Skip to content

Bump the maven group across 1 directory with 10 updates#3071

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-ec7f4a371c
Open

Bump the maven group across 1 directory with 10 updates#3071
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-ec7f4a371c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven group with 10 updates in the / directory:

Package From To
com.diffplug.spotless:spotless-maven-plugin 3.5.1 3.8.0
org.sonatype.central:central-publishing-maven-plugin 0.10.0 0.11.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.5 3.5.6
org.apache.maven.plugins:maven-failsafe-plugin 3.5.5 3.5.6
com.github.siom79.japicmp:japicmp-maven-plugin 0.25.7 0.26.1
org.junit:junit-bom 6.0.3 6.1.0
org.graalvm.buildtools:native-maven-plugin 1.1.0 1.1.3
com.google.protobuf:protobuf-java 4.34.1 4.35.1
com.google.protobuf:protobuf-java-util 4.34.1 4.35.1
io.github.ascopes:protobuf-maven-plugin 5.1.4 5.1.7

Updates com.diffplug.spotless:spotless-maven-plugin from 3.5.1 to 3.8.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.8.0

Added

  • Add support for custom string format for license header copyright year via yearStringFormat(). (#2965)

Fixed

  • <expandWildcardImports> no longer triggers a full transitive dependency resolution on every build. Dependency resolution is now deferred until the step actually runs, so projects that do not use <expandWildcardImports> (or that use version ranges) are no longer penalized. (#2983)

Maven Plugin v3.7.0

Fixed

  • Parse standard git year output in LicenseHeaderStep. (#2940)
  • <toggleOffOn> no longer disables lint-only steps such as <forbidWildcardImports>. (#2962)
  • Fix StringIndexOutOfBoundsException in scenarios where copyright year is surrounded by whitespace. (#2973)

Added

  • Add support for AsciiDoc formatting via adocfmt. (#2960)
  • <flexmark> step now supports arbitrary formatter options via <formatterOptions>. (#2968)

Maven Plugin v3.6.0

Added

  • Add <cacheDirectory> to <eclipse>, <greclipse>, and <eclipseCdt> for the Equo/Solstice P2 cache. (#2944)
  • EclipseJdtFormtterStep now can conditionally set compiler source/compliance options. Allows for better parsing of AST Node for newer language features and more correct sorting; e.g. records or seal classes. (#2942)

Fixed

  • <versionCatalog> no longer splits long inline tables across multiple lines — Gradle's TOML 1.0 parser cannot read multi-line inline tables. The maxLineLength option has been removed. (#2948)
  • spotless:apply no longer aborts on the first file with lints; it now formats all files and reports a single aggregated lint failure across every file, matching the Gradle plugin's behavior. (#2937)
  • <greclipse> and <eclipseCdt> now default P2 data to the Maven local repository. (#2944)
  • forbidWildcardImports and forbidModuleImports now detect imports that have leading whitespace (indentation/tabs). (#2939)

Changes

  • Improved formatting performance by eliminating redundant per-step line-ending normalization in the core formatter loop. (#2934)
Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

Changes

  • Bump default greclipse version to latest 4.39 -> 4.40. (#2989)

[4.8.0] - 2026-06-29

Added

  • Add support for custom string format for license header copyright year via yearStringFormat(). (#2965)

[4.7.0] - 2026-06-16

Added

  • Add support for AsciiDoc formatting via adocfmt. (#2960)
  • flexmark step now supports arbitrary formatter options via a formatterOptions map. (#2968)

Fixed

  • FenceStep.preserveWithin now forwards lints from nested steps while still suppressing lints inside preserved blocks. (#2962)
  • Support ktfmt 0.63 and use its new builder API for formatting options to better avoid future breaking changes.
  • Parse standard git year output in LicenseHeaderStep. (#2940)
  • Fix StringIndexOutOfBoundsException in scenarios where copyright year is surrounded by whitespace. (#2973)

Changes

  • Bump default greclipse version to latest 4.35 -> 4.39. (#2924)

[4.6.2] - 2026-05-27

Fixed

  • P2Provisioner now passes cache directory overrides directly to Solstice. (#2944)
  • forbidWildcardImports and forbidModuleImports now detect imports that have leading whitespace (indentation/tabs). (#2939)
  • versionCatalog step no longer splits long inline tables across multiple lines — Gradle's TOML 1.0 parser cannot read multi-line inline tables. The maxLineLength option has been removed. (#2948)

Changes

  • EclipseJdtFormtterStep now can conditionally set compiler source/compliance options. Allows for better parsing of AST Node for newer language features and more correct sorting; e.g. records or seal classes. (#2942)
  • Formatter no longer recomputes line-ending normalization (LineEnding.toUnix) a second time for every formatter step that changes content, removing redundant O(n) work from the core formatting loop. (#2934)
  • expandWildcardImports support pom type dependency. (#2839)

[4.6.1] - 2026-05-15

Fixed

  • LicenseHeaderStep in SET_FROM_GIT year mode no longer invokes git log through bash -c / cmd /c, eliminating a shell-injection vector when processing repositories that contain files whose names include shell metacharacters.

[4.6.0] - 2026-05-14

Added

  • scalafmt() now reads the version from the version field in the scalafmt config file when no version is explicitly set in the plugin config, falling back to the built-in default only if neither is available. (#2922)
  • Add versionCatalog step for formatting and sorting Gradle version catalog (.toml) files. (#2916)

... (truncated)

Commits
  • 03d43ba Published maven/3.8.0
  • 8b80c13 Published gradle/8.8.0
  • 8ee6cf9 Published lib/4.8.0
  • 6c02c0b Add missing changelog entry.
  • 264f4cc Add regression test for forbidWildcardImports inside toggleOffOn (#2982)
  • 6abb064 fix #2983, expandWildcardImports triggers a full transitive reso… (#2984)
  • f4536d4 Update plugin spotbugs to v6.5.8 (#2987)
  • 873454a Update plugin spotbugs to v6.5.8
  • 000b8a8 Update dependency org.junit.jupiter:junit-jupiter to v6.1.1 (#2985)
  • 84ebcab Update dependency org.junit.jupiter:junit-jupiter to v6.1.1
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0

Commits

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.6

🚀 New features and improvements

  • Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @​olamy

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 25ea054 [maven-release-plugin] prepare release surefire-3.5.6
  • e5f374c Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3
  • dadd55b Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_soc...
  • 39dd250 Bump commons-io:commons-io from 2.21.0 to 2.22.0
  • 2774273 Ensure that the statistics filename is calculated only once. (#3326) (#3327)
  • 0d5df8a 3.5.x/bug/cherry pick embedded mode its (#3328)
  • 04ad9a2 Use surefire 3.5.5 by project itself for testing
  • 37e8f69 Add flakes attribute to use in testsuite report (#3306) (#3308)
  • a970fef Introduce reportTestTimestamp option and include timestamp for test sets and ...
  • e838393 deploy 3.5.x branch to nexus
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.5 to 3.5.6

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.6

🚀 New features and improvements

  • Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @​olamy

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 25ea054 [maven-release-plugin] prepare release surefire-3.5.6
  • e5f374c Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3
  • dadd55b Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_soc...
  • 39dd250 Bump commons-io:commons-io from 2.21.0 to 2.22.0
  • 2774273 Ensure that the statistics filename is calculated only once. (#3326) (#3327)
  • 0d5df8a 3.5.x/bug/cherry pick embedded mode its (#3328)
  • 04ad9a2 Use surefire 3.5.5 by project itself for testing
  • 37e8f69 Add flakes attribute to use in testsuite report (#3306) (#3308)
  • a970fef Introduce reportTestTimestamp option and include timestamp for test sets and ...
  • e838393 deploy 3.5.x branch to nexus
  • Additional commits viewable in compare view

Updates com.github.siom79.japicmp:japicmp-maven-plugin from 0.25.7 to 0.26.1

Release notes

Sourced from com.github.siom79.japicmp:japicmp-maven-plugin's releases.

japicmp-base-0.26.1

  • New change METHOD_RETURN_TYPE_COVARIANT_CHANGED #522

japicmp-base-0.26.0

  • No NPE when using Markdown-Processsor with byte-based archive #516
Commits
  • 9303487 [maven-release-plugin] prepare release japicmp-base-0.26.1
  • a11fb26 upgraded version in *.md files to 0.26.1
  • 831b0f1 Add release notes for version 0.26.1
  • 2d6b2c8 Merge pull request #523 from siom79/claude/japicmp-issue-522-1DtKr
  • a476601 Fix false positive METHOD_RETURN_TYPE_CHANGED for covariant return type overr...
  • 6b7dbb6 Merge pull request #521 from siom79/mcp-server
  • d568218 Update README.md
  • 3b6266b Update README.md with japicmp-mcp-server
  • 8becaf3 Merge pull request #520 from siom79/release-v0.26.0
  • ea582f8 Merge pull request #519 from siom79/claude/increment-version-action-fail-qieCQ
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.0.3 to 6.1.0

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.0...r6.1.0-M1

Commits

Updates org.graalvm.buildtools:native-maven-plugin from 1.1.0 to 1.1.3

Release notes

Sourced from org.graalvm.buildtools:native-maven-plugin's releases.

1.1.3

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.2...1.1.3

1.1.2

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.1...1.1.2

1.1.1

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.0...1.1.1

Commits
  • 766a4e8 Release 1.1.3
  • 0a7a9b7 Refine grund specification (#917)
  • 6fcb943 Bump io.netty:netty-codec-http from 4.1.132.Final to 4.1.135.Final in /sample...
  • 7fcc3e8 Merge pull request #924 from graalvm/bump-version-to-1.1.3-SNAPSHOT
  • 704ab38 Bump version to 1.1.3-SNAPSHOT
  • f9ae0a5 Merge pull request #923 from graalvm/release/1.1.2
  • bb7ec92 Release 1.1.2
  • 0bd82d7 Merge pull request #918 from graalvm/update-metadata-to-1.0.3
  • f3b0fc3 Update reachability metadata to 1.0.3
  • 0373c8b Add grund repository specification (#894)
  • Additional commits viewable in compare view

Updates com.google.protobuf:protobuf-java from 4.34.1 to 4.35.1

Commits

Updates com.google.protobuf:protobuf-java-util from 4.34.1 to 4.35.1

Updates com.google.protobuf:protobuf-java-util from 4.34.1 to 4.35.1

Updates io.github.ascopes:protobuf-maven-plugin from 5.1.4 to 5.1.7

Release notes

Sourced from io.github.ascopes:protobuf-maven-plugin's releases.

v5.1.7

What's Changed

Full Changelog: ascopes/protobuf-maven-plugin@v5.1.6...v5.1.7

v5.1.6

What's Changed

New Contributors

Full Changelog: ascopes/protobuf-maven-plugin@v5.1.5...v5.1.6

v5.1.5

Nothing of major note for this update. Just pushing a newer build containing dependency updates to help those working in corporate environments with strict security triage policies.

Going forward, I am going to look to do this on a monthly or bi-monthly basis to allow users to keep their builds up to date.

As usual, any problems, just raise a discussion on our GitHub!

Commits
  • e44bc12 [maven-release-plugin] prepare release v5.1.7
  • d8320cf Merge pull request #1023 from hypnoce/windows_exe_extensions
  • 3db62ea GH-1022: keep exe, cmd and ps1 extension for windows binaries
  • 8709feb Merge pull request #1021 from ascopes/dependabot/maven/protobuf-maven-plugin/...
  • 92403d4 Merge pull request #1020 from ascopes/dependabot/maven/main/org.eclipse.sisu-...
  • f6582c2 Bump io.grpc:grpc-bom in /protobuf-maven-plugin/src/it/setup
  • 6777191 Bump org.eclipse.sisu:sisu-maven-plugin from 1.0.0 to 1.0.1
  • 5c600fc [maven-release-plugin] prepare for next development iteration
  • 7bf0941 [maven-release-plugin] prepare release v5.1.6
  • f05fe86 Merge pull request #1018 from siepkes/solaris-support
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
org.graalvm.buildtools:native-maven-plugin [>= 1.1.4.a0, < 1.1.5]
org.junit:junit-bom [>= 6.1.1.a0, < 6.1.2]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 23, 2026
@eamonnmcmanus

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-ec7f4a371c branch from 44def0a to 14479b3 Compare July 24, 2026 14:46
@eamonnmcmanus

Copy link
Copy Markdown
Member

@dependabot ignore org.graalvm.buildtools:native-maven-plugin patch version

@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 1.1.4 of org.graalvm.buildtools:native-maven-plugin again, unless you unignore it.

@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-ec7f4a371c branch from 14479b3 to a4f3bd3 Compare July 24, 2026 15:14
@eamonnmcmanus

Copy link
Copy Markdown
Member

@dependabot ignore org.junit:junit-bom patch version

@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 6.1.1 of org.junit:junit-bom again, unless you unignore it.

@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-ec7f4a371c branch from a4f3bd3 to 304cf74 Compare July 24, 2026 17:44
@eamonnmcmanus

Copy link
Copy Markdown
Member

@dependabot recreate

@eamonnmcmanus

Copy link
Copy Markdown
Member

[I was hoping not to have to create a PR manually that has just the unproblematic dependencies, but clearly I don't really know how to make Dependabot do that. 🙂 ]

Bumps the maven group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.5.1` | `3.8.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.10.0` | `0.11.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |
| [com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp) | `0.25.7` | `0.26.1` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` |
| [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | `1.1.0` | `1.1.3` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.34.1` | `4.35.1` |
| com.google.protobuf:protobuf-java-util | `4.34.1` | `4.35.1` |
| [io.github.ascopes:protobuf-maven-plugin](https://github.com/ascopes/protobuf-maven-plugin) | `5.1.4` | `5.1.7` |



Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.5.1 to 3.8.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/3.5.1...maven/3.8.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.11.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.25.7 to 0.26.1
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.25.7...japicmp-base-0.26.1)

Updates `org.junit:junit-bom` from 6.0.3 to 6.1.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.3...r6.1.0)

Updates `org.graalvm.buildtools:native-maven-plugin` from 1.1.0 to 1.1.3
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](graalvm/native-build-tools@1.1.0...1.1.3)

Updates `com.google.protobuf:protobuf-java` from 4.34.1 to 4.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.35.1

Updates `com.google.protobuf:protobuf-java-util` from 4.34.1 to 4.35.1

Updates `io.github.ascopes:protobuf-maven-plugin` from 5.1.4 to 5.1.7
- [Release notes](https://github.com/ascopes/protobuf-maven-plugin/releases)
- [Commits](ascopes/protobuf-maven-plugin@v5.1.4...v5.1.7)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
  dependency-version: 0.26.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.35.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java-util
  dependency-version: 4.35.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: io.github.ascopes:protobuf-maven-plugin
  dependency-version: 5.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.graalvm.buildtools:native-maven-plugin
  dependency-version: 1.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-ec7f4a371c branch from 304cf74 to 17e1068 Compare July 24, 2026 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant