Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps the maven-version-updates group with 28 updates in the / directory:

Package From To
org.bouncycastle:bcprov-jdk18on 1.81 1.83
org.bouncycastle:bcpkix-jdk18on 1.81 1.83
com.google.errorprone:error_prone_core 2.40.0 2.45.0
com.uber.nullaway:nullaway 0.12.7 0.12.14
com.nimbusds:nimbus-jose-jwt 10.4 10.6
com.nimbusds:oauth2-oidc-sdk 11.26 11.30.1
org.apache.httpcomponents.client5:httpclient5 5.5 5.5.1
com.fasterxml.jackson.core:jackson-core 2.19.2 2.20
com.fasterxml.jackson.core:jackson-annotations 2.19.2 2.20
com.fasterxml.jackson.core:jackson-databind 2.19.2 2.20
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider 2.19.2 2.20
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.2 2.20
org.openapitools:jackson-databind-nullable 0.2.6 0.2.8
org.junit.jupiter:junit-jupiter-api 5.13.4 6.0.1
org.testcontainers:testcontainers 1.21.3 2.0.2
io.github.classgraph:classgraph 4.8.181 4.8.184
com.google.errorprone:error_prone_annotations 2.40.0 2.45.0
com.github.spotbugs:spotbugs-maven-plugin 4.9.3.2 4.9.8.2
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-enforcer-plugin 3.6.1 3.6.2
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 3.12.0
org.apache.maven.plugins:maven-source-plugin 3.3.1 3.4.0
org.jacoco:jacoco-maven-plugin 0.8.13 0.8.14
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
com.diffplug.spotless:spotless-maven-plugin 2.46.0 3.1.0
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.9.0

Updates org.bouncycastle:bcprov-jdk18on from 1.81 to 1.83

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.1.1 Version Release: 1.83 Date:      TBD

2.2.1 Version Release: 1.83 Date:      2025, November 27th.

... (truncated)

Commits

Updates org.bouncycastle:bcpkix-jdk18on from 1.81 to 1.83

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

2.1.1 Version Release: 1.83 Date:      TBD

2.2.1 Version Release: 1.83 Date:      2025, November 27th.

... (truncated)

Commits

Updates com.google.errorprone:error_prone_core from 2.40.0 to 2.45.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.45.0

Changes:

  • Improved compatibility with latest JDK 26 EA builds.

New checks:

Closed issues: #5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

Error Prone 2.44.0

Changes

Closed issues: #5218, #5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

Error Prone 2.43.0

The minimum supported JDK version to run Error Prone is now JDK 21 (google/error-prone#4867).

Changes:

  • -XepPatchChecks now skips disabled checks (#4943)
  • AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

Closed issues: #4943, #5102, #5107, #5121, #5158, #5217, #5239

Full changelog: google/error-prone@v2.42.0...v2.43.0

Error Prone 2.42.0

New checks:

Changes:

... (truncated)

Commits
  • c862815 Release Error Prone 2.45.0
  • 7027d9f Add negative test cases for AlwaysThrows with non-literal arguments.
  • 8669adb Fix parameter name handling of enum constructor arguments
  • 679c4ac Update end position handling
  • dc1279e AssertSameIncompatible: flag calls to assertSame/etc where the calls are guar...
  • 24387de Internal change
  • 5300dc6 Disable an InvalidLink test for a javadoc bug on JDK >= 26
  • 75dcd53 Fix the Optional wrapping in the description of NonCanonicalStaticMemberImport.
  • 10f5424 FormatStringShouldUsePlaceholders shouldn't rewrite calls with a pass-through...
  • 3ef3d79 The verb form of "recursion" is "to recur", not "to recurse". Quoting my CS p...
  • Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.7 to 0.12.14

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

  • Various optimizations (#1358)
  • Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#1365)
  • Optimize methods that check for annotations on a Symbol (#1362)
  • Tune warning message for RequireExplicitNullMarking (#1366)
  • Maintenance
    • Fix arg concatenation bug in JMH (#1357)
    • Move wildcard-related tests to a separate test class (#1361)

NullAway 0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking, that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @​FxMorin, to tell NullAway to preserve nullability information from the enclosing method when analyzing the body of certain lambdas. See the docs for details.

  • Use passed-in TreePath in one more place when available (#1329)
  • Checker to ensure explicit null marking of every class (#1323)
  • Bound size of alreadyRunAnalyses cache to be consistent (#1334)
  • Improve inference for generic methods with lambda argument containing return statements by @​dhruv-agr (#1337)
  • Add PureExceptLambda annotation by @​FxMorin (#1325)
  • Support marking method type variable upper bounds as @Nullable in library models (#1345)
  • Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @​haewiful (#1344)
  • Better fix for dataflow analysis caching (#1353)
  • Maintenance
    • Add package-info files with @​NullMarked (#1331)
    • Speed up buildWithNullAway task (#1330)
    • Enable the VoidMissingNullable checker and autofix all extant warnings (#1332)
    • Bump JDK version to 25 for integration tests (#1336)
    • Switch Coderabbit to assertive mode (#1338)
    • Enable EqualsMissingNullable check and fix all extant warnings (#1339)
    • Bump to AutoValue 1.11.1 (#1340)
    • Update Caffeine benchmark (#1342)
    • Add a test for a useless @​Contract (#1346)
    • Test case for wildcards in Generic Method with Lambda Arguments by @​dhruv-agr (#1349)
    • Add initial AGENTS.md file (#1352)

NullAway 0.12.12

This release fixes a severe performance regression introduced in NullAway 0.12.11 and we encourage all users of 0.12.11 to upgrade.

  • Address severe performance regression in dataflow analysis (#1328)
  • Maintenance
    • Fix test args for SuggestedFixesTests (#1324)
    • Stop passing -processorpath to CompilationTestHelper in NullAway tests (#1326)

NullAway 0.12.11

Version 0.12.11

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

  • Various optimizations (#1358)
  • Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#1365)
  • Optimize methods that check for annotations on a Symbol (#1362)
  • Tune warning message for RequireExplicitNullMarking (#1366)
  • Maintenance
    • Fix arg concatenation bug in JMH (#1357)
    • Move wildcard-related tests to a separate test class (#1361)

Version 0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking, that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @​FxMorin, to tell NullAway to preserve nullability information from the enclosing method when analyzing the body of certain lambdas. See the docs for details.

  • Use passed-in TreePath in one more place when available (#1329)
  • Checker to ensure explicit null marking of every class (#1323)
  • Bound size of alreadyRunAnalyses cache to be consistent (#1334)
  • Improve inference for generic methods with lambda argument containing return statements by @​dhruv-agr (#1337)
  • Add PureExceptLambda annotation by @​FxMorin (#1325)
  • Support marking method type variable upper bounds as @Nullable in library models (#1345)
  • Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @​haewiful (#1344)
  • Better fix for dataflow analysis caching (#1353)
  • Maintenance
    • Add package-info files with @​NullMarked (#1331)
    • Speed up buildWithNullAway task (#1330)
    • Enable the VoidMissingNullable checker and autofix all extant warnings (#1332)
    • Bump JDK version to 25 for integration tests (#1336)
    • Switch Coderabbit to assertive mode (#1338)
    • Enable EqualsMissingNullable check and fix all extant warnings (#1339)
    • Bump to AutoValue 1.11.1 (#1340)
    • Update Caffeine benchmark (#1342)
    • Add a test for a useless @​Contract (#1346)
    • Test case for wildcards in Generic Method with Lambda Arguments by @​dhruv-agr (#1349)
    • Add initial AGENTS.md file (#1352)

Version 0.12.12

This release fixes a severe performance regression introduced in NullAway 0.12.11 and we encourage all users of 0.12.11 to upgrade.

... (truncated)

Commits
  • 73b0376 Prepare for release 0.12.14.
  • 4fb78e0 Changelog for version 0.12.14 (#1367)
  • 1d43cb1 Tune warning message for RequireExplicitNullMarking (#1366)
  • 291abc5 Optimize methods that check for annotations on a Symbol (#1362)
  • e4999a6 Don't report matches from RequireExplicitNullMarking when run at SUGGESTION l...
  • 9a882ee move wildcard-related tests to a separate test class (#1361)
  • effe83d Various optimizations (#1358)
  • 2294177 Fix arg concatenation bug in JMH (#1357)
  • f39e5bd Prepare next development version.
  • b2245bf Prepare for release 0.12.13.
  • Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.4 to 10.6

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

10.5 (2025-09-05) * Support for specifying a ScheduledExecutorService instance in RefreshAheadCachingJWKSetSource and JWKSourceBuilder (iss #592).

10.6 (2025-11-06) * Adds static CollectionUtils.containsNull(Set) method. * DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatible with Set.of (iss #499). * The DefaultJWTClaimsVerifier must not include JWT claim values in BadJWTException messages (iss #605).

Commits
  • 584951f Adds support for specifying the ScheduledExecutorService-instance in RefreshA...
  • adf2576 [maven-release-plugin] prepare for next development iteration
  • 436fb18 Add tests for JWKSourceBuilder and RefreshAheadCachingJWKSetSource
  • d4137db Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595)
  • c6c8025 [maven-release-plugin] prepare release 10.4.1
  • e7c7a8c [maven-release-plugin] prepare for next development iteration
  • b33b54b Bumps GSon and BouncyCastle
  • 3eeaada [maven-release-plugin] prepare release 10.4.2
  • 2aa473f [maven-release-plugin] prepare for next development iteration
  • d52acf5 Merged in iss592 (pull request #129)
  • Additional commits viewable in compare view

Updates com.nimbusds:oauth2-oidc-sdk from 11.26 to 11.30.1

Changelog

Sourced from com.nimbusds:oauth2-oidc-sdk's changelog.

version 1.0 (2012-05-29) * First official release with authorisation endpoint, token endpoint, check ID endpoint and UserInfo endpoint support. * JSON Web Tokens (JWTs) support through the Nimbus-JWT library. * Language Tags (RFC 5646) support through the Nimbus-LangTag library. * JSON support through the JSON Smart library.

version 2.0 (2013-05-13) * Intermediary development release with Maven build, published to Maven Central.

version 2.1 (2013-06-06) * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect Standard draft 21, OpenID Connect Discovery draft 17 and OpenID Connect Registration draft 19. * Major refactoring of the APIs for greater simplicity. * Adds JUnit tests.

version 2.2 (2013-06-18) * Refactors dynamic OpenID Connect client registration. * Adds partial support of the OAuth 2.0 Dynamic Client Registration Protocol (draft-ietf-oauth-dyn-reg-12). * Optimises parsing of request parameters consisting of one or more tokens (scope, response type, etc).

version 2.3 (2013-06-19) * Renames OAuth 2.0 dynamic client registration package. * Adds ClientInformation.getClientMetadata() method. * Adds OIDCClientInformation class.

version 2.4 (2013-06-20) * Adds static OIDCClientInformation.parse(JSONObject) method.

version 2.5 (2013-06-22) * Adds support OAuth 2.0 dynamic client update. * Adds OpenID Connect dynamic client registration classes.

version 2.6 (2013-06-25) * Enforces order of preference of ACR values in OpenID Connect client metadata, as required by the specification. * Documentation and performance improvements.

version 2.7 (2013-06-26) * Switches Identifier generation to java.security.SecureRandom.

version 2.8 (2013-06-30) * Fixes serialisation and assignment bugs in ClientMetadata. * Switches Secret generation to java.security.SecureRandom.

version 2.9 (2013-09-17)

... (truncated)

Commits

Updates org.apache.httpcomponents.client5:httpclient5 from 5.5 to 5.5.1

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.5.1

This is a maintenance release that fixes several defects in the connection management code and a regression in the DIGEST authentication reported since the previous release. It also upgrades HttpCore to version 5.3.6.

Change Log

  • HTTPCLIENT-2391: Improved GRACEGUL shutdown of ExecutorService used internally by async clients. Contributed by Oleg Kalnichevski

  • Bug fix: Use a 1 second timeout when closing out connections inside a connection pool lock. Contributed by Oleg Kalnichevski

  • Clarified the behavior of the protocol-level responseTimeout and the connection management level socketTimeout and their interrelation. Contributed by ChangYong

  • Bug fix: Connection managers to ensure open connections have a socket timeout set based on ConnectionConfig upon lease. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2393: Remove rspauth attribute from Authorization DIGEST header (#716) RFC 7616 compliance: rspauth is server-side (Authentication-Info 3.5) only. Contributed by Arturo Bernal

  • HTTPCLIENT-2386: Classic transport to use the connect timeout as a default if the TLS timeout has not been explicitly set. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2384: Socket options related to TcpKeepAlive are ignored. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2371: Logging of request re-execution at INFO priority. Contributed by Oleg Kalnichevski

  • HTTPCLIENT-2379: Fixed a defect in H2SharingConnPool causing an IllegalStateException when releasing the same connection from multiple threads. (#663) Contributed by Arturo Bernal [email protected]

  • Fixed the behavior of the validateAfterInactivity connection setting by the async connection manager. Contributed by Ryan Schmitt

  • HTTPCLIENT-2376: Fixed the problem with ContentCompressionExec not taking acceptEncoding parameter into account.

... (truncated)

Commits
  • 6a3d332 HttpClient 5.5.1 release
  • 66dea80 Updated release notes for HttpClient 5.5.1 release
  • 61f21a5 Upgraded HttpCore to version 5.3.6
  • 694394c HTTPCLIENT-2391: improved GRACEGUL shutdown of ExecutorService used internall...
  • 038b74f Bug fix: Use 1 second timeout when closing out connections inside a connectio...
  • 6675520 Clarify behavior of the protocol level responseTimeout and the connection man...
  • cb2ccda Bug fix: connections managers to ensure open connections have socket timeout ...
  • 4466cca HTTPCLIENT-2393 - remove rspauth from Authorization (#716)
  • da1a8e0 Imporved TestAsyncClient wiring; added internal methods to get the underlying...
  • ab40ec9 Upgraded HttpCore to version 5.3.5
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.20

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.20

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.20

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.20

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.8

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.8 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.7...v0.2.8

v0.2.7 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits
  • 108f5bd v0.2.8 release (#92)
  • b2ca809 Update to move away from deprecated methods (#91)
  • 377e8c4 Change the maven compile execution for Java 8 to override the default compile...
  • 5b73076 Fix typos and linguistic errors in documentation (#88)
  • 85e68d4 Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#87)
  • 9dd4094 Build as multi release jar (#62)
  • 6712288 Ignore semver-major Mockito and JUnit updates until Java 17+ is used for buil...
  • f377eda adding the following methods to JsonNullable, based on methods (#68)
  • 09ee5fc Ignore Hibernate Validator updates until Java 17+ is used for builds (#83)
  • 338ccf8 Update GitHub actions to use commit sha instead of tags to avoid supply chain...
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.13.4 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

Updates org.testcontainers:testcontainers from 1.21.3 to 2.0.2

Release notes

Sourced from org.testcontainers:testcontainers's releases.

2.0.2

What's Changed

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

  • Add getBaseUrl() to NginxContainer using NGINX_DEFAULT_PORT (#11137) @​ghusta

📦 Dependency updates

2.0.1

What's Changed

🐛 Bug Fixes

  • Add MySQLR2DBCDatabaseContainer compatible with org.testcontainers.mysql.MySQLContainer (#11119) @​eddumelendez
  • Add MariaDBR2DBCDatabaseContainer compatible with org.testcontainers.mariadb.MariaDBContainer (#11117) @​eddumelendez
  • Add MSSQLR2DBCDatabaseContainer compatible with org.testcontainers.mssqlserver.MSSQLServerContainer (#11118) @​eddumelendez
  • Add PostgreSQLR2DBCDatabaseContainer compatible with org.testcontainers.postgresql.PostgreSQLContainer (#11120) @​eddumelendez

📖 Documentation

🧹 Housekeeping

2.0.0

Testcontainers 2.0.0

... (truncated)

Commits

…with 28 updates

Bumps the maven-version-updates group with 28 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.83` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.83` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.40.0` | `2.45.0` |
| [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.7` | `0.12.14` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.4` | `10.6` |
| [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) | `11.26` | `11.30.1` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.5` | `5.5.1` |
| com.fasterxml.jackson.core:jackson-core | `2.19.2` | `2.20` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.19.2` | `2.20` |
| com.fasterxml.jackson.core:jackson-databind | `2.19.2` | `2.20` |
| com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | `2.19.2` | `2.20` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.20` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.8` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.1` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `2.0.2` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.181` | `4.8.184` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.40.0` | `2.45.0` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.3.2` | `4.9.8.2` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.12.0` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.46.0` | `3.1.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` |



Updates `org.bouncycastle:bcprov-jdk18on` from 1.81 to 1.83
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.81 to 1.83
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.errorprone:error_prone_core` from 2.40.0 to 2.45.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.45.0)

Updates `com.uber.nullaway:nullaway` from 0.12.7 to 0.12.14
- [Release notes](https://github.com/uber/NullAway/releases)
- [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md)
- [Commits](uber/NullAway@v0.12.7...v0.12.14)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.4 to 10.6
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.6..10.4)

Updates `com.nimbusds:oauth2-oidc-sdk` from 11.26 to 11.30.1
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.30.1..11.26)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.5.1
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.5.1/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.5.1)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.20
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.20

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20

Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.8)

Updates `org.junit.jupiter:junit-jupiter-api` from 5.13.4 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.1)

Updates `org.testcontainers:testcontainers` from 1.21.3 to 2.0.2
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...2.0.2)

Updates `io.github.classgraph:classgraph` from 4.8.181 to 4.8.184
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.181...classgraph-4.8.184)

Updates `com.google.errorprone:error_prone_annotations` from 2.40.0 to 2.45.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.40.0...v2.45.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.3.2 to 4.9.8.2
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.3.2...spotbugs-maven-plugin-4.9.8.2)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.12.0)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.13...v0.8.14)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.46.0 to 3.1.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.46.0...lib/3.1.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.83'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.83'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.uber.nullaway:nullaway
  dependency-version: 0.12.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.nimbusds:oauth2-oidc-sdk
  dependency-version: 11.30.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: '2.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 2.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 4.8.184
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.9.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-version-updates
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-version-updates
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-version-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Dec 8, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 22, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 22, 2025
@dependabot dependabot bot deleted the dependabot/maven/maven-version-updates-d3fd37042f branch December 22, 2025 22:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant