Skip to content

chore(deps): bump the maven-dependencies group across 1 directory with 4 updates - #45

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-dependencies-c5257b73dd
Open

chore(deps): bump the maven-dependencies group across 1 directory with 4 updates#45
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-dependencies-c5257b73dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 4 updates in the / directory: org.apache.maven.plugins:maven-surefire-plugin, org.jacoco:jacoco-maven-plugin, org.codehaus.mojo:versions-maven-plugin and org.codehaus.mojo:build-helper-maven-plugin.

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.15 to 0.8.16

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.16

New Features

  • JaCoCo now officially supports Java 27 (GitHub #2287).
  • Experimental support for Java 28 class files (GitHub #2170, #2189).
  • To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

  • JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).
Commits

Updates org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.25.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.25.0

Versions Maven Plugin 2.25.0 stops suggesting pre-release versions by default, can hold back releases until they have been published for a set number of days, and can follow the ignore rules of a project's Dependabot configuration. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • Pre-releases are left out by default: every goal and report now skips alpha, beta, milestone, release-candidate, preview and early-access versions, so the newest stable version is reported instead of, say, 3.34.0.CR1. Pass -DallowPreReleases=true to get the previous output. When the current version is itself a pre-release or snapshot, newer pre-releases of the same release line are still offered: from 4.0.0-beta-3, both 4.0.0-beta-4 and 4.0.0 are offered (#1482).
  • minimumReleaseAge: offer a release as an update only after it has been published for the given number of days (-Dversions.minimumReleaseAge=7). minimumReleaseAgeExcludes exempts trusted groupId:artifactId patterns. The publication date is read through Maven's own transport, so proxies, mirrors and server credentials apply (#1484).
  • Dependabot ignore rules: with -Dversions.dependabotConfig=.github/dependabot.yml, the goals and reports skip the versions that the Dependabot configuration ignores for the branch being built (#1480).
  • processPlugins for the use-latest-* and use-next-* goals: these goals can now also update plugins with a literal version in build/plugins, build/pluginManagement and reporting. A plugin version that needs a newer Maven than the project's minimum is skipped (#1477).
  • set-property -Dinsert: adds a property the POM doesn't declare yet, optionally inside a profile given with profileId (#1340).
  • rulesUri is loaded through the Maven Resolver: it works with whichever transports Maven is configured with, and the Wagon dependencies are gone. Code that constructs the mojos, reports or the maxDependencyUpdates enforcer rule directly now passes a TransporterProvider instead of a Map<String, Wagon> (#1475).
  • Fixes: BOMs imported as ${project.groupId}:bom:${project.version} no longer fail with "Not fully interpolated artifact" on Maven 3.10 and 4 (#1486). A property that only a child module uses is evaluated with that module's rules again, as in 2.22.0 (#1481). numThreads is honored by the use-latest-* and use-next-* goals (#1478).

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Thanks to @​dcolazin, @​mandritschke, @​Master-Code-Programmer and @​slachiewicz.

Full changelog

2.24.0

Versions Maven Plugin 2.24.0 improves compatibility with modern Maven distributions when loading remote rulesUri configurations, refreshes its HTML report rendering and documentation site, and raises the minimum Maven version. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • Bundled file and http(s) Wagons for rulesUri: wagon-file and wagon-http are now bundled with the plugin so loading version comparison rules via <rulesUri> (http://, https://, or file://) works out of the box on Maven distributions (including Maven 4) that no longer bundle Wagon (#1474).
  • Plain-text status indicators in HTML reports: The dependency, plugin, and property update reports now render status indicators as clear text instead of relying on external Doxia skin icon images (#1472).
  • Documentation site improvements: Added a top-level landing page and navigation bar to the documentation site and clarified the XMLStreamException FAQ (#1454, #1465).

... (truncated)

Commits
  • 818c81d [maven-release-plugin] prepare release 2.25.0
  • ff38086 Set the next version to 2.25.0-SNAPSHOT
  • a69a6c4 Interpolate raw dependencyManagement coordinates (#1485)
  • 354b1f1 Add an IT for minimumReleaseAge and its exemption
  • df0536b Read release dates through the Resolver and rename the filter minimumReleaseAge
  • e80cc41 MinDaysOld: Made minimum age of artifacts configurable
  • a7f3cf1 Parse each version once when applying the pre-release policy
  • af9205c Classify pre-releases from the canonical form of Maven 4 as well
  • d2234dc Leave pre-release versions out by default in every goal and report (#1350)
  • 7aa9bea Remove the maven-shared-utils dependency
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.2 to 3.7.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

  • System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).
  • Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).
  • Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

🚀 New features and improvements

  • Support the system time zone in timestamp-property (#250) @​wilx
  • Add literal replacement support to regex property goals (#249) @​wilx

📝 Documentation updates

👻 Maintenance

🔧 Build

Thanks to @​slachiewicz and @​wilx.

Full changelog

Commits
  • 5eee186 [maven-release-plugin] prepare release 3.7.0
  • b506bd9 Point the remove-project-artifact deprecation at split local repositories (#268)
  • acf3610 Support the system time zone in timestamp-property
  • 7690ae3 Add literal replacement support to regex property goals
  • 8dc41fd Run the IT fixtures on JUnit 5
  • f881bba Replace deprecated @​Component with JSR 330 injection
  • bb5f11c Declare the Maven artifacts the code uses
  • 74eb3f5 Use push for PR Automation
  • 28d7ed1 Check the reserved ports' guarantees, not exact numbers
  • 7459cd8 Build through the MojoHaus workflow
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the maven-dependencies group across 1 directory wit…
67c214a 
…h 4 updates

Bumps the maven-dependencies group with 4 updates in the / directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco), [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) and [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin).


Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.15...v0.8.16)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.25.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.25.0)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.2 to 3.7.0
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.6.2...3.7.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.25.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 12, 2026
@github-actions

github-actions Bot commented Nov 12, 2026

Copy link
Copy Markdown

@copilot The workflow SonarCloud Analysis failed on this pull request. Please inspect the build failure logs at https://github.com/fupacat/tsql-scriptdom-java/actions/runs/43272750395, fix the issue, and commit the update.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants