An open index of dependabot pull requests across open source projects.

Bump the maven group across 1 directory with 15 updates

Open
Number: #6
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 0
Created: September 02, 2025 at 11:36 AM UTC
(11 days ago)
Updated: September 02, 2025 at 11:36 AM UTC
(11 days ago)
Labels:
dependencies java
Description:

Bumps the maven group with 15 updates in the / directory:

Package From To
com.google.errorprone:error_prone_core 2.38.0 2.41.0
org.apache.maven.plugins:maven-enforcer-plugin 3.5.0 3.6.1
com.diffplug.spotless:spotless-maven-plugin 2.44.4 2.46.1
org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 3.11.3
org.apache.maven.plugins:maven-gpg-plugin 3.2.7 3.2.8
com.google.errorprone:error_prone_annotations 2.38.0 2.41.0
com.guardsquare:proguard-core 9.1.10 9.1.11
biz.aQute.bnd:bnd-maven-plugin 6.4.0 7.1.0
org.moditect:moditect-maven-plugin 1.2.2.Final 1.3.0.Final
org.junit:junit-bom 5.12.2 5.13.4
org.graalvm.buildtools:native-maven-plugin 0.10.6 0.11.0
com.android.tools:r8 8.7.18 8.11.18
org.codehaus.mojo:exec-maven-plugin 3.5.0 3.5.1
com.fasterxml.jackson.core:jackson-databind 2.18.3 2.20.0
com.google.protobuf:protobuf-java 4.30.2 4.32.0

Updates com.google.errorprone:error_prone_core from 2.38.0 to 2.41.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.41.0

New checks:

  • EffectivelyPrivate: Detect declarations that have public or protected modifiers, but are effectively private

Changes:

  • Skip BooleanLiteral findings if the target type is boxed (#5134)

Full changelog: https://github.com/google/error-prone/compare/v2.40.0...v2.41.0

Error Prone 2.40.0

Changes:

Full changelog: https://github.com/google/error-prone/compare/v2.39.0...v2.40.0

Error Prone 2.39.0

Changes:

  • Temporarily downgrade to Guava 33.4.0 (#5108)

Checks:

  • BooleanLiteral: Prefer true to Boolean.TRUE
  • ExpensiveLenientFormatString: Renamed from PreconditionsExpensiveString, detects unnecessary calls to String.format in the arguments of lenient formatting methods.
  • UnnecessaryQualifier: Detects @Qualifier or @BindingAnnotation annotations that have no effect, and can be removed

Issues: #4996, #5045

Full changelog: https://github.com/google/error-prone/compare/v2.38.0...v2.39.0

Commits
  • d6539d6 Release Error Prone 2.41.0
  • 6161d4e Skip BooleanLiteral findings if the target type is boxed
  • 98d83bf Avoid touching parameters of @Subscribe methods.
  • 13d46e7 Refactor to use WellKnownKeep
  • ef33eee Fix a println statement left over from https://github.com/google/error-prone/...
  • ce784a9 Detect non-private, non-override methods in anonymous classes
  • 43759cd Recognise com.google.common.inject.components.OtherRequiredBindings as an i...
  • ef5073b UnnecessaryQualifier: don't fire on interfaces, in deference to Dagger.
  • 3d7b585 TruthIncompatibleType support for MultisetSubject#hasCount.
  • b5c6175 Add a test confirming external #5151.
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

  • Fix NPE when a classifier part is specified in bannedDependencies (#905) @​harrisric

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

... (truncated)

Commits
  • 9b9b705 [maven-release-plugin] prepare release enforcer-3.6.1
  • 469f45c Move contributing information into README - fix cla link
  • fec424a Move contributing information into README
  • 3abe11d Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#910)
  • d58be76 Improve performance of transitive dependency checks (#904)
  • 1f7ac3c null analysis (#907)
  • 3bfbff8 Fix some typos
  • 8da0311 Remove unused javax.annotations dependency (#899)
  • 06bcf29 Remove unused methods (#900)
  • b25c800 Fix NPE when a classifier part is specified but an artifact classifier is nul...
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.44.4 to 2.46.1

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v2.46.1

Fixed

  • spotless:install-git-pre-push-hook didn't work on windows, now fixed. (#2562)

Maven Plugin v2.46.0

Added

  • Allow specifying path to Biome JSON config file directly in biome step. Requires biome 2.x. (#2548)
  • spotless:install-git-pre-push-hook goal, which installs a Git pre-push hook to run spotless:check and spotless:apply. (#2553)

Changed

  • Bump default gson version to latest 2.11.0 -> 2.13.1. (#2414)
  • Bump default jackson version to latest 2.18.1 -> 2.19.2. (#2558)
  • Bump default gherkin-utils version to latest 9.0.0 -> 9.2.0. (#2408)
  • Bump default cleanthat version to latest 2.22 -> 2.23. (#2556)

Maven Plugin v2.45.0

Added

  • Support for idea (#2020, #2535)
  • Add support for removing wildcard imports via removeWildcardImports step. (#2517)

Fixed

  • SortPom disable expandEmptyElements, to avoid empty body warnings. (#2520)
  • Fix biome formatter for new major release 2.x of biome (#2537)
  • Make sure npm-based formatters use the correct node_modules directory when running in parallel. (#2542)

Changed

  • Bump internal dependencies for npm-based formatters (#2542)

Changed

  • scalafmt: enforce version consistency between the version configured in Spotless and the version declared in Scalafmt config file (#2460)

Maven Plugin v2.44.5

Changed

  • Bump default eclipse version to latest 4.34 -> 4.35. (#2458)
  • Bump default greclipse version to latest 4.32 -> 4.35. (#2458)
  • pgp key had expired, this and future releases will be signed by new key (details)
Commits

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.11.3

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

  • Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use --source-path in legacy mode) (#1217) @​fridrich
  • [MJAVADOC-826] - Don't try to modify project source roots (#358) @​oehme

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • 8357bc2 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.3
  • ab6e97e Bump commons-io:commons-io from 2.19.0 to 2.20.0
  • 83788c1 Bump org.apache.commons:commons-text from 1.13.1 to 1.14.0
  • 99ee1fc Bump org.apache.commons:commons-lang3 in /src/it/projects/MJAVADOC-787
  • 18bfeb8 Maven Archiver 3.6.4 (#1226)
  • 63618bb Bump org.apache.commons:commons-lang3 (#1224)
  • 81afff9 Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#1223)
  • 8bcdebf Add Apache 2.0 LICENSE file (#1220)
  • 2299072 Make the legacyMode consistent and actually useful (#1217)
  • 33c9f01 Be consistent about data encoding when copying files (#1215)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
  • 7012821 Fix issueManagement, ciManagement system and url
  • a9a8c84 Make empty classifier null (not empty string) (#287)
  • a8368b0 Add .mvn
  • f0e45e0 Update parent POM to 45 (#284)
  • cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
  • 5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
  • 8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
  • 54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
  • a6a412d Remove old JIRA issue link
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_annotations from 2.38.0 to 2.41.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.41.0

New checks:

  • EffectivelyPrivate: Detect declarations that have public or protected modifiers, but are effectively private

Changes:

  • Skip BooleanLiteral findings if the target type is boxed (#5134)

Full changelog: https://github.com/google/error-prone/compare/v2.40.0...v2.41.0

Error Prone 2.40.0

Changes:

Full changelog: https://github.com/google/error-prone/compare/v2.39.0...v2.40.0

Error Prone 2.39.0

Changes:

  • Temporarily downgrade to Guava 33.4.0 (#5108)

Checks:

  • BooleanLiteral: Prefer true to Boolean.TRUE
  • ExpensiveLenientFormatString: Renamed from PreconditionsExpensiveString, detects unnecessary calls to String.format in the arguments of lenient formatting methods.
  • UnnecessaryQualifier: Detects @Qualifier or @BindingAnnotation annotations that have no effect, and can be removed

Issues: #4996, #5045

Full changelog: https://github.com/google/error-prone/compare/v2.38.0...v2.39.0

Commits
  • d6539d6 Release Error Prone 2.41.0
  • 6161d4e Skip BooleanLiteral findings if the target type is boxed
  • 98d83bf Avoid touching parameters of @Subscribe methods.
  • 13d46e7 Refactor to use WellKnownKeep
  • ef33eee Fix a println statement left over from https://github.com/google/error-prone/...
  • ce784a9 Detect non-private, non-override methods in anonymous classes
  • 43759cd Recognise com.google.common.inject.components.OtherRequiredBindings as an i...
  • ef5073b UnnecessaryQualifier: don't fire on interfaces, in deference to Dagger.
  • 3d7b585 TruthIncompatibleType support for MultisetSubject#hasCount.
  • b5c6175 Add a test confirming external #5151.
  • Additional commits viewable in compare view

Updates com.guardsquare:proguard-core from 9.1.10 to 9.1.11

Release notes

Sourced from com.guardsquare:proguard-core's releases.

9.1.11

Kotlin support

  • Add support for processing Kotlin 2.2 metadata.
Commits
  • c8d62cc Add Kotlin 2.2 release note
  • a1947d8 Migrate to OSSRH staging API service
  • 1fbc25d Support reading and writing metadata from the Kotlin 2.2 compiler
  • d7118c6 Remove unused log4j loggers
  • 34db356 Update gradle and github actions configuration (#142)
  • bff1e55 Add MemberProcessingInfoFilter
  • c4e3ab2 Add generic invocation utility
  • 362b53c Add method to determine whether a BaseTypeNode is a category 2 value
  • 2b8290a Add generic invoke() variant to InstructionSequenceBuilder
  • 508a31c Allow specifying a CodeAttributeEditor to the InitializerEditor
  • Additional commits viewable in compare view

Updates biz.aQute.bnd:bnd-maven-plugin from 6.4.0 to 7.1.0

Release notes

Sourced from biz.aQute.bnd:bnd-maven-plugin's releases.

Bnd/Bndtools 7.1.0

See Release Notes.

Bnd/Bndtools 7.0.0

This is the first release on Java 17.

See Release Notes.

Classic Bndtools/bnd 6.4.1 (only runtime bundles, no plugins)

This is not a full release! It is maintained as a line for security and important fixes of the runtime bundles on Java 1.8.

See https://github.com/bndtools/bnd/wiki/Changes-in-6.4.1-classic

Commits
  • 47e504d Build Release 7.1.0
  • c3ff149 build: Build release 7.1.0.RC1
  • 2fc3187 Merge pull request #6363 from laeubi/process_with_conditional_package
  • cd347e1 Merge pull request #6365 from bndtools/dependabot/github_actions/ruby/setup-r...
  • 9aa57ef Bump ruby/setup-ruby from 1.201.0 to 1.202.0
  • ec0fea7 Merge pull request #6361 from bndtools/dependabot/github_actions/github/codeq...
  • 3962626 Add testcase for conditional packages with bnd-process
  • fe9a874 Bump github/codeql-action from 3.27.0 to 3.27.1
  • e3c95f8 Merge pull request #6360 from pkriens/issue/6346-gradle-reference-to-project-...
  • aac9271 Added a method to get the Macro references from a Processor
  • Additional commits viewable in compare view

Updates org.moditect:moditect-maven-plugin from 1.2.2.Final to 1.3.0.Final

Release notes

Sourced from org.moditect:moditect-maven-plugin's releases.

1.3.0.Final

Changelog

🚀 Features

  • 4e56341 Use maven-archiver to parse ouputTimestamp
  • f9bd055 Reduce code duplication in AddModuleInfoTest

🐛 Fixes

  • 634740e Generate multi-release directory JAR entries

🛠 Build

  • 5cdd34c Update plugins from parent
  • 68618b5 Update changelog configuration
  • 0999060 Update release configuration

⚙️ Dependencies

  • 2d60d8f Update jcommander to 2.0
  • 00abb5b Update build-helper-maven-plugin to 3.6.1
  • ab40c70 Update maven-shade-plugin to 3.6.0
  • 0fed58f Update maven-plugin-plugin to 3.15.1
  • 9e22a5e Update slf4j-api to 2.0.17
  • 6c0ded3 Update assertj to 3.27.3
  • d21270f Update guava to 33.4.8-jre
  • ac7582f Update checker-qual to 3.49.5
  • 51e2582 Update javaparser to 3.27.0

  • 0053e2b Releasing version 1.3.0.Final
  • 0de5521 Releasing version 1.3.0
  • 8a34717 Use maven-archiver to parse ouputTimestamp
  • 8e5fbdb Generate multi-release directory JAR entries
  • 2bd52fe Reduce code duplication in AddModuleInfoTest
  • 0725a88 Next version 1.3.0-SNAPSHOT
  • 1909942 Releasing version 1.2.2.Final

Contributors

We'd like to thank the following people for their contributions:

Commits
  • 0053e2b Releasing version 1.3.0.Final
  • 4c86fb8 Merge pull request #264 from aalmiray/main
  • 5cdd34c build: Update plugins from parent
  • 68618b5 build: Update changelog configuration
  • 2d60d8f deps: Update jcommander to 2.0
  • 00abb5b deps: Update build-helper-maven-plugin to 3.6.1
  • ab40c70 deps: Update maven-shade-plugin to 3.6.0
  • 0fed58f deps: Update maven-plugin-plugin to 3.15.1
  • 9e22a5e deps: Update slf4j-api to 2.0.17
  • 6c0ded3 deps: Update assertj to 3.27.3
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.12.2 to 5.13.4

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.3...r5.13.4

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: https://github.com/junit-team/junit-framework/compare/r5.13.1...r5.13.2

JUnit 5.13.1 = Platform 1.13.1 + Jupiter 5.13.1 + Vintage 5.13.1

See Release Notes.

Full Changelog: https://github.com/junit-team/junit5/compare/r5.13.0...r5.13.1

JUnit 5.13.0 = Platform 1.13.0 + Jupiter 5.13.0 + Vintage 5.13.0

See Release Notes.

New Contributors

Full Changelog: https://github.com/junit-team/junit5/compare/r5.12.2...r5.13.0

JUnit 5.13.0-RC1 = Platform 1.13.0-RC1 + Jupiter 5.13.0-RC1 + Vintage 5.13.0-RC1

See Release Notes.

New Contributors

Full Changelog: https://github.com/junit-team/junit5/compare/r5.13.0-M3...r5.13.0-RC1

JUnit 5.13.0-M3 = Platform 1.13.0-M3 + Jupiter 5.13.0-M3 + Vintage 5.13.0-M3

See Release Notes.

Full Changelog: https://github.com/junit-team/junit5/compare/r5.13.0-M2...r5.13.0-M3

... (truncated)

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.graalvm.buildtools:native-maven-plugin from 0.10.6 to 0.11.0

Release notes

Sourced from org.graalvm.buildtools:native-maven-plugin's releases.

0.11.0

What's Changed

New Contributors

Full Changelog: https://github.com/graalvm/native-build-tools/compare/0.10.6...0.11.0

Commits
  • 5ac6a5f release 0.11.0
  • ecbe232 Adjust changelog sections
  • 9c33eae Update various versions used in documentation examples
  • 439fa9d Add changelog entries
  • 8f2846d Update reachability metadata version
  • 4e3a9c8 Avoid Adding Duplicated JUnit Entries on Classpath (#712)
  • 424126c Update the .sdkmanrc of the master branch
  • fe96912 Add runtimeArgs support to native-maven-plugin
  • ad0e84c Add changelog entry for running integration tests with failsafe plugin
  • 05d7e00 Add tests for integration test support
  • Additional commits viewable in compare view

Updates com.android.tools:r8 from 8.7.18 to 8.11.18

Updates org.codehaus.mojo:exec-maven-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.5.1

🐛 Bug Fixes

📦 Dependency updates

Pull Request Statistics
Commits:
1
Files Changed:
6
Additions:
+16
Deletions:
-16
Package Dependencies
Ecosystem:
maven
Version Change:
5.12.2 → 5.13.4
Update Type:
Minor
Ecosystem:
maven
Version Change:
3.11.2 → 3.11.3
Update Type:
Patch
Ecosystem:
maven
Version Change:
3.5.0 → 3.6.1
Update Type:
Minor
Ecosystem:
maven
Version Change:
3.2.7 → 3.2.8
Update Type:
Patch
Ecosystem:
maven
Version Change:
3.5.0 → 3.5.1
Update Type:
Patch
Ecosystem:
maven
Version Change:
2.44.4 → 2.46.1
Update Type:
Minor
Ecosystem:
maven
Version Change:
4.30.2 → 4.32.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
2.18.3 → 2.20.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
0.10.6 → 0.11.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
2.38.0 → 2.41.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
2.38.0 → 2.41.0
Update Type:
Minor
Ecosystem:
maven
Version Change:
6.4.0 → 7.1.0
Update Type:
Major
Ecosystem:
maven
Version Change:
8.7.18 → 8.11.18
Update Type:
Minor
Ecosystem:
maven
Version Change:
9.1.10 → 9.1.11
Update Type:
Patch
Ecosystem:
maven
Version Change:
1.2.2.Final → 1.3.0.Final
Update Type:
Minor
Technical Details
ID: 6678040
UUID: 2792328014
Node ID: PR_kwDOO8O44c6mb4tO
Host: GitHub
Repository: DuaMohyyudin/gson-open-source-refactoring-code
Merge State: Unknown