Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates

Open

Number: #3060
Type: Pull Request
State: Open

Author:

dependabot[bot]
Association: Contributor
Comments: 3

Created: June 02, 2025 at 10:09 AM UTC
(10 months ago)

Updated: June 08, 2025 at 02:22 AM UTC
(10 months ago)

Labels:
dependencies java

Description:

Bumps the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates:

Package	From	To
org.junit:junit-bom	`5.12.1`	`5.13.0`
org.springframework:spring-web	`6.2.5`	`6.2.7`
com.fasterxml.jackson.core:jackson-core	`2.18.3`	`2.19.0`
com.fasterxml.jackson.core:jackson-annotations	`2.18.3`	`2.19.0`
com.fasterxml.jackson.core:jackson-databind	`2.18.3`	`2.19.0`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.18.3`	`2.19.0`
org.mockito:mockito-core	`5.17.0`	`5.18.0`
org.mockito:mockito-junit-jupiter	`5.17.0`	`5.18.0`
org.sonarqube	`6.1.0.5360`	`6.2.0.5505`

Updates org.junit:junit-bom from 5.12.1 to 5.13.0

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.0 = Platform 1.13.0 + Jupiter 5.13.0 + Vintage 5.13.0

See Release Notes.

New Contributors

@Oyster-zx made their first contribution in junit-team/junit5#4311

@etrandafir93 made their first contribution in junit-team/junit5#4336

@hanszt made their first contribution in junit-team/junit5#3377

@ngocnhan-tran1996 made their first contribution in junit-team/junit5#4545

Full Changelog: https://github.com/junit-team/junit5/compare/r5.12.2...r5.13.0

JUnit 5.13.0-RC1 = Platform 1.13.0-RC1 + Jupiter 5.13.0-RC1 + Vintage 5.13.0-RC1

See Release Notes.

New Contributors

@hanszt made their first contribution in junit-team/junit5#3377

Full Changelog: https://github.com/junit-team/junit5/compare/r5.13.0-M3...r5.13.0-RC1

JUnit 5.13.0-M3 = Platform 1.13.0-M3 + Jupiter 5.13.0-M3 + Vintage 5.13.0-M3

See Release Notes.

Full Changelog: https://github.com/junit-team/junit5/compare/r5.13.0-M2...r5.13.0-M3

JUnit 5.13.0-M2 = Platform 1.13.0-M2 + Jupiter 5.13.0-M2 + Vintage 5.13.0-M2

See Release Notes.

Full Changelog: https://github.com/junit-team/junit5/compare/r5.13.0-M1...r5.13.0-M2

JUnit 5.13.0-M1 = Platform 1.13.0-M1 + Jupiter 5.13.0-M1 + Vintage 5.13.0-M1

See Release Notes.

New Contributors

@Oyster-zx made their first contribution in junit-team/junit5#4311

@etrandafir93 made their first contribution in junit-team/junit5#4336

Full Changelog: https://github.com/junit-team/junit5/compare/r5.12.1...r5.13.0-M1

JUnit 5.12.2 = Platform 1.12.2 + Jupiter 5.12.2 + Vintage 5.12.2

See Release Notes.

Full Changelog: https://github.com/junit-team/junit5/compare/r5.12.1...r5.12.2

Commits

f539f92 Release 5.13.0
a54ad65 Use set/get on AtomicBoolean compatibility with Java 8
9bb6a0f Finalize 5.13.0 release notes
5f0e4e6 Remove short-circuiting to ensure all classes are checked for cycles (#4598)
36bb005 Improve assertion failure message in TestClassPredicatesTests
2c86dfa Avoid publishing Gradle Module Metadata for shadowRuntimeElements
4b27910 Allow publishing files to an existing directory
b819306 Fix console launcher's --uid option (#4589)
df46651 Fix :junit-platform-console:compileModule
182a268 Force Gradle to update snapshots
Additional commits viewable in compare view

Updates org.springframework:spring-web from 6.2.5 to 6.2.7

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.7

:star: New Features

Forward more methods to underlying InputStream in NonClosingInputStream #34893

Introduce Spring property for the default property placeholder escape character #34865

Close ApplicationContext once AOT processing has completed #34841

Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811

Add option for case-insensitive match to PatternMatchUtils #34801

RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793

Adds option to set Principal in MockServerWebExchange #34789

:lady_beetle: Bug Fixes

Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902

PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861

HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851

Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848

Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844

Accidental ClassLoader defineClass enforcement after #34677 #34824

HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812

AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796

Correctly expand query param with same name from URI variables array #34783

R2DBC NamedParameterUtils only expands reused collection parameter once #34768

PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

:notebook_with_decorative_cover: Documentation

Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886

Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845

Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843

Provide a working example instead of unclear placeholders #34828

:hammer: Dependency Upgrades

Upgrade to Micrometer 1.14.7 #34889

Upgrade to Reactor 2024.0.6 #34898

:heart: Contributors

Thank you to all the contributors who worked on this release:

@Artur-, @blake-bauman, @iifawzi, @kilink, @quaff, @whlit, and @zzoe2346

v6.2.6

:star: New Features

An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #34727

Provide first-class support for Bean Overrides with @ContextHierarchy #34723

Micro performance optimizations #34717

Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #34714

... (truncated)

Commits

ba590ac Release v6.2.7
ee62701 Make use of PatternMatchUtils ignoreCase option
fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
3c228a5 Add missing @since tags in PatternMatchUtils
9bf6b8c Upgrade to Reactor 2024.0.6
37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
73f1c5a Polishing
4d296fb Upgrade to Micrometer 1.14.7
6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
03ae97b Introduce Spring property for default escape character for placeholders
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.18.3 to 2.19.0

Commits

9c99b45 [maven-release-plugin] prepare release jackson-core-2.19.0
1ac378d Prep for 2.19.0
104f6b1 Fixes #1421: make JsonReadContext non-final (#1423)
453696a Merge branch '2.18' into 2.19
ed885e1 CI to latest ubuntu
0617b40 ...
29a731c Start "master"->"3.x" renaming (JSTEP-12)
e1c99c5 Back to snapshot dep
92dcbc2 [maven-release-plugin] prepare for next development iteration
c0d9101 [maven-release-plugin] prepare release jackson-core-2.19.0-rc2
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.18.3 to 2.19.0

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.19.0

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.3 to 2.19.0

Updates org.mockito:mockito-core from 5.17.0 to 5.18.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0

2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]

Make vararg checks Scala friendly (for mockito-scala) [(#3651)](mockito/mockito#3651)

For UnfinishedStubbingException, suggest the possibility of another thread [(#3636)](mockito/mockito#3636)

UnfinishedStubbingException ought to suggest the possibility of another thread [(#3635)](mockito/mockito#3635)

Commits

0673747 Force Jacoco version for Android
65388f0 Update Jacoco version to 0.8.13
60179ca Bump bytebuddy from 1.15.11 to 1.16.1
8f15169 Make vararg checks Scala friendly (#3651)
3a631cb Add hint for multithreading in UnfinishedStubbingException (#3636)
See full diff in compare view

Updates org.mockito:mockito-junit-jupiter from 5.17.0 to 5.18.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0

2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]

Make vararg checks Scala friendly (for mockito-scala) [(#3651)](mockito/mockito#3651)

For UnfinishedStubbingException, suggest the possibility of another thread [(#3636)](mockito/mockito#3636)

UnfinishedStubbingException ought to suggest the possibility of another thread [(#3635)](mockito/mockito#3635)

Commits

0673747 Force Jacoco version for Android
65388f0 Update Jacoco version to 0.8.13
60179ca Bump bytebuddy from 1.15.11 to 1.16.1
8f15169 Make vararg checks Scala friendly (#3651)
3a631cb Add hint for multithreading in UnfinishedStubbingException (#3636)
See full diff in compare view

Updates org.sonarqube from 6.1.0.5360 to 6.2.0.5505

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Pull Request Statistics

Commits:
0

Files Changed:
0

Additions:
+0

Deletions:
-0

Package Dependencies

Package:
org.springframework:spring-web

Ecosystem:
maven

Version Change:
6.2.5 → 6.2.7

Update Type:
Patch