Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 4, 2025

Bumps the prod-deps group with 7 updates in the / directory:

Package From To
com.fasterxml.jackson:jackson-bom 2.20.0 2.20.1
io.qameta.allure:allure-bom 2.29.1 2.30.0
io.smallrye:jandex 3.5.0 3.5.1
ch.qos.logback:logback-classic 1.5.19 1.5.20
org.apache.pdfbox:pdfbox 3.0.5 3.0.6
org.aspectj:aspectjweaver 1.9.24 1.9.25
io.qameta.allure:allure-maven 2.15.2 2.16.1

Updates com.fasterxml.jackson:jackson-bom from 2.20.0 to 2.20.1

Commits
  • 5e24010 [maven-release-plugin] prepare release jackson-bom-2.20.1
  • 59a2e4a Prep for 2.20.1 release
  • 3fc3645 Merge branch '2.19' into 2.20
  • 7539ecc Post-release dep version bump
  • 21f04ba [maven-release-plugin] prepare for next development iteration
  • 085b32f [maven-release-plugin] prepare release jackson-bom-2.19.4
  • f2a1f50 Prep for 2.19.4 release
  • ee69fcf ...
  • 3735e1e ...
  • d405492 Add helper script for safekeeping
  • Additional commits viewable in compare view

Updates io.qameta.allure:allure-bom from 2.29.1 to 2.30.0

Release notes

Sourced from io.qameta.allure:allure-bom's releases.

2.30.0

What's Changed

🔬 Improvements

⬆️ Dependency Updates

👻 Internal changes

New Contributors

Full Changelog: allure-framework/allure-java@2.29.1...2.30.0

Commits
  • 2a616df release 2.30.0
  • 105caf5 build(deps): bump com.puppycrawl.tools:checkstyle from 10.17.0 to 11.0.1 (via...
  • 4b3fed7 build(deps): bump commons-io:commons-io from 2.16.1 to 2.20.0 (via #1190)
  • a8561b7 build(deps): bump actions/checkout from 4 to 5 (via #1183)
  • 4f50994 build(deps): bump actions/setup-java from 4 to 5 (via #1186)
  • 5aeae3f publish using sonatype staging api
  • eafc1b3 feat(allure-model): add optional attachment size (via #1182)
  • aad4638 build(deps): bump orgSlf4jVersion from 2.0.13 to 2.0.17 (via #1175)
  • 15a70fb fix workflow does not contain permissions (via #1172)
  • 315b2c9 build(deps): bump org.postgresql:postgresql from 42.7.3 to 42.7.7 (via #1173)
  • Additional commits viewable in compare view

Updates io.smallrye:jandex from 3.5.0 to 3.5.1

Release notes

Sourced from io.smallrye:jandex's releases.

3.5.1

What's Changed

Full Changelog: smallrye/jandex@3.5.0...3.5.1

Commits
  • c3870ac [maven-release-plugin] prepare release 3.5.1
  • 9332cf2 Amendments before release
  • b8a235e release 3.5.1
  • f1b4cb3 upgrade to Gizmo 2.0.0.Beta8
  • 8f414b9 add StringBuilderGen to the gizmo2 module
  • 9c43adc Bump org.codehaus.mojo:exec-maven-plugin from 3.6.1 to 3.6.2
  • 6461d01 Bump actions/setup-node from 5 to 6
  • 2ec19e4 Bump net.bytebuddy:byte-buddy from 1.17.7 to 1.17.8
  • 0a32601 Bump org.codehaus.mojo:exec-maven-plugin from 3.6.0 to 3.6.1
  • 26aaa74 Bump org.codehaus.mojo:exec-maven-plugin from 3.5.1 to 3.6.0
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.19 to 1.5.20

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.20

2025-10-19 Release of logback version 1.5.20

• Due to potential vulnerabilities associated with dynamic, i.e. runtime, java code compilation and execution (using Janino), the 'condition' attribute within the <if> element is deprecated and will be removed in 2027.

An online migration service is provided to help with the transition.

The <condition> element, new in this version, admits custom PropertyEvaluator as a recommended alternative. See also the updated documentation on conditional configuration.

• Logback-classic's initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 930fb15c993a4344bcecc6ba2225c12a2c38e676 associated with the tag v_1.5.20. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 930fb15 prepare release 1.5.20
  • 0b4432a provide an alternative to Janino based conditional configuration processing -...
  • 258558f provide an alternative to Janino based conditional configuration processing -...
  • ee77a70 provide an alternative to Janino based conditional configuration processing -...
  • 5ca7ce8 provide an alternative to Janino based conditional configuration processing -...
  • 728803f fix typo
  • aa5eeb1 start work on version 1.5.20-SNAPSHOT
  • See full diff in compare view

Updates org.apache.pdfbox:pdfbox from 3.0.5 to 3.0.6

Updates org.aspectj:aspectjweaver from 1.9.24 to 1.9.25

Release notes

Sourced from org.aspectj:aspectjweaver's releases.

1.9.25

Java 25

AspectjJ 1.9.25 release notes

Commits

Updates io.qameta.allure:allure-maven from 2.15.2 to 2.16.1

Release notes

Sourced from io.qameta.allure:allure-maven's releases.

2.16.1

What's Changed

⬆️ Dependency Updates

👻 Internal changes

Full Changelog: allure-framework/allure-maven@2.16.0...2.16.1

2.16.0

What's Changed

🔬 Improvements

⬆️ Dependency Updates

Full Changelog: allure-framework/allure-maven@2.15.2...2.16.0

Commits
  • ea6440e release 2.16.1
  • f0064f7 bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3 (via...
  • 649113a bump com.fasterxml.jackson.core:jackson-databind from 2.19.1 to 2.20.0 (via #...
  • 0092afb bump org.apache.commons:commons-text from 1.13.1 to 1.14.0 (via #379)
  • 185d627 bump org.apache.maven.plugins:maven-pmd-plugin from 3.26.0 to 3.27.0 (via #368)
  • f98c792 bump pmd.version from 7.14.0 to 7.15.0 (via #369)
  • 21f9ebf bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.0 to 3.9.1 (via #...
  • e3762da bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8 (via #371)
  • c6f986d bump maven.version from 3.9.10 to 3.9.11 (via #372)
  • b3ebde8 bump actions/checkout from 4.2.2 to 5.0.0 (via #373)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 4, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 4, 2025 22:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 4, 2025
@github-actions github-actions bot added the pom label Nov 4, 2025
Bumps the prod-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.20.0` | `2.20.1` |
| [io.qameta.allure:allure-bom](https://github.com/allure-framework/allure-java) | `2.29.1` | `2.30.0` |
| [io.smallrye:jandex](https://github.com/smallrye/jandex) | `3.5.0` | `3.5.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.19` | `1.5.20` |
| org.apache.pdfbox:pdfbox | `3.0.5` | `3.0.6` |
| [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) | `1.9.24` | `1.9.25` |
| [io.qameta.allure:allure-maven](https://github.com/allure-framework/allure-maven) | `2.15.2` | `2.16.1` |



Updates `com.fasterxml.jackson:jackson-bom` from 2.20.0 to 2.20.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.20.0...jackson-bom-2.20.1)

Updates `io.qameta.allure:allure-bom` from 2.29.1 to 2.30.0
- [Release notes](https://github.com/allure-framework/allure-java/releases)
- [Commits](allure-framework/allure-java@2.29.1...2.30.0)

Updates `io.smallrye:jandex` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/smallrye/jandex/releases)
- [Changelog](https://github.com/smallrye/jandex/blob/main/RELEASE_PROCEDURE.md)
- [Commits](smallrye/jandex@3.5.0...3.5.1)

Updates `ch.qos.logback:logback-classic` from 1.5.19 to 1.5.20
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.19...v_1.5.20)

Updates `org.apache.pdfbox:pdfbox` from 3.0.5 to 3.0.6

Updates `org.aspectj:aspectjweaver` from 1.9.24 to 1.9.25
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `io.qameta.allure:allure-maven` from 2.15.2 to 2.16.1
- [Release notes](https://github.com/allure-framework/allure-maven/releases)
- [Commits](allure-framework/allure-maven@2.15.2...2.16.1)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: io.qameta.allure:allure-bom
  dependency-version: 2.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.smallrye:jandex
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.pdfbox:pdfbox
  dependency-version: 3.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.aspectj:aspectjweaver
  dependency-version: 1.9.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: io.qameta.allure:allure-maven
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-60f84e86fb branch from 40c1dd6 to 429c965 Compare November 5, 2025 19:01
@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 5, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code pom

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant