Skip to content

chore(deps): bump the maven-minor-patch group across 1 directory with 9 updates - #22

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-patch-0151184bc6
Open

chore(deps): bump the maven-minor-patch group across 1 directory with 9 updates#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-patch-0151184bc6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-patch group with 9 updates in the / directory:

Package From To
software.amazon.awssdk:bom 2.42.35 2.55.6
com.google.cloud:libraries-bom 26.80.0 26.89.0
com.fasterxml.jackson.core:jackson-databind 2.17.0 2.22.3
commons-logging:commons-logging 1.3.1 1.4.0
com.azure:azure-security-keyvault-keys 4.10.6 4.11.2
com.azure:azure-identity 1.18.2 1.18.6
org.mockito:mockito-junit-jupiter 5.23.0 5.24.0
org.apache.maven.plugins:maven-surefire-plugin 3.2.5 3.6.0
org.sonatype.central:central-publishing-maven-plugin 0.10.0 0.11.0

Updates software.amazon.awssdk:bom from 2.42.35 to 2.55.6

Updates com.google.cloud:libraries-bom from 26.80.0 to 26.89.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

GCP Libraries BOM 26.89.0

Here are the differences from the previous version (26.88.1)

New Addition

  • com.google.cloud:google-cloud-spanner-jdbc:2.45.0

The group ID of the following artifacts is com.google.cloud.

Notable Changes

Other libraries

  • bigquery-jdbc: add EnableTimestampPicos connection property and its plumbing (#14284) (b4aa5ac)

  • bigquery-jdbc: implement picosecond temporal math and formatting engine (#14286) (2a9612a)

  • bigquery-jdbc: support picosecond in REST JSON path and nested types (#14334) (15ffe4a)

  • bigquery-jdbc: support picosecond in PreparedStatement parameters and batching (#14373) (c1aac66)

  • bigquery-jdbc: support picosecond timestamp in ResultSetMetaData and DatabaseMetaData (#14358) (43acdd3)

  • bigquery-jdbc: support picosecond timestamps in Arrow Storage Read API and nested types (#14332) (b5d9aca)

  • bigquery-jdbc: support qualified project delimiter in DefaultDataset property (#14240) (6e8d6c8)

  • bigquery: accelerate row-based query() with Arrow wire format (#14405) (8d12a8f)

  • bigquery: add ArrowDeserializer helper utility (#13943) (d9a298b)

  • bigquery: add ArrowQueryPageFetcher for Arrow query result pagination (#14404) (615409f)

  • bigquery: add ArrowQueryResult and ArrowQueryResultImpl for Arrow result streaming (#13944) (a62fdf8)

  • bigquery: add Storage Read API slow-path fallback for row-based query() (#14409) (26e568a)

  • bigquery: add zero-copy queryArrow API for Arrow VectorSchemaRoot streaming (#14402) (b44ffe8)

  • bigquery: make BigQuery AutoCloseable with default no-op close method (#14434) (00bf3de)

  • firestore: add support for BSON types (#13189) (8a123d9)

  • gax: add ApiCallContext and request-level settings overloads to ResumableUploadCallable (#14251) (e8cbd42)

  • gax: add globalTimeout settings field to ResumableUploadCallSettings (#14253) (438cda6)

  • gax: add resumable upload error classification and retry algorithm (#14419) (b70396d)

  • gax: add ResumableUploadCallable creation to Callables and HttpJsonCallableFactory (#14242) (7de24de)

  • gax: implement baseline Callable and Future for resumable uploads (#14241) (5a54db9)

  • generator: add model flag and allowlist parser for resumable upload RPCs (#14317) (acc1856)

  • generator: emit resumable upload client surface (#14319) (a9fed00)

  • generator: emit resumable upload settings and HttpJson upload stub (#14321) (c122474)

  • generator: enable resumable upload generation for showcase (#14325) (f9ebd79)

  • generator: switch resumable upload specialized stubs to package private (#14471) (0d4e875)

  • generator: wire transport stub delegation to resumable upload stubs (#14322) (cc4b980)

  • google/cloud/backupdr/v1beta: add backupdr (#14410) (a4a47da)

  • google/cloud/networkservices/v1beta1: add networkservices (#14407) (21c4955)

  • pubsub: add publish telemetry headers for publish attempt observability (#14338) (c167ab8)

  • pubsub: implement publish hedging to reduce tail latency (#13735) (b302615)

  • spanner: Support dynamic TLS certificate and key rotation for Spanner Omni (#14456) (ffc745c)

  • storage/control: add delete folder recursive sample (#13642) (f4b1b46)

  • storage/control: add delete folder recursive sample (#14397) (2c01d55)

  • auth: restore transportFactory upon deserialization in InternalAwsSecurityCredentialsSupplier (#14340) (beea42f)

  • bigquery-jdbc: ensure row ordering in PCNT IT (#14330) (a16f048)

... (truncated)

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.22.3

Commits
  • 4385c5f [maven-release-plugin] prepare release jackson-databind-2.22.3
  • ccb4fd0 Prep for 2.22.3 release
  • 2958412 Merge branch '2.21' into 2.22
  • 1215b94 Post-release dep version bump
  • 1f0df62 [maven-release-plugin] prepare for next development iteration
  • 13a9ff4 [maven-release-plugin] prepare release jackson-databind-2.21.7
  • d168f96 Prep for 2.21.7 release
  • eaf5c76 Merge branch '2.21' into 2.22
  • e05ef4c Merge branch '2.20' into 2.21
  • f6d4000 Merge branch '2.19' into 2.20
  • Additional commits viewable in compare view

Updates commons-logging:commons-logging from 1.3.1 to 1.4.0

Changelog

Sourced from commons-logging:commons-logging's changelog.

Apache Commons Logging 1.4.0 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.4.0.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

Fixed Bugs

  •           Use the new Apache oak leaf logo. Thanks to Gary Gregory.

  •           Fix broken URLs in website links. Thanks to Stanimir Stamenkov, Gary Gregory.

  •           Add support for Jakarta servlets, see org.apache.commons.logging.jakarta.ServletContextCleaner [#419](https://github.com/apache/commons-logging/issues/419). Thanks to Kiril Keranov, Gary Gregory.

Changes

  •           Bump org.apache.commons:commons-parent from 97 to 102. Thanks to Gary Gregory.

  •           Bump log4j2.version from 2.25.3 to 2.26.0. Thanks to Gary Gregory, Dependabot.

  •           Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18. Thanks to Gary Gregory, Dependabot.

Historical list of changes: https://commons.apache.org/proper/commons-logging/changes.html

Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi

For complete information on Apache Commons Logging, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Logging website:

https://commons.apache.org/proper/commons-logging/

Apache Commons Logging 1.3.6 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.6.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

... (truncated)

Commits
  • ff5ff39 Prepare for the release candidate 1.4.0 RC1
  • a685f33 Prepare for the next release candidate
  • a253ab6 Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
  • d6c9b81 Javadoc
  • 1cf45b2 Update legacy GitHub links in CONTRIBUTING.md
  • 9b48b5b Bump org.apache.commons:commons-parent from 101 to 102.
  • 7a44cb6 Bump GH CI actions/dependency-review-action from 4.9.0 to 5.0.0
  • e884661 Bump GH CI actions/checkout from 6.0.2 to 6.0.3
  • f6ad6f9 Bump org.apache.commons:commons-parent from 100 to 101
  • b468740 Bump github/codeql-action from 4.36.0 to 4.36.2
  • Additional commits viewable in compare view

Updates com.azure:azure-security-keyvault-keys from 4.10.6 to 4.11.2

Commits

Updates com.azure:azure-identity from 1.18.2 to 1.18.6

Release notes

Sourced from com.azure:azure-identity's releases.

com.azure+azure-identity_1.18.6

1.18.6 (2026-08-31)

Other Changes

Dependency Updates

  • Upgraded azure-core from 1.59.0 to version 1.59.1.
  • Upgraded azure-core-http-netty from 1.16.6 to version 1.16.7.
Commits
  • 3734194 Updating the SDK dependencies for azure-identity-broker
  • d5f33f2 Reset changes to the patch version.
  • 9545c4e Reset changes to the patch version.
  • 2e4a9a2 Updating the SDK dependencies for azure-identity
  • eaf0ef2 Reset changes to the patch version.
  • 832a616 External dependencies upgrade - Spring Boot 4.1.1 and Spring Cloud 2025.1.3 (...
  • 67810f2 Update Spring Boot and Spring Cloud versions for the Spring compatibility tes...
  • 59cbd24 Increment package versions for netapp auto-releases (#50276)
  • a83d981 Increment package versions for edgezones auto-releases (#50277)
  • db27a74 Increment package versions for enclave auto-releases (#50287)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the maven-minor-patch group across 1 directory with…
29a535d 
… 9 updates

Bumps the maven-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| software.amazon.awssdk:bom | `2.42.35` | `2.55.6` |
| [com.google.cloud:libraries-bom](https://github.com/googleapis/google-cloud-java) | `26.80.0` | `26.89.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.17.0` | `2.22.3` |
| [commons-logging:commons-logging](https://github.com/apache/commons-logging) | `1.3.1` | `1.4.0` |
| [com.azure:azure-security-keyvault-keys](https://github.com/Azure/azure-sdk-for-java) | `4.10.6` | `4.11.2` |
| [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) | `1.18.2` | `1.18.6` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.6.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.10.0` | `0.11.0` |



Updates `software.amazon.awssdk:bom` from 2.42.35 to 2.55.6

Updates `com.google.cloud:libraries-bom` from 26.80.0 to 26.89.0
- [Release notes](https://github.com/googleapis/google-cloud-java/releases)
- [Changelog](https://github.com/googleapis/google-cloud-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-java/commits/libraries-bom/v26.89.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.0 to 2.22.3
- [Commits](FasterXML/jackson-databind@jackson-databind-2.17.0...jackson-databind-2.22.3)

Updates `commons-logging:commons-logging` from 1.3.1 to 1.4.0
- [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-logging@rel/commons-logging-1.3.1...rel/commons-logging-1.4.0)

Updates `com.azure:azure-security-keyvault-keys` from 4.10.6 to 4.11.2
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@com.azure+azure-security-keyvault-keys_4.10.6...azure-messaging-eventgrid_4.11.2)

Updates `com.azure:azure-identity` from 1.18.2 to 1.18.6
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@com.azure+azure-identity_1.18.2...com.azure+azure-identity_1.18.6)

Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.6.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.11.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.google.cloud:libraries-bom
  dependency-version: 26.89.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: commons-logging:commons-logging
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.azure:azure-security-keyvault-keys
  dependency-version: 4.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.azure:azure-identity
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from lgutschow as a code owner October 1, 2026 01:20
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lgutschow lgutschow Awaiting requested review from lgutschow lgutschow is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants