Skip to content

build(deps): bump the java-maven-deps group across 1 directory with 4 updates - #2583

Merged
SteveSandersonMS merged 3 commits into
mainfrom
dependabot/maven/java/java-maven-deps-cf3137b550
Sep 10, 2026
Merged

build(deps): bump the java-maven-deps group across 1 directory with 4 updates#2583
SteveSandersonMS merged 3 commits into
mainfrom
dependabot/maven/java/java-maven-deps-cf3137b550

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the java-maven-deps group with 4 updates in the /java directory: org.apache.maven.plugins:maven-compiler-plugin, org.apache.maven.plugins:maven-surefire-plugin, org.apache.maven.plugins:maven-failsafe-plugin and com.github.spotbugs:spotbugs-maven-plugin.

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.0 to 4.10.4.1

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

spotbugs-maven-plugin-4.10.4.1

BREAKING

In 2014, maven reporting added various settings that should have resulted in removal here but had gone unseen. These are now applied and therefore the state changed to immutable which will cause plugin to fail if users do not adjust configuration as noted here.

Users who previously configured outputEncoding directly on the SpotBugs Maven Plugin must configure project.reporting.outputEncoding instead and remove it to avoid errors. Users passing fork option should remove it to avoid warnings as support was gone in last release and it does nothing. Users who previously configured outputDirectory directly on the SpotBugs Maven Plugin must configure project.reporting.outputDirectory instead and remove it to avoid errors.

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1

Commits
  • 59f4efc [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.4.1
  • 1081359 Merge pull request #1519 from spotbugs/renovate/byte-buddy.version
  • 23caeff Merge pull request #1520 from spotbugs/renovate/slf4j-monorepo
  • 8a5d7f0 Update dependency org.slf4j:slf4j-bom to v2.0.19
  • 8be188f Update byte-buddy.version to v1.18.13
  • 742e10c Merge pull request #1518 from hazendaz/master
  • d7f6a56 Cleanup groovy in the trait
  • eda58b6 Cleanup groovy within report generator
  • a518d7b Cleanup xdocs reporter groovy each usage
  • 4c94029 Merge pull request #1517 from hazendaz/master
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 9, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 9, 2026 08:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 9, 2026
… updates

Bumps the java-maven-deps group with 4 updates in the /java directory: [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) and [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin).


Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.4.0 to 4.10.4.1
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.0...spotbugs-maven-plugin-4.10.4.1)

---
updated-dependencies:
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-maven-deps
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-maven-deps
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-maven-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java-maven-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the java-maven-deps group in /java with 4 updates build(deps): bump the java-maven-deps group across 1 directory with 4 updates Sep 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/java/java-maven-deps-cf3137b550 branch from ed85701 to 362c27b Compare September 10, 2026 13:21
SteveSandersonMS and others added 2 commits September 10, 2026 13:44
…tics

maven-failsafe-plugin 3.6.0 (bumped in this PR) no longer treats
-DskipTests as skipping integration tests; only -DskipITs or
-Dmaven.test.skip now do. The docs-validation Validate Java job relied
on -DskipTests also skipping the CLI-install step (via the
skip-cli-install-when-tests-skipped profile), so ITs started running
without the pinned CLI installed, failing with:
  The pinned CLI could not be prepared and no CLI was found on PATH.

Switch to -Dmaven.test.skip=true, which the sdk pom already has a
matching skip-cli-install-when-maven-test-skip profile for, restoring
the previous skip-everything-but-compile behavior for this job.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
scripts/docs-validation/validate.ts independently ran
'mvn install -f java/pom.xml -DskipTests -q' to install the local SDK
before validating Java doc snippets. This hit the same
maven-failsafe-plugin 3.6.0 skipTests/skipITs semantics change as the
docs-validation workflow step, so it also needs to skip ITs via
-Dmaven.test.skip=true instead.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

@SteveSandersonMS SteveSandersonMS left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving this Dependabot Java build-plugin bump (maven-compiler-plugin, maven-surefire-plugin, maven-failsafe-plugin, spotbugs-maven-plugin).

The bump itself is routine and low-risk, but it exposed a real CI regression: maven-failsafe-plugin 3.6.0 changed -DskipTests to no longer skip integration tests (only -DskipITs/-Dmaven.test.skip do now). Two places in this repo relied on the old semantics to skip the pinned-CLI-dependent integration tests:

  1. .github/workflows/docs-validation.yml (Validate Java job)
  2. scripts/docs-validation/validate.ts (SDK install step used to validate Java doc snippets)

I updated both to use -Dmaven.test.skip=true, which java/sdk/pom.xml already has a matching profile for (skips CLI install the same way). All required checks are now green.

@SteveSandersonMS
SteveSandersonMS added this pull request to the merge queue Sep 10, 2026
@SteveSandersonMS
SteveSandersonMS removed this pull request from the merge queue due to a manual request Sep 10, 2026
@SteveSandersonMS
SteveSandersonMS merged commit 210a4b5 into main Sep 10, 2026
45 checks passed
@SteveSandersonMS
SteveSandersonMS deleted the dependabot/maven/java/java-maven-deps-cf3137b550 branch September 10, 2026 14:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant