Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the build-dependencies group with 10 updates

Open
Number: #1708
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 16, 2025 at 06:29 AM UTC
(3 months ago)
Updated: September 16, 2025 at 01:21 PM UTC
(3 months ago)
Labels:
dependencies java
Assignees:
marko-bekhta
Description:

Bumps the build-dependencies group with 10 updates:

Package From To
org.apache.groovy:groovy-jsr223 5.0.0 5.0.1
org.apache.groovy:groovy 5.0.0 5.0.1
org.apache.groovy:groovy-ant 5.0.0 5.0.1
org.springframework:spring-expression 6.2.10 6.2.11
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-surefire-report-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.1
org.apache.maven.plugins:maven-wrapper-plugin 3.3.3 3.3.4
com.gradle:common-custom-user-data-maven-extension 2.0.5 2.0.6

Updates org.apache.groovy:groovy-jsr223 from 5.0.0 to 5.0.1

Commits

Updates org.apache.groovy:groovy from 5.0.0 to 5.0.1

Commits

Updates org.apache.groovy:groovy-ant from 5.0.0 to 5.0.1

Commits

Updates org.springframework:spring-expression from 6.2.10 to 6.2.11

Release notes

Sourced from org.springframework:spring-expression's releases.

v6.2.11

:star: New Features

  • Missing @Nullable on JsonPathAssertions.isEqualTo #35445
  • Graceful fallback for non-default NIO.2 FileSystems #35443
  • Avoid thread pinning in SseEmitter, ResponseBodyEmitter #35423
  • Detect Informix error codes as DuplicateKeyException #35400
  • Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #35377
  • Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #35372
  • StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #35371

:lady_beetle: Bug Fixes

  • "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #35409
  • Annotation not found on parameter in overridden method unless method is public #35349
  • Annotations on overridden methods not found in type hierarchy with unresolved generics #35342
  • Performance degradation when using singleton beans with Provider #35330
  • JettyClientHttpConnector buffer leak in Spring Framework 6.2 #35319
  • Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #35316

:notebook_with_decorative_cover: Documentation

  • Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #35410
  • Fix links to Reactive Libraries and RestTemplate #35392
  • Fix broken link in WebDriver docs #35374
  • Document Web DataBinder support for RouterFunction #35367
  • Improve documentation for ApplicationEvents to clarify recommended usage #35335
  • Document terms and units in DataSize.parse() #35298
  • Refine @Contract Javadoc #35285
  • Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #35212

:hammer: Dependency Upgrades

  • Upgrade to Micrometer 1.14.11 #35455
  • Upgrade to Reactor 2024.0.10 #35454

:heart: Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

Commits
  • 4c13425 Release v6.2.11
  • d17601e Upgrade to Undertow 2.3.19, RxJava 3.1.11, Aalto 1.3.3
  • 5b38761 Clarify intended nestedTransactionAllowed default in JpaTransactionManager
  • 0e3e34b Find annotations on parameters in overridden non-public methods
  • 4745c7c Name local variables consistently
  • 275fb52 Upgrade to Reactor 2024.0.10 and Micrometer 1.14.11
  • 7f9aa39 Polishing
  • c788554 Avoid thread pinning in SseEmitter, ResponseBodyEmitter
  • 9e8c640 Make JsonPathAssertions#isEqualTo parameter nullable
  • ebb8e34 Upgrade to Jetty 12.0.26, Jetty Reactive HttpClient 4.0.11, Netty 4.1.127, Ht...
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-report-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-report-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-report-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-shade-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-shade-plugin's releases.

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 9662c98 [maven-release-plugin] prepare for next development iteration
  • 06902bd [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 29e9a9d add .git
  • 844e61a use github
  • 43101f9 [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 2ffb28d use release drafter v4 and dependabot to updade gha as well (#750)
  • f5b590e Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • eee0319 Bump org.hamcrest:hamcrest-core from 2.2 to 3.0
  • 0d5a7a4 fix upgrade, remove those useless final
  • 6e5f0f3 Bump org.apache.maven.plugins:maven-plugins from 42 to 45
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-wrapper-plugin from 3.3.3 to 3.3.4

Release notes

Sourced from org.apache.maven.plugins:maven-wrapper-plugin's releases.

3.3.4

🐛 Bug Fixes

👻 Maintenance

  • Ensure Path Traversal is fully addressed in MavenWrapperDownloader (#363) @​hazendaz
Commits
  • 524486a [maven-release-plugin] prepare release maven-wrapper-3.3.4
  • 17c1ec9 Revert wrapper version removal (#365)
  • 366207f Ensure Path Traversal is fully addressed in MavenWrapperDownloader
  • 086b1c9 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.gradle:common-custom-user-data-maven-extension from 2.0.5 to 2.0.6

Release notes

Sourced from com.gradle:common-custom-user-data-maven-extension's releases.

2.0.6

  • [FIX] GitHub Actions build link doesn't include run attempt
Commits
  • 1d91ded [maven-release-plugin] prepare release v2.0.6
  • ed8dd90 Prepare for 2.0.6 release
  • 4a04ad0 Merge pull request #313 from gradle/guylabs/remove-enterprise-samples-gradle-...
  • 5c6ab39 Remove references to enterprise-samples.gradle.com
  • 1ea051f Combined PRs (#312)
  • 6ca5c40 Merge pull request #309 from gradle/erichaagdev/github-rerun-support
  • 0dd90ed Add better support for GitHub Actions reruns
  • 122cd60 Update to use version 2.0.5 of the Common Custom User Data Maven Extension
  • c8129b7 Prepare for next round of development
  • ec25348 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+6
Deletions:
-6
Package Dependencies
Package:
org.apache.maven.plugins:maven-surefire-plugin
Ecosystem:
maven
Version Change:
3.5.3 → 3.5.4
Update Type:
Patch
Package:
org.apache.maven.plugins:maven-failsafe-plugin
Ecosystem:
maven
Version Change:
3.5.3 → 3.5.4
Update Type:
Patch
Package:
com.gradle:common-custom-user-data-maven-extension
Ecosystem:
maven
Version Change:
2.0.5 → 2.0.6
Update Type:
Patch
Package:
org.springframework:spring-expression
Ecosystem:
maven
Version Change:
6.2.10 → 6.2.11
Update Type:
Patch
Package:
org.apache.maven.plugins:maven-shade-plugin
Ecosystem:
maven
Version Change:
3.6.0 → 3.6.1
Update Type:
Patch
Package:
org.apache.maven.plugins:maven-surefire-report-plugin
Ecosystem:
maven
Version Change:
3.5.3 → 3.5.4
Update Type:
Patch
Package:
org.apache.groovy:groovy
Ecosystem:
maven
Version Change:
5.0.0 → 5.0.1
Update Type:
Patch
Package:
org.apache.groovy:groovy-jsr223
Ecosystem:
maven
Version Change:
5.0.0 → 5.0.1
Update Type:
Patch
Package:
org.apache.groovy:groovy-ant
Ecosystem:
maven
Version Change:
5.0.0 → 5.0.1
Update Type:
Patch
Package:
org.apache.maven.plugins:maven-wrapper-plugin
Ecosystem:
maven
Version Change:
3.3.3 → 3.3.4
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 7876877
UUID: 2831648170
Node ID: PR_kwDOAA7Vrc6ox4Wq
Host: GitHub
Repository: hibernate/hibernate-validator
Merge State: Unknown