chore(deps): bump the maven-dev-deps group across 3 directories with 3 updates by dependabot[bot] · Pull Request #661 · jruby/warbler

dependabot · 2026-09-04T11:31:45Z

Bumps the maven-dev-deps group with 2 updates in the / directory: org.apache.maven.plugins:maven-compiler-plugin and org.apache.maven.plugins:maven-surefire-plugin.
Bumps the maven-dev-deps group with 2 updates in the /ext directory: org.apache.maven.plugins:maven-compiler-plugin and org.apache.maven.plugins:maven-surefire-plugin.
Bumps the maven-dev-deps group with 3 updates in the /integration directory: org.apache.maven.plugins:maven-compiler-plugin, org.apache.maven.plugins:maven-surefire-plugin and org.junit.jupiter:junit-jupiter.

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (#3447)
b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (#3447)
b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (

…3 updates Bumps the maven-dev-deps group with 2 updates in the / directory: [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) and [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire). Bumps the maven-dev-deps group with 2 updates in the /ext directory: [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) and [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire). Bumps the maven-dev-deps group with 3 updates in the /integration directory: [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework). Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `org.junit.jupiter:junit-jupiter` from 5.14.4 to 6.1.3 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.14.4...r6.1.3) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dev-deps - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dev-deps - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dev-deps - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dev-deps - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dev-deps - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-dev-deps - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 6.1.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: maven-dev-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-04T11:33:15Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 4, 2026

dependabot Bot closed this Sep 4, 2026

dependabot Bot deleted the dependabot/maven/maven-dev-deps-bed9b75b22 branch September 4, 2026 11:33

Navigation Menu

Uh oh!

chore(deps): bump the maven-dev-deps group across 3 directories with 3 updates - #661

chore(deps): bump the maven-dev-deps group across 3 directories with 3 updates#661
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-dev-deps-bed9b75b22

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading