Update maven non-major updates by renovate[bot] · Pull Request #10 · cap-java/cds-feature-console

renovate · 2026-02-21T12:32:05Z

This PR contains the following updates:

Package	Change	Age	Confidence
com.github.spotbugs:spotbugs-maven-plugin (source)	`4.9.8.2` → `4.10.4.1`
org.pitest:pitest-maven (source)	`1.22.1` → `1.30.0`
org.jacoco:jacoco-maven-plugin (source)	`0.8.14` → `0.8.15`
org.codehaus.mojo:flatten-maven-plugin (source)	`1.7.3` → `1.8.0`
org.apache.maven.plugins:maven-enforcer-plugin (source)	`3.6.2` → `3.6.3`
org.apache.maven.plugins:maven-surefire-plugin (source)	`3.5.4` → `3.6.0`
org.apache.maven.plugins:maven-deploy-plugin (source)	`3.1.4` → `3.2.0`
org.apache.maven.plugins:maven-compiler-plugin (source)	`3.15.0` → `3.16.0`
org.sonatype.central:central-publishing-maven-plugin (source)	`0.10.0` → `0.11.0`
org.junit.jupiter:junit-jupiter (source)	`6.0.3` → `6.1.3`
ch.qos.logback:logback-classic (source, changelog)	`1.5.32` → `1.6.3`
org.slf4j:slf4j-reload4j (source, changelog)	`2.0.17` → `2.0.20`
org.slf4j:slf4j-api (source, changelog)	`2.0.17` → `2.0.20`
com.sap.cloud.sdk:sdk-bom (source)	`5.26.0` → `5.34.0`
org.mockito:mockito-bom	`5.21.0` → `5.24.0`
org.bouncycastle:bcutil-jdk18on (source)	`1.84` → `1.86`
org.bouncycastle:bcpkix-jdk18on (source)	`1.84` → `1.86`
org.junit.platform:junit-platform-commons (source)	`6.0.3` → `6.1.3`
org.junit.platform:junit-platform-engine (source)	`6.0.3` → `6.1.3`
org.springframework.boot:spring-boot-dependencies (source)	`3.5.15` → `3.5.16`
org.junit.platform:junit-platform-launcher (source)	`6.0.3` → `6.1.3`
com.sap.cds:cds-services-bom	`4.9.0` → `4.9.4`

Release Notes

hcoles/pitest (org.pitest:pitest-maven)

`v1.30.0`

Compare Source

#1492 Bump jackson version
#1493 Sheck directories populated when checking for empty projects
#1494 Accept comma separated feature parameters (thanks @lino)
#1496 Check non jvm lang dirs

Note, version bump from 1.25.x series made due to mislabelling of release as 1.29.10.

`v1.29.10`

Compare Source

`v1.25.9`

Compare Source

#1486 normalise record attribute order on first load
#1488 rework record interceptor to filter based on a marker line number
#1490 filter mutants in enum switch default block

`v1.25.8`

Compare Source

#1485 Fix BigDecimal and BigInteger mutators for java 25 (thanks @TrueJacobG)

`v1.25.7`

Compare Source

#1484 Disable jacoco transformations at bytecode level

`v1.25.6`

Compare Source

#1481 Auto disable quarkus jacoco extension
#1482 ASM 9.10.1

`v1.25.5`

Compare Source

#1479 Single threaded mutant timeout detection (fixes #1478)

`v1.25.4`

Compare Source

#1468 Support for configurable decimal precision (thanks @see-quick)

`v1.25.3`

Compare Source

#1476 Introduce post pre-scan type

`v1.25.2`

Compare Source

#1474 Publish sboms via cyclonedx
#1475 Bug fix - listeners controlled by feature strings should also be selectable by name

`v1.25.1`

Compare Source

#1469 Progress report (thanks @eatdrinksleepcode)
#1473 make report options available to history plugins

New Contributors

@eatdrinksleepcode made their first contribution in #1469

`v1.25.0`

Compare Source

What's Changed

#1470 make history available to interceptors
#1471 introduce equivalent status

`v1.24.1`

Compare Source

Reintroduce MutationAnalyser interface

`v1.24.0`

Compare Source

What's Changed

1465 silent mode
1466 new extension point - project filtering

`v1.23.1`

Compare Source

#1463 extend unmodifiable collections filtering

`v1.23.0`

Compare Source

#1455 move default history analysis to plugin
#1457 introduce new parameter for configuration directory
#1458 speculative measures to kill stubborn child processes

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

`v0.8.15`: 0.8.15

Compare Source

New Features

JaCoCo now officially supports Java 26 (GitHub #2076).
Experimental support for Java 27 class files (GitHub #2004).
Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #1905).
Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #1944).
Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #2097).
Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #2098).
Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #2023).
Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #2114).
For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #2089).

Fixed bugs

Fixed processing of Kotlin SMAP in synthetic classes (GitHub #1985).
Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #2065, #2074).
For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #2073).
Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #1651).

Non-functional Changes

JaCoCo now depends on ASM 9.10.1 (GitHub #2134).

mojohaus/flatten-maven-plugin (org.codehaus.mojo:flatten-maven-plugin)

`v1.8.0`

Compare Source

🚀 New features and improvements

Configurable name for the revision variable (#487) @senivam

🐛 Bug Fixes

Fix for #408, ensure nested dependency exclusions aren't overrided (#485) @treilhes
Fix for Maven 3.10.x (#517) @slawekjaranowski

🔧 Build

Add PR automation workflow to GitHub Actions (#522) @slawekjaranowski

📦 Dependency updates

Bump mavenVersion from 3.9.15 to 3.9.16 (#511) @dependabot[bot]
Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#514) @dependabot[bot]
Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#516) @dependabot[bot]
Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml from 4 to 5 (#515) @dependabot[bot]
Bump org.codehaus.mojo:mojo-parent from 96 to 97 (#519) @dependabot[bot]
Bump mavenVersion from 3.9.14 to 3.9.15 (#509) @dependabot[bot]
Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#510) @dependabot[bot]
Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 (#508) @dependabot[bot]
Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#502) @dependabot[bot]
Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#503) @dependabot[bot]
Bump com.fasterxml.jackson.core:jackson-core from 2.15.0 to 2.18.6 in /src/it/projects/bom-pomElements/bom (#504) @dependabot[bot]
Bump mavenVersion from 3.9.12 to 3.9.14 (#506) @dependabot[bot]
Bump org.codehaus.mojo:mojo-parent from 95 to 96 (#507) @dependabot[bot]
Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#501) @dependabot[bot]
Bump mavenVersion from 3.9.11 to 3.9.12 (#498) @dependabot[bot]
Bump parent to 95 (#500) @slachiewicz
Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#484) @dependabot[bot]
Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#492) @dependabot[bot]
Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 (#493) @dependabot[bot]
Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (#491) @dependabot[bot]

mockito/mockito (org.mockito:mockito-bom)

`v5.24.0`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.24.0

2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
Fix Mockito docs for -javaagent flag with Gradle (#3866)
Kotlin example for adding Mockito as an agent is incorrect (#3864)
Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
Bump gradle/actions from 5 to 6.2.0 (#3851)
Preserve method parameters when clearing inline mocks (#3847)
Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
Print object fields via reflection when toString() is not implemented (#3844)
Migrate extensions-tests to JUnit Jupiter (#3840)
Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
docs(when-verify): fixes to explanations about redundancy (#3838)
Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc (#3837)
Bump actions/checkout from 6 to 7 (#3836)
Fixes #2740 : Add mockMaker option to @Spy annotation (#3835)
Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 (#3834)
Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 (#3833)
Bump codecov/codecov-action from 6 to 7 (#3831)
Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 (#3830)
Fix clearInlineMocks not de-registering singleton mocks (#3829)
Fix NotAMockException when using mockSingleton with MockitoJUnit (#3827)
NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit (#3826)
Improve Gradle agent docs for configuration cache (#3823)
Gradle documentation for setting up instrumentation with Gradle configuration cache (#3822)
Fixes #3818 : Fix data race in InvocationContainerImpl.invocationForStubbing (#3819)
Data race on invocationForPotentialStubbing (#3818)
Fixes #3814 : implement package-level clinit suppression (#3815)
Package-level clinit suppression (#3814)
Upgrade Android Gradle Plugin to 8.13.2 (#3812)
Replaces raw generic types with type parameters (#3806)
Fixes #2398 : Implement global suppress static initialization leveraging java agent (#3801)
Bump codecov/codecov-action from 5 to 6 (#3800)
Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#3406, #2823) (#3795)
Fixes #3536 : Implement SpyStatic API (#3794)
The class's MethodParameters are removed after clearAllCaches is invoked (#3763)
[FeatureRequest / Idea] Create Mockito.spyStatic (#3536)
Add option to specify mockmaker for @Spy (#2740)
How can I suppress static initializer? (#2398)

`v5.23.0`

Compare Source

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.23.0

2026-03-11 - 6 commit(s) by Brice Dutheil, Joshua Selbo, Philippe Kernevez
Replace mockito-android mock maker implementation with dexmaker-mockito-inline (#3792)
Fix StackOverflowError with AbstractList after using mockSingleton (#3790)
Mark parameters of Mockito.when @Nullable (#3503)

`v5.22.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.22.0

2026-02-27 - 6 commit(s) by Joshua Selbo, NiMv1, Rafael Winterhalter, dependabot[bot], eunbin son
Avoid mocking of internal static utilities (#3785)
Bump graalvm/setup-graalvm from 1.4.4 to 1.4.5 (#3780)
Static mocking of UUID.class corrupted under JDK 25 (#3778)
Bump actions/upload-artifact from 5 to 6 (#3774)
docs: clarify RETURNS_MOCKS behavior with sealed abstract enums (Java 15+) (#3773)
Add tests for Sets utility class (#3771)
Add core API to enable Kotlin singleton mocking (#3762)
Stubbing Kotlin object singletons (#3652)
Incorrect documentation for RETURNS_MOCKS (#3285)

spring-projects/spring-boot (org.springframework.boot:spring-boot-dependencies)

`v3.5.16`

Compare Source

🔨 Dependency Upgrades

Upgrade to Spring AMQP 3.2.12 #50818
Upgrade to Spring Data Bom 2025.0.13 #50819
Upgrade to Spring Integration 6.5.10 #50820

Configuration

📅 Schedule: (UTC)

Branch creation
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-02-21T12:33:12Z