Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the root group with 21 updates in the / directory:

Package From To
org.apache.maven.plugins:maven-compiler-plugin 3.11.0 3.14.1
org.codehaus.mojo:build-helper-maven-plugin 3.4.0 3.6.1
com.google.protobuf:protobuf-java 3.25.5 4.32.1
org.apache.maven.plugins:maven-antrun-plugin 1.3 3.1.0
org.codehaus.mojo:exec-maven-plugin 3.1.0 3.6.0
org.apache.maven.plugins:maven-jar-plugin 3.3.0 3.4.2
com.google.guava:guava 33.3.0-jre 33.5.0-jre
org.apache.maven.scm:maven-scm-api 2.0.1 2.2.1
org.apache.maven.scm:maven-scm-provider-gitexe 2.0.1 2.2.1
org.mockito:mockito-core 2.23.4 5.20.0
org.apache.felix:maven-bundle-plugin 5.1.9 6.0.0
org.apache.maven.plugins:maven-surefire-plugin 3.1.2 3.5.4
org.apache.maven.plugins:maven-source-plugin 3.3.0 3.3.1
org.apache.maven.plugins:maven-javadoc-plugin 3.5.0 3.12.0
org.apache.maven.plugins:maven-release-plugin 3.0.1 3.1.1
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.9.0
org.apache.maven.plugins:maven-gpg-plugin 3.1.0 3.2.8
com.google.template:soy 2022-07-20 v20160111
com.google.cloud.tools:appengine-maven-plugin 2.4.4 2.8.3
commons-io:commons-io 2.14.0 2.20.0
commons-fileupload:commons-fileupload 1.5 1.6.0

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

3.14.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.4.0 to 3.6.1

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.0

Changes

🚀 New features and improvements

📦 Dependency updates

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 908df59 [maven-release-plugin] prepare release 3.6.1
  • faafd8f Use common release-drafter configuration
  • a91b402 Rename Goals to Plugin Documentation in the site menu
  • 1e9136d Bump org.codehaus.mojo:mojo-parent from 87 to 91
  • 8700ddc Bump org.apache.maven.shared:file-management from 3.1.0 to 3.2.0
  • ab2c635 Bump org.codehaus.mojo:mojo-parent from 86 to 87
  • 611ce40 Typos.
  • 02d2b8e Bump org.codehaus.mojo:mojo-parent from 85 to 86
  • d742e5c Update site.xml to Doxia 2
  • 80b89b8 Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 3.25.5 to 4.32.1

Commits

Updates org.apache.maven.plugins:maven-antrun-plugin from 1.3 to 3.1.0

Release notes

Sourced from org.apache.maven.plugins:maven-antrun-plugin's releases.

maven-antrun-plugin-3.1.0

What's Changed

New Contributors

Full Changelog: apache/maven-antrun-plugin@maven-antrun-plugin-3.0.0...maven-antrun-plugin-3.1.0

Commits
  • feceee8 [maven-release-plugin] prepare release maven-antrun-plugin-3.1.0
  • 4e899c4 [MANTRUN-236] Upgrade Maven Plugin Plugin to 3.6.4
  • 61c21bd Update CI URL
  • b446737 Bump checkstyle from 9.2.1 to 9.3
  • 43cb90e [MANTRUN-232] Require Maven 3.2.5 - set proper maven scopes
  • 2274253 Shared GitHub Actions v2
  • 7911362 Bump checkstyle from 9.0.1 to 9.2.1
  • 5bb03c3 (doc) Update plugins before release
  • e773180 Bump maven-site-plugin from 3.9.1 to 3.10.0
  • 68fc833 Bump xmlunit-matchers from 2.8.3 to 2.8.4
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.6.0

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.5.1

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • febfc6f [maven-release-plugin] prepare release 3.6.0
  • ed19086 fix inheritIo option (#488)
  • a4297c6 Use JSR-330 for component injection
  • 5d90977 Use Maven 3.9.11 in dependencies, still requires 3.6.3 as minimum
  • b55f906 Re-run failed tests
  • 664d788 [ExecMojo]Add getShebang method to correctly set the command line executabl...
  • 09628c4 removed it tests that should no longer fail
  • 5db86c2 spotless
  • e1b7804 Removed unused input
  • 5be2535 JSR 512 support
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.4.2

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.4.2

🐛 Bug Fixes

👻 Maintenance

3.4.1

🐛 Bug Fixes

📦 Dependency updates

3.4.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

Commits
  • 95007e8 [maven-release-plugin] prepare release maven-jar-plugin-3.4.2
  • 99584ce Build with Maven 4
  • e9c98a4 [MJAR-310] fixed toolchain version detection when toolchain paths contain whi...
  • a5554bb [maven-release-plugin] prepare for next development iteration
  • 8b29adc [maven-release-plugin] prepare release maven-jar-plugin-3.4.1
  • 325b299 [MJAR-308] Bump org.apache.maven.plugins:maven-plugins from 41 to 42 (#85)
  • 52111cc [MJAR-307] Wrong version of commons-io cause a ClassNotFound o.a.commons.io.f...
  • 902d4c5 [maven-release-plugin] prepare for next development iteration
  • 992f44a [maven-release-plugin] prepare release maven-jar-plugin-3.4.0
  • 5e31b99 [MJAR-296] Allow including files excluded by default. (#67)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.3.0-jre to 33.5.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.5.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.5.0-jre</version>
  <!-- or, for Android: -->
  <version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) (087f2c4a80)
  • collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. (4dc93be9a8)
  • math: Added saturatedAbs methods to IntMath and LongMath. (ed0e518f20)
  • net: Added image/avif to MediaType. (53344caba6)
  • testing: Made CollectorTester available to Android users. (294c251079)
  • util.concurrent: Added Striped.custom. (1586eb271d)

33.4.8

Guava 33.4.8 fixes a problem that we introduced while starting to migrate guava-android off Unsafe in 33.4.7.

Even if you're not upgrading from Guava 33.4.0 or earlier, still read the release notes for Guava 33.4.1. Those release notes contain information about the effects of Guava 33.4.5 and higher on the module system.

... (truncated)

Commits

Updates org.apache.maven.scm:maven-scm-api from 2.0.1 to 2.2.1

Release notes

Sourced from org.apache.maven.scm:maven-scm-api's releases.

2.2.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • f2a75b3 [maven-release-plugin] prepare for next development iteration
  • 65b342b [maven-release-plugin] prepare release maven-scm-2.2.1
  • ab95cfc [maven-release-plugin] rollback the release of maven-scm-2.2.1
  • 26021cf [maven-release-plugin] prepare for next development iteration
  • 851705a Add method to ScmManager to get an ScmRepository from an existing
  • 01ffa73 trivial: clarify description
  • 0e5bccd Deprecate ConsumerUtils (#1315)
  • ea97644 Reduce log noise (#1313)
  • 092eed6 Use SSHD 2.16.0
  • 041492e Follow Oracle Javadoc guidelines (#1312)
  • Additional commits viewable in compare view

Updates org.apache.maven.scm:maven-scm-provider-gitexe from 2.0.1 to 2.2.1

Updates org.mockito:mockito-core from 2.23.4 to 5.20.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

v5.19.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.19.0

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 1, 2025 22:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2025
@dependabot dependabot bot force-pushed the dependabot/maven/root-ea839f2431 branch from 263d78e to 582553f Compare October 9, 2025 08:38
Bumps the root group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.11.0` | `3.14.1` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.4.0` | `3.6.1` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `3.25.5` | `4.32.1` |
| [org.apache.maven.plugins:maven-antrun-plugin](https://github.com/apache/maven-antrun-plugin) | `1.3` | `3.1.0` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.1.0` | `3.6.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.3.0` | `3.4.2` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.3.0-jre` | `33.5.0-jre` |
| [org.apache.maven.scm:maven-scm-api](https://github.com/apache/maven-scm) | `2.0.1` | `2.2.1` |
| org.apache.maven.scm:maven-scm-provider-gitexe | `2.0.1` | `2.2.1` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `2.23.4` | `5.20.0` |
| org.apache.felix:maven-bundle-plugin | `5.1.9` | `6.0.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.1.2` | `3.5.4` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.0` | `3.3.1` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.5.0` | `3.12.0` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.0.1` | `3.1.1` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.1.0` | `3.2.8` |
| [com.google.template:soy](https://github.com/google/closure-templates) | `2022-07-20` | `v20160111` |
| [com.google.cloud.tools:appengine-maven-plugin](https://github.com/GoogleCloudPlatform/appengine-plugins) | `2.4.4` | `2.8.3` |
| [commons-io:commons-io](https://github.com/apache/commons-io) | `2.14.0` | `2.20.0` |
| commons-fileupload:commons-fileupload | `1.5` | `1.6.0` |



Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.11.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.11.0...maven-compiler-plugin-3.14.1)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.4.0 to 3.6.1
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.4.0...3.6.1)

Updates `com.google.protobuf:protobuf-java` from 3.25.5 to 4.32.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `org.apache.maven.plugins:maven-antrun-plugin` from 1.3 to 3.1.0
- [Release notes](https://github.com/apache/maven-antrun-plugin/releases)
- [Commits](apache/maven-antrun-plugin@maven-antrun-plugin-1.3...maven-antrun-plugin-3.1.0)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.1.0 to 3.6.0
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@exec-maven-plugin-3.1.0...3.6.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.3.0 to 3.4.2
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.3.0...maven-jar-plugin-3.4.2)

Updates `com.google.guava:guava` from 33.3.0-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.maven.scm:maven-scm-api` from 2.0.1 to 2.2.1
- [Release notes](https://github.com/apache/maven-scm/releases)
- [Commits](apache/maven-scm@maven-scm-2.0.1...v2.2.1)

Updates `org.apache.maven.scm:maven-scm-provider-gitexe` from 2.0.1 to 2.2.1

Updates `org.mockito:mockito-core` from 2.23.4 to 5.20.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v2.23.4...v5.20.0)

Updates `org.apache.felix:maven-bundle-plugin` from 5.1.9 to 6.0.0

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.1.2 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.1.2...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.0...maven-source-plugin-3.3.1)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.5.0 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.5.0...maven-javadoc-plugin-3.12.0)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.0.1 to 3.1.1
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.0.1...maven-release-3.1.1)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.1.0 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.1.0...maven-gpg-plugin-3.2.8)

Updates `com.google.template:soy` from 2022-07-20 to v20160111
- [Commits](https://github.com/google/closure-templates/commits)

Updates `com.google.cloud.tools:appengine-maven-plugin` from 2.4.4 to 2.8.3
- [Release notes](https://github.com/GoogleCloudPlatform/appengine-plugins/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/appengine-plugins/blob/main/CHANGELOG.md)
- [Commits](https://github.com/GoogleCloudPlatform/appengine-plugins/commits)

Updates `commons-io:commons-io` from 2.14.0 to 2.20.0
- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-io@rel/commons-io-2.14.0...rel/commons-io-2.20.0)

Updates `commons-fileupload:commons-fileupload` from 1.5 to 1.6.0

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-antrun-plugin
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: root
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.apache.maven.scm:maven-scm-api
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.apache.maven.scm:maven-scm-provider-gitexe
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.20.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: root
- dependency-name: org.apache.felix:maven-bundle-plugin
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: com.google.template:soy
  dependency-version: v20160111
  dependency-type: direct:production
  dependency-group: root
- dependency-name: com.google.cloud.tools:appengine-maven-plugin
  dependency-version: 2.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: commons-io:commons-io
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
- dependency-name: commons-fileupload:commons-fileupload
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/root-ea839f2431 branch from 582553f to 7a42b43 Compare October 23, 2025 11:04
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 1, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 1, 2025
@dependabot dependabot bot deleted the dependabot/maven/root-ea839f2431 branch November 1, 2025 22:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants