[dependabot]

Bumps the minor-updates group with 10 updates in the / directory:

Package	From	To
tools.jackson:jackson-bom	3.2.4	3.3.0
tools.jackson.core:jackson-core	3.2.4	3.3.0
tools.jackson.core:jackson-databind	3.2.4	3.3.0
tools.jackson.dataformat:jackson-dataformat-yaml	3.2.4	3.3.0
tools.jackson.core:jackson-core	3.2.4	3.3.0
tools.jackson.core:jackson-databind	3.2.4	3.3.0
tools.jackson.dataformat:jackson-dataformat-yaml	3.2.4	3.3.0
com.fasterxml.jackson.core:jackson-annotations	2.22	2.23
com.diffplug.spotless:spotless-maven-plugin	3.10.4	3.11.0
org.codehaus.mojo:build-helper-maven-plugin	3.6.2	3.7.0
org.graalvm.polyglot:js	25.4.4.1.1	25.5.5.0.3
org.graalvm.polyglot:polyglot	25.4.4.1.1	25.5.5.0.3
org.graalvm.polyglot:polyglot	25.4.4.1.1	25.5.5.0.3
org.a2aproject.sdk:a2a-java-sdk-client	1.4.0.Final	1.5.0.Final

Updates tools.jackson:jackson-bom from 3.2.4 to 3.3.0

Commits

• 85e275b [maven-release-plugin] prepare release jackson-bom-3.3.0
• 7a90bd5 Prep for 3.3.0 release
• edea1ae Update oss-parent
• b5da7b9 Merge branch '3.2' into 3.x
• 10789f8 Merge branch '3.1' into 3.2
• 573f4fe Merge branch '2.x' into 3.1
• a85d157 ...
• 8dff9c6 ...
• eee2d20 Post-release dep version bump
• 156737d [maven-release-plugin] prepare for next development iteration
• Additional commits viewable in compare view

Updates tools.jackson.core:jackson-core from 3.2.4 to 3.3.0

Commits

• 65af7ea [maven-release-plugin] prepare release jackson-core-3.3.0
• 7bf8b5f ...
• 9d54ed9 Prep for 3.3.0 release
• b93a1dd Merge branch '3.2' into 3.x
• 467470a Merge branch '3.1' into 3.2
• 540c1d7 Merge branch '2.x' into 3.1
• 4086f09 Fix pom.xml
• 463eb47 Create 2.24 branch; 2.x -> 2.24.0-SNAPSHOT
• fd04296 Post-release dep version bump
• 427e682 [maven-release-plugin] prepare for next development iteration
• Additional commits viewable in compare view

Updates tools.jackson.core:jackson-databind from 3.2.4 to 3.3.0

Commits

• 2747e06 [maven-release-plugin] prepare release jackson-databind-3.3.0
• 3eff865 Prep for 3.3.0 release
• 5d1045e Merge branch '3.2' into 3.x
• 471026e Merge branch '3.1' into 3.2
• 6c8a133 Merge branch '2.x' into 3.1
• 72c8eac ...
• c6004da Create 2.24 branch; 2.x -> 2.24.0-SNAPSHOT
• 03c5d31 Post-release dep version bump
• b1f30bc [maven-release-plugin] prepare for next development iteration
• 4d6a0a2 [maven-release-plugin] prepare release jackson-databind-2.23.0
• Additional commits viewable in compare view

Updates tools.jackson.dataformat:jackson-dataformat-yaml from 3.2.4 to 3.3.0

Commits

• eaad1d5 [maven-release-plugin] prepare release jackson-dataformats-text-3.3.0
• 3912628 Prep for 3.3.0 release
• b9cbe7d Merge branch '3.2' into 3.x
• 6a4132d Merge branch '3.1' into 3.2
• 974db0f Merge branch '2.x' into 3.1
• 2fe0f79 Create 2.24 branch; 2.x -> 2.24.0-SNAPSHOT
• 99a71a8 Post-release dep version bump
• c712b9e [maven-release-plugin] prepare for next development iteration
• 1f9438c [maven-release-plugin] prepare release jackson-dataformats-text-2.23.0
• 692d615 Prep for 2.23.0 release
• Additional commits viewable in compare view

Updates tools.jackson.core:jackson-core from 3.2.4 to 3.3.0

Commits

• 65af7ea [maven-release-plugin] prepare release jackson-core-3.3.0
• 7bf8b5f ...
• 9d54ed9 Prep for 3.3.0 release
• b93a1dd Merge branch '3.2' into 3.x
• 467470a Merge branch '3.1' into 3.2
• 540c1d7 Merge branch '2.x' into 3.1
• 4086f09 Fix pom.xml
• 463eb47 Create 2.24 branch; 2.x -> 2.24.0-SNAPSHOT
• fd04296 Post-release dep version bump
• 427e682 [maven-release-plugin] prepare for next development iteration
• Additional commits viewable in compare view

Updates tools.jackson.core:jackson-databind from 3.2.4 to 3.3.0

Commits

• 2747e06 [maven-release-plugin] prepare release jackson-databind-3.3.0
• 3eff865 Prep for 3.3.0 release
• 5d1045e Merge branch '3.2' into 3.x
• 471026e Merge branch '3.1' into 3.2
• 6c8a133 Merge branch '2.x' into 3.1
• 72c8eac ...
• c6004da Create 2.24 branch; 2.x -> 2.24.0-SNAPSHOT
• 03c5d31 Post-release dep version bump
• b1f30bc [maven-release-plugin] prepare for next development iteration
• 4d6a0a2 [maven-release-plugin] prepare release jackson-databind-2.23.0
• Additional commits viewable in compare view

Updates tools.jackson.dataformat:jackson-dataformat-yaml from 3.2.4 to 3.3.0

Commits

• eaad1d5 [maven-release-plugin] prepare release jackson-dataformats-text-3.3.0
• 3912628 Prep for 3.3.0 release
• b9cbe7d Merge branch '3.2' into 3.x
• 6a4132d Merge branch '3.1' into 3.2
• 974db0f Merge branch '2.x' into 3.1
• 2fe0f79 Create 2.24 branch; 2.x -> 2.24.0-SNAPSHOT
• 99a71a8 Post-release dep version bump
• c712b9e [maven-release-plugin] prepare for next development iteration
• 1f9438c [maven-release-plugin] prepare release jackson-dataformats-text-2.23.0
• 692d615 Prep for 2.23.0 release
• Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.22 to 2.23

Commits

• 861bef4 [maven-release-plugin] prepare release jackson-annotations-2.23
• 1e9aea3 Prep for 2.23 release
• cc816df fix typo (#368)
• f0c4dbd Use assertNotEquals for hashCode non-zero assertions (#367)
• 8619aac Replace deprecated Locale constructors in JsonFormatTest (#366)
• 23831bc Fix deprecation warnings in Actions workflows (#365)
• 8897c6c Bump actions/setup-java from 6.0.1 to 6.1.0 in the github-actions group (#364)
• 720da3b Revert "Add @​JsonWrapped annotation (#346)" (#362)
• 29ce4cc Bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group (#360)
• 5b89257 Bump actions/setup-java from 5.7.0 to 6.0.0 in the github-actions group (#359)
• Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 3.10.4 to 3.11.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.11.0

Added

• Add <cleanup>false</cleanup> to <googleJavaFormat> to disable google-java-format's non-whitespace cleanups. (#3157)
• Add a <maxLineLength> parameter to <googleJavaFormat>. (#3151)
  Overrides the 100-column limit prescribed by the GOOGLE and AOSP styles; requires google-java-format 2.0.0 or later.

Changes

• Bump default google-java-format version 1.36.1 -> 2.0.0. (#3157)
  This version applies some small non-whitespace cleanups by default (removing redundant semicolons, empty annotation parentheses, and parentheses around single lambda parameters), which can be disabled with <cleanup>false</cleanup>.

Commits

• 8b62f5a Published maven/3.11.0
• 8d2edae Published gradle/8.11.0
• 80977b4 Published lib/4.11.0
• ed34276 Add maxLineLength option to googleJavaFormat step (requires gjf 2.0.0+) (#3152)
• b2cd501 docs: split maxLineLength changelog entries into subject and desc style
• d1c06e2 Update plugin-gradle/README.md
• 7fd0a54 Update plugin-maven/README.md
• abe4e9f Merge origin/main: combine cleanup option and gjf 2.0.0 bump with maxLineLength
• 5ec09c0 Bump google-java-format to 2.0.0 and add a cleanup option (#3157)
• e8f21cb Handle older google-java-format versions in GoogleJavaFormatStepTest
• Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.2 to 3.7.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

• System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).
• Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).
• Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

• Require Maven 3.9.0 (#257) @​slachiewicz

🚀 New features and improvements

• Support the system time zone in timestamp-property (#250) @​wilx
• Add literal replacement support to regex property goals (#249) @​wilx

📝 Documentation updates

• Point the remove-project-artifact deprecation at split local repositories (#268, #270) @​slachiewicz
• Add AGENTS.md (#263) @​slachiewicz

👻 Maintenance

• Run the surefire IT fixture on JUnit 5 (#269) @​slachiewicz
• Replace deprecated @​Component with JSR 330 injection (#267) @​slachiewicz
• Check the reserved ports' guarantees, not exact numbers (#265) @​slachiewicz
• Apply the JUnit 5 best practices to the tests (#261) @​slachiewicz
• Keep Dependabot on Maven 3.9.x (#259) @​slachiewicz
• Write the regex and timestamp verify scripts as assertions (#258) @​slachiewicz
• Port the IT scripts from BeanShell to Groovy (#251) @​slachiewicz

🔧 Build

• Preload the lifecycle plugins of the Central-backed ITs (#264) @​slachiewicz
• Use the runners' cached Temurin JDKs in CI (#262) @​slachiewicz
• Run CI on Maven 4 (#260) @​slachiewicz
• Assign merged pull requests to the release milestone (#255) @​slachiewicz
• Point the released-version ITs at the URL the build uses for central (#256) @​slachiewicz
• Run one integration test per CPU core (#254) @​slachiewicz
• Check dependencies monthly and group the updates (#253) @​slachiewicz
• Run fewer JDKs on macOS and Windows and the ITs in parallel (#252) @​slachiewicz

Thanks to @​slachiewicz and @​wilx.

Full changelog

Commits

• 5eee186 [maven-release-plugin] prepare release 3.7.0
• b506bd9 Point the remove-project-artifact deprecation at split local repositories (#268)
• acf3610 Support the system time zone in timestamp-property
• 7690ae3 Add literal replacement support to regex property goals
• 8dc41fd Run the IT fixtures on JUnit 5
• f881bba Replace deprecated @​Component with JSR 330 injection
• bb5f11c Declare the Maven artifacts the code uses
• 74eb3f5 Use push for PR Automation
• 28d7ed1 Check the reserved ports' guarantees, not exact numbers
• 7459cd8 Build through the MojoHaus workflow
• Additional commits viewable in compare view

Updates org.graalvm.polyglot:js from 25.4.4.1.1 to 25.5.5.0.3

Commits

• e3cb74f [GR-80769] Update labsjdk to jdk-25.0.5.0.3 GA
• f6e8a76 update labsjdk imports to jdk-25.0.5.0.3 GA
• e94e0e2 [GR-80841] Start 25.5.5.0.3 dev cycle.
• 076991f Update JS imports.
• dc2d199 Start 25.5.5.0.3 dev cycle.
• 4fd3831 [GR-80769] Integration of OpenJDK 25.0.5.0.2+1 and OracleJDK 25.0.5.0.2+1 GA
• 2054724 Disable JFR test on Windows (GR-80813).
• 5faa07b Ignore testReachabilityOver20000Methods
• 5009f98 update labsjdk import
• 657d6fd [GR-80788] Prepare release branches for GraalVM 25.5.5.0.2.
• Additional commits viewable in compare view

Updates org.graalvm.polyglot:polyglot from 25.4.4.1.1 to 25.5.5.0.3

Commits

• e3cb74f [GR-80769] Update labsjdk to jdk-25.0.5.0.3 GA
• f6e8a76 update labsjdk imports to jdk-25.0.5.0.3 GA
• e94e0e2 [GR-80841] Start 25.5.5.0.3 dev cycle.
• 076991f Update JS imports.
• dc2d199 Start 25.5.5.0.3 dev cycle.
• 4fd3831 [GR-80769] Integration of OpenJDK 25.0.5.0.2+1 and OracleJDK 25.0.5.0.2+1 GA
• 2054724 Disable JFR test on Windows (GR-80813).
• 5faa07b Ignore testReachabilityOver20000Methods
• 5009f98 update labsjdk import
• 657d6fd [GR-80788] Prepare release branches for GraalVM 25.5.5.0.2.
• Additional commits viewable in compare view

Updates org.graalvm.polyglot:polyglot from 25.4.4.1.1 to 25.5.5.0.3

Commits

• e3cb74f [GR-80769] Update labsjdk to jdk-25.0.5.0.3 GA
• f6e8a76 update labsjdk imports to jdk-25.0.5.0.3 GA
• e94e0e2 [GR-80841] Start 25.5.5.0.3 dev cycle.
• 076991f Update JS imports.
• dc2d199 Start 25.5.5.0.3 dev cycle.
• 4fd3831 [GR-80769] Integration of OpenJDK 25.0.5.0.2+1 and OracleJDK 25.0.5.0.2+1 GA
• 2054724 Disable JFR test on Windows (GR-80813).
• 5faa07b Ignore testReachabilityOver20000Methods
• 5009f98 update labsjdk import
• 657d6fd [GR-80788] Prepare release branches for GraalVM 25.5.5.0.2.
• Additional commits viewable in compare view

Updates org.a2aproject.sdk:a2a-java-sdk-client from 1.4.0.Final to 1.5.0.Final

Release notes

Sourced from org.a2aproject.sdk:a2a-java-sdk-client's releases.

v1.5.0.Final

A2A Java SDK 1.5.0.Final

Installation

Maven:

<dependency>
    <groupId>org.a2aproject.sdk</groupId>
    <artifactId>a2a-java-sdk-client</artifactId>
    <version>1.5.0.Final</version>
</dependency>

Gradle:

implementation 'org.a2aproject.sdk:a2a-java-sdk-client:1.5.0.Final'

Links

• Maven Central
• JavaDoc
• GitHub

Changes since v1.4.0.Final

Full Changelog

What's Changed

• chore: 1.4.0.Final docs and bump to 1.4.1.Final-SNAPSHOT by @​ehsavoie in a2aproject/a2a-java#1188
• test(server): fix flaky testSynchronousExecutorDoesNotLeakChainEntries by @​ehsavoie in a2aproject/a2a-java#1189
• docs: Adding the release note for 1.4.0.Final by @​ehsavoie in a2aproject/a2a-java#1195
• fix(jsonrpc): handle omitted params and non-object request bodies by @​Zhuoxi2000 in a2aproject/a2a-java#1198
• fix(rest): format single-digit history length query by @​014-code in a2aproject/a2a-java#1200
• build: add Checkstyle reporter for unused imports and trailing whitespace by @​Kudwa-Abhishek in a2aproject/a2a-java#1203
• test: cover multi-turn input-required interaction by @​misysin in a2aproject/a2a-java#1212
• chore: Making the build reproductible by @​ehsavoie in a2aproject/a2a-java#1214
• fix(queue-manager-replicated): migrate Kafka tests to Testcontainers 2.x API by @​ehsavoie in a2aproject/a2a-java#1225
• ci: pin all GitHub Actions to commit SHAs by @​ehsavoie in a2aproject/a2a-java#1230
• chore: upgrade 0.3 and 1.0 TCKs by @​kabir in a2aproject/a2a-java#1235
• feat(opentelemetry): add streaming span lifecycle and operation metrics by @​ehsavoie in a2aproject/a2a-java#1236
• feat(opentelemetry): add push notification tracing and trace-context propagation by @​ehsavoie in a2aproject/a2a-java#1229
• refactor!: centralize server validation by @​kabir in a2aproject/a2a-java#1213
• build: replace Checkstyle with Spotless (google-java-format) by @​ehsavoie in a2aproject/a2a-java#1237
• fix(grpc): avoid NPE when listTasks is called without a tenant by @​Emryswu in a2aproject/a2a-java#1240
• fix(rest): include missing query params in listTasks and listTaskPushNotificationConfigs by @​sumitvairagar in a2aproject/a2a-java#1239
• docs: add latest documentation alias by @​kabir in a2aproject/a2a-java#1243

... (truncated)

Commits

• a8f4313 chore: release 1.5.0.Final (#1280)
• bc9344a test(rest): cover SSE completion and parsing error outcomes (#1209)
• 9c5cf41 fix: accept ListTasks responses with fewer tasks than pageSize (#1273)
• 788c1ea fix: preserve explicit nulls in data and metadata (#1261)
• bb7e9a3 chore: bump org.sonatype.central:central-publishing-maven-plugin from 0.11.0 ...
• 7aba011 chore: bump org.slf4j:slf4j-bom from 2.0.19 to 2.0.20 (#1270)
• f1a8e63 chore: bump no.entur.mapstruct.spi:protobuf-spi-impl from 1.74.0 to 1.76.0 (#...
• 28868ed chore: bump org.mock-server:mockserver-netty from 8.0.0 to 9.2.0 (#1267)
• 698edc4 chore: bump com.uber.nullaway:nullaway from 0.14.1 to 0.14.3 (#1265)
• cafd945 chore: bump com.google.code.gson:gson from 2.14.0 to 2.15.0 (#1264)
• Additional commits viewable in compare view

[Copilot]

🔵 Needs a closer look

Dependency artifacts and CI results are unavailable, leaving Java 21 Maven verification of Jackson JSON/YAML round trips, GraalJS execution, and A2A client interactions unconfirmed for these grouped upgrades.

No open issues 🎉

What changed in this PR

Updates grouped runtime dependencies and Maven build plugins across the Java SDK’s parent, implementation, and API modules. The PR changes version properties only; no application code is modified.

Changes:

• Upgrades Jackson components to 3.3.0 and Jackson annotations to 2.23.
• Upgrades GraalVM Polyglot/JavaScript to 25.5.5.0.3 and the A2A SDK client to 1.5.0.Final.
• Updates Spotless to 3.11.0 and Build Helper to 3.7.0.

File	Description
pom.xml	Updates shared Jackson and Spotless versions.
impl/​pom.xml	Updates GraalVM and A2A SDK dependency versions.
api/​pom.xml	Updates the Build Helper Maven plugin version.

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

Dependency artifacts and CI results are unavailable, leaving Java 21 build and runtime compatibility for the Jackson, GraalVM JavaScript, and A2A upgrades unverified by the existing tests.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

Java 21 compatibility of the GraalVM and A2A dependencies remains unverified because the offline snapshot lacks dependency binaries and CI results needed to validate runtime and integration behavior.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

The dependency-free snapshot lacks the upgraded artifacts and runtime results needed to confirm JDK 21 CI compatibility for the GraalVM, Jackson, and A2A upgrades.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

The Jackson, GraalVM, and A2A upgrades require Java 21 CI/integration validation because dependency artifacts and runtime execution are unavailable to verify compatibility.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

JDK 21 compatibility for Jackson 3.3.0, GraalVM 25.5.5.0.3, and A2A 1.5.0.Final needs CI confirmation because updated artifacts and runtime validation were unavailable in the review environment.

No open issues 🎉

_{Review effort: Balanced}

[Copilot]

🟡 Changes recommended

The build-helper plugin is unpinned with no parent-managed version, so Maven resolves it from repository metadata and makes builds dependent on cache or repository state.

1 open issue

• Pin build-helper plugin to version 3.7.0 · New

_{Review effort: Balanced}