Skip to content

Dependabot: Bump the maven-patch-and-minor group with 12 updates#27

Merged
github-actions[bot] merged 1 commit into
master-dependency-updatefrom
dependabot/maven/master-dependency-update/maven-patch-and-minor-6616719bbf
May 21, 2026
Merged

Dependabot: Bump the maven-patch-and-minor group with 12 updates#27
github-actions[bot] merged 1 commit into
master-dependency-updatefrom
dependabot/maven/master-dependency-update/maven-patch-and-minor-6616719bbf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 21, 2026

Copy link
Copy Markdown

Bumps the maven-patch-and-minor group with 12 updates:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.10 3.5.14
co.elastic.logging:logback-ecs-encoder 1.7.0 1.8.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.5
org.apache.maven.plugins:maven-enforcer-plugin 3.6.2 3.6.3
com.google.guava:guava 33.5.0-jre 33.6.0-jre
org.bouncycastle:bcpkix-jdk18on 1.83 1.84
org.bouncycastle:bcprov-jdk18on 1.83 1.84
org.bouncycastle:bcutil-jdk18on 1.83 1.84
org.apache.cxf:cxf-wadl2java-plugin 4.1.4 4.2.1
org.postgresql:postgresql 42.7.9 42.7.10
ee.sk.mid:mid-rest-java-client 1.6 1.7
commons-io:commons-io 2.21.0 2.22.0

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.10 to 3.5.14

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

... (truncated)

Commits
  • 7d7b3ac Release v3.5.14
  • 9dc5aa2 Polish
  • f533a45 Do not follow symlinks when writing PID file
  • f3b8eb0 Use SecureRandom in RandomValuePropertySource
  • e22083a Enable hostname verification for SSL connections to Cassandra
  • 5ceb1a2 Improve ApplicationTemp's temporary directory creation
  • 4b0862c Use constant-time comparison for remote DevTools secret
  • e4febe2 Apply verify-hostname consistently
  • 2c2ffe5 Fix Windows test failure
  • 0046a44 Protect against corrupt buildpack archives
  • Additional commits viewable in compare view

Updates co.elastic.logging:logback-ecs-encoder from 1.7.0 to 1.8.0

Release notes

Sourced from co.elastic.logging:logback-ecs-encoder's releases.

Release 1.8.0

What's Changed

... (truncated)

Commits
  • 4988ae8 add missing project.name in some pom.xml (#406)
  • 1649f98 pre release: ecs-logging-java v1.8.0 (#405)
  • 984434d filter mdc + spring cleaning (#404)
  • e080372 Fix unbounded StringBuilder retention in ThreadLocal (memory leak) (#391)
  • 0404feb docs: add applies_to frontmatter and scope Filebeat section to stack (#380)
  • 71ba8f8 deps: Bump updatecli version to v0.116.3 (#403)
  • cfc89c0 Avoid bumping versions for legacy tests (#401)
  • c5d178b Bumping log4j version (#402)
  • 213b919 deps: Bump updatecli version to v0.116.1 (#400)
  • 42a3f3a build(deps): bump docker/login-action (#397)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 968cb38 [maven-release-plugin] prepare release surefire-3.5.5
  • 8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
  • 4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
  • 8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
  • 68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
  • 0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
  • 688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
  • e5c01a6 Build only by the latest Maven on Jenkins (#3255)
  • 9c99e97 Fix Jenkin badges in README (#3254)
  • 20930ea Bump parent from 44 to 47 (#3253)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.3

🚀 New features and improvements

  • Make bannedDependencies report root and transitive dependency in case both are banned. (#940) @​hvoynov
  • Add enforceBytecodeVersion rule based on mojohaus (#968) @​cstamas
  • Improve formatting of deprecated API warning (#951) @​mthmulders

🐛 Bug Fixes

📝 Documentation updates

  • Document the banMavenDefaults option for the requirePluginVersions rule. (#936) @​rpkrajewski

👻 Maintenance

📦 Dependency updates

Commits
  • c7daff3 [maven-release-plugin] prepare release enforcer-3.6.3
  • ee46e78 Make bannedDependencies report root and transitive dependency in case both ar...
  • 0806924 Document the banMavenDefaults option for the requirePluginVersions rule. (#936)
  • 8e4f5b9 Add better enforceBytecodeVersion rule based on mojohaus (#968)
  • fd4b148 Add fix for 21.0.10.0.1 issue (#967)
  • f32d597 Deps: Parent POM 48 and align deps (#979)
  • df0f2a6 Bump commons-codec:commons-codec from 1.21.0 to 1.22.0 (#976)
  • 2da7a68 Add null checks for modelId in PluginWrapper
  • 91eb4d9 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#975)
  • b622245 Bump mavenVersion from 3.9.14 to 3.9.15 (#973)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.5.0-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)
Commits

Updates org.bouncycastle:bcpkix-jdk18on from 1.83 to 1.84

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

... (truncated)

Commits

Updates org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

... (truncated)

Commits

Updates org.bouncycastle:bcutil-jdk18on from 1.83 to 1.84

Changelog

Sourced from org.bouncycastle:bcutil-jdk18on's changelog.

... (truncated)

Commits

Updates org.bouncycastle:bcprov-jdk18on from 1.83 to 1.84

Changelog

Sourced from org.bouncycastle:bcprov-jdk18on's changelog.

... (truncated)

Commits

Updates org.apache.cxf:cxf-wadl2java-plugin from 4.1.4 to 4.2.1

Updates org.postgresql:postgresql from 42.7.9 to 42.7.10

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.10

Changes

🐛 Bug Fixes

  • fix: process pending responses before fastpath to avoid protocol errors @​vlsi (#3913)

⬆️ Dependencies

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.10] (2026-02-11)

Changed

Fixed

Reverted

Commits
  • 27571c8 Update site for 42.7.10 release (#3936)
  • c7b512d Create DisabledIfServerGreater annotation for disabling tests for newer serve...
  • 47f7e3b fix non-standard strings failing test for version 19 (#3934)
  • d4cf420 Revert "fix: make all Calendar instances proleptic Gregorian (#3837) (#3887)"...
  • 6ea732c fix small issues in ConnectionFactoryImpl (#3929)
  • 95cecdb Migrate to Shadow 9
  • 5762c42 style: fix empty line before javadoc for checkstyle compliance
  • 1ac8d99 style: fix lambda argument indentation for checkstyle compliance
  • 3fab588 test: add autosave=always|never|conservative and cleanupSavepoints=true|false...
  • 9c20cc2 chore(deps): update github/codeql-action digest to 4bdb89f
  • Additional commits viewable in compare view

Updates ee.sk.mid:mid-rest-java-client from 1.6 to 1.7

Release notes

Sourced from ee.sk.mid:mid-rest-java-client's releases.

1.7

Changed

  • Reduce logging level when validating user certificates
Changelog

Sourced from ee.sk.mid:mid-rest-java-client's changelog.

[1.7] - upcoming

Changed

  • Reduce logging level when validating user certificates
  • Update demo certificates
Commits
  • f6a4eac Merge pull request #64 from SK-EID/Publish_fix
  • 8d5520b Fix copy command for artifact in publish workflow
  • 9ede6e5 Modify artifact directories in publish.yaml
  • fe6aa3b Merge pull request #63 from SK-EID/Publish_fix
  • afa360d Modify publish workflow for central.sonatype.com
  • a60feb8 Merge pull request #62 from Johxzu/feature/DDS-3046
  • f00170c Update changelog
  • 7143063 Update demo certificates
  • 5579276 Revert logback version downgrade and remove test - test will be added after m...
  • 9ae9334 feat: DDS-3046 - reduce logging level when validating user certificates
  • See full diff in compare view

Updates org.bouncycastle:bcutil-jdk18on from 1.83 to 1.84

Changelog

Sourced from org.bouncycastle:bcutil-jdk18on...

Description has been truncated

@dependabot
Dependabot: Bump the maven-patch-and-minor group with 12 updates
f60f202 
Bumps the maven-patch-and-minor group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.10` | `3.5.14` |
| [co.elastic.logging:logback-ecs-encoder](https://github.com/elastic/ecs-logging-java) | `1.7.0` | `1.8.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.5` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.2` | `3.6.3` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.83` | `1.84` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.83` | `1.84` |
| [org.bouncycastle:bcutil-jdk18on](https://github.com/bcgit/bc-java) | `1.83` | `1.84` |
| org.apache.cxf:cxf-wadl2java-plugin | `4.1.4` | `4.2.1` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.9` | `42.7.10` |
| [ee.sk.mid:mid-rest-java-client](https://github.com/SK-EID/mid-rest-java-client) | `1.6` | `1.7` |
| commons-io:commons-io | `2.21.0` | `2.22.0` |


Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.10 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.10...v3.5.14)

Updates `co.elastic.logging:logback-ecs-encoder` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/elastic/ecs-logging-java/releases)
- [Commits](elastic/ecs-logging-java@v1.7.0...v1.8.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.2...enforcer-3.6.3)

Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.apache.cxf:cxf-wadl2java-plugin` from 4.1.4 to 4.2.1

Updates `org.postgresql:postgresql` from 42.7.9 to 42.7.10
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.9...REL42.7.10)

Updates `ee.sk.mid:mid-rest-java-client` from 1.6 to 1.7
- [Release notes](https://github.com/SK-EID/mid-rest-java-client/releases)
- [Changelog](https://github.com/SK-EID/mid-rest-java-client/blob/master/CHANGELOG.md)
- [Commits](SK-EID/mid-rest-java-client@1.6...1.7)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.83 to 1.84
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `commons-io:commons-io` from 2.21.0 to 2.22.0

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-patch-and-minor
- dependency-name: co.elastic.logging:logback-ecs-encoder
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-patch-and-minor
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-patch-and-minor
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.apache.cxf:cxf-wadl2java-plugin
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-patch-and-minor
- dependency-name: ee.sk.mid:mid-rest-java-client
  dependency-version: '1.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 21, 2026
@github-actions github-actions Bot merged commit 5060827 into master-dependency-update May 21, 2026
1 check passed
@dependabot dependabot Bot deleted the dependabot/maven/master-dependency-update/maven-patch-and-minor-6616719bbf branch May 21, 2026 07:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants