Skip to content

Bump the minor-and-patch group across 4 directories with 24 updates - #343

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/frameworks/java/javalin/minor-and-patch-bc0b34444e
Open

Bump the minor-and-patch group across 4 directories with 24 updates#343
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/frameworks/java/javalin/minor-and-patch-bc0b34444e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 11 updates in the /frameworks/java/javalin directory:

Package From To
io.javalin:javalin-bom 7.2.3 7.2.4
org.eclipse.jetty:jetty-bom 12.1.13 12.1.14
com.fasterxml.jackson:jackson-bom 2.22.3 2.22.4
io.javalin.community.openapi:openapi-specification 7.2.3 7.2.4
io.javalin.community.openapi:openapi-annotation-processor 7.2.3 7.2.4
com.squareup.okhttp3:okhttp 5.5.0 5.5.1
com.squareup.okhttp3:logging-interceptor 5.5.0 5.5.1
com.squareup.okhttp3:logging-interceptor 5.5.0 5.5.1
com.google.code.gson:gson 2.14.0 2.15.0
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.openapitools:openapi-generator-maven-plugin 7.25.0 7.26.0
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0
io.javalin.community.openapi:openapi-annotation-processor 7.2.3 7.2.4
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0

Bumps the minor-and-patch group with 10 updates in the /frameworks/java/ktor directory:

Package From To
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0
io.ktor:ktor-bom 3.6.0 3.6.1
io.ktor:ktor-compiler-plugin 3.6.0 3.6.1
org.jetbrains.kotlin:kotlin-stdlib 2.4.20 2.4.21
org.jetbrains.kotlin:kotlin-test-junit5 2.4.20 2.4.21
org.jetbrains.kotlin:kotlin-maven-plugin 2.4.20 2.4.21
org.jetbrains.kotlin:kotlin-maven-serialization 2.4.20 2.4.21
org.jetbrains.kotlin:kotlin-test-junit5 2.4.20 2.4.21
ch.qos.logback:logback-classic 1.6.5 1.6.6
org.jetbrains.kotlin:kotlin-maven-plugin 2.4.20 2.4.21
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0
org.jetbrains.kotlin:kotlin-maven-serialization 2.4.20 2.4.21
io.ktor:ktor-compiler-plugin 3.6.0 3.6.1
com.microsoft.kiota:microsoft-kiota-bundle 1.9.3 1.10.4
ch.qos.logback:logback-classic 1.6.5 1.6.6
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0

Bumps the minor-and-patch group with 4 updates in the /frameworks/java/micronaut directory: io.micronaut.platform:micronaut-parent, io.micronaut:micronaut-http-validation, io.micronaut.serde:micronaut-serde-processor and io.micronaut.security:micronaut-security-processor.
Bumps the minor-and-patch group with 3 updates in the /frameworks/java/vertx directory: org.apache.maven.plugins:maven-surefire-plugin, org.codehaus.mojo:versions-maven-plugin and io.vertx:vertx-stack-depchain.

Updates io.javalin:javalin-bom from 7.2.3 to 7.2.4

Release notes

Sourced from io.javalin:javalin-bom's releases.

javalin-parent-7.2.4

Highlights

This is mostly a security and bug-fix release. Many of the fixes were reported privately and fixed by @​andrewstellman. Thank you!

Behavior changes

These fixes are correct, but they can change what existing apps see:

  • Static files: paths that are aliases of a static path (/%73ecret/…, //secret/…, /./secret/…) now return 404 instead of serving the file around a before("/secret/*") handler. With treatMultipleSlashesAsSingleSlash on, static paths containing // now return 404 too (#2665).
  • Static files: hostedPath is matched as a whole path segment, so hostedPath = "/assets" no longer serves /assetsX/… (#2672).
  • Routing: a HEAD request answered by a GET route now gets the GET route's roles, so it's rejected wherever the GET is (#2668).
  • BasicAuthPlugin: with no credentials configured, every request is now rejected. Previously every request was let through (#2666).
  • Uploads: UploadedFile.filename() returns only the last path segment, so ../../evil.txt becomes evil.txt (#2675).
  • Errors: HttpResponseException messages served as text/html are now HTML-escaped. Plain-text and JSON responses are unchanged (#2669).
  • WebSockets: closeSession() throws IllegalArgumentException for close codes that can't be sent, such as WsCloseStatus.RESERVED. Previously the session silently stayed open (#2680).
  • Validation: checks no longer run on a null value, so a check that isn't null-safe now returns 400 instead of a 500 from an NPE (#2647).

Additions

  • RateLimitPlugin.Config.exceptionFunction lets you choose which HttpResponseException is thrown when a limit is exceeded, for example TooManyRequestsResponse. The default is unchanged (#2651).
  • ContentType.APPLICATION_PROBLEM_JSON and ContentType.APPLICATION_PROBLEM_XML, plus ContentType.PROBLEM_JSON and ContentType.PROBLEM_XML as plain strings (#2640).

Also in this release (missing from the list below)

  • [content-type] Restore the application/xml lookup to APPLICATION_POM by @​alexjameszhang in #2636
  • [http] Add problem+json and problem+xml content types by @​alexjameszhang in #2640
  • [static-files] Fix precompressed-file bugs in the Jetty resource handler (219f8c14)
  • [seekablewriter] Fix an infinite loop on non-skippable streams, and EOF handling (ec457efb)
  • [websocket] Disable automatic pings on the error path (0fdafc31)

Dependencies

Jetty 12.1.14, Jackson 2.22.4 / 3.2.4, SLF4J 2.0.20, Micrometer 1.17.2, ayza 10.1.0 (SSL plugin), and patch updates for the template engines (FreeMarker 2.3.35, Handlebars 4.5.5, JTE 3.2.4, CommonMark 0.31.0). No major-version upgrades.

What's Changed

... (truncated)

Commits
  • 5740f0c [maven-release-plugin] prepare release javalin-parent-7.2.4
  • 219116c [tests] Make the HTTP/2 websocket tests send from the client first
  • 2136a8f [sse] Close keepAlive clients when the async request errors (#2678) (#2679)
  • fda2c92 [websocket] Reject close codes that can't be sent in closeSession() (#2680)
  • 6369e5f [ci] Run performance preview cleanup on pull_request_target so fork PRs are c...
  • 712f9c8 [ratelimitplugin] Add configurable rate limit exception (#2651)
  • dc20f85 [ci] Fix invalid secrets check in the performance preview cleanup workflow (#...
  • deab0f0 [deps] Bump minor and patch versions of dependencies and plugins (#2676)
  • e67fef9 [static-files] Key the Jetty precompression cache by file (#2673)
  • dbad221 [context] Strip directory components from uploaded file names (#2675)
  • Additional commits viewable in compare view

Updates org.eclipse.jetty:jetty-bom from 12.1.13 to 12.1.14

Release notes

Sourced from org.eclipse.jetty:jetty-bom's releases.

12.1.14

Special Thanks to the following Eclipse Jetty community members

Changelog

  • #15874 - [12.1.x] Introduced recursion depth limit in JSON parsing.
  • #15871 - SessionHandler uses ConnectionMetaData.isSecure() instead of Request.isSecure(), breaking secure session cookies behind ForwardedRequestCustomizer (@​adityaanikam)
  • #15869 - PathResource incorrectly treats a classpath resource inside a JAR under a non-ASCII path as an alias
  • #15852 - Upgrade quiche to version 0.30.0
  • #15846 - Allow per-request form limits to be used with EE8/EE9
  • #15840 - HTTP/1 response header overflow retry loses previously determined connection persistence
  • #15839 - Simplified callback method notifications.
  • #15822 - Introduce flag in Rewrite Rules to preserve UriCompliance Violations when rewriting URIs
  • #15807 - ArrayByteBufferPool.clear() leaves the bucket's secondary QueuedPool poisoned: NPE on the next acquire()
  • #15733 - ee11 servlet: ServletRequest.getServletContext() returns the source context, not the target, after a cross-context RequestDispatcher.include()
  • #15679 - Fixes race for HTTP3StreamConnection release of Chunk
  • #15678 - CompressionHandler randomly truncates output
  • #15675 - Optimize Huffman codec (@​wendigo)
  • #15674 - Optimize HPack (@​wendigo)
  • #15432 - BrotliEncoderSink drops all but the last pulled buffer, silently truncating large Brotli responses
  • #15386 - Issues in http2 stream idle timeouts
  • #15368 - HTTP/2 client aborts exchange and loses response completed during server graceful shutdown (regression in 12.1.10 / 12.0.36 from #15134 / #14692)
Commits
  • 15cecbd Updating to version 12.1.14
  • 4f315a1 Issue #15871 - Fix SessionHandler ignoring forwarded secure status (#15873)
  • 134a7e9 #15869 fix PathResource.isAlias() when the path' URI is not encoded the same ...
  • 979f9ac Merge pull request #15679 from jetty/fix/jetty-12.1.x/HTTP3StreamConnection-race
  • a291a66 Issue #15733 Fix cross-context dispatch to use the target context (#15763)
  • 73383fb Merge pull request #15846 from jetty/fix/jetty-12.1.x/ee9-per-request-form-li...
  • 1f25119 Fixes #15368 - Fix incorrect eager aborting of H2 channels during graceful sh...
  • 6d7b56e Fixes #15666 - Flaky Test: VirtualThreadsTest.testServletCallbacksInvokedOnVi...
  • 37dcd42 [12.1.x] Introduced recursion depth limit in JSON parsing. (#15874)
  • 24064ed Simplified callback method notifications. (#15839)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.22.3 to 2.22.4

Commits
  • 267bf9a [maven-release-plugin] prepare release jackson-bom-2.22.4
  • d41cad1 Prep for 2.22.4 release
  • 8fd9ace Merge branch '2.21' into 2.22
  • e1b27ed Post-release dep version bump
  • 5dfe489 [maven-release-plugin] prepare for next development iteration
  • b23db92 [maven-release-plugin] prepare release jackson-bom-2.21.8
  • 8937d04 Prep for 2.21.8 release
  • c44e739 Merge branch '2.20' into 2.21
  • b86d50e Merge branch '2.19' into 2.20
  • 7756e79 Merge branch '2.18' into 2.19
  • Additional commits viewable in compare view

Updates io.javalin.community.openapi:openapi-specification from 7.2.3 to 7.2.4

Release notes

Sourced from io.javalin.community.openapi:openapi-specification's releases.

7.2.4

Changes

  • Bumped Javalin to 7.2.4
  • Fixed the closing script tag for injected JavaScript in Swagger UI (#286)
  • Added withCredentials support in Swagger UI (#288)

Sponsors Thanks to everyone who supported me this month 💜

Minimal requirements

  • Java 17+ / Kotlin 2.3+
  • Javalin 7.2.4
Commits

Updates io.javalin.community.openapi:openapi-annotation-processor from 7.2.3 to 7.2.4

Release notes

Sourced from io.javalin.community.openapi:openapi-annotation-processor's releases.

7.2.4

Changes

  • Bumped Javalin to 7.2.4
  • Fixed the closing script tag for injected JavaScript in Swagger UI (#286)
  • Added withCredentials support in Swagger UI (#288)

Sponsors Thanks to everyone who supported me this month 💜

Minimal requirements

  • Java 17+ / Kotlin 2.3+
  • Javalin 7.2.4
Commits

Updates com.squareup.okhttp3:okhttp from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.5.1

2026_10_22

  • Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.
Commits

Updates com.squareup.okhttp3:logging-interceptor from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:logging-interceptor's changelog.

Version 5.5.1

2026_10_22

  • Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.
Commits

Updates com.squareup.okhttp3:logging-interceptor from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:logging-interceptor's changelog.

Version 5.5.1

2026_10_22

  • Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.
Commits

Updates com.google.code.gson:gson from 2.14.0 to 2.15.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.15.0

What's Changed

These are some of the more important changes

API addition:

Behaviour changes and bugfixes:

New Contributors

Full Changelog: google/gson@gson-parent-2.14.0...gson-parent-2.15.0

Commits
  • fcd4169 [maven-release-plugin] prepare release gson-parent-2.15.0
  • 828cbe0 Update protobuf-maven-plugin dependency. (#3153)
  • 66dd98a Disable Spotless plugin before Java 21. (#3152)
  • 094f500 Fix typo in comment (#3148)
  • 881d2b5 Consistently use "Gson" instead of "GSON" as project name (#3150)
  • e2292f9 Address a few static analysis findings. (#3141)
  • 67427c4 Bump the github-actions group across 1 directory with 5 updates (#3133)
  • 845664b Correct logic for BOM detection. (#3137)
  • 216c41b Bump com.fasterxml.jackson.core:jackson-databind (#3136)
  • 854c825 Simplify key removal in LegacyProtoTypeAdapterFactoryTest (#3124)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.openapitools:openapi-generator-maven-plugin from 7.25.0 to 7.26.0

Updates org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.23.0

Versions Maven Plugin 2.23.0 makes the property goals more reliable on multi-module projects and adds a few options people have asked for over the years. It still runs on Java 8 and Maven 3.6.3 or later.

Property updates

  • update-property and update-properties now update a property that is defined in a reactor parent POM, rather than leaving it untouched (#997).
  • A property shared by a plugin and an excluded dependency is no longer updated behind the exclude's back (#1199).
  • The property goals look up all properties in parallel, which shortens runs on POMs with many version properties (#1157).
  • A dependency whose type or classifier is itself a property, such as ${native.classifier}, no longer breaks the property goals on Maven 3.10 and 4 (#1409).
  • lock-snapshots and unlock-snapshots now rewrite snapshot versions held in properties, where that is safe (#1269).

Other fixes and additions

  • versions:set with selected projects (-pl) updates the modules that inherit the version again, on Maven 3 and Maven 4 (#1338, #1339, #1357).
  • Includes and excludes now filter the candidate versions too, so an excluded version is never proposed as an update (#1378).
  • display-dependency-updates -Dversions.showNewestPerSegment lists the newest incremental, minor and major version, for example 1.0.3 -> 1.0.9, 1.3.9, 4.0.6 (#1043).
  • parent-updates-report supports formats, including XML (#975), and the XML property updates report now fills in the current version (#976).
  • The plugin update reports share their lookup with display-plugin-updates and include plugins declared only in <reporting> (#1250).

Thanks to @​wilx and @​adityaanikam for their contributions to this release.

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 701cf76 [maven-release-plugin] prepare release 2.23.0
  • 05854d0 Mark the API added since 2.22.0 as @​since 2.23.0
  • a8fac27 Prepare 2.23.0
  • 58a2ea5 Resolve property versions in parallel
  • 4a89885 Update a shared parent POM from one module at a time
  • 2230fbe Update properties defined in a reactor parent POM
  • b495844 Honor excludes of modules that inherit an update-properties property
  • 3330666 Show the newest version of each segment in display-dependency-updates
  • fe0be9a Rewrite timestamped and SNAPSHOT versions held in properties in unlock-snapsh...
  • bfb8f3a Support the xml format in parent-updates-report
  • Additional commits viewable in compare view

Updates io.javalin.community.openapi:openapi-annotation-processor from 7.2.3 to ...

Description has been truncated

@dependabot
Bump the minor-and-patch group across 4 directories with 24 updates
6d670e9 
Bumps the minor-and-patch group with 11 updates in the /frameworks/java/javalin directory:

| Package | From | To |
| --- | --- | --- |
| [io.javalin:javalin-bom](https://github.com/javalin/javalin) | `7.2.3` | `7.2.4` |
| [org.eclipse.jetty:jetty-bom](https://github.com/jetty/jetty.project) | `12.1.13` | `12.1.14` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.22.3` | `2.22.4` |
| [io.javalin.community.openapi:openapi-specification](https://github.com/javalin/javalin-openapi) | `7.2.3` | `7.2.4` |
| [io.javalin.community.openapi:openapi-annotation-processor](https://github.com/javalin/javalin-openapi) | `7.2.3` | `7.2.4` |
| [com.squareup.okhttp3:okhttp](https://github.com/lysine-dev/okhttp) | `5.5.0` | `5.5.1` |
| [com.squareup.okhttp3:logging-interceptor](https://github.com/lysine-dev/okhttp) | `5.5.0` | `5.5.1` |
| [com.squareup.okhttp3:logging-interceptor](https://github.com/lysine-dev/okhttp) | `5.5.0` | `5.5.1` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.14.0` | `2.15.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| org.openapitools:openapi-generator-maven-plugin | `7.25.0` | `7.26.0` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |
| [io.javalin.community.openapi:openapi-annotation-processor](https://github.com/javalin/javalin-openapi) | `7.2.3` | `7.2.4` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |

Bumps the minor-and-patch group with 10 updates in the /frameworks/java/ktor directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |
| [io.ktor:ktor-bom](https://github.com/ktorio/ktor) | `3.6.0` | `3.6.1` |
| [io.ktor:ktor-compiler-plugin](https://github.com/ktorio/ktor) | `3.6.0` | `3.6.1` |
| [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) | `2.4.20` | `2.4.21` |
| [org.jetbrains.kotlin:kotlin-test-junit5](https://github.com/JetBrains/kotlin) | `2.4.20` | `2.4.21` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.4.20` | `2.4.21` |
| org.jetbrains.kotlin:kotlin-maven-serialization | `2.4.20` | `2.4.21` |
| [org.jetbrains.kotlin:kotlin-test-junit5](https://github.com/JetBrains/kotlin) | `2.4.20` | `2.4.21` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.5` | `1.6.6` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.4.20` | `2.4.21` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |
| org.jetbrains.kotlin:kotlin-maven-serialization | `2.4.20` | `2.4.21` |
| [io.ktor:ktor-compiler-plugin](https://github.com/ktorio/ktor) | `3.6.0` | `3.6.1` |
| [com.microsoft.kiota:microsoft-kiota-bundle](https://github.com/microsoft/kiota-java) | `1.9.3` | `1.10.4` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.5` | `1.6.6` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |

Bumps the minor-and-patch group with 4 updates in the /frameworks/java/micronaut directory: [io.micronaut.platform:micronaut-parent](https://github.com/micronaut-projects/micronaut-core), [io.micronaut:micronaut-http-validation](https://github.com/micronaut-projects/micronaut-core), [io.micronaut.serde:micronaut-serde-processor](https://github.com/micronaut-projects/micronaut-serialization) and [io.micronaut.security:micronaut-security-processor](https://github.com/micronaut-projects/micronaut-security).
Bumps the minor-and-patch group with 3 updates in the /frameworks/java/vertx directory: [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire), [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) and io.vertx:vertx-stack-depchain.


Updates `io.javalin:javalin-bom` from 7.2.3 to 7.2.4
- [Release notes](https://github.com/javalin/javalin/releases)
- [Commits](javalin/javalin@javalin-parent-7.2.3...javalin-parent-7.2.4)

Updates `org.eclipse.jetty:jetty-bom` from 12.1.13 to 12.1.14
- [Release notes](https://github.com/jetty/jetty.project/releases)
- [Commits](jetty/jetty.project@jetty-12.1.13...jetty-12.1.14)

Updates `com.fasterxml.jackson:jackson-bom` from 2.22.3 to 2.22.4
- [Commits](FasterXML/jackson-bom@jackson-bom-2.22.3...jackson-bom-2.22.4)

Updates `io.javalin.community.openapi:openapi-specification` from 7.2.3 to 7.2.4
- [Release notes](https://github.com/javalin/javalin-openapi/releases)
- [Commits](javalin/javalin-openapi@7.2.3...7.2.4)

Updates `io.javalin.community.openapi:openapi-annotation-processor` from 7.2.3 to 7.2.4
- [Release notes](https://github.com/javalin/javalin-openapi/releases)
- [Commits](javalin/javalin-openapi@7.2.3...7.2.4)

Updates `com.squareup.okhttp3:okhttp` from 5.5.0 to 5.5.1
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.5.0...parent-5.5.1)

Updates `com.squareup.okhttp3:logging-interceptor` from 5.5.0 to 5.5.1
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.5.0...parent-5.5.1)

Updates `com.squareup.okhttp3:logging-interceptor` from 5.5.0 to 5.5.1
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-5.5.0...parent-5.5.1)

Updates `com.google.code.gson:gson` from 2.14.0 to 2.15.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.14.0...gson-parent-2.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.openapitools:openapi-generator-maven-plugin` from 7.25.0 to 7.26.0

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `io.javalin.community.openapi:openapi-annotation-processor` from 7.2.3 to 7.2.4
- [Release notes](https://github.com/javalin/javalin-openapi/releases)
- [Commits](javalin/javalin-openapi@7.2.3...7.2.4)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `io.ktor:ktor-bom` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/3.6.1/CHANGELOG.md)
- [Commits](ktorio/ktor@3.6.0...3.6.1)

Updates `io.ktor:ktor-compiler-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/3.6.1/CHANGELOG.md)
- [Commits](ktorio/ktor@3.6.0...3.6.1)

Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.4.20 to 2.4.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.4.20...v2.4.21)

Updates `org.jetbrains.kotlin:kotlin-test-junit5` from 2.4.20 to 2.4.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.4.20...v2.4.21)

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.4.20 to 2.4.21

Updates `org.jetbrains.kotlin:kotlin-maven-serialization` from 2.4.20 to 2.4.21

Updates `org.jetbrains.kotlin:kotlin-test-junit5` from 2.4.20 to 2.4.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.4.20...v2.4.21)

Updates `ch.qos.logback:logback-classic` from 1.6.5 to 1.6.6
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.5...v_1.6.6)

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.4.20 to 2.4.21

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `org.jetbrains.kotlin:kotlin-maven-serialization` from 2.4.20 to 2.4.21

Updates `io.ktor:ktor-compiler-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/ktorio/ktor/releases)
- [Changelog](https://github.com/ktorio/ktor/blob/3.6.1/CHANGELOG.md)
- [Commits](ktorio/ktor@3.6.0...3.6.1)

Updates `com.microsoft.kiota:microsoft-kiota-bundle` from 1.9.3 to 1.10.4
- [Release notes](https://github.com/microsoft/kiota-java/releases)
- [Changelog](https://github.com/microsoft/kiota-java/blob/main/CHANGELOG.md)
- [Commits](microsoft/kiota-java@v1.9.3...v1.10.4)

Updates `ch.qos.logback:logback-classic` from 1.6.5 to 1.6.6
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.5...v_1.6.6)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `io.micronaut.platform:micronaut-parent` from 5.2.1 to 5.2.4
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v5.2.1...v5.2.4)

Updates `io.micronaut:micronaut-http-validation` from 5.2.11 to 5.2.20
- [Release notes](https://github.com/micronaut-projects/micronaut-core/releases)
- [Changelog](https://github.com/micronaut-projects/micronaut-core/blob/5.3.x/RELEASE.adoc)
- [Commits](micronaut-projects/micronaut-core@v5.2.11...v5.2.20)

Updates `io.micronaut.serde:micronaut-serde-processor` from 3.2.4 to 3.2.6
- [Release notes](https://github.com/micronaut-projects/micronaut-serialization/releases)
- [Commits](micronaut-projects/micronaut-serialization@v3.2.4...v3.2.6)

Updates `io.micronaut.security:micronaut-security-processor` from 5.4.0 to 5.4.1
- [Release notes](https://github.com/micronaut-projects/micronaut-security/releases)
- [Commits](micronaut-projects/micronaut-security@v5.4.0...v5.4.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

Updates `io.vertx:vertx-stack-depchain` from 5.2.0 to 5.2.2

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

---
updated-dependencies:
- dependency-name: io.javalin:javalin-bom
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.eclipse.jetty:jetty-bom
  dependency-version: 12.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.javalin.community.openapi:openapi-specification
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.javalin.community.openapi:openapi-annotation-processor
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.squareup.okhttp3:logging-interceptor
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.squareup.okhttp3:logging-interceptor
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.openapitools:openapi-generator-maven-plugin
  dependency-version: 7.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: io.javalin.community.openapi:openapi-annotation-processor
  dependency-version: 7.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: io.ktor:ktor-bom
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.ktor:ktor-compiler-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-test-junit5
  dependency-version: 2.4.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-maven-serialization
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-test-junit5
  dependency-version: 2.4.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.jetbrains.kotlin:kotlin-maven-serialization
  dependency-version: 2.4.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.ktor:ktor-compiler-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: com.microsoft.kiota:microsoft-kiota-bundle
  dependency-version: 1.10.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: io.micronaut.platform:micronaut-parent
  dependency-version: 5.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.micronaut:micronaut-http-validation
  dependency-version: 5.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.micronaut.serde:micronaut-serde-processor
  dependency-version: 3.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: io.micronaut.security:micronaut-security-processor
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: io.vertx:vertx-stack-depchain
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 2, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants