chore(deps): bump the maven-version-updates group across 1 directory with 29 updates #115

dependabot · 2025-12-22T22:15:39Z

Bumps the maven-version-updates group with 29 updates in the / directory:

Package	From	To
org.bouncycastle:bcprov-jdk18on	`1.81`	`1.83`
org.bouncycastle:bcpkix-jdk18on	`1.81`	`1.83`
com.google.errorprone:error_prone_core	`2.40.0`	`2.45.0`
com.uber.nullaway:nullaway	`0.12.7`	`0.12.15`
com.nimbusds:nimbus-jose-jwt	`10.4`	`10.6`
com.nimbusds:oauth2-oidc-sdk	`11.26`	`11.30.1`
org.apache.httpcomponents.client5:httpclient5	`5.5`	`5.6`
com.fasterxml.jackson.core:jackson-core	`2.19.2`	`2.20`
com.fasterxml.jackson.core:jackson-annotations	`2.19.2`	`2.20`
com.fasterxml.jackson.core:jackson-databind	`2.19.2`	`2.20`
com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider	`2.19.2`	`2.20`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.19.2`	`2.20`
org.openapitools:jackson-databind-nullable	`0.2.6`	`0.2.8`
org.junit.jupiter:junit-jupiter-api	`5.13.4`	`6.0.1`
org.testcontainers:testcontainers	`1.21.3`	`2.0.3`
org.testcontainers:junit-jupiter	`1.21.3`	`1.21.4`
io.github.classgraph:classgraph	`4.8.181`	`4.8.184`
com.google.errorprone:error_prone_annotations	`2.40.0`	`2.45.0`
com.github.spotbugs:spotbugs-maven-plugin	`4.9.3.2`	`4.9.8.2`
org.apache.maven.plugins:maven-compiler-plugin	`3.14.0`	`3.14.1`
org.apache.maven.plugins:maven-enforcer-plugin	`3.6.1`	`3.6.2`
org.apache.maven.plugins:maven-surefire-plugin	`3.5.3`	`3.5.4`
org.apache.maven.plugins:maven-jar-plugin	`3.4.2`	`3.5.0`
org.apache.maven.plugins:maven-javadoc-plugin	`3.11.2`	`3.12.0`
org.apache.maven.plugins:maven-source-plugin	`3.3.1`	`3.4.0`
org.jacoco:jacoco-maven-plugin	`0.8.13`	`0.8.14`
org.apache.maven.plugins:maven-failsafe-plugin	`3.5.3`	`3.5.4`
com.diffplug.spotless:spotless-maven-plugin	`2.46.0`	`3.1.0`
org.sonatype.central:central-publishing-maven-plugin	`0.8.0`	`0.9.0`

Updates org.bouncycastle:bcprov-jdk18on from 1.81 to 1.83

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

2.1.1 Version Release: 1.84 Date: TBD

2.2.1 Version Release: 1.83 Date: 2025, November 27th.

... (truncated)

Commits

See full diff in compare view

Updates org.bouncycastle:bcpkix-jdk18on from 1.81 to 1.83

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

2.1.1 Version Release: 1.84 Date: TBD

2.2.1 Version Release: 1.83 Date: 2025, November 27th.

... (truncated)

Commits

See full diff in compare view

Updates com.google.errorprone:error_prone_core from 2.40.0 to 2.45.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.45.0

Changes:

Improved compatibility with latest JDK 26 EA builds.

New checks:

AssertSameIncompatible: Detect calls to assertSame and similar assertions, where the calls are guaranteed to either succeed or fail.

FormatStringShouldUsePlaceholders: Suggests using a format string instead of string concatenation operations on format methods

Closed issues: #5335

Full changelog: google/error-prone@v2.44.0...v2.45.0

Error Prone 2.44.0

Changes

The default severity for LabelledBreakTarget is now an error

Update dependency on Guava (#5108)

Closed issues: #5218, #5278

Full changelog: google/error-prone@v2.43.0...v2.44.0

Error Prone 2.43.0

The minimum supported JDK version to run Error Prone is now JDK 21 (google/error-prone#4867).

Changes:

-XepPatchChecks now skips disabled checks (#4943)

AndroidJdkLibsChecker has been removed, the recommended replacement for Android code is Android Lint's NewApi check

New checks:

NullNeedsCastForVarargs: Detect calls that incorrectly passes a null array instead of a null element.

RedundantNullCheck: detect checks on expressions that are non-null.

Closed issues: #4943, #5102, #5107, #5121, #5158, #5217, #5239

Full changelog: google/error-prone@v2.42.0...v2.43.0

Error Prone 2.42.0

New checks:

ExplicitArrayForVarargs: discourage unnecessary explicit construction of an array to provide varargs.

FloggerPerWithoutRateLimit: discourage Flogger's perUnique without rate limiting

StringJoin: Ban String.join(CharSequence) and String.join(CharSequence, CharSequence)

ThreadBuilderNameWithPlaceholder: Do not allow placeholders in Thread.Builder.name(String) or name(String, int).

Changes:

... (truncated)

Commits

c862815 Release Error Prone 2.45.0
7027d9f Add negative test cases for AlwaysThrows with non-literal arguments.
8669adb Fix parameter name handling of enum constructor arguments
679c4ac Update end position handling
dc1279e AssertSameIncompatible: flag calls to assertSame/etc where the calls are guar...
24387de Internal change
5300dc6 Disable an InvalidLink test for a javadoc bug on JDK >= 26
75dcd53 Fix the Optional wrapping in the description of NonCanonicalStaticMemberImport.
10f5424 FormatStringShouldUsePlaceholders shouldn't rewrite calls with a pass-through...
3ef3d79 The verb form of "recursion" is "to recur", not "to recurse". Quoting my CS p...
Additional commits viewable in compare view

Updates com.uber.nullaway:nullaway from 0.12.7 to 0.12.15

Release notes

Sourced from com.uber.nullaway:nullaway's releases.

NullAway 0.12.15

NullAway now includes a BOM artifact com.uber.nullaway:nullaway-bom. Otherwise, this release contains a few bug fixes and improvements to JSpecify support.

Fix URL for RequireExplicitNullMarking checker (#1369)

Handle annotations on type variables in return and field types (#1371)

Change how recursive calls to dataflow are detected (#1374)

JSpecify: use type on identifier when its type is a type variable (#1378)

Include method type parameters in astubx files. by @haewiful (#1370)

Create nullaway-bom project (#1130) by @lpireyn (#1380)

Run dataflow analysis on bodies of lambdas passed to generic methods (#1375)

Maintenance

Remove BaseNoOpHandler and replace with default methods in Handler (#1376)

NullAway 0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

Various optimizations (#1358)

Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#1365)

Optimize methods that check for annotations on a Symbol (#1362)

Tune warning message for RequireExplicitNullMarking (#1366)

Maintenance

Fix arg concatenation bug in JMH (#1357)

Move wildcard-related tests to a separate test class (#1361)

NullAway 0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking, that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @FxMorin, to tell NullAway to preserve nullability information from the enclosing method when analyzing the body of certain lambdas. See the docs for details.

Use passed-in TreePath in one more place when available (#1329)

Checker to ensure explicit null marking of every class (#1323)

Bound size of alreadyRunAnalyses cache to be consistent (#1334)

Improve inference for generic methods with lambda argument containing return statements by @dhruv-agr (#1337)

Add PureExceptLambda annotation by @FxMorin (#1325)

Support marking method type variable upper bounds as @Nullable in library models (#1345)

Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @haewiful (#1344)

Better fix for dataflow analysis caching (#1353)

Maintenance

Add package-info files with @NullMarked (#1331)

Speed up buildWithNullAway task (#1330)

Enable the VoidMissingNullable checker and autofix all extant warnings (#1332)

Bump JDK version to 25 for integration tests (#1336)

Switch Coderabbit to assertive mode (#1338)

Enable EqualsMissingNullable check and fix all extant warnings (#1339)

Bump to AutoValue 1.11.1 (#1340)

Update Caffeine benchmark (#1342)

Add a test for a useless @Contract (#1346)

... (truncated)

Changelog

Sourced from com.uber.nullaway:nullaway's changelog.

Version 0.12.15

NullAway now includes a BOM artifact com.uber.nullaway:nullaway-bom. Otherwise, this release contains a few bug fixes and improvements to JSpecify support.

Fix URL for RequireExplicitNullMarking checker (#1369)

Handle annotations on type variables in return and field types (#1371)

Change how recursive calls to dataflow are detected (#1374)

JSpecify: use type on identifier when its type is a type variable (#1378)

Include method type parameters in astubx files. by @haewiful (#1370)

Create nullaway-bom project (#1130) by @lpireyn (#1380)

Run dataflow analysis on bodies of lambdas passed to generic methods (#1375)

Maintenance

Remove BaseNoOpHandler and replace with default methods in Handler (#1376)

Version 0.12.14

This release fixes a bug where the new RequireExplicitNullMarking check was not fully disabled by default. It also includes a couple of performance optimizations to reduce NullAway overhead.

Various optimizations (#1358)

Don't report matches from RequireExplicitNullMarking when run at SUGGESTION level (#1365)

Optimize methods that check for annotations on a Symbol (#1362)

Tune warning message for RequireExplicitNullMarking (#1366)

Maintenance

Fix arg concatenation bug in JMH (#1357)

Move wildcard-related tests to a separate test class (#1361)

Version 0.12.13

NullAway now includes a new Error Prone checker, RequireExplicitNullMarking, that checks that every class is explicitly @NullMarked or @NullUnmarked (at the class or package level), so code is not left @NullUnmarked unintentionally. The check is disabled by default. See the docs for further details.

NullAway also includes support for a new @PureExceptLambda annotation, contributed by @FxMorin, to tell NullAway to preserve nullability information from the enclosing method when analyzing the body of certain lambdas. See the docs for details.

Use passed-in TreePath in one more place when available (#1329)

Checker to ensure explicit null marking of every class (#1323)

Bound size of alreadyRunAnalyses cache to be consistent (#1334)

Improve inference for generic methods with lambda argument containing return statements by @dhruv-agr (#1337)

Add PureExceptLambda annotation by @FxMorin (#1325)

Support marking method type variable upper bounds as @Nullable in library models (#1345)

Method name parsing in ExternalStubxLibraryModels class is missing a corner case by @haewiful (#1344)

Better fix for dataflow analysis caching (#1353)

Maintenance

... (truncated)

Commits

0abf298 Prepare for release 0.12.15.
77d1651 Further updates to nullaway-bom POM properties (#1384)
6a29dce Add gradle.properties file for nullaway-bom module (#1383)
92983ce Revert "Prepare for release 0.12.15."
adbfac7 Revert "Prepare next development version."
0f861ea Prepare next development version.
9bd0827 Prepare for release 0.12.15.
0430a42 Update changelog for 0.12.15 (#1382)
f4f03c0 Run dataflow analysis on bodies of lambdas passed to generic methods (#1375)
3f15e12 Create nullaway-bom project (#1130) (#1380)
Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.4 to 10.6

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

10.5 (2025-09-05) * Support for specifying a ScheduledExecutorService instance in RefreshAheadCachingJWKSetSource and JWKSourceBuilder (iss #592).

10.6 (2025-11-06) * Adds static CollectionUtils.containsNull(Set) method. * DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatible with Set.of (iss #499). * The DefaultJWTClaimsVerifier must not include JWT claim values in BadJWTException messages (iss #605).

Commits

584951f Adds support for specifying the ScheduledExecutorService-instance in RefreshA...
adf2576 [maven-release-plugin] prepare for next development iteration
436fb18 Add tests for JWKSourceBuilder and RefreshAheadCachingJWKSetSource
d4137db Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595)
c6c8025 [maven-release-plugin] prepare release 10.4.1
e7c7a8c [maven-release-plugin] prepare for next development iteration
b33b54b Bumps GSon and BouncyCastle
3eeaada [maven-release-plugin] prepare release 10.4.2
2aa473f [maven-release-plugin] prepare for next development iteration
d52acf5 Merged in iss592 (pull request #129)
Additional commits viewable in compare view

Updates com.nimbusds:oauth2-oidc-sdk from 11.26 to 11.30.1

Changelog

Sourced from com.nimbusds:oauth2-oidc-sdk's changelog.

version 1.0 (2012-05-29) * First official release with authorisation endpoint, token endpoint, check ID endpoint and UserInfo endpoint support. * JSON Web Tokens (JWTs) support through the Nimbus-JWT library. * Language Tags (RFC 5646) support through the Nimbus-LangTag library. * JSON support through the JSON Smart library.

version 2.0 (2013-05-13) * Intermediary development release with Maven build, published to Maven Central.

version 2.1 (2013-06-06) * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect Standard draft 21, OpenID Connect Discovery draft 17 and OpenID Connect Registration draft 19. * Major refactoring of the APIs for greater simplicity. * Adds JUnit tests.

version 2.2 (2013-06-18) * Refactors dynamic OpenID Connect client registration. * Adds partial support of the OAuth 2.0 Dynamic Client Registration Protocol (draft-ietf-oauth-dyn-reg-12). * Optimises parsing of request parameters consisting of one or more tokens (scope, response type, etc).

version 2.3 (2013-06-19) * Renames OAuth 2.0 dynamic client registration package. * Adds ClientInformation.getClientMetadata() method. * Adds OIDCClientInformation class.

version 2.4 (2013-06-20) * Adds static OIDCClientInformation.parse(JSONObject) method.

version 2.5 (2013-06-22) * Adds support OAuth 2.0 dynamic client update. * Adds OpenID Connect dynamic client registration classes.

version 2.6 (2013-06-25) * Enforces order of preference of ACR values in OpenID Connect client metadata, as required by the specification. * Documentation and performance improvements.

version 2.7 (2013-06-26) * Switches Identifier generation to java.security.SecureRandom.

version 2.8 (2013-06-30) * Fixes serialisation and assignment bugs in ClientMetadata. * Switches Secret generation to java.security.SecureRandom.

version 2.9 (2013-09-17)

... (truncated)

Commits

0eb6157 Migrates to central-publishing-maven-plugin
f210078 [maven-release-plugin] prepare release 11.26.1
38e6027 [maven-release-plugin] prepare for next development iteration
1488221 Merge branch 'master' of https://bitbucket.org/connect2id/oauth-2.0-sdk-with-...
6eafee5 feat: rework issuer compare with new resolve method
429b444 Merged in issuer-compare-fix (pull request #35)
d88eebc Edits Issuer.equalsIgnoreTrailingSlash and OIDCProviderMetadata.resolve with ...
e41fa49 [maven-release-plugin] prepare release 11.27
c797f2e [maven-release-plugin] prepare for next development iteration
ace5ca7 Bumps deps
Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.5 to 5.6

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6 ALPHA1

This is the first ALPHA release in the 5.6 release series. It adds several features such as transport content decompression and content compression for the async transport, support for Unix sockets, experimental support for SCRAM-SHA-256 authentication scheme, and Micrometer/OTel observations & metrics.

Commons Compress, Brotli codec, and ZStd codec are optional dependencies and get wired into the execution pipeline only if present on the classpath.

Notable changes and features included in the 5.6 series:

Unix domain socket support.

Support for pluggable content codecs via Commons-Compress in the classic transport. (optional).

Support for transparent content decompression and content compression with deflate, gzip, zstd (optional), and brotli (optional) codecs in the async transport.

Micrometer/OTel observations & metrics (optinal).

Off-lock connection disposal by the classic pooling connection manager. Experimental.

SCRAM-SHA-256 authentication scheme (RFC 7804). Experimental.

Request Priority support (RFC 9218). Experimental.

Compatibility notes:

As of this version, HttpClient uses BUILTIN HostnameVerificationPolicy by default, delegating host verification to JSSE security manager. One must explicitly configure the TLS strategy to continue using the hostname verifier shipped with HttpClient.

Five-second TCP keep-alive is now enabled by default.

Change Log

RequestConfig: Un-deprecate #setProxy. Contributed by Ryan Schmitt

Stale connection check support in PoolingAsyncClientConnectionManager. Contributed by Ryan Schmitt

ConnectionConfig: #idleTimeout support. Contributed by Ryan Schmitt

... (truncated)

Commits

decd193 HttpClient 5.6 release
11ea8e5 Updated release notes for HttpClient 5.6 release
77fa61a Limit the length of content codec list that can be processed automatically
81b7971 Upgraded HttpCore to version 5.4
2c7fe0f Add OFFLOCK pool concurrency policy backed by RouteSegmentedConnPool (#765)
1f4dea7 Fixed Micrometer and OpenTelemetry dependency declaration
d2fadd2 Tag TLS handshake timeout tests with slow
e52e466 TestTlsHandshakeTimeout: Disable assertions on Java 8
77f52f0 Upgraded HttpClient version to 5.6-alpha2-SNAPSHOT
48e0f25 HttpClient 5.6-alpha1 release
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.20

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.20

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.20

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.19.2 to 2.20

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.8

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.8 released

What's Changed

Update to next snapshot version by @wing328 in OpenAPITools/jackson-databind-nullable#67

Skip SNAPSHOT deploy job on forks by @ctrimble in OpenAPITools/jackson-databind-nullable#70

Remove Javadoc argument --ignore-source-errors by @ctrimble in OpenAPITools/jackson-databind-nullable#69

Update to JUnit 5 and fix tests by @Til7701 in OpenAPITools/jackson-databind-nullable#72

Update all dependency and plugin versions by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#75

GitHub actions cleanup by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#76

Add dependabot configuration by @Til7701 in OpenAPITools/jackson-databind-nullable#77

Bump actions/checkout from 3 to 5 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#78

Bump actions/cache from 3 to 4 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#79

Bump actions/setup-java from 3 to 5 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#80

Update GitHub actions to use commit sha instead of tags by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#82

Ignore Hibernate Validator updates until Java 17+ is used for builds by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#83

Streaming methods by @ctrimble in OpenAPITools/jackson-databind-nullable#68

Ignore semver-major Mockito and JUnit updates until Java 17+ is used for builds by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#86

Build as multi release jar by @Til7701 in OpenAPITools/jackson-databind-nullable#62

Bump org.junit:junit-bom from 5.13.4 to 5.14.0 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#87

Fix typos and linguistic errors in documentation / hacktoberfest by @survivant in OpenAPITools/jackson-databind-nullable#88

Change the maven compile execution for Java 8 to override the default compile by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#89

Update to move away from deprecated methods by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#91

New Contributors

@ctrimble made their first contribution in OpenAPITools/jackson-databind-nullable#70

@nrayburn-tech made their first contribution in OpenAPITools/jackson-databind-nullable#75

@survivant made their first contribution in OpenAPITools/jackson-databind-nullable#88

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.7...v0.2.8

v0.2.7 released

What's Changed

Update parent and dependencies by @Til7701 in OpenAPITools/jackson-databind-nullable#61

0.2.7 release by @wing328 in OpenAPITools/jackson-databind-nullable#63

update pom.xml to use central publishing maven plugin, add workflow by @wing328 in OpenAPITools/jackson-databind-nullable#66

New Contributors

@Til7701 made their first contribution in OpenAPITools/jackson-databind-nullable#61

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits

108f5bd v0.2.8 release (#92)
b2ca809 Update to move away from deprecated methods (#91)
377e8c4 Change the maven compile execution for Java 8 to override the default compile...
5b73076 Fix typos and linguistic errors in documentation (#88)
85e68d4 Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#87)
9dd4094 Build as multi release jar (#62)
6712288 Ignore semver-major Mockito and JUnit updates until Java 17+ is used for buil...
f377eda adding the following methods to JsonNullable, based on methods (#68)
09ee5fc Ignore Hibernate Validator updates until Java 17+ is used for builds (#83)
338ccf8 Update GitHub actions to use commit sha instead of tags to avoid supply chain...
Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 5.13.4 to 6.0.1

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

JUnit 6.0.0 = Platform 6.0.0 + Jupiter 6.0.0 + Vintage 6.0.0

See Release Notes.

New Contributors

@2897robo made their first contribution in junit-team/junit-framework#4525

@strangelookingnerd made their first contribution in junit-team/junit-framework#4683

@eric6iese made their first contribution in junit-team/junit-framework#4717

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r5.14.0...r6.0.0

JUnit 6.0.0-RC3 = Platform 6.0.0-RC3 + Jupiter 6.0.0-RC3 + Vintage 6.0.0-RC3

See Release Notes.

New Contributors

@mehulimukherjee made their first contribution in junit-team/junit-framework#4913

@lslonina made their first contribution in junit-team/junit-framework#4629

Full Changelog: junit-team/junit-framework@r6.0.0-RC2...r6.0.0-RC3

JUnit 6.0.0-RC2 = Platform 6.0.0-RC2 + Jupiter 6.0.0-RC2 + Vintage 6.0.0-RC2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0-RC1...r6.0.0-RC2

JUnit 6.0.0-RC1 = Platform 6.0.0-RC1 + Jupiter 6.0.0-RC1 + Vintage 6.0.0-RC1

See Release Notes.

New Contributors

@raccoonback made their first contribution in junit-team/junit-framework#4822

@currenjin made their first contribution in junit-team/junit-framework#4823

Full Changelog: junit-team/junit-framework@r6.0.0-M2...r6.0.0-RC1

JUnit 6.0.0-M2 = Platform 6.0.0-M2 + Jupiter 6.0.0-M2 + Vintage 6.0.0-M2

See Release Notes.

... (truncated)

Commits

d774b9c Release 6.0.1 (second attempt)
8178545 Mark module as deprecated for removal
7b43fcc Back to snapshots for further development
a5ef746 Release 6.0.1
008be8d Finalize 5.14.1 release notes
b2c55a8 Finalize 6.0.1 release notes
866c01a Add note about duplicate test execution with @Suite (#5080)
de88e88 Fix broken links in documentation
9dd132d Add Valhalla EA to workflow matrix
fedda88 Make jdk.jfr import optional in OSGi manifest (#5092)
Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.21.3 to 2.0.3

Release notes

Sourced from org.testcontainers:testcontainers's releases.

2.0.3

What's Changed

Update questdb/questdb image version to 9.2.2 (#11347) @eddumelendez

Fix GitHub-Action Generate PR descriptions (#11129) @JackPGreen

Update testcontainers version to ${GITHUB_REF##*/} (#11220) @github-actions[bot]

Update docs version to ${GITHUB_REF##*/} (#11221) @github-actions[bot]

🐛 Bug Fixes

Fix compatibility with older Docker Engines by falling back to v1.32 (#11346) @eddumelendez

📖 Documentation

Dead links in CircleCI reference documentation (#10789) @JohnWill14

📦 Dependency updates

Combined dependencies PR (#11353) @eddumelendez

Combined dependencies PR (#11352) @eddumelendez

Combined dependencies PR (#11341) @eddumelendez

Combined dependencies PR (#11334) @eddumelendez

Combined dependencies PR (#11333) @eddumelendez

Combined dependencies PR (#11332) @eddumelendez

Combined dependencies PR (#11323) @eddumelendez

2.0.2

What's Changed

Update docker image version to 25.0.5 (#11219) @eddumelendez

Set default docker API version to 1.44 (#11216) @eddumelendez

Fix ollama example (#11217) @eddumelendez

Update testcontainers version to ${GITHUB_REF##*/} (#11125) @github-actions[bot]

Update docs version to ${GITHUB_REF##*/} (#11126) @github-actions[bot]

🐛 Bug Fixes

Optimize ScriptSplitter from O(n*m) to O(1) when initializing database (#11130) @hspragg-godaddy

📖 Documentation

Update kotest-extensions-testcontainers link (#11138) @noojung

🧹 Housekeeping

Add getBaseUrl() to NginxContainer using NGINX_DEFAULT_PORT (#11137) @ghusta

... (truncated)

Commits

43c6a97 Combined dependencies PR (#11353)
7778cc5 Merge remote-tracking branch 'origin/dependabot/gradle/modules/activemq/org.a...
30b043f Merge remote-tracking branch 'origin/dependabot/gradle/modules/db2/com.ibm.db...
17d570b Merge remote-tracking branch 'origin/dependabot/gradle/modules/elasticsearch/...
47e9ae5 Merge remote-tracking branch 'origin/dependabot/gradle/modules/gcloud/com.goo...
f34ab26 Merge remote-tracking branch 'origin/dependabot/gradle/modules/couchbase/com....
ac66ad6 Merge remote-tracking branch 'origin/dependabot/gradle/modules/activemq/org.a......
Description has been truncated

…with 29 updates Bumps the maven-version-updates group with 29 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.83` | | [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.81` | `1.83` | | [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.40.0` | `2.45.0` | | [com.uber.nullaway:nullaway](https://github.com/uber/NullAway) | `0.12.7` | `0.12.15` | | [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.4` | `10.6` | | [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) | `11.26` | `11.30.1` | | [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.5` | `5.6` | | com.fasterxml.jackson.core:jackson-core | `2.19.2` | `2.20` | | [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.19.2` | `2.20` | | com.fasterxml.jackson.core:jackson-databind | `2.19.2` | `2.20` | | com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider | `2.19.2` | `2.20` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.20` | | [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.8` | | [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.1` | | [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `2.0.3` | | [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` | | [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.181` | `4.8.184` | | [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.40.0` | `2.45.0` | | [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.3.2` | `4.9.8.2` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` | | [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.1` | `3.6.2` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` | | [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` | | [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.12.0` | | [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` | | [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.13` | `0.8.14` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.46.0` | `3.1.0` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` | Updates `org.bouncycastle:bcprov-jdk18on` from 1.81 to 1.83 - [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html) - [Commits](https://github.com/bcgit/bc-java/commits) Updates `org.bouncycastle:bcpkix-jdk18on` from 1.81 to 1.83 - [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html) - [Commits](https://github.com/bcgit/bc-java/commits) Updates `com.google.errorprone:error_prone_core` from 2.40.0 to 2.45.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.40.0...v2.45.0) Updates `com.uber.nullaway:nullaway` from 0.12.7 to 0.12.15 - [Release notes](https://github.com/uber/NullAway/releases) - [Changelog](https://github.com/uber/NullAway/blob/master/CHANGELOG.md) - [Commits](uber/NullAway@v0.12.7...v0.12.15) Updates `com.nimbusds:nimbus-jose-jwt` from 10.4 to 10.6 - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.6..10.4) Updates `com.nimbusds:oauth2-oidc-sdk` from 11.26 to 11.30.1 - [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.30.1..11.26) Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.6 - [Changelog](https://github.com/apache/httpcomponents-client/blob/master/RELEASE_NOTES.txt) - [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.6) Updates `com.fasterxml.jackson.core:jackson-core` from 2.19.2 to 2.20 Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.20 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20 Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.20 Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20 Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.19.2 to 2.20 Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20 Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.8 - [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases) - [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.8) Updates `org.junit.jupiter:junit-jupiter-api` from 5.13.4 to 6.0.1 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r5.13.4...r6.0.1) Updates `org.testcontainers:testcontainers` from 1.21.3 to 2.0.3 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.21.3...2.0.3) Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4) Updates `io.github.classgraph:classgraph` from 4.8.181 to 4.8.184 - [Release notes](https://github.com/classgraph/classgraph/releases) - [Commits](classgraph/classgraph@classgraph-4.8.181...classgraph-4.8.184) Updates `com.google.errorprone:error_prone_annotations` from 2.40.0 to 2.45.0 - [Release notes](https://github.com/google/error-prone/releases) - [Commits](google/error-prone@v2.40.0...v2.45.0) Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.3.2 to 4.9.8.2 - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.3.2...spotbugs-maven-plugin-4.9.8.2) Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1) Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.1 to 3.6.2 - [Release notes](https://github.com/apache/maven-enforcer/releases) - [Commits](apache/maven-enforcer@enforcer-3.6.1...enforcer-3.6.2) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4) Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0 - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0) Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.12.0 - [Release notes](https://github.com/apache/maven-javadoc-plugin/releases) - [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.12.0) Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0 - [Release notes](https://github.com/apache/maven-source-plugin/releases) - [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0) Updates `org.jacoco:jacoco-maven-plugin` from 0.8.13 to 0.8.14 - [Release notes](https://github.com/jacoco/jacoco/releases) - [Commits](jacoco/jacoco@v0.8.13...v0.8.14) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4) Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.46.0 to 3.1.0 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@maven/2.46.0...lib/3.1.0) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0 - [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits) --- updated-dependencies: - dependency-name: org.bouncycastle:bcprov-jdk18on dependency-version: '1.83' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: org.bouncycastle:bcpkix-jdk18on dependency-version: '1.83' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.google.errorprone:error_prone_core dependency-version: 2.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.uber.nullaway:nullaway dependency-version: 0.12.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-version: '10.6' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.nimbusds:oauth2-oidc-sdk dependency-version: 11.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: org.apache.httpcomponents.client5:httpclient5 dependency-version: '5.6' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: '2.20' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: org.openapitools:jackson-databind-nullable dependency-version: 0.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: org.junit.jupiter:junit-jupiter-api dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: maven-version-updates - dependency-name: org.testcontainers:testcontainers dependency-version: 2.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: maven-version-updates - dependency-name: org.testcontainers:junit-jupiter dependency-version: 1.21.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: io.github.classgraph:classgraph dependency-version: 4.8.184 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: com.google.errorprone:error_prone_annotations dependency-version: 2.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.9.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.14.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-enforcer-plugin dependency-version: 3.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-javadoc-plugin dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates - dependency-name: org.jacoco:jacoco-maven-plugin dependency-version: 0.8.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.5.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-version-updates - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: maven-version-updates - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-version-updates ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Dec 22, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the maven-version-updates group across 1 directory with 29 updates #115

chore(deps): bump the maven-version-updates group across 1 directory with 29 updates #115

Uh oh!

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the maven-version-updates group across 1 directory with 29 updates #115

Are you sure you want to change the base?

chore(deps): bump the maven-version-updates group across 1 directory with 29 updates #115

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Error Prone 2.45.0

Error Prone 2.44.0

Error Prone 2.43.0

Error Prone 2.42.0

NullAway 0.12.15

NullAway 0.12.14

NullAway 0.12.13

Version 0.12.15

Version 0.12.14

Version 0.12.13

Release 5.6 ALPHA1

Change Log

v0.2.8 released

What's Changed

New Contributors

v0.2.7 released

What's Changed

New Contributors

New Contributors

New Contributors

New Contributors

2.0.3

What's Changed

🐛 Bug Fixes

📖 Documentation

📦 Dependency updates

2.0.2

What's Changed

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 22, 2025 •

edited

Loading