Skip to content

fix(deps): update java dependencies - #353

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/java-dependencies
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/java-dependencies

Conversation

@renovate

@renovate renovate Bot commented Jul 24, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
org.simplify4u.plugins:sign-maven-plugin (source) 1.1.0 → 1.2.0 age confidence
org.graalvm.buildtools:native-maven-plugin 1.1.5 → 1.1.16 age confidence
org.apache.maven.plugins:maven-compiler-plugin (source) 3.15.0 → 3.16.0 age confidence
com.diffplug.spotless:spotless-maven-plugin 3.8.0 → 3.10.4 age confidence
net.sourceforge.pmd:pmd-java (source) 7.26.0 → 7.28.0 age confidence
net.sourceforge.pmd:pmd-core (source) 7.26.0 → 7.28.0 age confidence
org.pitest:pitest-maven (source) 1.25.8 → 1.30.1 age confidence
org.apache.maven.plugins:maven-failsafe-plugin (source) 3.5.6 → 3.6.1 age confidence
org.apache.maven.plugins:maven-surefire-plugin (source) 3.5.6 → 3.6.1 age confidence
org.graalvm.sdk:graal-sdk 25.1.3 → 25.4.4.1.1 age confidence
org.slf4j:slf4j-simple (source, changelog) 2.0.18 → 2.0.20 age confidence
com.google.jimfs:jimfs 1.3.1 → 1.3.2 age confidence
com.tngtech.archunit:archunit-junit5-api 1.4.2 → 1.5.1 age confidence
com.tngtech.archunit:archunit-junit5 1.4.2 → 1.5.1 age confidence
com.tngtech.archunit:archunit 1.4.2 → 1.5.1 age confidence
wtf.metio.devcontainer:devcontainer.java 2026.7.20081211 → 2026.10.4211918 age confidence
org.junit:junit-bom (source) 6.1.2 → 6.1.3 age confidence
tools.jackson:jackson-bom 3.2.1 → 3.2.4 age confidence
net.bytebuddy:byte-buddy-agent (source) 1.18.11-jdk5 → 1.18.15-jdk5 age confidence
net.bytebuddy:byte-buddy (source) 1.18.11-jdk5 → 1.18.15-jdk5 age confidence
wtf.metio.maven:maven-parent 2026.7.17 → 2026.10.1071200 age confidence

Release Notes

s4u/sign-maven-plugin (org.simplify4u.plugins:sign-maven-plugin)

v1.2.0

Compare Source

NOTICE

This plugin is retired.

No further releases are planned - see #​195 for the reasoning.

What's Changed

🔥 New features

🔨 Maintenance

🧰 Dependency updates

❤️ Thanks

Many thanks for collaboration on this release for: @​slawekjaranowski

graalvm/native-build-tools (org.graalvm.buildtools:native-maven-plugin)

v1.1.16

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.15...1.1.16

v1.1.14

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.13...1.1.14

v1.1.13

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.12...1.1.13

v1.1.12

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.11...1.1.12

v1.1.11

Compare Source

What's Changed

New Contributors

Full Changelog: graalvm/native-build-tools@1.1.9...1.1.11

v1.1.10

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.9...1.1.10

v1.1.9

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.8...1.1.9

v1.1.8

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.7...1.1.8

v1.1.7

Compare Source

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.6...1.1.7

v1.1.6

Compare Source

What's Changed

New Contributors

Full Changelog: graalvm/native-build-tools@1.1.5...1.1.6

hcoles/pitest (org.pitest:pitest-maven)

v1.30.1

Compare Source

v1.30.0

Compare Source

  • #​1492 Bump jackson version
  • #​1493 Sheck directories populated when checking for empty projects
  • #​1494 Accept comma separated feature parameters (thanks @​lino)
  • #​1496 Check non jvm lang dirs

Note, version bump from 1.25.x series made due to mislabelling of release as 1.29.10.

v1.29.10

Compare Source

v1.25.9

Compare Source

  • #​1486 normalise record attribute order on first load
  • #​1488 rework record interceptor to filter based on a marker line number
  • #​1490 filter mutants in enum switch default block
google/jimfs (com.google.jimfs:jimfs)

v1.3.2

Compare Source

  • Fixed Files.move so that ATOMIC_MOVE always enables overwriting of an existing destination file. (3f6e092)
  • Ensured that SecureDirectoryStream.move works like Files.move with the ATOMIC_MOVE option, as specified, and required that all Path arguments to SecureDirectoryStream methods be from the same FileSystem as the stream itself. (398b0f9)
  • Fixed access from SystemJimfsFileSystemProvider to JimfsFileSystem when they are loaded by different class loaders. (5b756f1)
  • Fixed JimfsInputStream.read to always return 0 when len is 0. (0e5725b)
TNG/ArchUnit (com.tngtech.archunit:archunit-junit5-api)

v1.5.1: ArchUnit 1.5.1

Compare Source

Bug fixes

Core

Internal Improvements

v1.5.0: ArchUnit 1.5.0

Compare Source

Enhancements

Core

  • Support Java 27 / class file major version 71 (#​1618)
  • Improve descriptions of JavaAccess.Predicates.originOwner and JavaAccess.Predicates.targetOwner (#​1603; thanks to @​StefanGraeber 👋)
  • Expose information on sealed classes via JavaClass: isSealed() and getPermittedSubclasses() (#​1677)
  • Consider dependencies from caught exceptions (#​1555; thanks to @​bannmann 👋)
  • ImportOption.DoNotIncludeTests and OnlyIncludeTests consider tests in custom Gradle source sets (#​1660; thanks to @​Develop-KIM 👋)

Lang

  • ArchConditions offers new ArchCondition<JavaClass> haveAnyDependenciesThat(DescribedPredicate<Dependency>) (#​1580; thanks to @​wakingrufus 👋)

Library

JUnit

Documentation

Internal Improvements

metio/devcontainer.java (wtf.metio.devcontainer:devcontainer.java)

v2026.10.4211918

Compare Source

2026.10.4211918

Dependencies
  • update graalvm/setup-graalvm digest to 27b360d (#​106)
  • update metio/ci action to v2026.9.29150349 (#​105)
Fixed
  • update dependency wtf.metio.maven:maven-parent to v2026.10.1071200 (#​107)

Usage

Pull the library from Maven Central.

v2026.9.28231911

Compare Source

2026.9.28231911

Dependencies
  • update java dependencies to v7.28.0 (#​104)
  • update docker.io/library/maven:3-eclipse-temurin-21 docker digest to 99e61ab (#​103)
  • update reviewdog/action-actionlint digest to 2085657 (#​102)

Usage

Pull the library from Maven Central.

v2026.9.25100111

Compare Source

2026.9.25100111

Dependencies
  • update reviewdog/action-actionlint digest to 320fcdd (#​100)
  • update docker.io/library/maven:3-eclipse-temurin-21 docker digest to c2a2c58 (#​99)
  • update metio/ci action to v2026.9.19094139 (#​98)
  • update metio/ci action to v2026.9.18095708 (#​97)
Fixed
  • update dependency tools.jackson:jackson-bom to v3.2.3 (#​101)

Usage

Pull the library from Maven Central.

v2026.9.15030650

Compare Source

2026.9.15030650

Dependencies
  • update dependency org.codehaus.mojo:build-helper-maven-plugin to v3.6.2 (#​96)
  • update docker.io/library/maven:3-eclipse-temurin-21 docker digest to a972570 (#​95)
  • update metio/ci action to v2026.9.12223213 (#​94)
  • update actions/setup-java digest to de7274f (#​93)
  • update graalvm/setup-graalvm digest to 0426e2e (#​92)
  • update reviewdog/action-actionlint digest to d290e33 (#​91)

Usage

Pull the library from Maven Central.

v2026.9.4090148

Compare Source

2026.9.4090148

Dependencies
  • update softprops/action-gh-release digest to efb3536 (#​90)
  • update docker.io/library/maven:3-eclipse-temurin-21 docker digest to 8f6ac12 (#​89)
  • update actions/setup-java action to v6 (#​88)
  • update docker.io/library/maven:3-eclipse-temurin-21 docker digest to 6131248 (#​87)
  • update reviewdog/action-actionlint digest to dbe5299 (#​85)
  • update metio/ci action to v2026.8.22144013 (#​86)
  • update docker.io/library/maven:3-eclipse-temurin-21 docker digest to c07f7cc (#​84)
  • update github actions (#​83)
  • update metio/ci action to v2026.8.4134806 (#​82)
  • update actions/setup-java digest to b6effb0 (#​81)
  • update metio/ci action to v2026.8.2070928 (#​80)
  • update metio/ci action to v2026.8.1094619 (#​79)
  • update metio/ci action to v2026.7.30140746 (#​78)
  • update metio/ci action to v2026.7.29150653 (#​77)
  • update metio/ci action to v2026.7.28213002 (#​76)
  • update metio/ci action to v2026.7.28183925 (#​75)
  • update metio/ci action to v2026.7.26085035 (#​73)
  • update metio/ci action to v2026.7.24201014 (#​72)
  • update metio/ci action to v2026.7.23184830 (#​71)
  • update reviewdog/action-actionlint digest to 5084226 (#​70)
  • update reviewdog/action-actionlint digest to 01d2dd6 (#​69)
  • update metio/ci action to v2026.7.20205609 (#​68)
  • update actions/checkout digest to 3d3c42e (#​67)
Fixed
  • update java dependencies (#​74)

Usage

Pull the library from Maven Central.

raphw/byte-buddy (net.bytebuddy:byte-buddy-agent)

v1.18.15

  • Update ASM to version 9.11 and add support for Java 28.

v1.18.14

  • Avoid exposure of the agent argument on the command line of the process that is spawned for an external attachment.
  • Avoid the resolution of symbolic links when the Gradle plugin deletes a folder recursively.
  • Limit the nesting depth that is accepted when parsing a generic type signature to avoid an exhaustion of the stack for a malformed class file.
  • Sign all deployed files using sigstore, in addition to the existing GPG signature.
  • Validate entry names when the Android plugin retains a file to avoid the propagation of path traversals.

v1.18.13

  • Actually include the SBOM within the published artifacts.
  • Avoid propagation of path traversals that are contained in jar files which are copied without transformation.
  • Avoid repeated traversal of previously visited type hierarchies to improve performance.
  • Correct Kotlin support of the Gradle plugin to redirect the classes directory of a source set while retaining support for legacy Gradle versions.
  • Create Gradle tasks using Gradle's task registration API if available.

v1.18.12

  • Automatically support Kotlin in Gradle plugin.
  • Correct JNA injector which accidentally created on based on Unsafe.
  • Support dynamic attach on Windows ARM64 by shipping a native attach_hotspot_windows library for win32-aarch64.
metio/maven-parent (wtf.metio.maven:maven-parent)

v2026.10.1071200

Compare Source

2026.10.1071200

Dependencies
  • update dependency org.apache.maven.plugins:maven-surefire-plugin to v3.6.0 (#​258) (#​258)
  • update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.16.0 (#​257) (#​257)

v2026.9.1061515

Compare Source

2026.9.1061515

Dependencies
  • update java dependencies (#​256) (#​256)
  • update dependency com.github.spotbugs:spotbugs-maven-plugin to v4.10.4.0 (#​255) (#​255)
  • update metio/ci action to v2026.8.22144013 (#​254) (#​254)
  • update dependency org.graalvm.buildtools:native-maven-plugin to v1.1.10 (#​253) (#​253)
  • update dependency org.graalvm.buildtools:native-maven-plugin to v1.1.9 (#​252) (#​252)
  • update java dependencies (#​251) (#​251)
  • update dependency org.owasp:dependency-check-maven to v13 (#​250) (#​250)
  • update metio/ci action to v2026.8.4134806 (#​249) (#​249)
  • update dependency org.graalvm.buildtools:native-maven-plugin to v1.1.7 (#​248) (#​248)
  • update dependency org.cyclonedx:cyclonedx-maven-plugin to v2.9.3 (#​247) (#​247)
  • update metio/ci action to v2026.8.2070928 (#​246) (#​246)
  • update metio/ci action to v2026.8.1094619 (#​245) (#​245)

v2026.8.1043609

Compare Source

2026.8.1043609

Added
  • release monthly, within the shared Central budget
  • adopt the metio standard CI stack
Changed
  • inherit the org-wide community health files
  • pin metio/ci to the released 2026.7.26080346 (#​235)
Dependencies

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jul 24, 2026
@renovate
renovate Bot enabled auto-merge (rebase) July 24, 2026 17:39
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Jul 24, 2026
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch from f3f5721 to 633a1ce Compare July 27, 2026 05:46
@renovate renovate Bot changed the title chore(deps): update dependency org.graalvm.buildtools:native-maven-plugin to v1.1.6 fix(deps): update java dependencies Jul 27, 2026
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 4 times, most recently from 7ebe338 to 9166e5b Compare August 4, 2026 05:46
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 3 times, most recently from 7a75a23 to 4cd7121 Compare August 10, 2026 15:50
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 2 times, most recently from eccd66e to b23aba9 Compare August 23, 2026 03:57
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 6 times, most recently from 5b7f684 to 5dc195d Compare September 3, 2026 00:54
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 6 times, most recently from 10d4c6d to f363694 Compare September 7, 2026 23:37
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 3 times, most recently from 26e5beb to 439c622 Compare September 18, 2026 04:52
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 2 times, most recently from 14f15c7 to 4ffcc90 Compare September 21, 2026 10:30
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 4 times, most recently from 6b24140 to 0bec078 Compare October 4, 2026 20:42
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 2 times, most recently from 2f37084 to 832830a Compare October 12, 2026 04:13
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch 3 times, most recently from d4e9e32 to 53df6a6 Compare October 21, 2026 23:46
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch from 53df6a6 to b8a7f78 Compare October 23, 2026 16:40
@renovate
renovate Bot force-pushed the renovate/java-dependencies branch from b8a7f78 to dd2216c Compare October 26, 2026 06:27

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant