Skip to content

build(deps): bump the production-dependencies group with 10 updates - #1299

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/production-dependencies-ef48fcfaa0
Open

build(deps): bump the production-dependencies group with 10 updates#1299
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/production-dependencies-ef48fcfaa0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 10 updates:

Package From To
org.apache:apache 39 40
org.apache.neethi:neethi 3.2.3 3.2.4
org.apache.httpcomponents.core5:httpcore5 5.4.3 5.4.4
org.apache.httpcomponents.core5:httpcore5-h2 5.4.3 5.4.4
org.xmlunit:xmlunit-legacy 2.13.0 2.14.0
org.apache.xmlbeans:xmlbeans 5.4.0 5.4.1
net.bytebuddy:byte-buddy 1.18.13 1.18.14
org.apache.groovy:groovy 5.1.2 6.0.0
org.apache.groovy:groovy-ant 5.1.2 6.0.0
org.apache.groovy:groovy-xml 5.1.2 6.0.0

Updates org.apache:apache from 39 to 40

Release notes

Sourced from org.apache:apache's releases.

40

💥 Breaking changes

  • Replace nicoulaj checksum plugin with maveniverse checksum plugin (#599) @​slawekjaranowski
  • #586: Use RAT0.18 and remove commons-lang3 configuration for JDK25 (#587) @​ottlinger
  • Property version.maven-surefire was removed in apache/maven-apache-parent#588, should be replaced by version.maven-surefire-plugin, version.maven-failsafe-plugin or version.maven-surefire-report-plugin

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits

Updates org.apache.neethi:neethi from 3.2.3 to 3.2.4

Updates org.apache.httpcomponents.core5:httpcore5 from 5.4.3 to 5.4.4

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5's changelog.

Release 5.4.4

This maintenance release optimizes HTTP/1.1 message buffer configuration and corrects the handling of asynchronous entity producer state resets after interrupted writes.

Change Log

  • HTTPCORE-800: Fixed hexadecimal encoding of control characters in HttpException messages. Contributed by Arturo Bernal

  • HTTPCORE-799: Corrected the handling of asynchronous entity producer state resets after interrupted writes. Contributed by Matthias Kurz <m.kurz at irregular.at>

  • Fixed URIBuilder encoding policy documentation and null reset behavior. Contributed by Praful Gupta

  • Increased the default HTTP/1.1 buffer size to 32 KiB. Contributed by Arturo Bernal

Commits
  • d40892e HttpCore 5.4.4 release
  • 698b2b6 Updated release notes for HttpCore 5.4.4 release
  • 8ada43a HTTPCORE-800: Fix hexadecimal encoding of control characters
  • 9cb751e HTTPCORE-799: Reset async entity producer state after interrupted writes
  • e871fa0 Fix URIBuilder encoding policy documentation and null reset
  • 34542fc Increase default HTTP/1.1 buffer size to 32 KiB
  • a79f87e Add details to solve compatibility issues.
  • 93421d3 Upgraded HttpCore version to 5.4.4-SNAPSHOT
  • See full diff in compare view

Updates org.apache.httpcomponents.core5:httpcore5-h2 from 5.4.3 to 5.4.4

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5-h2's changelog.

Release 5.4.4

This maintenance release optimizes HTTP/1.1 message buffer configuration and corrects the handling of asynchronous entity producer state resets after interrupted writes.

Change Log

  • HTTPCORE-800: Fixed hexadecimal encoding of control characters in HttpException messages. Contributed by Arturo Bernal

  • HTTPCORE-799: Corrected the handling of asynchronous entity producer state resets after interrupted writes. Contributed by Matthias Kurz <m.kurz at irregular.at>

  • Fixed URIBuilder encoding policy documentation and null reset behavior. Contributed by Praful Gupta

  • Increased the default HTTP/1.1 buffer size to 32 KiB. Contributed by Arturo Bernal

Commits
  • d40892e HttpCore 5.4.4 release
  • 698b2b6 Updated release notes for HttpCore 5.4.4 release
  • 8ada43a HTTPCORE-800: Fix hexadecimal encoding of control characters
  • 9cb751e HTTPCORE-799: Reset async entity producer state after interrupted writes
  • e871fa0 Fix URIBuilder encoding policy documentation and null reset
  • 34542fc Increase default HTTP/1.1 buffer size to 32 KiB
  • a79f87e Add details to solve compatibility issues.
  • 93421d3 Upgraded HttpCore version to 5.4.4-SNAPSHOT
  • See full diff in compare view

Updates org.apache.httpcomponents.core5:httpcore5-h2 from 5.4.3 to 5.4.4

Changelog

Sourced from org.apache.httpcomponents.core5:httpcore5-h2's changelog.

Release 5.4.4

This maintenance release optimizes HTTP/1.1 message buffer configuration and corrects the handling of asynchronous entity producer state resets after interrupted writes.

Change Log

  • HTTPCORE-800: Fixed hexadecimal encoding of control characters in HttpException messages. Contributed by Arturo Bernal

  • HTTPCORE-799: Corrected the handling of asynchronous entity producer state resets after interrupted writes. Contributed by Matthias Kurz <m.kurz at irregular.at>

  • Fixed URIBuilder encoding policy documentation and null reset behavior. Contributed by Praful Gupta

  • Increased the default HTTP/1.1 buffer size to 32 KiB. Contributed by Arturo Bernal

Commits
  • d40892e HttpCore 5.4.4 release
  • 698b2b6 Updated release notes for HttpCore 5.4.4 release
  • 8ada43a HTTPCORE-800: Fix hexadecimal encoding of control characters
  • 9cb751e HTTPCORE-799: Reset async entity producer state after interrupted writes
  • e871fa0 Fix URIBuilder encoding policy documentation and null reset
  • 34542fc Increase default HTTP/1.1 buffer size to 32 KiB
  • a79f87e Add details to solve compatibility issues.
  • 93421d3 Upgraded HttpCore version to 5.4.4-SNAPSHOT
  • See full diff in compare view

Updates org.xmlunit:xmlunit-legacy from 2.13.0 to 2.14.0

Release notes

Sourced from org.xmlunit:xmlunit-legacy's releases.

XMLUnit for Java 2.14.0

With this release the dependency of xmlunit-core on the JAXB API has been marked optional. If you need the JAXB parts of XMLUnit you now must explicitly add a dependency on the API version matching your implementation. There is no other change compared to version 2.13.0.

Changelog

Sourced from org.xmlunit:xmlunit-legacy's changelog.

XMLUnit for Java 2.14.0 - /Released 2026-09-18/

  • marked jakarta.xml.bind-api as optional in xmlunit-core. PR #340 by @​arimu1
Commits

Updates org.apache.xmlbeans:xmlbeans from 5.4.0 to 5.4.1

Updates net.bytebuddy:byte-buddy from 1.18.13 to 1.18.14

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

14. September 2026: version 1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.
Commits
  • 92846cb [publish] Releasing Byte Buddy 1.18.14
  • a8a9f14 [release] Release new version
  • b0fe006 Skip the signature creation for artifacts that are not deployed.
  • c610783 Resolve the signed POM file by the path of the project file.
  • caab321 Sign the deployed POM file and allow for a sigstore dry run.
  • c68a9c1 Supply the agent argument to the attacher process as an environment variable.
  • 3ac9ded Avoid symbolic link resolution on recursive deletion and validate Android ent...
  • 8dbae60 Sign deployed files using sigstore.
  • 5d83cd4 Disable semantic versioning check for protected constructor in abstract class...
  • 172e0f4 Move to method to apply suppression.
  • Additional commits viewable in compare view

Updates org.apache.groovy:groovy from 5.1.2 to 6.0.0

Commits

Updates org.apache.groovy:groovy-ant from 5.1.2 to 6.0.0

Commits

Updates org.apache.groovy:groovy-xml from 5.1.2 to 6.0.0

Commits

Updates org.apache.groovy:groovy-ant from 5.1.2 to 6.0.0

Commits

Updates org.apache.groovy:groovy-xml from 5.1.2 to 6.0.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production-dependencies group with 10 updates
9269fd0 
Bumps the production-dependencies group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `39` | `40` |
| org.apache.neethi:neethi | `3.2.3` | `3.2.4` |
| [org.apache.httpcomponents.core5:httpcore5](https://github.com/apache/httpcomponents-core) | `5.4.3` | `5.4.4` |
| [org.apache.httpcomponents.core5:httpcore5-h2](https://github.com/apache/httpcomponents-core) | `5.4.3` | `5.4.4` |
| [org.xmlunit:xmlunit-legacy](https://github.com/xmlunit/xmlunit) | `2.13.0` | `2.14.0` |
| org.apache.xmlbeans:xmlbeans | `5.4.0` | `5.4.1` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.13` | `1.18.14` |
| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.apache.groovy:groovy-ant](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |
| [org.apache.groovy:groovy-xml](https://github.com/apache/groovy) | `5.1.2` | `6.0.0` |


Updates `org.apache:apache` from 39 to 40
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)

Updates `org.apache.neethi:neethi` from 3.2.3 to 3.2.4

Updates `org.apache.httpcomponents.core5:httpcore5` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4)

Updates `org.apache.httpcomponents.core5:httpcore5-h2` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4)

Updates `org.apache.httpcomponents.core5:httpcore5-h2` from 5.4.3 to 5.4.4
- [Changelog](https://github.com/apache/httpcomponents-core/blob/rel/v5.4.4/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-core@rel/v5.4.3...rel/v5.4.4)

Updates `org.xmlunit:xmlunit-legacy` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.13.0...v2.14.0)

Updates `org.apache.xmlbeans:xmlbeans` from 5.4.0 to 5.4.1

Updates `net.bytebuddy:byte-buddy` from 1.18.13 to 1.18.14
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.13...byte-buddy-1.18.14)

Updates `org.apache.groovy:groovy` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-xml` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-ant` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

Updates `org.apache.groovy:groovy-xml` from 5.1.2 to 6.0.0
- [Commits](https://github.com/apache/groovy/commits)

---
updated-dependencies:
- dependency-name: org.apache:apache
  dependency-version: '40'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.neethi:neethi
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.httpcomponents.core5:httpcore5
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.httpcomponents.core5:httpcore5-h2
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.httpcomponents.core5:httpcore5-h2
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.xmlunit:xmlunit-legacy
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.xmlbeans:xmlbeans
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-xml
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-ant
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.groovy:groovy-xml
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants