeException in java-jwt PayloadDeserializer.getInstantFromSeconds() commit (tanya732)

4.6.1 (2026-09-08)

Full Changelog

Added

Commits

Updates org.jsoup:jsoup from 1.23.2 to 1.24.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.24.1

jsoup 1.24.1 is out now, with major improvements to CSS selectors and HTML parsing.

This release introduces an opt-in Web query mode, bringing selector behavior closer to CSS and browser DOM standards. It also adds new selectors and improves the correctness and performance of :has() queries. Web mode will become the default in 1.25.1; the selector migration guide explains how to get ready.

HTML parsing is now more closely aligned with the current HTML standard, including improvements to tables, formatting elements, templates, and customizable select elements. This release also adds processing instruction support, and includes a number of performance improvements and bug fixes.

There are some changes to existing behavior, including :root matching and limits on Response.bodyStream(). Please make sure to review the changes below before upgrading.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Download jsoup now.

Improvements

  • Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
    • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
    • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
    • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
    • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
  • Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
  • Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
  • :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
  • SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
  • Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
  • Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

  • Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
  • Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
  • Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
  • Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

  • Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
  • Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
  • Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
  • Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
  • Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
  • StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
  • Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
  • :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
  • Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
  • Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
  • Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
  • Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
  • Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
  • If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
  • Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
  • Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
  • Double-escaped script tags in body were being closed too early. #2627

... (truncated)

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.24.1 (2026-Nov-03)

Improvements

  • Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
    • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
    • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
    • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
    • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
  • Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
  • Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
  • :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
  • SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
  • Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
  • Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

  • Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
  • Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
  • Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
  • Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

  • Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
  • Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
  • Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
  • Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
  • Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
  • StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
  • Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
  • :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
  • Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
  • Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
  • Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
  • Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
  • Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
  • If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
  • Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
  • Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
  • Double-escaped script tags in body were being closed too early. #2627
  • Node.before(Node) and Node.after(Node) now leave the document unchanged when given the node itself, instead of throwing a NullPointerException. #2628
  • Fixed HTML parse of <dialog>, <main>, and <search> so their start and end tags close open paragraphs correctly. #2629
  • Updated the parse of malformed end tags such as </ COMMENT > to match the spec (<!-- COMMENT -->). #2631
  • Source position tracking no longer impacts the adoption algo when repeated HTML formatting tags are reconstructed after a paragraph closes. #2633
  • Fixed fragment parsing to ignore <body> and <frameset> start tags when the second open element is not body, matching the HTML spec. #2634
  • Updated how the tokeniser handles malformed doctypes, to remove duplicative tokens and error messages. #2635
  • Corrected HTML tokenisation of malformed comments such as <!---x and incomplete start tags such as <p id=, and improved their error reporting. #2636
  • Fixed FormElement.empty() retaining associations with removed controls. If an input node removed by empty() was subsequently inserted outside its original form, it could incorrectly reappear in that form's elements() and formData() results. #2646
Commits
  • 5e3c284 [maven-release-plugin] prepare release jsoup-1.24.1
  • 5d63820 Link fix
  • 55aa51e Bump org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12...
  • 3203485 Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.3 to 0.26.5 (#2...
  • fdbfd44 Bump github/codeql-action from 4.38.3 to 4.39.0 (#2649)
  • 6fedf39 Bump actions/setup-java from 6.0.1 to 6.1.0 (#2650)
  • 0c508f1 Improve Selector javadoc
  • 6feca03 Detach nested form controls on .empty()
  • e1d48ba Improve query complexity accounting
  • 76c125d Improve exception handling when parsing selectors across buffer boundaries.
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter from 6.1.0 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

  • 2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
  • Fix Mockito docs for -javaagent flag with Gradle [(#3866)](mockito/mockito#3866)
  • Kotlin example for adding Mockito as an agent is incorrect [(#3864)](mockito/mockito#3864)
  • Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 [(#3862)](mockito/mockito#3862)Description has been truncated

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 11, 2026
@dependabot
Bump the minor-and-patch group across 1 directory with 16 updates
c1accf7 
Bumps the minor-and-patch group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [jakarta.servlet:jakarta.servlet-api](https://github.com/eclipse-ee4j/servlet-api) | `6.0.0` | `6.1.0` |
| org.glassfish.jersey.connectors:jersey-apache-connector | `3.1.11` | `3.1.12` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.0` | `1.23.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.6.0-jre` | `33.8.0-jre` |
| org.apache.jena:jena-shacl | `6.1.0` | `6.2.0` |
| org.apache.jena:jena-arq | `6.1.0` | `6.2.0` |
| org.slf4j:slf4j-reload4j | `2.0.18` | `2.0.20` |
| [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.6.0` | `4.6.2` |
| [org.jsoup:jsoup](https://github.com/jhy/jsoup) | `1.23.2` | `1.24.1` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.3` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.3` | `3.6.4` |



Updates `jakarta.servlet:jakarta.servlet-api` from 6.0.0 to 6.1.0
- [Commits](jakartaee/servlet@6.0.0-RELEASE...6.1.0-RELEASE)

Updates `org.glassfish.jersey.connectors:jersey-apache-connector` from 3.1.11 to 3.1.12

Updates `commons-codec:commons-codec` from 1.22.0 to 1.23.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.22.0...rel/commons-codec-1.23.0)

Updates `com.google.guava:guava` from 33.6.0-jre to 33.8.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.jena:jena-shacl` from 6.1.0 to 6.2.0

Updates `org.apache.jena:jena-arq` from 6.1.0 to 6.2.0

Updates `org.slf4j:slf4j-reload4j` from 2.0.18 to 2.0.20

Updates `com.auth0:java-jwt` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/auth0/java-jwt/releases)
- [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md)
- [Commits](auth0/java-jwt@4.6.0...4.6.2)

Updates `org.jsoup:jsoup` from 1.23.2 to 1.24.1
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](jhy/jsoup@jsoup-1.23.2...jsoup-1.24.1)

Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.3)

Updates `org.mockito:mockito-core` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases)
- [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.3 to 3.6.4
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.3...3.6.4)

---
updated-dependencies:
- dependency-name: com.auth0:java-jwt
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.google.guava:guava
  dependency-version: 33.8.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: jakarta.servlet:jakarta.servlet-api
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.jena:jena-arq
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.jena:jena-shacl
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.glassfish.jersey.connectors:jersey-apache-connector
  dependency-version: 3.1.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.slf4j:slf4j-reload4j
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/minor-and-patch-5d6749bf71 branch from 47360df to c1accf7 Compare November 12, 2026 13:32

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants