chore(deps): bump the other-dependencies group across 1 directory with 17 updates by dependabot[bot] · Pull Request #1313 · Backbase/backbase-openapi-tools

dependabot · 2026-10-28T10:43:58Z

Bumps the other-dependencies group with 17 updates in the / directory:

Package	From	To
com.fasterxml.jackson:jackson-bom	`2.22.3`	`2.22.4`
commons-codec:commons-codec	`1.22.1`	`1.23.0`
org.sonatype.central:central-publishing-maven-plugin	`0.10.0`	`0.12.0`
org.apache.maven.plugins:maven-surefire-plugin	`3.6.0`	`3.6.1`
com.github.jknack:handlebars	`4.5.5`	`4.5.6`
org.apache.maven:maven-embedder	`3.9.16`	`3.10.0`
org.apache.maven:maven-compat	`3.9.16`	`3.10.0`
org.apache.maven:maven-model-builder	`3.9.16`	`3.10.0`
org.apache.maven:maven-compat	`3.9.16`	`3.10.0`
org.apache.maven:maven-model-builder	`3.9.16`	`3.10.0`
org.hibernate.validator:hibernate-validator	`9.1.4.Final`	`9.1.5.Final`
com.squareup.okhttp3:okhttp-jvm	`5.5.0`	`5.5.1`
org.codehaus.plexus:plexus-archiver	`4.14.0`	`4.15.0`
io.github.openfeign:feign-core	`13.15`	`13.17`
io.github.openfeign:feign-jackson	`13.15`	`13.17`
io.github.openfeign:feign-slf4j	`13.15`	`13.17`
io.github.openfeign:feign-okhttp	`13.15`	`13.17`
io.github.openfeign:feign-jackson	`13.15`	`13.17`
io.github.openfeign:feign-slf4j	`13.15`	`13.17`
io.github.openfeign:feign-okhttp	`13.15`	`13.17`
com.squareup.okhttp3:mockwebserver	`5.5.0`	`5.5.1`
com.squareup.okhttp3:okhttp	`5.5.0`	`5.5.1`

Updates com.fasterxml.jackson:jackson-bom from 2.22.3 to 2.22.4

Commits

267bf9a [maven-release-plugin] prepare release jackson-bom-2.22.4
d41cad1 Prep for 2.22.4 release
8fd9ace Merge branch '2.21' into 2.22
e1b27ed Post-release dep version bump
5dfe489 [maven-release-plugin] prepare for next development iteration
b23db92 [maven-release-plugin] prepare release jackson-bom-2.21.8
8937d04 Prep for 2.21.8 release
c44e739 Merge branch '2.20' into 2.21
b86d50e Merge branch '2.19' into 2.20
7756e79 Merge branch '2.18' into 2.19
Additional commits viewable in compare view

Updates commons-codec:commons-codec from 1.22.1 to 1.23.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.23.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.23.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

        Add and use PhoneticEngine.Builder and deprecate old constructors. Thanks to Gary Gregory.

        Add BeiderMorseEncoder.Builder and deprecate old constructor. Thanks to Gary Gregory.

        Add PhoneticEngine.Builder.setMaxInputLength(int). Thanks to Yu Bao, Gary Gregory.

        Add Base45 support. Thanks to Gary Gregory.

        Add URLCodec.decodeUrl(BitSet, byte[]) to decode with a custom safe set. Thanks to Gary Gregory.

Fixed Bugs

        GitIdentifiers orders tree entries by unsigned UTF-8 bytes, as Git does, instead of UTF-16 code units. Thanks to Jeff Lenamon.

        Optimize PhoneticEngine.encode(String, LanguageSet) for speed. Thanks to Yu Bao, Gary Gregory.

        RFC1522Codec.decodeText(String) now throws a DecoderException instead of a StringIndexOutOfBoundsException when a separator is missing. Thanks to Yu Bao, Gary Gregory.

        Optimize Base58.convertFromBase58(byte[], Context) for speed and temporary object allocation. Thanks to Yu Bao, Gary Gregory.

        Allocate a single MessageDigest and use it in Sha2Crypt.sha2Crypt(byte[], String, String, int, String). Thanks to Yu Bao, Gary Gregory.

        Javadoc improvements. Thanks to Gary Gregory.

        Throw IOException instead of IllegalArgumentException in BaseNCodecOutputStream and BaseNCodecOutputStream IO methods. Thanks to Gary Gregory.

        Throw DecoderException instead of IllegalArgumentException in RFC1522Codec.decodeText(String). Thanks to Gary Gregory.

        Fix Blake3 KDF example and clarify finalization semantics. Thanks to Gary Gregory.

        Base32 and Base64 STRICT decoding now require the encoder's canonical alphabet, padding, and line separators, and validate streams through EOF. Use LENIENT to retain permissive decoding. Thanks to Gary Gregory.

        Limit Base58 decoding to 8192 encoded bytes by default, checking cumulative stream input before buffering. Use Base58.Builder.setMaxDecodeLength(int) for larger trusted input. Encoding defaults to a configurable 8192-byte binary input limit through Base58.Builder.setMaxEncodeLength(int). Thanks to Gary Gregory.

        Grow Base58 accumulation buffers geometrically within the configured input limits and validate actual accumulated length. Thanks to Gary Gregory.

        Implement Base58 encoded-length calculation and explicitly reject unsupported line chunking. Thanks to Gary Gregory.

        Close the underlying BaseNCodecOutputStream output even when final conversion or flushing fails, preserving suppressed close exceptions. Thanks to Gary Gregory.

        Reject invalid GitIdentifiers tree entry names and file/directory name conflicts to prevent ambiguous tree serialization and colliding identifiers. Thanks to Gary Gregory.

        Hex decoding now accepts only ASCII hexadecimal characters (0-9, A-F, a-f). Previously accepted non-ASCII Unicode digits and fullwidth letters now cause DecoderException, including when supplied as UTF-8 bytes or ByteBuffers. Thanks to Gary Gregory.

        Restrict Hex decoding to ASCII hexadecimal characters. Thanks to Gary Gregory.

        Validate BinaryCodec input while preserving leading-bit truncation. Thanks to Gary Gregory.

        Reject oversized Beider-Morse input before language guessing. Thanks to Gary Gregory.

        QuotedPrintableCodec decoding now preserves hard CRLF line breaks and, leniently, unpaired CR and LF bytes instead of discarding them. Soft line breaks require the full =CRLF sequence; previously accepted =CR without LF now throws DecoderException. This affects both constructor modes and QCodec, which shares the decoder. Thanks to Gary Gregory.

        Bound Sha2Crypt rounds from caller-supplied salts. Thanks to Gary Gregory.

        Bound Sha2Crypt password length to prevent quadratic CPU DoS. Thanks to Gary Gregory.

        Make the @param names in BaseNCodec match the parameters they document ([#444](https://github.com/apache/commons-codec/issues/444)). Thanks to geonseok, Gary Gregory.

CODEC-345: Restore URLCodec.encodeUrl(BitSet, byte[]) support for custom safe sets containing percent and plus, and document the decoding limitations. Thanks to Ganesh Gautam, Gary Gregory.
CODEC-245: Reject malformed Sha2Crypt salt syntax (#445). Thanks to Efe, Gary Gregory.

... (truncated)

Commits

1147e78 Add github.autolink_jira
129a289 Prepare for the release candidate 1.23.0 RC1
d7bff67 Prepare for the release candidate
89d6498 Update GH CI from Java 26 to 27
5444a15 [test] Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0
6685826 Bump org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0 (#446)
7221073 Parameterize some unit tests
cb9c04d Parameterize some unit tests
6837802 [CODEC-245] Reject malformed Sha2Crypt salt syntax
3e05f66 [CODEC-245] Reject malformed Sha2Crypt salt syntax (#445)
Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.12.0

Release notes

Sourced from org.sonatype.central:central-publishing-maven-plugin's releases.

release-0.12.0

What's Changed

feat: add skipUpload property to build the bundle without uploading it by @madpah in sonatype-nexus-community/central-publishing-maven-plugin#6

fix: remove local repository files from the bundle on Maven 3.10 by @madpah in sonatype-nexus-community/central-publishing-maven-plugin#3

Full Changelog: sonatype-nexus-community/central-publishing-maven-plugin@release-0.11.1...release-0.12.0

0.11.1

This is the same source as for release 0.11.0, but now open-sourced under Apache-2.0 license.

Full Changelog: https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.11.1

Commits

See full diff in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

Group module path heuristics in a single class ModulePathJpmsArguments (#3541) @olamy

Fix out of memory errors with big JUnit 4 suites (#3511) (#3515) @olamy

[SUREFIRE-3459] - Allow opting out of StackWalker stack capture (#3493) @goutamadwant

🐛 Bug Fixes

Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538) @olamy

Fix groups and excludedGroups being ignored when TestNG is on the classpath (#3534) @olamy

Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530) @olamy

Fix groups and excludedGroups for Spock and Jupiter tests when JUnit 4 is on the classpath (#3468) (#3503) (#3517) @olamy

Issue #3462 TestNG extension onStart/onFinish called too many times (#3470) @olamy

Fix forked JVM hanging forever when the exit timeout fires (#3500), Possible NPE if a thread ends while building the thread dump (#3506) @olamy

Stop rewriting the class report for every nested suite (#3511) (#3514) @olamy

Fix IllegalAccessError in the forked JVM on Java 8 and 11 (#3511) (#3513) @olamy

[SUREFIRE-3460] - Don't NPE when StackWalkerStrategy inits with a null TCCL (#3464) @kalayciburak

[SUREFIRE-3465] - Match includes/excludes the way the scanner does (#3466) @orion0616

[Issue-3456] Apply systemPropertyVariables before the fork initializes networking (#3467) @joseluisll

Fix inverted filter predicate in ForkStarter#readTestClassNames (#3453) @slachiewicz

📝 Documentation updates

Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @olamy

Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @olamy

Drop the Source Xref menu items (#3479) @slachiewicz

👻 Maintenance

Use push for PR Automation (#3536) @slawekjaranowski

Use workflow_run for PR check (#3531) @slawekjaranowski

Add project metadata for ATR (#3522) @slawekjaranowski

Add PR check workflow (#3507) @slawekjaranowski

Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @olamy

Fix ITs for Maven 3.10.0 (#3508) @slawekjaranowski

Migrate surefire-its fixture from maven-verifier to maven-executor (#3484) @slachiewicz

Port the IT scripts from BeanShell to Groovy (#3480) @slachiewicz

Drop the Source Xref menu items (#3479) @slachiewicz

Implement getOutputPath() and deprecate getOutputName() (#3469) @slachiewicz

🔧 Build

Drop the Maven 3.9.0 CI job (#3525) @slachiewicz

Fix ForkCountIT failing on Windows with Maven 3.10.0 (#3509) @olamy

fix test due to uneven Maven API migration, Maven 4 build (#3502) @sebtiem

Keep Dependabot off JUnit 6 (#3497) @slachiewicz

Verify the plugin on Maven 3.9.0 (#3478) @slachiewicz

... (truncated)

Commits

5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
ab7ce2f Bump org.testng:testng (#3539)
ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
cc69b3c Use push for PR Automation
b119019 Install the JUnit Platform provider for the ITs (#3535)
2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
1e4f6b9 Use workflow_run for PR check (#3531)
Additional commits viewable in compare view

Updates com.github.jknack:handlebars from 4.5.5 to 4.5.6

Release notes

Sourced from com.github.jknack:handlebars's releases.

handlebars.java 4.5.6

🛠️ Changes

Critical CVE - Please release an update bundling Handlebars.js 4.7.10 (security fixes) #1203

HandleBars 4.5.5: several CVE's on current nashorn-core dependencies #1202

Broken feature: EnumMap lookup #1083

Make jakarta.servlet import optional for consumers not using ServletContextTemplateLoader #1179

fix(lexer): accept identifiers that start with digits #1201

Handle null dynamic keys in lookup helper #1198

Fix join helper for arrays of primitives #1196

Fix: standalone inverse tags ({{^helper args}}) drop params/hash arguments #1189

Preserve Writer failures when a template starts at column zero #1197

🔗 Links & Resources

v4.5.6

Closed Issues

Changelog

Dependency Updates

Commits

9e31bdc build: fix central release
f914efc release: sync serverId
9b284d6 v4.5.6
f3b6d2f source: format source code after spotless upgrade
3044ee4 build: dependencies upgrade on modules
2016dac build: update dependencies
1199a02 - add back startsWith, take care of embedded templates by stripping the !...
30f2158 Merge pull request #1200 from princejain756/fix/spring-loader-classpath-prefix
a3a3976 Merge pull request #1198 from curforever/fix/lookup-null-key
f4101d0 Merge pull request #1201 from princejain756/fix/digit-leading-identifiers
Additional commits viewable in compare view

Updates org.apache.maven:maven-embedder from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-compat from 3.9.16 to 3.10.0

Release notes

Sourced from org.apache.maven:maven-compat's releases.

3.10.0

🚀 New features and improvements

Maven 3.10.x should use Maven 3.1 validation in strict mode (#1542) @gnodet

Do not depend on maven-resolver-supplier-mvn3 (#13266) @cstamas

[MNG-6797] - Remember if Maven model problems were encountered. (#298) @wilx

feat: add relativePath validation (#12742) @cstamas

Add validation for Plexus-based plugin dependency injection (#12651) @slawekjaranowski

Introduce validation control (#12549) @cstamas

Update to Resolver 2.0.21 (#12504) @cstamas

[MNG-5913] - Allow defining aliases for existing server configurations in settings.xml (#12475) @slawekjaranowski

🐛 Bug Fixes

Issue #13265: let a settings server declare the repository origins its credentials may be used with (#13275) @slawekjaranowski

Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them (#13263) @gnodet

[MNG-8174] - Fix NPE when a property references itself in a plugin configuration (backport #12932) (#12936) @elharo

Fix #13200: publish a complete set from MavenProject.getArtifacts (#13204) @gnodet

Fixes #13135: ensure completeness of the reactor summary, privilege f… (#13173) @rmannibucau

[3.10.x] Fix #13084: sandbox profile activation context for external model builds (#13114) @gnodet

Fix #13100: honor repositories from legitimately-active external model profiles (#13116) @gnodet

Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) (#13115) @gnodet

Scope server credentials and validate legacy relocation coordinates (#12954) @slachiewicz

Honour configured policy and validate inputs on the legacy compat paths (#12978) @gnodet

Add unit test for #12600 null-guard in forked executions (#12923) @gnodet

Fix: make ProjectIndex thread-safe for parallel builds (backport #12832) (#12927) @gnodet

Fail on misconfigured plugin-requested toolchains (#12616) @wilx

Resolve classified POM artifacts from the reactor in Maven 3.x (#12659) @wilx

[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn (#12567) @gnodet

Preserve dependency scope in plugin artifacts - fix #12497 (#12503) @slawekjaranowski

📝 Documentation updates

docs: document plugin.xml V4 vs V3 (#13261) @gnodet

[maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz

improve doc about deprecating plugin descriptor's requirement (#12555) @hboutemy

Drop mention of Plexus XML (#12482) @cstamas

👻 Maintenance

[3.10.x] maintenance: Align use of profiles (#13274) @cstamas

Remove version from rat directory deployment (#13046) @slawekjaranowski

Update NOTICE file in distribution packages (#13044) @slawekjaranowski

Restrict what a repository-resolved model contributes to the build (#12953) @slachiewicz

Validate coordinates and repository precedence during artifact resolution (#12952) @slachiewicz

[MNG-8129] - Clarify relativePath validation comment (#12966) @gnodet

[12811] Keep plexus-cipher at 2.0: POM note (#12879) @slachiewicz

[3.10.x] Use try-with-resources (#12845) @slachiewicz

... (truncated)

Commits

c43a36b [maven-release-plugin] prepare release maven-3.10.0
095eb17 Fix wrong links.
bec033e Use staged Maven Resolver 2.0.24
b39f8a7 deps: Update to Maven Resolver 2.0.24 (#13271)
ae59501 Issue #13265: let a settings server declare the repository origins its creden...
6ab2433 [3.10.x] maintenance: Align use of profiles (#13274)
f68413c Do not depend on maven-resolver-supplier-mvn3 (#13266)
3a0026c [Backport maven-3.10.x] Fix #11397: treat reactor BOM imports as ProjectSorte...
82a0f20 docs: document plugin.xml V4 vs V3 [Backport maven-3.10.x]
0fb1c8b [MNG-6797] Remember if Maven model problems were encountered. (#298)
Additional commits viewable in compare view

Updates org.apache.maven:maven-model-builder from 3.9.16 to 3.10.0

Updates org.apache.maven:maven-compat from 3.9.16 to 3.10.0

Release notes

Sourced from org.apache.maven:maven-compat's releases.

3.10.0

🚀 New features and improvements

Maven 3.10.x should use Maven 3.1 validation in strict mode (#1542) @gnodet

Do not depend on maven-resolver-supplier-mvn3 (#13266) @cstamas

[MNG-6797] - Remember if Maven model problems were encountered. (#298) @wilx

feat: add relativePath validation (#12742) @cstamas

Add validation for Plexus-based plugin dependency injection (#12651) @slawekjaranowski

Introduce validation control (#12549) @cstamas

Update to Resolver 2.0.21 (#12504) @cstamas

[MNG-5913] - Allow defining aliases for existing server configurations in settings.xml (#12475) @slawekjaranowski

🐛 Bug Fixes

Issue #13265: let a settings server declare the repository origins its credentials may be used with (#13275) @slawekjaranowski

Backport #13040: treat reactor BOM imports as ProjectSorter edges so -am includes them (#13263) @gnodet

[MNG-8174] - Fix NPE when a property references itself in a plugin configuration (backport #12932) (#12936) @elharo

Fix #13200: publish a complete set from MavenProject.getArtifacts (#13204) @gnodet

Fixes #13135: ensure completeness of the reactor summary, privilege f… (#13173) @rmannibucau

[3.10.x] Fix #13084: sandbox profile activation context for external model builds (#13114) @gnodet

Fix #13100: honor repositories from legitimately-active external model profiles (#13116) @gnodet

Add support for MAVEN_PROJECTBASEDIR substitution in jvm.config (backport of MNG-8598 to 3.10.x) (#13115) @gnodet

Scope server credentials and validate legacy relocation coordinates (#12954) @slachiewicz

Honour configured policy and validate inputs on the legacy compat paths (#12978) @gnodet

Add unit test for #12600 null-guard in forked executions (#12923) @gnodet

Fix: make ProjectIndex thread-safe for parallel builds (backport #12832) (#12927) @gnodet

Fail on misconfigured plugin-requested toolchains (#12616) @wilx

Resolve classified POM artifacts from the reactor in Maven 3.x (#12659) @wilx

[3.10.x] Convert paths for MSYS2 and jvm.config placeholders in bin/mvn (#12567) @gnodet

Preserve dependency scope in plugin artifacts - fix #12497 (#12503) @slawekjaranowski

📝 Documentation updates

docs: document plugin.xml V4 vs V3 (#13261) @gnodet

[maven-3.10.x] Port the site documentation from APT to Markdown (#12712) @slachiewicz

improve doc about deprecating plugin descriptor's requirement (#12555) @hboutemy

Drop mention of Plexus XML (#12482) @cstamas

👻 Maintenance

[3.10.x] maintenance: Align use of profiles (#13274) @cstamas

Remove version from rat directory deployment (#13046) @slawekjaranowski

Update NOTICE file in distribution packages (#13044) @slawekjaranowski

Restrict what a repository-resolved model contributes to the build (#12953) @slachiewicz

Validate coordinates and repository precedence during artifact resolution (#12952) @slachiewicz

[MNG-8129] - Clarify relativePath validation comment (#12966) @gnodet

[12811] Keep plexus-cipher at 2.0: POM note (#12879) @slachiewicz

[3.10.x] Use try-with-resources (#12845) @slachiewicz

... (truncated)

Commits

c43a36b [maven-release-plugin] prepare release maven-3.10.0
095eb17 Fix wrong links.
bec033e Use staged Maven Resolver 2.0.24
b39f8a7 deps: Update to Maven Resolver 2.0.24 (#13271)
ae59501 Issue #13265: let a settings server declare the repository origins its creden...
6ab2433 [3.10.x] maintenance: Align use of profiles (#13274)
f68413c Do not depend on maven-resolver-supplier-mvn3 (#13266)
3a0026c [Backport maven-3.10.x] Fix #11397: treat reactor BOM imports as ProjectSorte...
82a0f20 docs: document plugin.xml V4 vs V3 [Backport maven-3.10.x]
0fb1c8b [MNG-6797] Remember if Maven model problems were encountered. (#298)
Additional commits viewable in compare view

Updates org.apache.maven:maven-model-builder from 3.9.16 to 3.10.0

Updates org.hibernate.validator:hibernate-validator from 9.1.4.Final to 9.1.5.Final

Release notes

Sourced from org.hibernate.validator:hibernate-validator's releases.

Release 9.1.5.Final

Hibernate Validator 9.1.5.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.5.Final.

You can find the full list of 9.1.5.Final changes here.

What's new

See the website for requirements and compatibilities.

See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

the release page

the Migration Guide

the Getting started

the Reference Guide

the API docs

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.validator:hibernate-validator's changelog.

9.1.5.Final (2026-10-13)

Full changelog

Bug

HV-2256 - addMessageParameter fix

Improvement

HV-2263 - Bump joda-time to 2.14.4

Commits

257c5b8 [Jenkins release job] Preparing release 9.1.5.Final
79140b6 [Jenkins release job] changelog.md updated by release build 9.1.5.Final
3c73c34 [Jenkins release job] README.md updated by release build 9.1.5.Final
188fa51 HV-2256 Add updates to migration guide/what's new doc
f4ddf9e HV-2256 Escape message parameters by default
f0b26b8 [9.1] Bump the build-dependencies group across 1 directory with 4 updates
668c038 Bump joda-time to 2.14.4 HV-2263
3b87bf0 [9.1] Bump org.hibernate.infra:hibernate-asciidoctor-theme
8d8cc71 [9.1] Bump org.asciidoctor:asciidoctorj-pdf
5c8ca50 [Jenkins release job] Preparing next development iteration
See full diff in compare view

Updates com.squareup.okhttp3:okhttp-jvm from 5.5.0 to 5.5.1

Changelog

Sourced from com.squareup.okhttp3:okhttp-jvm's changelog.

Version 5.5.1

2026_10_22

Fix: [Block 8 compromised eMudhra intermediate certificates][Mozilla_eMudhra]. Note that this update is not necessary for Android devices with Google Play Services as Google has issued an [automatic update][Google_eMudhra]. This change protects JVMs and AOSP devices that are exposed to the compromised certificates.

Commits

be5151a Prepare for release 5.5.1.
6db9802 OkHttp 5.5.x: Blocklist 8 certificates for CVE-2026-111943 (#9805)
See full diff in compare view

Updates org.codehaus.plexus:plexus-archiver from 4.14.0 to 4.15.0

Release notes

Sourced from org.codehaus.plexus:plexus-archiver's releases.

4.15.0

🐛 Bug Fixes

Copy the target when DirectoryArchiver cannot create a symbolic link (#509) @slachiewicz

Copy the target when the file system refuses a symbolic link (#507) @slachiewicz

📝 Documentation updates

Port the site index fixes from master (#511) @slachiewicz

👻 Maintenance

Bump version to 4.15.0-SNAPSHOT (#514) @slachiewicz

🔧 Build

Port the CI workflow updates from master (#510) @slachiewicz

📦 Dependency updates

Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 (#504, #513) @dependabot[bot]

Bump com.google.guava:guava from 33.7.1-jre to 33.7.2-jre (#502) @dependabot[bot]

Bump org.codehaus.plexus:plexus-io from 3.7.0 to 3.8.0 (#495) @dependabot[bot]

Bump com.github.luben:zstd-jni from 1.5.7-15 to 1.5.7-16 (#489) @dependabot[bot]

Full changelog

Commits

9271db9 [maven-release-plugin] prepare release plexus-archiver-4.15.0
3567302 Bump release-drafter/release-drafter from 7.9.0 to 7.10.0
4ff8533 Bump version to 4.15.0-SNAPSHOT
cdfdc9f Reflow the component table after dropping the escapes
5bc412f Restore the document metadata dropped when the page was ported
657f055 Drop backslash escapes that Markdown does not need
5124ec7 Allow maintainers to start the build manually
aa201fe Quote the distribution key of the extra matrix entry
8e3ba79 Copy the target when DirectoryArchiver cannot create a symbolic link
a5492de Copy the target when the file system refuses a symbolic link
Additional commits viewable in compare view

Updates io.github.openfeign:feign-core from 13.15 to 13.17

Release notes

Sourced from io.github.openfeign:feign-core's releases.

OpenFeign 13.17

What's Changed

Drop unpublished vertx test modules from feign-bom by @velo in OpenFeign/feign#3601

Add Feign logo to README by @velo in OpenFeign/feign#3602

Add tube shading to the Feign logo by @velo in OpenFeign/feign#3603

Treat a null Request.Body as a...
Description has been truncated

…h 17 updates Bumps the other-dependencies group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.22.3` | `2.22.4` | | [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.1` | `1.23.0` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.10.0` | `0.12.0` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` | | [com.github.jknack:handlebars](https://github.com/jknack/handlebars.java) | `4.5.5` | `4.5.6` | | org.apache.maven:maven-embedder | `3.9.16` | `3.10.0` | | [org.apache.maven:maven-compat](https://github.com/apache/maven) | `3.9.16` | `3.10.0` | | org.apache.maven:maven-model-builder | `3.9.16` | `3.10.0` | | [org.apache.maven:maven-compat](https://github.com/apache/maven) | `3.9.16` | `3.10.0` | | org.apache.maven:maven-model-builder | `3.9.16` | `3.10.0` | | [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator) | `9.1.4.Final` | `9.1.5.Final` | | [com.squareup.okhttp3:okhttp-jvm](https://github.com/lysine-dev/okhttp) | `5.5.0` | `5.5.1` | | [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) | `4.14.0` | `4.15.0` | | [io.github.openfeign:feign-core](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [io.github.openfeign:feign-jackson](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [io.github.openfeign:feign-slf4j](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [io.github.openfeign:feign-okhttp](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [io.github.openfeign:feign-jackson](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [io.github.openfeign:feign-slf4j](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [io.github.openfeign:feign-okhttp](https://github.com/openfeign/feign) | `13.15` | `13.17` | | [com.squareup.okhttp3:mockwebserver](https://github.com/lysine-dev/okhttp) | `5.5.0` | `5.5.1` | | [com.squareup.okhttp3:okhttp](https://github.com/lysine-dev/okhttp) | `5.5.0` | `5.5.1` | Updates `com.fasterxml.jackson:jackson-bom` from 2.22.3 to 2.22.4 - [Commits](FasterXML/jackson-bom@jackson-bom-2.22.3...jackson-bom-2.22.4) Updates `commons-codec:commons-codec` from 1.22.1 to 1.23.0 - [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-codec@rel/commons-codec-1.22.1...rel/commons-codec-1.23.0) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.12.0 - [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases) - [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1) Updates `com.github.jknack:handlebars` from 4.5.5 to 4.5.6 - [Release notes](https://github.com/jknack/handlebars.java/releases) - [Commits](jknack/handlebars.java@v4.5.5...v4.5.6) Updates `org.apache.maven:maven-embedder` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-compat` from 3.9.16 to 3.10.0 - [Release notes](https://github.com/apache/maven/releases) - [Commits](apache/maven@maven-3.9.16...maven-3.10.0) Updates `org.apache.maven:maven-model-builder` from 3.9.16 to 3.10.0 Updates `org.apache.maven:maven-compat` from 3.9.16 to 3.10.0 - [Release notes](https://github.com/apache/maven/releases) - [Commits](apache/maven@maven-3.9.16...maven-3.10.0) Updates `org.apache.maven:maven-model-builder` from 3.9.16 to 3.10.0 Updates `org.hibernate.validator:hibernate-validator` from 9.1.4.Final to 9.1.5.Final - [Release notes](https://github.com/hibernate/hibernate-validator/releases) - [Changelog](https://github.com/hibernate/hibernate-validator/blob/9.1.5.Final/changelog.md) - [Commits](hibernate/hibernate-validator@9.1.4.Final...9.1.5.Final) Updates `com.squareup.okhttp3:okhttp-jvm` from 5.5.0 to 5.5.1 - [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md) - [Commits](lysine-dev/okhttp@parent-5.5.0...parent-5.5.1) Updates `org.codehaus.plexus:plexus-archiver` from 4.14.0 to 4.15.0 - [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases) - [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md) - [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.14.0...plexus-archiver-4.15.0) Updates `io.github.openfeign:feign-core` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `io.github.openfeign:feign-jackson` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `io.github.openfeign:feign-slf4j` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `io.github.openfeign:feign-okhttp` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `io.github.openfeign:feign-jackson` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `io.github.openfeign:feign-slf4j` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `io.github.openfeign:feign-okhttp` from 13.15 to 13.17 - [Release notes](https://github.com/openfeign/feign/releases) - [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md) - [Commits](OpenFeign/feign@13.15...13.17) Updates `com.squareup.okhttp3:mockwebserver` from 5.5.0 to 5.5.1 - [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md) - [Commits](lysine-dev/okhttp@parent-5.5.0...parent-5.5.1) Updates `com.squareup.okhttp3:okhttp` from 5.5.0 to 5.5.1 - [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md) - [Commits](lysine-dev/okhttp@parent-5.5.0...parent-5.5.1) --- updated-dependencies: - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.22.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-dependencies - dependency-name: commons-codec:commons-codec dependency-version: 1.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-dependencies - dependency-name: com.github.jknack:handlebars dependency-version: 4.5.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-dependencies - dependency-name: org.apache.maven:maven-embedder dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.apache.maven:maven-compat dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.apache.maven:maven-model-builder dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.apache.maven:maven-compat dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.apache.maven:maven-model-builder dependency-version: 3.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: org.hibernate.validator:hibernate-validator dependency-version: 9.1.5.Final dependency-type: direct:development update-type: version-update:semver-patch dependency-group: other-dependencies - dependency-name: com.squareup.okhttp3:okhttp-jvm dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-dependencies - dependency-name: org.codehaus.plexus:plexus-archiver dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-core dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-jackson dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-slf4j dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-okhttp dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-jackson dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-slf4j dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: io.github.openfeign:feign-okhttp dependency-version: '13.17' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: other-dependencies - dependency-name: com.squareup.okhttp3:mockwebserver dependency-version: 5.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: other-dependencies - dependency-name: com.squareup.okhttp3:okhttp dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: other-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-29T10:43:15Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 28, 2026

dependabot Bot closed this Oct 29, 2026

dependabot Bot deleted the dependabot/maven/other-dependencies-d56bcb8457 branch October 29, 2026 10:43

Navigation Menu

Repository navigation

chore(deps): bump the other-dependencies group across 1 directory with 17 updates - #1313

chore(deps): bump the other-dependencies group across 1 directory with 17 updates#1313
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/other-dependencies-d56bcb8457

dependabot Bot commented on behalf of github Oct 28, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 29, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Apache Commons Codec 1.23.0 Release Notes

New features

Fixed Bugs

release-0.12.0

What's Changed

0.11.1

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

handlebars.java 4.5.6

🛠️ Changes

🔗 Links & Resources

3.10.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.10.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Release 9.1.5.Final

Hibernate Validator 9.1.5.Final released

What's new

Conclusion

9.1.5.Final (2026-10-13)

Bug

Improvement

Version 5.5.1

4.15.0

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

OpenFeign 13.17

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Oct 29, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 28, 2026 •

edited

Loading