From d1f5232ae92a17801474f7fa27c6a32071544f83 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Oct 2026 13:44:30 +0000
Subject: [PATCH] build(deps): bump the production-dependencies group across 1
 directory with 21 updates

Bumps the production-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `39` | `40` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` |
| org.apache.ws.xmlschema:xmlschema-core | `2.3.2` | `2.3.3` |
| org.apache.neethi:neethi | `3.2.3` | `3.2.4` |
| org.slf4j:slf4j-api | `2.0.19` | `2.0.20` |
| org.slf4j:jcl-over-slf4j | `2.0.19` | `2.0.20` |
| org.slf4j:jcl-over-slf4j | `2.0.19` | `2.0.20` |
| [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) | `5.4.3` | `5.4.4` |
| [org.apache.httpcomponents.core5:httpcore5-h2](https://github.com/apache/httpcomponents-core) | `5.4.3` | `5.4.4` |
| [org.apache.httpcomponents.core5:httpcore5-h2](https://github.com/apache/httpcomponents-core) | `5.4.3` | `5.4.4` |
| [org.xmlunit:xmlunit-legacy](https://github.com/xmlunit/xmlunit) | `2.13.0` | `2.14.0` |
| org.apache.xmlbeans:xmlbeans | `5.4.0` | `5.4.1` |
| [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) | `3.9.16` | `3.10.0` |
| org.apache.maven:maven-core | `3.9.16` | `3.10.0` |
| org.apache.maven:maven-artifact | `3.9.16` | `3.10.0` |
| [org.apache.maven:maven-compat](https://github.com/apache/maven) | `3.9.16` | `3.10.0` |
| org.apache.maven:maven-core | `3.9.16` | `3.10.0` |
| org.apache.maven:maven-artifact | `3.9.16` | `3.10.0` |
| [org.apache.maven:maven-compat](https://github.com/apache/maven) | `3.9.16` | `3.10.0` |
| org.apache.commons:commons-lang3 | `3.20.0` | `3.21.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.13` | `1.18.14` |
| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.apache.groovy:groovy-xml](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.apache.groovy:groovy-xml](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.owasp.encoder:encoder](https://github.com/owasp/owasp-java-encoder) | `1.4.0` | `1.4.1` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.2` | `2.22.3` |



Updates `org.apache:apache` from 39 to 40
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)

Updates `org.mockito:mockito-core` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.23.0...v5.24.0)

Updates `org.apache.ws.xmlschema:xmlschema-core` from 2.3.2 to 2.3.3

Updates `org.apache.neethi:neethi` from 3.2.3 to 3.2.4

Updates `org.slf4j:slf4j-api` from 2.0.19 to 2.0.20

Updates `org.slf4j:jcl-over-slf4j` from 2.0.19 to 2.0.20

Updates `org.slf4j:jcl-over-slf4j` from 2.0.19 to 2.0.20

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](https://github.com/apache/httpcomponents-core/compare/rel/v5.4.3...rel/v5.4.4)

Updates `org.apache.httpcomponents.core5:httpcore5-h2` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](https://github.com/apache/httpcomponents-core/compare/rel/v5.4.3...rel/v5.4.4)

Updates `org.apache.httpcomponents.core5:httpcore5-h2` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](https://github.com/apache/httpcomponents-core/compare/rel/v5.4.3...rel/v5.4.4)

Updates `org.xmlunit:xmlunit-legacy` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](https://github.com/xmlunit/xmlunit/compare/v2.13.0...v2.14.0)

Updates `org.apache.xmlbeans:xmlbeans` from 5.4.0 to 5.4.1

Updates `org.apache.maven:maven-plugin-api` from 3.9.16 to 3.10.0
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0)

Updates `org.apache.maven:maven-core` from 3.9.16 to 3.10.0

Updates `org.apache.maven:maven-artifact` from 3.9.16 to 3.10.0

Updates `org.apache.maven:maven-compat` from 3.9.16 to 3.10.0
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0)

Updates `org.apache.maven:maven-core` from 3.9.16 to 3.10.0

Updates `org.apache.maven:maven-artifact` from 3.9.16 to 3.10.0

Updates `org.apache.maven:maven-compat` from 3.9.16 to 3.10.0
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](https://github.com/apache/maven/compare/maven-3.9.16...maven-3.10.0)

Updates `org.apache.commons:commons-lang3` from 3.20.0 to 3.21.0

Updates `net.bytebuddy:byte-buddy` from 1.18.13 to 1.18.14
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.13...byte-buddy-1.18.14)

Updates `org.apache.groovy:groovy` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-xml` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-xml` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.owasp.encoder:encoder` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/owasp/owasp-java-encoder/releases)
- [Changelog](https://github.com/OWASP/owasp-java-encoder/blob/main/CHANGELOG.md)
- [Commits](https://github.com/owasp/owasp-java-encoder/compare/v1.4.0...v1.4.1)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.2 to 2.22.3
- [Commits](https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.22.2...jackson-databind-2.22.3)

---
updated-dependencies:
- dependency-name: org.apache:apache
  dependency-version: '40'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.ws.xmlschema:xmlschema-core
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.neethi:neethi
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.slf4j:jcl-over-slf4j
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.slf4j:jcl-over-slf4j
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.httpcomponents.core5:httpcore5-h2
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.httpcomponents.core5:httpcore5-h2
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.xmlunit:xmlunit-legacy
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.xmlbeans:xmlbeans
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-plugin-api
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-artifact
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-artifact
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-xml
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-xml
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.owasp.encoder:encoder
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 modules/jpa-schema/pom.xml |  2 +-
 modules/json/pom.xml       |  2 +-
 modules/mcp-bridge/pom.xml |  2 +-
 pom.xml                    | 24 ++++++++++++------------
 4 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/modules/jpa-schema/pom.xml b/modules/jpa-schema/pom.xml
index d940a9bde0..6ff8aef106 100644
--- a/modules/jpa-schema/pom.xml
+++ b/modules/jpa-schema/pom.xml
@@ -56,7 +56,7 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.22.2</version>
+            <version>2.22.3</version>
         </dependency>
 
         <!-- Logging -->
diff --git a/modules/json/pom.xml b/modules/json/pom.xml
index 84d1616dad..f9cc5e6c08 100644
--- a/modules/json/pom.xml
+++ b/modules/json/pom.xml
@@ -82,7 +82,7 @@
         <dependency>
             <groupId>org.owasp.encoder</groupId>
             <artifactId>encoder</artifactId>
-            <version>1.4.0</version>
+            <version>1.4.1</version>
         </dependency>
         <dependency>
             <groupId>com.google.code.gson</groupId>
diff --git a/modules/mcp-bridge/pom.xml b/modules/mcp-bridge/pom.xml
index ad52aa4170..648851bc8e 100644
--- a/modules/mcp-bridge/pom.xml
+++ b/modules/mcp-bridge/pom.xml
@@ -41,7 +41,7 @@
     </description>
 
     <properties>
-        <jackson.version>2.22.2</jackson.version>
+        <jackson.version>2.22.3</jackson.version>
     </properties>
 
     <dependencies>
diff --git a/pom.xml b/pom.xml
index 28e8d39ef1..f0c7bc0d95 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,7 +25,7 @@
     <parent>
         <groupId>org.apache</groupId>
         <artifactId>apache</artifactId>
-        <version>39</version>
+        <version>40</version>
     </parent>
 
     <groupId>org.apache.axis2</groupId>
@@ -458,9 +458,9 @@
     </distributionManagement>
 
     <properties>
-        <neethi.version>3.2.3</neethi.version>
+        <neethi.version>3.2.4</neethi.version>
         <axiom.version>2.0.0</axiom.version>
-        <xmlschema.version>2.3.2</xmlschema.version>
+        <xmlschema.version>2.3.3</xmlschema.version>
         <ant.version>1.10.18</ant.version>
         <antlr.version>2.7.7</antlr.version>
         <aspectj.version>1.9.25.1</aspectj.version>
@@ -469,20 +469,20 @@
         <commons.logging.version>1.4.0</commons.logging.version>
         <!-- fi.version removed: AXIS2-6105 -->
         <google.gson.version>2.14.0</google.gson.version>
-        <groovy.version>5.1.2</groovy.version>
-        <httpcore.version>5.4.3</httpcore.version>
+        <groovy.version>6.0.0</groovy.version>
+        <httpcore.version>5.4.4</httpcore.version>
         <httpclient.version>5.6.4</httpclient.version>
         <jaxbri.version>4.0.3</jaxbri.version>
         <jetty.version>12.1.13</jetty.version>
         <!-- jibx.version removed: AXIS2-6105 -->
         <maven.archiver.version>3.6.6</maven.archiver.version>
-        <maven.version>3.9.16</maven.version>
+        <maven.version>3.10.0</maven.version>
         <rhino.version>1.9.1</rhino.version>
-        <slf4j.version>2.0.19</slf4j.version>
+        <slf4j.version>2.0.20</slf4j.version>
         <spring.version>7.0.9</spring.version>
         <wsdl4j.version>1.6.3</wsdl4j.version>
-        <xmlbeans.version>5.4.0</xmlbeans.version>
-        <xmlunit.version>2.13.0</xmlunit.version>
+        <xmlbeans.version>5.4.1</xmlbeans.version>
+        <xmlunit.version>2.14.0</xmlunit.version>
         <xml_resolver.version>1.2</xml_resolver.version>
         <commons.cli.version>1.11.0</commons.cli.version>
         <!-- The build failing if tests are skipped is very annoying -->
@@ -668,7 +668,7 @@
             <dependency>
                 <groupId>org.mockito</groupId>
                 <artifactId>mockito-core</artifactId>
-                <version>5.23.0</version>
+                <version>5.24.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.ws.xmlschema</groupId>
@@ -857,7 +857,7 @@
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-lang3</artifactId>
-                <version>3.20.0</version>
+                <version>3.21.0</version>
             </dependency>
             <dependency>
                 <groupId>jakarta.transaction</groupId>
@@ -931,7 +931,7 @@
             <dependency>
                 <groupId>net.bytebuddy</groupId>
                 <artifactId>byte-buddy</artifactId>
-                <version>1.18.13</version>
+                <version>1.18.14</version>
             </dependency>
             <dependency>
                 <groupId>io.swagger.core.v3</groupId>