Bump the minor-updates group across 1 directory with 9 updates by dependabot[bot] · Pull Request #8 · FAIRDataTeam/rdf-resource-resolver

dependabot · 2026-06-23T11:24:07Z

Bumps the minor-updates group with 9 updates in the / directory:

Package	From	To
org.codehaus.groovy:groovy	`3.0.8`	`3.0.25`
org.spockframework:spock-core	`2.0-groovy-3.0`	`2.4-groovy-3.0`
com.github.spotbugs:spotbugs-annotations	`4.2.3`	`4.10.2`
org.apache.maven.plugins:maven-surefire-plugin	`3.0.0-M5`	`3.6.0-M1`
org.codehaus.mojo:flatten-maven-plugin	`1.6.0`	`1.7.3`
org.sonatype.central:central-publishing-maven-plugin	`0.6.0`	`0.11.0`
org.apache.maven.plugins:maven-gpg-plugin	`3.2.7`	`3.2.8`
org.apache.maven.plugins:maven-source-plugin	`3.3.1`	`3.4.0`
org.apache.maven.plugins:maven-javadoc-plugin	`3.10.1`	`3.12.0`

Updates org.codehaus.groovy:groovy from 3.0.8 to 3.0.25

Commits

See full diff in compare view

Updates org.spockframework:spock-core from 2.0-groovy-3.0 to 2.4-groovy-3.0

Release notes

Sourced from org.spockframework:spock-core's releases.

Spock 2.4

https://spockframework.org/spock/docs/2.4/release_notes.html

Spock 2.4-M7

https://spockframework.org/spock/docs/2.4-M7/index.html

Spock 2.4-M6

https://spockframework.org/spock/docs/2.4-M6/index.html

Spock 2.4-M5

https://spockframework.org/spock/docs/2.4-M5/index.html

Spock 2.4-M4

https://spockframework.org/spock/docs/2.4-M4/index.html

Spock 2.4-M3

https://spockframework.org/spock/docs/2.4-M3/index.html

Spock 2.4-M2

https://spockframework.org/spock/docs/2.4-M2/release_notes.html

Spock 2.4-M1

https://spockframework.org/spock/docs/2.4-M1/release_notes.html

Spock 2.3

https://spockframework.org/spock/docs/2.3/release_notes.html

Spock 2.2

https://spockframework.org/spock/docs/2.2/release_notes.html

Spock 2.2-M3

https://spockframework.org/spock/docs/2.2-M3/release_notes.html

Spock 2.2-M2

https://spockframework.org/spock/docs/2.2-M2/release_notes.html

Spock 2.2-M1

https://spockframework.org/spock/docs/2.2-M1/release_notes.html

Spock 2.1

https://spockframework.org/spock/docs/2.1/release_notes.html

Spock 2.1-M2

https://spockframework.org/spock/docs/2.1-M2/release_notes.html

Spock 2.1-M1

https://spockframework.org/spock/docs/2.1-M1/release_notes.html

Commits

See full diff in compare view

Updates com.github.spotbugs:spotbugs-annotations from 4.2.3 to 4.10.2

Release notes

Sourced from com.github.spotbugs:spotbugs-annotations's releases.

4.10.2

SpotBugs 4.10.2

CHANGELOG

Build

Add release protection to ensure version released matches the tag and that snapshot has been removed. (#4156)

Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#4159)

Add binary check to the gradle build to ensure compatibility remains. (#4159)

CHECKSUM

file checksum (sha256)

spotbugs-4.10.2-javadoc.jar 97bf36f386f75cecacbb7663700266d65176f8544c6f62bc7f21e0ecfb868444

spotbugs-4.10.2-sources.jar 76476f61ce6dc0eb0c38801e21da44e77043ba21226aef6c1b9d21df06d2395a

spotbugs-4.10.2.tgz 63d7687c35fba12cbc8e55ec2a889a2bbf1b9be299dea91f2b0d351dc285308a

spotbugs-4.10.2.zip d5c9ad825cd015fc943802f5c96d89c515fd9a6f7fbbd9ddc7d0aa24b13664df

spotbugs-annotations-4.10.2-javadoc.jar a948f311281429a3060e4870d5a60e8508372113ce678c7e1e04b58ba07a2ec2

spotbugs-annotations-4.10.2-sources.jar 87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd

spotbugs-annotations.jar 5335e5107c74cdd62ef96a7908066c51abb3de63b1ebf99dc953c2c7d0747678

spotbugs-ant-4.10.2-javadoc.jar 6e016db4c2929c0319c9f973ec1c76724d9ba17d26cd7b87136a8dbf0731cecb

spotbugs-ant-4.10.2-sources.jar 91477d93b1fd1bebae35d318427b5238fb458e726478dc1a8ac41ce74838a1e6

spotbugs-ant.jar 22f2fa397e86663adcd4828cc1c91e63aa6cc2bfc56832885b749a86fac5c784

spotbugs.jar 46f5c9524c08d027cf96cda2704e5d8ded633626b94a19dc9ced3ae67595d80b

test-harness-4.10.2-javadoc.jar ec93ddaa099a27c8fdb0522d8c0b24a3d696e10aaf7d71a5d8426a643c00f1b2

test-harness-4.10.2-sources.jar 805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7

test-harness-4.10.2.jar bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f

test-harness-core-4.10.2-javadoc.jar a9782f2a1ecb26d561b4601c46f2dbcfbe4045d587c6ce545ae830cd61399118

test-harness-core-4.10.2-sources.jar 043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532

test-harness-core-4.10.2.jar 1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0

test-harness-jupiter-4.10.2-javadoc.jar eb18358668b3f2099ddcfe21e817210d34ee969eb7fecc6f697c6eecca803846

test-harness-jupiter-4.10.2-sources.jar 17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced

test-harness-jupiter-4.10.2.jar a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb

4.10.1

SpotBugs 4.10.1

Note

SpotBugs 4.10.0 was superseded by 4.10.1 due to a release issue. Users should use 4.10.1. See the discussion below for additional details:

spotbugs/spotbugs#4155

CHANGELOG

Build

4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.

CHECKSUM

file checksum (sha256)

spotbugs-4.10.1-javadoc.jar 582dc49e95b080333b1025dc23e76630e5f6f1648b2f9fa71ee34918f6d9dd2c

... (truncated)

Changelog

Sourced from com.github.spotbugs:spotbugs-annotations's changelog.

4.10.2 - 2026-06-09

Build

Add release protection to ensure version released matches the tag and that snapshot has been removed. (#4156)

Drop binary incompatible Saxon-HE back to 12.9 to keep java 11 compatibility. (#4159)

Add binary check to the gradle build to ensure compatibility remains. (#4159)

4.10.1 - 2026-06-08

Build

4.10.0 was not released due to a release process error (artifacts were built from a -SNAPSHOT version). 4.10.1 is the corrected release and contains the intended 4.10.0 contents.

4.10.0 - 2026-06-07

Refactor

Move internal usage of 'javax.annotation.Nonnull' to 'jakarta.annotation.NonNull'. (#3858)

Move internal usage of 'javax.annotation.Nullable' to 'jakarta.annotation.Nullable'. (#3861)

Renamed methods from edu.umd.cs.findbugs.SwitchHandler to reflect that they return a PC, not an offset (#3869)

Make the progress bar more visually appealing by adding some borders (#3896)

Reuse DismantleBytecode.isIf introduced in (#3869)

Added

Add partial support for org.jspecify.annotations.Nullable, org.jspecify.annotations.NonNull, org.jspecify.annotations.NullUnmarked and org.jspecify.annotations.NullMarked annotations. These are aliased to the closest existing SpotBugs nullness annotations. This is not a complete implementation of the JSpecify spec; scope-level semantics of @NullMarked and @NullUnmarked are not yet supported. (#3996)

Recognize jakarta.annotation.Nonnull and jakarta.annotation.Nullable (#3780)

Detect use of sun.misc.Unsafe and jdk.internal.misc.Unsafe (#3804)

New bug type is introduced: NCR_NOT_PROPERLY_CHECKED_READ. Improper validation of the return value from the read() method in InputStream and Reader classes may result in an array not being fully filled. (#3766)

New detector FindImproperSynchronization and introduced new bug types:

USO_UNSAFE_METHOD_SYNCHRONIZATION is reported when using synchronized methods with the class' accessible intrinsic lock,

USO_UNSAFE_STATIC_METHOD_SYNCHRONIZATION is reported when using static synchronized methods with the class' exposed intrinsic lock,

USO_UNSAFE_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is visible from the outside,

USO_UNSAFE_ACCESSIBLE_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is made accessible, with methods that update or return the lock, to the outside,

USO_UNSAFE_INHERITABLE_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is can be altered by subclasses,

USO_UNSAFE_EXPOSED_OBJECT_SYNCHRONIZATION is reported when the lock used for synchronization is later exposed in the subclasses.

USBC_UNSAFE_SYNCHRONIZATION_WITH_BACKING_COLLECTION is reported when the backing collection of a lock is visible from the outside,

USBC_UNSAFE_SYNCHRONIZATION_WITH_ACCESSIBLE_BACKING_COLLECTION is reported when the backing collection of a lock is made accessible, with methods that update or return the lock, to the outside,

USBC_UNSAFE_SYNCHRONIZATION_WITH_INHERITABLE_BACKING_COLLECTION is reported when the backing collection of a lock can be altered by subclasses. (See SEI CERT rule LCK00-J and SEI CERT rule LCK04-J)

New detector FindIncreasedAccessibilityOfMethods for new bug type IAOM_DO_NOT_INCREASE_METHOD_ACCESSIBILITY. This detector reports a bug if a class increases the accessibility of overridden or hidden methods. (See SEI CERT rule MET04-J)

Fixed

Fix DM_STRING_TOSTRING false negative when toString() is chained before a method call (e.g., s.toString().toLowerCase()); multiple occurrences in the same method are now all reported (#3966)

Stop exposing JUnit BOM as a transitive dependency to consumers (#3908)

Fix incorrect bug counts and sizes when unioning reports (#3721)

Classes containing only methods throwing UnsupportedOperationException with setter-like names are no longer considered as mutable (#1601)

Enhanced SARIF output with full description sections - adding markdown is still an open issue (#2339)

Added missing null check to MultipleInstantiationsOfSingletons detector (#3823)

Fix invalid syntax in findbugsfilter.xsd (#3832)

Fix CT_CONSTRUCTOR_THROW FP with public and private constructors (#3822)

Fix tool name in usage info, (#3847)

Fix the building of relative chains of ./././ in filenames in fbp files (#3852)

Fix IllegalArgumentException initializing spotbugs when inside a fat jar on Java 25 (#3875)

Do not report DM_DEFAULT_ENCODING for classes compiled with target >= 18 (#3866)

Fix FS_BAD_DATE_FORMAT_FLAG_COMBO not suppressed by field-level annotation (#3838)

... (truncated)

Commits

9efccc9 release v4.10.2
205d91b Check binary compatibility (#4159)
a177422 Update spring core to v7.0.8 (#4158)
2d6857f update sonatype link in RELEASE_PROCEDURE.md (#4157)
32d4fb9 chore(build): Add verification on tag release that version matches the tag (#...
6657922 prepare for next release
7460889 release v4.10.1
f6c4597 prepare for next release
6e64d99 release v4.10.0
73a6f59 feat: add partial JSpecify annotations support (from PR #3142) (#3996)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.0.0-M5 to 3.6.0-M1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0-M1

🚀 New features and improvements

Use junit platform runner to run junit 3, junit 4 and TestNG tests via vintage engine and testng engine (#3179) @olamy

Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) @kevinnammour

🐛 Bug Fixes

[Issue-3315] Restore console output fallback report name (#3360) @officialasishkumar

Avoid producing a trailing colon in java.class.path. (#3365) @cpovirk

[Issue-3226] JUnit5Xml30StatelessReporter does not change class name in report (#3347) @nils-christian

Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (#3353) @olamy

Fix empty and missing testcase entries for JUnit 5 @BeforeAll/@AfterAll failures (#3329) @MilanTyagi2004

Ensure that the statistics filename is calculated only once. (#3326) @c00ler

[SUREFIRE-2049] - Fix SHUTDOWN type lost during command serialization. (#3270) @aghoussaini

Add null guard before setting context map in Pumper thread (#3269) @daniel-mohedano

📝 Documentation updates

Update documentation we support Junit 6 as well :) (#3370) @olamy

[Issue-3309] Clarify forkNode default communication docs (#3361) @officialasishkumar

Use Maven site plugin 3.22.0 and setup mermaid diagrams (#3358) @olamy

Fix documentation due to code simplification with providers (#3332) @olamy

Update architecture docs for unified test provider (#3313) @sebtiem

Add flakes attribute to use in testsuite report (#3306) @pzygielo

👻 Maintenance

Upgrade Maven version and resolver version (#3325) @olamy

Use parallel tests with Junit5 feature (#3316) @olamy

Execute ITs in embedded mode by default (#3323) @slawekjaranowski

Use surefire 3.5.5 by project itself for testing (#3322) @slawekjaranowski

Remove redundant ITs and resource cleanups (#3319) @slawekjaranowski

Fix jenkins build (#3314) @slawekjaranowski

Upgrade tests to use Junit5 (#3312) @olamy

Follow Oracle javadoc guidelines (#3177) @elharo

📦 Dependency updates

Bump org.junit:junit-bom from 5.14.1 to 5.14.4 (#3357) @dependabot[bot]

Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#3351) @dependabot[bot]

Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 in /surefire-its/src/test/resources/surefire-1659-stream-corruption (#3343) @dependabot[bot]

Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#3335) @dependabot[bot]

Bump doxiaVersion from 2.0.0 to 2.1.0 (#3330) @dependabot[bot]

Bump Mockito to 4.11.0 (#3320) @slawekjaranowski

3.5.6

🚀 New features and improvements

... (truncated)

Commits

e107a93 [maven-release-plugin] prepare release surefire-3.6.0-M1
7281f6b Use version 3.6.0-M1-SNAPSHOT
d60b78a restore feature to be able to override arguments from command line execution
47b7450 [Issue-3309] Clarify forkNode default communication docs (#3361)
161229b [Issue-3315] Restore console output fallback report name (#3360)
478c7e6 Avoid producing a trailing colon in java.class.path. (#3365)
39bb6f2 Use embeded mermaid and fix a typo (#3362)
fbff927 [Issue-3226] JUnit5Xml30StatelessReporter does not change class name in repor...
3c175c8 Use Maven site plugin 3.22.0 and setup mermaid diagrams (#3358)
762a791 Bump org.junit:junit-bom from 5.14.1 to 5.14.4 (#3357)
Additional commits viewable in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.6.0 to 1.7.3

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.7.3

🐛 Bug Fixes

Fixes condition-activated profiles not considered in effective model (#481) @oldhen

📦 Dependency updates

Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#482) @dependabot[bot]

Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#480) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#479) @dependabot[bot]

1.7.2

🐛 Bug Fixes

Create missing target directories, use NIO for file block operations (#471) @slawekjaranowski

📝 Documentation updates

Clarify example in usage about updatePomFile behavior (#477) @slawekjaranowski

👻 Maintenance

Add stale GitHub Action (#476) @slawekjaranowski

Add Maven 4 to build matrix on GitHub Actions (#474) @slawekjaranowski

Improve assertions in no-overwrite tests (#475) @slawekjaranowski

Add a missing plugin version in ITS (#473) @slawekjaranowski

Add integration test for install and deploy flattened pom (#472) @slawekjaranowski

📦 Dependency updates

Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#470) @dependabot[bot]

Bump mavenVersion from 3.9.10 to 3.9.11 (#467) @dependabot[bot]

Bump com.fasterxml.jackson.core:jackson-core from 2.3.3 to 2.15.0 in /src/it/projects/bom-flattenMode/bom (#464) @dependabot[bot]

Bump com.fasterxml.jackson.core:jackson-core from 2.13.0 to 2.15.0 in /src/it/projects/bom-pomElements/bom (#463) @dependabot[bot]

1.7.1

🐛 Bug Fixes

Fix #400 - Preserve POM content ordering (and formatting) on resolveCiFriendliesOnly flattenMode (#446) @stechio

Fix FilteringValueSourceWrapper for a newer version of plexus-interpolation, Maven 3.9.10 (#453) @slawekjaranowski

📝 Documentation updates

Use resolveCiFriendliesOnly in examples instead of minimum for flattenMode (#460) @slawekjaranowski

Remove a dead link to MOJO-2030 from documentation (#459) @slawekjaranowski

Rename 'Goals' to 'Plugin Documentation' in site manu (#456) @slawekjaranowski

... (truncated)

Commits

bd7c560 [maven-release-plugin] prepare release 1.7.3
aee23ca Bump org.assertj:assertj-core from 3.27.4 to 3.27.5
7da52c3 Fixes condition-activated profiles not considered in effective model (#481)
7680ed4 Bump org.codehaus.mojo:mojo-parent from 92 to 93
deae474 Bump org.assertj:assertj-core from 3.27.3 to 3.27.4
3189718 [maven-release-plugin] prepare for next development iteration
9d80041 [maven-release-plugin] prepare release 1.7.2
6c62863 Clarify example in usage about updatePomFile behavior
fc35f4c Add stale GitHub Action
0fb1ea0 Add Maven 4 to build matrix on GitHub Actions (#474)
Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.6.0 to 0.11.0

Commits

See full diff in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

Make empty classifier null (not empty string) (#287) @cstamas

📝 Documentation updates

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#129) @Bukama

Describe how to prime a specific GPG key (#128) @kwin

👻 Maintenance

Enable GitHub issues (#134) @Bukama

Prefer Guice constructor injection (#126) @elharo

📦 Dependency updates

Update parent POM to 45 (#284) @cstamas

Bump bouncycastleVersion from 1.78.1 to 1.80 (#127) @dependabot[bot]

Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125) @dependabot[bot]

Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1 (#131) @dependabot[bot]

Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#124) @dependabot[bot]

Commits

8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
7012821 Fix issueManagement, ciManagement system and url
a9a8c84 Make empty classifier null (not empty string) (#287)
a8368b0 Add .mvn
f0e45e0 Update parent POM to 45 (#284)
cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
a6a412d Remove old JIRA issue link
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-source-plugin's releases.

3.4.0

🐛 Bug Fixes

[MSOURCES-140] - fail only if re-attach different files (#24) @hboutemy

👻 Maintenance

Bump m-invoker-p to 3.9.1 (#251) @slachiewicz

Allow to manually execute release drafter (#58) @slawekjaranowski

GH Issues (Maven 3 branch) (#57) @Bukama

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#49) @Bukama

📦 Dependency updates

Use plexus-utils version from parent (#252) @slachiewicz

Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#247) @dependabot[bot]

Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4 (#248) @dependabot[bot]

Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5 (#241) @dependabot[bot]

Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3 (#242) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (#246) @dependabot[bot]

Bump mavenVersion from 3.2.5 to 3.9.11 (#221) @dependabot[bot]

Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#233) @dependabot[bot]

Bump org.apache.maven:maven-archiver from 3.6.3 to 3.6.4 (#229) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 41 to 45 (#218) @dependabot[bot]

Bump org.codehaus.plexus:plexus-utils from 3.5.1 to 3.6.0 (#226) @dependabot[bot]

Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#222) @dependabot[bot]

Bump commons-io:commons-io from 2.16.1 to 2.19.0 (#68) @dependabot[bot]

Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#63) @dependabot[bot]

Bump org.apache.maven:maven-archiver from 3.6.2 to 3.6.3 (#66) @dependabot[bot]

Bump commons-io:commons-io from 2.16.0 to 2.16.1 (#27) @dependabot[bot]

[MSOURCES-147] - Bump org.codehaus.plexus:plexus-archiver from 4.9.1 to 4.9.2 (#23) @dependabot[bot]

[MSOURCES-146] - Bump commons-io:commons-io from 2.11.0 to 2.16.0 (#25) @dependabot[bot]

[MSOURCES-145] - Bump org.apache.maven:maven-archiver from 3.6.1 to 3.6.2 (#26) @dependabot[bot]

Commits

ecf937a [maven-release-plugin] prepare release maven-source-plugin-3.4.0
95b3bf4 Revert "[maven-release-plugin] prepare for next development iteration"
7a9a770 [maven-release-plugin] prepare for next development iteration
292c1ce Use plexus-utils version from parent
bf79b71 Bump m-invoker-p to 3.9.1
4f3fcb9 Bump commons-io:commons-io from 2.20.0 to 2.21.0
a867442 Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
51c66ac Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5
267df46 Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3
ef85324 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.10.1 to 3.12.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.12.0

💥 Breaking changes

remove fix mojo (#1263) @elharo

detectOfflineLinks is now false per default for all jar mojo issue #1258 (#1259) @olamy

🐛 Bug Fixes

Fix legacyMode (#1265) @fridrich

Fix package {...} does not exist in legacyMode (#1243) @JackPGreen

Ensure UTF-8 charset is used to avoid IllegalArgumentException: Null charset name (#1245) @elharo

Remove Javadoc 1.4+ / -1.1 switch related warning (#1240) @perceptron8

👻 Maintenance

protect 3.8.x branch (#1238) @hboutemy

feat: enable prevent branch protection rules (#1228) @sparsick

📦 Dependency updates

Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0 (#1257) @dependabot[bot]

3.11.3

🚨 Removed

Remove workaround for long patched CVE in javadoc (#388) @elharo

🚀 New features and improvements

Issue #369 Support --no-fonts option per default for jdk 23+ (#375) @olamy

🐛 Bug Fixes

Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use --source-path in legacy mode) (#1217) @fridrich

[MJAVADOC-826] - Don't try to modify project source roots (#358) @oehme

📝 Documentation updates

Correct javadoc-no-fork description on index-page (#368) @Bukama

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#360) @Bukama

(doc) Close links tag in links parameter javadoc example (#355) @sixcorners

👻 Maintenance

Be consistent about data encoding when copying files (#1215) @fridrich

Clean up JavadocUtilTest (#1210) @elharo

Use Java 7 relativization instead of hand-rolled code (#385) @elharo

Rephrase source code fix interactive messages for clarity (#390) @elharo

... (truncated)

Commits

2a06bed [maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0
a71ecf9 bump version 3.12.0-SNAPSHOT
88f2b71 [maven-release-plugin] prepare for next development iteration
7e18956 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4
c11b76c In legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...
bc9904b remove fix mojo (#1263)
f310135 Fix package {...} does not exist in legacyMode (#1243)
c8270f9 detectOfflineLinks is now false per default for all jar mojo issue #1258 ...
953e609 Delete flaky test (#1260)
2bba7a4 Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
Additional commits viewable in compare view

Bumps the minor-updates group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.codehaus.groovy:groovy](https://github.com/apache/groovy) | `3.0.8` | `3.0.25` | | [org.spockframework:spock-core](https://github.com/spockframework/spock) | `2.0-groovy-3.0` | `2.4-groovy-3.0` | | [com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs) | `4.2.3` | `4.10.2` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.6.0-M1` | | [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.6.0` | `1.7.3` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.6.0` | `0.11.0` | | [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.7` | `3.2.8` | | [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` | | [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.10.1` | `3.12.0` | Updates `org.codehaus.groovy:groovy` from 3.0.8 to 3.0.25 - [Commits](https://github.com/apache/groovy/commits) Updates `org.spockframework:spock-core` from 2.0-groovy-3.0 to 2.4-groovy-3.0 - [Release notes](https://github.com/spockframework/spock/releases) - [Changelog](https://github.com/spockframework/spock/blob/master/docs/release_notes.adoc) - [Commits](https://github.com/spockframework/spock/commits) Updates `com.github.spotbugs:spotbugs-annotations` from 4.2.3 to 4.10.2 - [Release notes](https://github.com/spotbugs/spotbugs/releases) - [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md) - [Commits](spotbugs/spotbugs@4.2.3...4.10.2) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.6.0-M1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.0.0-M5...surefire-3.6.0-M1) Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.6.0 to 1.7.3 - [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases) - [Commits](mojohaus/flatten-maven-plugin@1.6.0...1.7.3) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.6.0 to 0.11.0 - [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits) Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.7 to 3.2.8 - [Release notes](https://github.com/apache/maven-gpg-plugin/releases) - [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.7...maven-gpg-plugin-3.2.8) Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0 - [Release notes](https://github.com/apache/maven-source-plugin/releases) - [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0) Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.10.1 to 3.12.0 - [Release notes](https://github.com/apache/maven-javadoc-plugin/releases) - [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.10.1...maven-javadoc-plugin-3.12.0) --- updated-dependencies: - dependency-name: com.github.spotbugs:spotbugs-annotations dependency-version: 4.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: org.apache.maven.plugins:maven-gpg-plugin dependency-version: 3.2.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: org.apache.maven.plugins:maven-javadoc-plugin dependency-version: 3.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: org.apache.maven.plugins:maven-source-plugin dependency-version: 3.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0-M1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: org.codehaus.groovy:groovy dependency-version: 3.0.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-updates - dependency-name: org.codehaus.mojo:flatten-maven-plugin dependency-version: 1.7.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: org.spockframework:spock-core dependency-version: 2.4-groovy-3.0 dependency-type: direct:development dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the maintenance related to maintenance label Jun 23, 2026

dependabot Bot changed the title ~~Bump the minor-updates group with 9 updates~~ Bump the minor-updates group across 1 directory with 9 updates Jun 23, 2026

dependabot Bot force-pushed the dependabot/maven/master/minor-updates-da3e65f563 branch from 5e21bf6 to 9f920fe Compare June 23, 2026 11:27

dennisvang merged commit f3076cc into master Jun 23, 2026
5 checks passed

dependabot Bot deleted the dependabot/maven/master/minor-updates-da3e65f563 branch June 23, 2026 11:30

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the minor-updates group across 1 directory with 9 updates#8

Bump the minor-updates group across 1 directory with 9 updates#8
dennisvang merged 1 commit into
masterfrom
dependabot/maven/master/minor-updates-da3e65f563

dependabot Bot commented on behalf of github Jun 23, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

file	checksum (sha256)
spotbugs-4.10.2-javadoc.jar	97bf36f386f75cecacbb7663700266d65176f8544c6f62bc7f21e0ecfb868444
spotbugs-4.10.2-sources.jar	76476f61ce6dc0eb0c38801e21da44e77043ba21226aef6c1b9d21df06d2395a
spotbugs-4.10.2.tgz	63d7687c35fba12cbc8e55ec2a889a2bbf1b9be299dea91f2b0d351dc285308a
spotbugs-4.10.2.zip	d5c9ad825cd015fc943802f5c96d89c515fd9a6f7fbbd9ddc7d0aa24b13664df
spotbugs-annotations-4.10.2-javadoc.jar	a948f311281429a3060e4870d5a60e8508372113ce678c7e1e04b58ba07a2ec2
spotbugs-annotations-4.10.2-sources.jar	87974d23caffbc8c6e66c567747627267b5ed06573cee966d7af6d236b8d65bd
spotbugs-annotations.jar	5335e5107c74cdd62ef96a7908066c51abb3de63b1ebf99dc953c2c7d0747678
spotbugs-ant-4.10.2-javadoc.jar	6e016db4c2929c0319c9f973ec1c76724d9ba17d26cd7b87136a8dbf0731cecb
spotbugs-ant-4.10.2-sources.jar	91477d93b1fd1bebae35d318427b5238fb458e726478dc1a8ac41ce74838a1e6
spotbugs-ant.jar	22f2fa397e86663adcd4828cc1c91e63aa6cc2bfc56832885b749a86fac5c784
spotbugs.jar	46f5c9524c08d027cf96cda2704e5d8ded633626b94a19dc9ced3ae67595d80b
test-harness-4.10.2-javadoc.jar	ec93ddaa099a27c8fdb0522d8c0b24a3d696e10aaf7d71a5d8426a643c00f1b2
test-harness-4.10.2-sources.jar	805d2d124b0d4ea513ee9262d4ad6027c3471d45defd80fd7d20e23425d17df7
test-harness-4.10.2.jar	bd10d1f11a1b93e4ca4db4d27772f611bd3407f9452dbbd2d1ba62584ddc171f
test-harness-core-4.10.2-javadoc.jar	a9782f2a1ecb26d561b4601c46f2dbcfbe4045d587c6ce545ae830cd61399118
test-harness-core-4.10.2-sources.jar	043a55d99a517c0d9cf702b0c183b4afd3f03af9eff4a86d59bb37df1b35b532
test-harness-core-4.10.2.jar	1f9a0ee8f150dd71f960ca4f59dcf7912a45d0e9e6aefc4585fd44b975454bc0
test-harness-jupiter-4.10.2-javadoc.jar	eb18358668b3f2099ddcfe21e817210d34ee969eb7fecc6f697c6eecca803846
test-harness-jupiter-4.10.2-sources.jar	17144f315686bfd01c02fa4ae7c916060c41de8eed58d5b8470416fa08f46ced
test-harness-jupiter-4.10.2.jar	a91146da3e993479cfefd2690781cbd102c6360ecc63a96d88995be3bd60fcbb

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Spock 2.4

Spock 2.4-M7

Spock 2.4-M6

Spock 2.4-M5

Spock 2.4-M4

Spock 2.4-M3

Spock 2.4-M2

Spock 2.4-M1

Spock 2.3

Spock 2.2

Spock 2.2-M3

Spock 2.2-M2

Spock 2.2-M1

Spock 2.1

Spock 2.1-M2

Spock 2.1-M1

4.10.2

CHANGELOG

Build

CHECKSUM

4.10.1

CHANGELOG

Build

CHECKSUM

4.10.2 - 2026-06-09

Build

4.10.1 - 2026-06-08

Build

4.10.0 - 2026-06-07

Refactor

Added

Fixed

3.6.0-M1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.5.6

🚀 New features and improvements

1.7.3

🐛 Bug Fixes

📦 Dependency updates

1.7.2

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

1.7.1

🐛 Bug Fixes

📝 Documentation updates

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.4.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.12.0

💥 Breaking changes

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.11.3

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

dependabot Bot commented on behalf of github Jun 23, 2026 •

edited

Loading