Skip to content

Bump the minor-java-dependencies group across 1 directory with 4 updates - #4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/minor-java-dependencies-eda0123008
Closed

Bump the minor-java-dependencies group across 1 directory with 4 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/minor-java-dependencies-eda0123008

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-java-dependencies group with 2 updates in the / directory: io.micronaut.platform:micronaut-parent and org.apache.maven.plugins:maven-surefire-plugin.

Updates io.micronaut.platform:micronaut-parent from 4.10.7 to 4.10.9

Release notes

Sourced from io.micronaut.platform:micronaut-parent's releases.

Micronaut Core 4.10.9

What's Changed

Bug Fixes 🐞

Full Changelog: micronaut-projects/micronaut-core@v4.10.8...v4.10.9

Micronaut Core 4.10.8

What's Changed

Improvements ⭐

Docs 📖

Full Changelog: micronaut-projects/micronaut-core@v4.10.7...v4.10.8

Commits
  • 06e40a4 [skip ci] Release v4.10.9
  • 7183c9e Add support for less buggy multipart decoder (#12202)
  • 03eb4a3 chore: Bump version to 4.10.9-SNAPSHOT
  • 0446e71 [skip ci] Release v4.10.8
  • 9e01294 Fix test-suite-kotlin-graalvm
  • 6a92637 ci: define java 17 in graalvm-latest
  • c39f0b6 build: define kotlin compilerOptions jvmTarget 17
  • 8c84ccf move source and target compatibility to convention-test-library
  • cff9964 build: use kotlin complierOptions not jvmToolchain
  • 85ca504 ci: Remove system JDKs
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.19 to 1.5.29

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.29

2026-02-09 Release of logback version 1.5.29

• In response to issues/1017, appender names and appender references are once again subject to variable substitution, reverting the change introduced in version 1.5.28.

Logback 1.5.28

2026-02-06 Release of logback version 1.5.28

• Appender names or appender references are no longer subject to variable substitution.

• Fixed issue with configurations with conditionals encompassing appenders. This was reported in issues/1016 reported by Sergey Sazonov.

• The element now admits a 'scan' attribute which can be used to override the 'scan' attribute in the element.

• Fixed NullPointerException thrown by VersionUtil.checkForVersionEquality method occurring with GraalVM Native Images. This issue was reported in issues/1014.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e7a1855ab562bb102333f754603ff89359bf3cfc associated with the tag v_1.5.28. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.27

2026-01-30 Release of logback version 1.5.27

• Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license.

• Fixed missing MDC data transmitted by SocketAppender reported in issues/1010 by Lars Vogel.

• Removed all Receiver classes and components which were already disabled for several years.

• Refactored file scanning code for improved clarity.

• In SizeAndTimeBasedRollingPolicy modified totalSizeCap and maxFileSize comparison to taking into account file compression. This fixes issues/1007.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 3618eb01aad6672f9cd250dccf7546a69cbe982f associated with the tag v_1.5.27. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.26

2026-01-25 Release of logback version 1.5.26

• InsertFromJNDIModelHandler was accessing javax.naming package forcing the inclusion of the optional java.naming module. This problem was raised in issues/1003 by Marius Hanl who also provided the relevant PR.

• In applications using shadow/fat/shade jars, module or package information could be lost. Thus, in the absence of version information, logback-classic would warn about version mismatches. Logback components now ship with properties files containing version information that survive shadow/fat/shade jars. This issue was reporteed in issues/1002 by Christoph Gritschenberger.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 33deb54506bbfaf1ff151f26f3a5f86936011619 associated with the tag v_1.5.26. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.25

2026-01-17 Release of logback version 1.5.25

• When processing configuration files, logback-core will now only instantiate components compatible with the class expected by the encapsulating class. This fixes an ACE vulnerability recorded as CVE-2026-1225.

• In configuration files, referencing a single undeclared appender would cause all referenced appenders to be skipped. This issue was discovered in issues/997.

• Added VersionUtil class to logback-core. This utility class checks for version compatibility issues and alerts the user if need be.

... (truncated)

Commits
  • 5db1146 prepare release 1.5.29
  • c94a5fe minor changes
  • 2bc697f revert commit 4f560a0331b, once again, appender names of references are subje...
  • 4192131 start work on 1.5.29-SNAPSHOT
  • e7a1855 prepare release 1.5.28
  • e8dee44 cosmetic changes only
  • ded504c minor refactoring
  • 8af5459 fix NPE as reported in issues/1014
  • 4f560a0 appender names of references not subject to substitution
  • eab8e1d remove spurious Sytem.out, add javadoc
  • Additional commits viewable in compare view

Updates io.micronaut:micronaut-http-validation from 4.10.13 to 4.10.16

Release notes

Sourced from io.micronaut:micronaut-http-validation's releases.

Micronaut Core 4.10.16

What's Changed

Bug Fixes 🐞

Other Changes 💡

Full Changelog: micronaut-projects/micronaut-core@v4.10.15...v4.10.16

Micronaut Core 4.10.15

What's Changed

Bug Fixes 🐞

Dependency updates 🚀

Other Changes 💡

New Contributors

Full Changelog: micronaut-projects/micronaut-core@v4.10.14...v4.10.15

Micronaut Core 4.10.14

What's Changed

Bug Fixes 🐞

Improvements ⭐

Dependency updates 🚀

Full Changelog: micronaut-projects/micronaut-core@v4.10.13...v4.10.14

Commits

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 968cb38 [maven-release-plugin] prepare release surefire-3.5.5
  • 8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
  • 4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
  • 8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
  • 68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
  • 0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
  • 688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
  • e5c01a6 Build only by the latest Maven on Jenkins (#3255)
  • 9c99e97 Fix Jenkin badges in README (#3254)
  • 20930ea Bump parent from 44 to 47 (#3253)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot
Bump the minor-java-dependencies group across 1 directory with 4 updates
6f5b13e 
Bumps the minor-java-dependencies group with 2 updates in the / directory: [io.micronaut.platform:micronaut-parent](https://github.com/micronaut-projects/micronaut-core) and [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire).


Updates `io.micronaut.platform:micronaut-parent` from 4.10.7 to 4.10.9
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.0.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.7...v4.10.9)

Updates `ch.qos.logback:logback-core` from 1.5.19 to 1.5.29
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.19...v_1.5.29)

Updates `io.micronaut:micronaut-http-validation` from 4.10.13 to 4.10.16
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.0.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v4.10.13...v4.10.16)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

---
updated-dependencies:
- dependency-name: io.micronaut.platform:micronaut-parent
  dependency-version: 4.10.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: io.micronaut:micronaut-http-validation
  dependency-version: 4.10.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-java-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 1, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/minor-java-dependencies-eda0123008 branch May 1, 2026 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants