Skip to content

chore(deps): bump the all-minor-and-patch-updates group across 1 directory with 12 updates#74

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-maven-all-minor-and-patch-updates-b93624f160
Open

chore(deps): bump the all-minor-and-patch-updates group across 1 directory with 12 updates#74
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-maven-all-minor-and-patch-updates-b93624f160

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-minor-and-patch-updates group with 12 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 4.0.5 4.1.0
io.swagger.core.v3:swagger-core-jakarta 2.2.48 2.2.52
io.swagger.core.v3:swagger-annotations-jakarta 2.2.48 2.2.52
io.swagger.core.v3:swagger-models-jakarta 2.2.48 2.2.52
org.projectlombok:lombok 1.18.44 1.18.46
org.mapstruct:mapstruct 1.5.5.Final 1.6.3
org.mapstruct:mapstruct-processor 1.5.5.Final 1.6.3
com.tngtech.archunit:archunit-junit5 1.3.2 1.4.2
io.swagger.parser.v3:swagger-parser 2.1.40 2.1.45
org.jacoco:jacoco-maven-plugin 0.8.14 0.8.15
org.codehaus.mojo:xml-maven-plugin 1.1.0 1.2.1
com.github.spotbugs:spotbugs-maven-plugin 4.9.8.3 4.10.2.0

Updates org.springframework.boot:spring-boot-starter-parent from 4.0.5 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates io.swagger.core.v3:swagger-core-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-models-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-models-jakarta from 2.2.48 to 2.2.52

Updates org.projectlombok:lombok from 1.18.44 to 1.18.46

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

  • PLATFORM: JDK26 support added #4019.
  • PLATFORM: Spring Tools Suite 5 supported #3985.
  • BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
  • BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
  • BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.
Commits
  • 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
  • fcdab3f [version] pre-release version bump
  • 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
  • 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
  • 2be766c Merge branch 'jackson3-final-touches'
  • 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
  • e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
  • 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
  • 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
  • e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates com.tngtech.archunit:archunit-junit5 from 1.3.2 to 1.4.2

Release notes

Sourced from com.tngtech.archunit:archunit-junit5's releases.

ArchUnit 1.4.2

Enhancements

Core

  • DescribedPredicate#negate() returns a DescribedPredicate (#1484)
  • New JavaCodeUnit.Predicates.anyParameterThat and JavaCodeUnit.Predicates.allParameters (#1498; thanks to @​mkhl 👏)
  • Support Java 26 / class file major version 70 (#1544)

ArchUnit 1.4.1

Enhancements

Core

  • Support Java 25 / class file major version 69 (#1440)

Library

  • Support priorities in SlicesRuleDefinition (#1436; thanks to @​guesshe 👏)
  • Ignore synthetic bridge methods in ProxyRules (#1443)

Documentation

  • Improve documentation of slices rule (#1454)

Internal improvements

  • Reduce memory footprint of ClassFileImporterSlowTest (#1446 / #1440)

ArchUnit 1.4.0

Enhancements

Core

  • Support Java 24 / class file major version 68 (#1364)

Lang

  • Improve performance for transitive dependency checks (#1381; thanks to @​To6i 👏)

Library

  • New GeneralCodingRules.OLD_DATE_AND_TIME_CLASSES_SHOULD_NOT_BE_USED (#1385; thanks to @​Bukama 👏)
  • Improve GeneralCodingRules.testClassesShouldResideInTheSamePackageAsImplementation to not fail for classes with no tests in their packages (#1368; thanks to @​krzysztof-owczarek 👏)

JUnit

  • Fix failure when junit.testFilter is used (#1361; thanks to @​Sparkymann 👏)
  • Enable @AnalyzeClasses annotation to be used as meta annotation (#1300; thanks to @​mathze 👏)

Documentation

  • Fix user guide describing wrong default behavior of @AnalyzeClasses (#1406)
  • Clarify Slices documentation (#1366; thanks to @​mipo256 👏)

Internal improvements

  • Run tests with JUnit Platform to pave the way to migrate to JUnit 5 (#1294)
  • Update Gradle Wrapper from 7.6 to 8.12 (#1392)

... (truncated)

Commits
  • e45aaa2 prepare release 1.4.2
  • c07193c set version to 1.4.2-SNAPSHOT
  • ac9b896 migrate from (meanwhile shut down) OSSRH to Central Publisher Portal using th...
  • b72fcaf Bump actions/github-script from 8 to 9
  • fc1881d Bump addressable from 2.8.7 to 2.9.0 in /docs
  • dee39bb Bump activesupport from 7.1.3.4 to 7.2.3.1 in /docs
  • b097007 Bump gradle/actions from 5 to 6
  • 4d7cfe9 Bump json from 2.18.1 to 2.19.2 in /docs
  • 90dc773 Bump nokogiri from 1.18.9 to 1.19.1 in /docs
  • 7a88298 Bump faraday from 2.10.1 to 2.14.1 in /docs
  • Additional commits viewable in compare view

Updates io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.45

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.45 released!

  • bump swagger-core to 2.2.52 (#2359)
  • build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.11.0 (#2354)
  • build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.22.0 (#2352)
  • build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.4.0 (#2350)
  • chore: fix syntax error in next-snapshot workflow (#2347)
  • build(deps): bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.5.0 (#2329)
  • build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.12.0 (#2328)

Swagger-parser 2.1.44 released!

  • fix: Replace the unsafe Yaml instantiation in ReferenceVisitor.getYam… (#2344)

Swagger-parser 2.1.43 released!

  • fix: resolve refs within external schemas (#2338)

Swagger-parser 2.1.42 released!

  • Update swagger-core to 2.2.50 (#2334)
  • fix: use explicit prefix for array items with dotted property names (#2330)
  • chore: migrate from tibdex/github-app-token to actions/create-github-app-token (#2324)
  • build(deps): bump commons-io:commons-io from 2.20.0 to 2.22.0 (#2319)
  • build(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0 (#2318)
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.5 (#2316)

Swagger-parser 2.1.41 released!

  • Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
  • chore: update v2 parser to 1.0.76 (#2314)
  • Prevent StackOverflowError in ResolverFully (#2297)
  • Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
  • fix(converter): keep x-nullable in shared $ref responses (#2276)
Commits
  • 05c2b71 prepare release 2.1.45 (#2360)
  • ef9f551 bump swagger-core to 2.2.52 (#2359)
  • 75c0366 build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • 3e0726b build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin (#...
  • fa0cc91 build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • a901e02 build(deps): bump com.fasterxml.jackson.core:jackson-databind (#2352)
  • 3e57896 build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin (#2350)
  • 993bef6 build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin (#2328)
  • e7dc08c build(deps): bump org.apache.maven.plugins:maven-jar-plugin (#2329)
  • 2ce81b1 chore: fix syntax error in next-snapshot workflow (#2347)
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.15

New Features

  • JaCoCo now officially supports Java 26 (GitHub #2076).
  • Experimental support for Java 27 class files (GitHub #2004).
  • Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #1905).
  • Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #1944).
  • Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #2097).
  • Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #2098).
  • Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #2023).
  • Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #2114).
  • For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #2089).

Fixed bugs

  • Fixed processing of Kotlin SMAP in synthetic classes (GitHub #1985).
  • Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #2065, #2074).
  • For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #2073).
  • Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #1651).

Non-functional Changes

  • JaCoCo now depends on ASM 9.10.1 (GitHub #2134).
Commits
  • 6c5260a Prepare release v0.8.15
  • 5c05141 Transfer of execution data through socket should use buffered stream (#2089)
  • ab5efa9 Remove from Azure Pipelines all builds except with JDK 5 and JDK EA (#2148)
  • 5f6ea38 Use Windows 2025 image in GitHub Actions (#2130)
  • 35a8af2 Use Renovate instead of Dependabot for updates of ASM (#2137)
  • 85b8ddf Upgrade ASM to 9.10.1 (#2134)
  • 2988647 AgentModule should use ClassLoader of agent instead of SystemClassLoader (#1651)
  • 75a4e31 Add filter for Kotlin @JvmExposeBoxed (#1944)
  • 691fa1d Use Renovate instead of Dependabot for updates of GitHub Actions (#2132)
  • 3e18f17 Require at least JDK 21 for build (#2128)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:xml-maven-plugin from 1.1.0 to 1.2.1

Release notes

Sourced from org.codehaus.mojo:xml-maven-plugin's releases.

1.2.1

📦 Dependency updates

1.2.0

🚀 New features and improvements

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 441049d [maven-release-plugin] prepare release xml-maven-plugin-1.2.1
  • 9f7b349 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 1f1a73d Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0
  • 46288aa Bump org.codehaus.mojo:mojo-parent from 94 to 95
  • 40e94cd Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • fb83f32 Bump org.codehaus.plexus:plexus-io from 3.5.2 to 3.6.0
  • 28bedc9 Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • b226817 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 15a383e [maven-release-plugin] prepare for next development iteration
  • 17187cc [maven-release-plugin] prepare release 1.2.0
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.3 to 4.10.2.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.10.2.0

  • Support spotbugs 4.10.2

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.5...spotbugs-maven-plugin-4.10.2.0

Spotbugs Maven Plugin 4.9.8.5

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.4...spotbugs-maven-plugin-4.9.8.5

Spotbugs Maven Plugin 4.9.8.4

  • build support for maven 4 with maven 4 plugins
  • spotbugs extensions jars now moved to target/spotbugs instead of root
  • new spotbugs-aggregate mojo for multi module
  • support maven toolchains
  • block gui when environment is headless
  • all spotbug extensions as regular dependencies
  • learn to map spotbug extensions to their source project documentation
  • in auxiliary class path exclude java.* packages
  • improve code coverage

note: This release was done on older spotbugs (not the new 4.10.1) on purpose to keep these changes separate from that of spotbugs. The spotbugs 4.10.1 support release will be available in a day or two and users can otherwise override the core module as there are no changes to be done internally.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 19, 2026
@dependabot dependabot Bot force-pushed the dependabot-maven-all-minor-and-patch-updates-b93624f160 branch from 2ce5ebf to f441e5d Compare June 22, 2026 05:10
@dependabot
chore(deps): bump the all-minor-and-patch-updates group across 1 dire…
1753b99 
…ctory with 12 updates

Bumps the all-minor-and-patch-updates group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.0.5` | `4.1.0` |
| io.swagger.core.v3:swagger-core-jakarta | `2.2.48` | `2.2.52` |
| io.swagger.core.v3:swagger-annotations-jakarta | `2.2.48` | `2.2.52` |
| io.swagger.core.v3:swagger-models-jakarta | `2.2.48` | `2.2.52` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.44` | `1.18.46` |
| [org.mapstruct:mapstruct](https://github.com/mapstruct/mapstruct) | `1.5.5.Final` | `1.6.3` |
| [org.mapstruct:mapstruct-processor](https://github.com/mapstruct/mapstruct) | `1.5.5.Final` | `1.6.3` |
| [com.tngtech.archunit:archunit-junit5](https://github.com/TNG/ArchUnit) | `1.3.2` | `1.4.2` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.40` | `2.1.45` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` |
| [org.codehaus.mojo:xml-maven-plugin](https://github.com/mojohaus/xml-maven-plugin) | `1.1.0` | `1.2.1` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.8.3` | `4.10.2.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 4.0.5 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.5...v4.1.0)

Updates `io.swagger.core.v3:swagger-core-jakarta` from 2.2.48 to 2.2.52

Updates `io.swagger.core.v3:swagger-annotations-jakarta` from 2.2.48 to 2.2.52

Updates `io.swagger.core.v3:swagger-models-jakarta` from 2.2.48 to 2.2.52

Updates `io.swagger.core.v3:swagger-annotations-jakarta` from 2.2.48 to 2.2.52

Updates `io.swagger.core.v3:swagger-models-jakarta` from 2.2.48 to 2.2.52

Updates `org.projectlombok:lombok` from 1.18.44 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.44...v1.18.46)

Updates `org.mapstruct:mapstruct` from 1.5.5.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.5.Final...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.5.5.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.5.Final...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.5.5.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.5.Final...1.6.3)

Updates `com.tngtech.archunit:archunit-junit5` from 1.3.2 to 1.4.2
- [Release notes](https://github.com/TNG/ArchUnit/releases)
- [Commits](TNG/ArchUnit@v1.3.2...v1.4.2)

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.40 to 2.1.45
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.40...v2.1.45)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.14...v0.8.15)

Updates `org.codehaus.mojo:xml-maven-plugin` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/mojohaus/xml-maven-plugin/releases)
- [Commits](mojohaus/xml-maven-plugin@1.1.0...xml-maven-plugin-1.2.1)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.8.3 to 4.10.2.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.3...spotbugs-maven-plugin-4.10.2.0)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: com.tngtech.archunit:archunit-junit5
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-version: 2.2.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-annotations-jakarta
  dependency-version: 2.2.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-core-jakarta
  dependency-version: 2.2.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-models-jakarta
  dependency-version: 2.2.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-models-jakarta
  dependency-version: 2.2.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.44
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.codehaus.mojo:xml-maven-plugin
  dependency-version: 1.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.mapstruct:mapstruct
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-and-patch-updates
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-and-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-maven-all-minor-and-patch-updates-b93624f160 branch from f441e5d to 1753b99 Compare June 23, 2026 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants