Bump the deps group with 7 updates

[dependabot]

Bumps the deps group with 7 updates:

Package	From	To
com.google.googlejavaformat:google-java-format	1.35.0	1.36.1
org.tinylog:tinylog-api	2.8.0-M1	2.8.0-M2
org.checkerframework:checker-qual	4.2.1	4.2.2
org.junit.jupiter:junit-jupiter-engine	6.1.2	6.1.3
org.junit.jupiter:junit-jupiter-params	6.1.2	6.1.3
org.junit.jupiter:junit-jupiter-api	6.1.2	6.1.3
ch.qos.logback:logback-classic	1.6.1	1.6.2

Updates com.google.googlejavaformat:google-java-format from 1.35.0 to 1.36.1

Release notes

Sourced from com.google.googlejavaformat:google-java-format's releases.

v1.36.1

What's Changed

• Fix an issue with formatting indented list items.
• Handle blank lines before and within Markdown lists more accurately.

Full Changelog: google/google-java-format@v1.36.0...v1.36.1

v1.36.0

Changes:

• Significant improvements to Markdown Javadoc support

Full Changelog: google/google-java-format@v1.35.0...v1.36.0

Commits

• a95a529 Release google-java-format 1.36.1
• fce6509 Bump JSpecify to 1.0.1.
• 14e9039 Handle blank lines before and within Markdown lists more accurately.
• 7d9649f Fix an issue with formatting indented list items.
• 6b68963 Add repro test for markdown Javadoc MOE comment formatting
• 49afbdc Update the location of the required Java version after https://github.com/goo...
• efeecc5 In Markdown Javadoc, indent continuation lines for Javadoc block tags by +2 r...
• bd4988b Add a test that illustrates a problem with +4 indentation for block tags in M...
• 8cb2394 Write BlockQuote rather than Blockquote everywhere.
• dc71a7c Add a test that confirms the buggy behaviour from b/534219145.
• Additional commits viewable in compare view

Updates org.tinylog:tinylog-api from 2.8.0-M1 to 2.8.0-M2

Release notes

Sourced from org.tinylog:tinylog-api's releases.

Version 2.8.0-M2

Output suppressed exceptions when rendering throwables (tinylog-org/tinylog#910, thanks to @​arimu1)

Commits

• 17b903b Release version 2.8.0-M2
• 183d67f Downgrade p2-maven-plugin from 2.0.0 to 1.7.0
• 29079a0 Migrate from nexus-staging-maven-plugin to central-publishing-maven-plugin
• 7e5c9d8 Fix Maven badge
• 117be3b Update copyright date
• 904795d Output suppressed exceptions when rendering throwables (#910)
• 70db248 Bump org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0 (#909)
• 10bafdc Bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 (#906)
• e6ee6c7 Bump org.apache.logging.log4j:log4j-core from 2.26.0 to 2.26.1 (#904)
• 332f89d Bump actions/checkout from 6 to 7 (#903)
• Additional commits viewable in compare view

Updates org.checkerframework:checker-qual from 4.2.1 to 4.2.2

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 4.2.2

Version 4.2.2 (2026-08-06)

Implementation details

Renamed CFAbstractValue.validateSet() to hasAnnotationFromEveryHierarchy().

Closed issues

#7723, #7784, #7806.

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 4.2.2 (2026-08-06)

Implementation details

Renamed CFAbstractValue.validateSet() to hasAnnotationFromEveryHierarchy().

Closed issues

#7723, #7784, #7806.

Commits

• 2dc79ee new release 4.2.2
• c038044 Use the Gradle Nexus publish plugin.
• 51d31ca Update release date.
• 765fe18 Define equals() and hashCode() (#7892)
• 214e1a7 Don't use snapshot versions of libraries
• 83a2be9 Gradle improvements
• 6342795 Use object equality, not reference equality (#7891)
• 53ae357 Document side effect (#7897)
• b7f5e73 Address alignment between declared and substituted type (#7885)
• 45a6235 The three alternatives of 18.5.2.1 are not mutually exclusive (#7883)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits

• f59f60d Release 6.1.3
• cd8ec92 Finalize 6.1.3 release notes
• c8729f2 Restore compatibility with GraalVM 25 (#5901)
• ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
• fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
• 62afc02 Delay GraalVM plugin updates for 3 days
• 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
• f6bbfc5 Move GraalVM tests to separate test task (#5903)
• e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
• 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
• Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.6.1 to 1.6.2

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.2

clean.full.1.6.2.mp4

2026-08-10 Release of logback version 1.6.2

• Configuration analysis now detects contradictory caller-data inclusion instructions. For example, an AsyncAppender, SocketAppender or SMTPAppender with includeCallerData left at the default false is incompatible with a layout or encoder pattern that uses a caller-data converter such as %C, %M, %L, %F, %l or %caller. At runtime those converters would print question marks and still incur extraction cost on a worker thread. Logback now emits a configuration-time warning when such instructions disagree. See codes.html#callerContradiction for details. This issue was reported in issues/1059 by leeychee. The initial analysis was contributed by seonwoo_jung.

• Caller-contradiction analysis can be turned off by setting the logback.skipCallerContradictionAnalysis variable to true, either as a system property (-Dlogback.skipCallerContradictionAnalysis=true) or as a property in the configuration file:

  <property name="logback.skipCallerContradictionAnalysis" value="true"/>

• SimpleSocketServer and SimpleSSLSocketServer now require an explicit client IP whitelist. On the command line, pass one or more allowed addresses (single IPs or CIDR ranges) after the configuration file. An empty whitelist means no clients are accepted. When embedding the server programmatically, register allowed addresses with addAllowedClientAddress(String) or setAllowedClientAddresses(Collection) before clients connect. See the documentation on restricting client access.

• Added ThrowableProxyVOBuilder for assembling a ThrowableProxyVO field by field, with a corresponding ThrowableProxyVO.builder() entry point.

• Dependency analysis handlers now run their postHandle method after child models have been processed, so checks that depend on nested appenders (such as caller-contradiction analysis) see a complete picture.

• Updated several dependencies, including Angus Mail to 2.0.4 and Jetty (test) to 12.1.12.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit e3d78330ad1ba024fd987fd00c3ffb9cfcdb07dc associated with the tag v_1.6.2. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• e3d7833 prepare release 1.6.2
• 919127d test for skipping contradiction analysis
• 67dcd40 allow skipping caller contradiction analysis
• 2619c6d remove unused message string in CallerContradictionWarnAnalyser
• 22cfade add support for SMTPAppender in caller data contradiction analysis
• 656fb6d minor javadoc change in SMTPAppenderBase
• efb1ce2 cover SocketAppender in caller contradiction analysis
• d3a01f8 more tests for caller contradiction analysis
• b1a80d6 more complete logic in caller contradiction analysis
• 0678954 SimpleSocketServer and SLLSimpleSocketServer now accept whitelisted
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions