Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

build(deps): bump the dependencies group with 15 updates

Closed
Number: #3849
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: February 02, 2026 at 12:07 AM UTC
(6 months ago)
Updated: February 09, 2026 at 12:07 AM UTC
(6 months ago)
Closed: February 09, 2026 at 12:07 AM UTC
(6 months ago)
Time to Close: 7 days
Labels:
dependencies java
Description:

Bumps the dependencies group with 15 updates:

Package From To
ch.qos.logback:logback-classic 1.5.26 1.5.27
org.eclipse.jetty:jetty-server 12.1.5 12.1.6
org.eclipse.jetty.websocket:jetty-websocket-core-server 12.1.5 12.1.6
org.eclipse.jetty.websocket:jetty-websocket-jetty-api 12.1.5 12.1.6
org.eclipse.jetty.websocket:jetty-websocket-jetty-server 12.1.5 12.1.6
org.eclipse.jetty.http2:jetty-http2-server 12.1.5 12.1.6
org.eclipse.jetty:jetty-alpn-java-server 12.1.5 12.1.6
org.eclipse.jetty.http2:jetty-http2-client 12.1.5 12.1.6
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.15.0
com.diffplug.spotless:spotless-maven-plugin 3.2.0 3.2.1
org.jboss.logging:jboss-logging 3.6.1.Final 3.6.2.Final
com.puppycrawl.tools:checkstyle 13.0.0 13.1.0
commons-codec:commons-codec 1.20.0 1.21.0
com.github.kagkarlsson:db-scheduler 16.7.0 16.7.1
software.amazon.awssdk:bom 2.41.14 2.41.19

Updates ch.qos.logback:logback-classic from 1.5.26 to 1.5.27

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.27

2026-01-30 Release of logback version 1.5.27

• Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license.

• Fixed missing MDC data transmitted by SocketAppender reported in issues/1010 by Lars Vogel.

• Removed all Receiver classes and components which were already disabled for several years.

• Refactored file scanning code for improved clarity.

• In SizeAndTimeBasedRollingPolicy modified totalSizeCap and maxFileSize comparison to taking into account file compression. This fixes issues/1007.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 3618eb01aad6672f9cd250dccf7546a69cbe982f associated with the tag v_1.5.27. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 3618eb0 increase timeout delay to 2000 millis
  • db150c3 prepare release 1.5.27
  • 0370b13 fix missing MDC transmission in SocketAppender. Fixes issues/1010
  • 8100acd remove RemoteAppender*
  • 2b67210 remove Receiver related classes
  • d84b586 remove ReceiverModelHandler - project still builds indicating no active usage
  • 44049ed remove support for receivers in SerializedModelConfigurator and JoranConfigur...
  • 56085d8 fix test
  • e7764f4 refactor file change scanning for clarity
  • e56a12f bump assertj version
  • Additional commits viewable in compare view

Updates org.eclipse.jetty:jetty-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.websocket:jetty-websocket-core-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-api from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.http2:jetty-http2-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty:jetty-alpn-java-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.http2:jetty-http2-client from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.websocket:jetty-websocket-core-server from 12.1.5 to 12.1.6

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 3.2.0 to 3.2.1

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.2.1

Fixed

  • removeSemicolons() should not be applied to multiline strings in groovy #2780 (#2792)
Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

[4.3.0] - 2026-01-27

Added

  • Add P2Provisioner interface in lib-extra to enable build-tool-specific caching strategies for Eclipse P2 dependencies, fixing OutOfMemoryError in large multi-project builds. (#2788)

Fixed

  • removeSemicolons() should not be applied to multiline strings in groovy #2780 (#2792)

[4.2.0] - 2026-01-22

Added

  • Add a expandWildcardImports API for java (#2679)
  • Add the ability to specify a wildcard version (*) for external formatter executables. (#2757)

Fixed

  • Prevent race conditions when multiple npm-based formatters launch the server process simultaneously while sharing the same node_modules directory. (#2786)
  • Git ratchet no longer throws an error with Git worktrees. (#2779)

Changes

  • Bump default ktfmt version to latest 0.59 -> 0.61. (2804)
  • Bump default ktlint version to latest 1.7.1 -> 1.8.0. (2763)
  • Bump default gherkin-utils version to latest 9.2.0 -> 10.0.0. (#2619)

[4.1.0] - 2025-11-18

Changes

  • Bump default ktfmt version to latest 0.58 -> 0.59. (#2681
  • Bump default jackson version to latest 2.20.0 -> 2.20.1. (#2730)
  • Bump default cleanthat version to latest 2.23 -> 2.24. (#2620)
  • POTENTIALLY BREAKING Removed support for ktlint versions below 1.0. (#2711)

Fixed

  • palantirJavaFormat is no longer arbitrarily set to outdated versions on Java 17, latest available version is always used (#2686 fixes #2685)

Added

  • Add a forbidModuleImports API for java (#2679)
  • new options to customize Flexmark, e.g. to allow YAML front matter (#2616)

[4.0.0] - 2025-09-24

Changes

  • BREAKING Bump the required Java to 17. (#2375, #2540)
  • BREAKING Renamed RemoveWildcardImportsStep to ForbidWildcardImportsStep. (#2633)
  • Bump JGit from 6.10.1 to 7.3.0 (#2257)
    • Adds support for worktrees (fixes #1765)

... (truncated)

Commits
  • d0f4c3d Published maven/3.2.1
  • 2b7f9de Published gradle/8.2.1
  • 78e26e9 Published lib/4.3.0
  • 33692c2 [fix] removeSemicolons() should not be applied to multiline strings in groo...
  • 90628d8 Update changelog.
  • 61864a2 Merge branch 'main' into fix-removeSemicolons
  • 4864bc8 Fix Gradle Cache performance issue by supporting cached P2 provisionning via ...
  • 075895c docs: Mention P2 caching for gradle plugin caching
  • 57214bf feat: Supports P2 in predeclare
  • 8aee8ac chore: Adds a GradleProvisioner test
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-api from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.websocket:jetty-websocket-jetty-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty.http2:jetty-http2-server from 12.1.5 to 12.1.6

Updates org.eclipse.jetty:jetty-alpn-java-server from 12.1.5 to 12.1.6

Updates org.jboss.logging:jboss-logging from 3.6.1.Final to 3.6.2.Final

Release notes

Sourced from org.jboss.logging:jboss-logging's releases.

v3.6.2.Final

What's Changed

Full Changelog: https://github.com/jboss-logging/jboss-logging/compare/3.6.1.Final...v3.6.2.Final

Commits
  • 47f4d0b [maven-release-plugin] prepare release v3.6.2.Final
  • 653f1bb Use the correct server id property
  • f1615dd Merge pull request #173 from jamezp/JBLOGGING-200
  • f35e055 [JBLOGGING-200] Add an option to provide ROOT as the system property value fo...
  • 161674a Merge pull request #172 from jboss-logging/dependabot/maven/version.org.apach...
  • 88f4e18 Bump version.org.apache.logging.log4j from 2.24.3 to 2.25.3
  • dbf4ca7 Merge pull request #170 from jamezp/project-updates
  • 1efef61 Migrate back to the jboss-parent POM. Require a minimum of Java SE 17 for com...
  • 94513d6 Merge pull request #169 from jboss-logging/dependabot/maven/ch.qos.logback-lo...
  • 5c85e2e Bump ch.qos.logback:logback-classic from 1.5.22 to 1.5.26
  • Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 13.0.0 to 13.1.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-13.1.0

Checkstyle 13.1.0 - https://checkstyle.org/releasenotes.html#Release_13.1.0

Breaking backward compatibility:

#12556 - Remove deprecated method CheckstyleAntTask:createClasspath()

New:

#18329 - ImportControl: add module attribute to allow/disallow module imports #18368 - New check: MissingOverrideOnRecordAccessor to require Override on record component accessor methods

Bug fixes:

#16087 - false positive invalid tag JavadocType #18790 - IllegalTokenText reports false positives for Unicode whitespace characters without escape sequences #18118 - Inconsistent behaviour of Indentation check #13038 - VariableDeclarationUsageDistanceCheck doesn't handle method definition properly #11103 - Indentation: Lambda in Enum causes error loop #18644 - False-negative: SummaryJavadoc:forbiddenSummaryFragments for tab-formatted code #6807 - False-positive RightCurly in google_checks since 8.20 #17561 - Google style: Override is required on explicitly declared accessor method for a record #18559 - Add missing checks to sun_checks.xml: DeclarationOrder, FallThrough, OneStatementPerLine

... (truncated)

Commits

Updates commons-codec:commons-codec from 1.20.0 to 1.21.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.21.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.21.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  • CODEC-333: Add distinct Base64 decoding for standard and URL-safe formats. Thanks to Aleksandr Beliakov, Gary Gregory.

Fixed Bugs

  •         Fix oak leaf icon references in overview.html when running `mvn clean javadoc:javadoc`. Thanks to Gary Gregory.

  •         Fix Apache RAT plugin console warnings. Thanks to Gary Gregory.

  •         Fix malformed Javadoc comments. Thanks to Gary Gregory.

Changes

  •         Bump org.apache.commons:commons-parent from 91 to 96 [#415](https://github.com/apache/commons-codec/issues/415), [#418](https://github.com/apache/commons-codec/issues/418). Thanks to Gary Gregory, Dependabot.

  •         Bump commons-io:commons-io from 2.20.0 to 2.21.0. Thanks to Gary Gregory.

  •         Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0. Thanks to Gary Gregory, Dependabot.

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

Commits
  • 91c4404 Prepare for the release candidate 1.21.0 RC1
  • 21fe1d7 Prepare for the next release candidate
  • d4ea4d0 Bump actions/checkout from 6.0.1 to 6.0.2
  • e30b1f6 Bump actions/setup-java from 5.1.0 to 5.2.0
  • 2e4891c Bump org.apache.commons:commons-parent from 95 to 96
  • d02c003 Use a URL to a prettier page: https://www.ietf.org/rfc/rfc2045
  • 3c961b8 Checkstyle
  • 99cf6b7 Javadoc and exception messages: "base 32" -> "Base32".
  • 2df7b9a Javadoc and exception messages: "base 64" -> "Base64".
  • 0643fdd Javadoc 8 doesn't know how to find this link
  • Additional commits viewable in compare view

Updates com.github.kagkarlsson:db-scheduler from 16.7.0 to 16.7.1

Release notes

Sourced from com.github.kagkarlsson:db-scheduler's releases.

v16.7.1

Changelog

🐛 Fixes

  • f4fe276 generate properties metadata for spring boot starter (#780), closes #778 #780

🔄️ Changes

  • 328f53b spotless markdown (#782), closes #782
  • d1e1826 spotless poms (#781), closes #781

🧰 Tasks

  • d99a9ff add commit for spotless poms to .git-blame-ignore-revs
  • 1ae4352 Update db-scheduler version to 16.7.0 in README

Contributors

We'd like to thank the following people for their contributions:

Commits
  • 328f53b style: spotless markdown (#782)
  • f4fe276 fix: generate properties metadata for spring boot starter (#780)
  • d99a9ff chore: add commit for spotless poms to .git-blame-ignore-revs
  • d1e1826 style: spotless poms (#781)
  • 1ae4352 Update db-scheduler version to 16.7.0 in README
  • See full diff in compare view

Updates software.amazon.awssdk:bom from 2.41.14 to 2.41.19

Updates org.eclipse.jetty.http2:jetty-http2-client from 12.1.5 to 12.1.6

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
software.amazon.awssdk:bom
Ecosystem:
maven
Version Change:
2.41.14 → 2.41.19
Update Type:
Patch
Package:
com.puppycrawl.tools:checkstyle
Ecosystem:
maven
Version Change:
13.0.0 → 13.1.0
Update Type:
Minor
Package:
org.apache.maven.plugins:maven-compiler-plugin
Ecosystem:
maven
Version Change:
3.14.1 → 3.15.0
Update Type:
Minor
Package:
ch.qos.logback:logback-classic
Ecosystem:
maven
Version Change:
1.5.26 → 1.5.27
Update Type:
Patch
Package:
com.diffplug.spotless:spotless-maven-plugin
Ecosystem:
maven
Version Change:
3.2.0 → 3.2.1
Update Type:
Patch
Package:
org.eclipse.jetty:jetty-server
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
commons-codec:commons-codec
Ecosystem:
maven
Version Change:
1.20.0 → 1.21.0
Update Type:
Minor
Package:
org.jboss.logging:jboss-logging
Ecosystem:
maven
Version Change:
3.6.1.Final → 3.6.2.Final
Update Type:
Patch
Package:
org.eclipse.jetty.http2:jetty-http2-server
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
org.eclipse.jetty.websocket:jetty-websocket-core-server
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
org.eclipse.jetty.websocket:jetty-websocket-jetty-api
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
org.eclipse.jetty.websocket:jetty-websocket-jetty-server
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
org.eclipse.jetty:jetty-alpn-java-server
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
org.eclipse.jetty.http2:jetty-http2-client
Ecosystem:
maven
Version Change:
12.1.5 → 12.1.6
Update Type:
Patch
Package:
com.github.kagkarlsson:db-scheduler
Ecosystem:
maven
Version Change:
16.7.0 → 16.7.1
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 13632298
UUID: 3883364588
Node ID: PR_kwDOAYRJs87AyDRk
Host: GitHub
Repository: jooby-project/jooby