Feature/dependabot update by KofTwentyTwo · Pull Request #241 · QRun-IO/qqq

KofTwentyTwo · 2025-10-01T20:36:08Z

Pull Request

📝 Description

quarterly deps updates

What does this PR do?
quarterly deps updates

Related Issue:
Closes #[240]

🔍 Type of Change

Bug Fix - Fixes an existing issue
New Feature - Adds new functionality
Breaking Change - Fix or feature that would cause existing functionality to not work as expected
Documentation Update - Updates documentation
Refactoring - Code change that neither fixes a bug nor adds a feature
Performance Improvement - Code change that improves performance
Test Addition - Adding missing tests or correcting existing tests

🧪 Testing

How has this been tested?

Unit Tests: All unit tests pass
Integration Tests: Integration tests pass
Coverage: Meets QQQ's coverage requirements (80% instructions, 95% classes)
Manual Testing: Tested manually in development environment

Test Commands:

# Commands used for testing
mvn test
mvn verify

📋 Checklist

Before submitting this PR, please ensure:

Code Style: Follows QQQ's Code Review Standards
Tests: All tests pass with required coverage
Documentation: Updated relevant wiki pages and code comments
Breaking Changes: Documented any breaking changes
Commit Messages: Follow conventional commit format
Self Review: Code has been reviewed by the author
Dependencies added/removed
Updated all noted deps from gha for the last 90 days

Thank you for contributing to QQQ! 🚀

Bumps [com.google.api-client:google-api-client](https://github.com/googleapis/google-api-java-client) from 1.35.2 to 2.8.1. - [Release notes](https://github.com/googleapis/google-api-java-client/releases) - [Changelog](https://github.com/googleapis/google-api-java-client/blob/main/CHANGELOG.md) - [Commits](googleapis/google-api-java-client@v1.35.2...v2.8.1) --- updated-dependencies: - dependency-name: com.google.api-client:google-api-client dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.codehaus.mojo:appassembler-maven-plugin](https://github.com/mojohaus/appassembler) from 1.10 to 2.1.0. - [Release notes](https://github.com/mojohaus/appassembler/releases) - [Commits](mojohaus/appassembler@appassembler-1.10...appassembler-2.1.0) --- updated-dependencies: - dependency-name: org.codehaus.mojo:appassembler-maven-plugin dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.json:json](https://github.com/douglascrockford/JSON-java) from 20231013 to 20250517. - [Release notes](https://github.com/douglascrockford/JSON-java/releases) - [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md) - [Commits](https://github.com/douglascrockford/JSON-java/commits) --- updated-dependencies: - dependency-name: org.json:json dependency-version: '20250517' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v8) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps com.google.apis:google-api-services-drive from v3-rev20220815-2.0.0 to v3-rev20250910-2.0.0. --- updated-dependencies: - dependency-name: com.google.apis:google-api-services-drive dependency-version: v3-rev20250910-2.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) from 1.9.10 to 2.2.20. - [Release notes](https://github.com/JetBrains/kotlin/releases) - [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md) - [Commits](JetBrains/kotlin@v1.9.10...v2.2.20) --- updated-dependencies: - dependency-name: org.jetbrains.kotlin:kotlin-stdlib dependency-version: 2.2.20 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.mockito:mockito-core](https://github.com/mockito/mockito) from 4.8.1 to 5.20.0. - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v4.8.1...v5.20.0) --- updated-dependencies: - dependency-name: org.mockito:mockito-core dependency-version: 5.20.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) from 4.11.1 to 5.6.0. - [Release notes](https://github.com/mongodb/mongo-java-driver/releases) - [Commits](mongodb/mongo-java-driver@r4.11.1...r5.6.0) --- updated-dependencies: - dependency-name: org.mongodb:mongodb-driver-sync dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) from 10.16.0 to 11.1.0. - [Release notes](https://github.com/checkstyle/checkstyle/releases) - [Commits](checkstyle/checkstyle@checkstyle-10.16.0...checkstyle-11.1.0) --- updated-dependencies: - dependency-name: com.puppycrawl.tools:checkstyle dependency-version: 11.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

Bumps [io.github.bonigarcia:webdrivermanager](https://github.com/bonigarcia/webdrivermanager) from 5.6.2 to 6.3.2. - [Release notes](https://github.com/bonigarcia/webdrivermanager/releases) - [Changelog](https://github.com/bonigarcia/webdrivermanager/blob/master/CHANGELOG.md) - [Commits](bonigarcia/webdrivermanager@webdrivermanager-5.6.2...webdrivermanager-6.3.2) --- updated-dependencies: - dependency-name: io.github.bonigarcia:webdrivermanager dependency-version: 6.3.2 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

…lin-stdlib-2.2.20

…kito-core-5.20.0' into feature/dependabot-update

…g.mockito-mockito-core-5.20.0

…godb-driver-sync-5.6.0' into feature/dependabot-update

…tools-checkstyle-11.1.0' into feature/dependabot-update

…arcia-webdrivermanager-6.3.2' into feature/dependabot-update

…-google-api-services-drive-v3-rev20250910-2.0.0' into feature/dependabot-update

…s/github-script-8' into feature/dependabot-update

…0250517' into feature/dependabot-update

…jo-appassembler-maven-plugin-2.1.0' into feature/dependabot-update

…client-google-api-client-2.8.1' into feature/dependabot-update

github-actions · 2025-10-01T21:03:59Z

🔒 Security Scan Complete

Dependency vulnerability scan completed for this PR. View full report

dependabot bot and others added 24 commits August 27, 2025 19:50

Merge branch 'develop' into dependabot/maven/org.jetbrains.kotlin-kot…

2a1fd85

…lin-stdlib-2.2.20

Merge remote-tracking branch 'origin/dependabot/maven/org.mockito-moc…

66f4b8d

…kito-core-5.20.0' into feature/dependabot-update

refactor(qqq-sample-project): removed from project

582f028

fix(qqq-backend-core(pom)): pinned bytebuddy version to match with or…

58e9792

…g.mockito-mockito-core-5.20.0

Merge remote-tracking branch 'origin/dependabot/maven/org.mongodb-mon…

b8f892f

…godb-driver-sync-5.6.0' into feature/dependabot-update

Merge remote-tracking branch 'origin/dependabot/maven/com.puppycrawl.…

5ae3497

…tools-checkstyle-11.1.0' into feature/dependabot-update

Merge remote-tracking branch 'origin/dependabot/maven/io.github.bonig…

34d4166

…arcia-webdrivermanager-6.3.2' into feature/dependabot-update

Merge remote-tracking branch 'origin/dependabot/maven/com.google.apis…

2c68e11

…-google-api-services-drive-v3-rev20250910-2.0.0' into feature/dependabot-update

Merge of dependabot/maven/maven-dependencies-8add961a2e

053dfda

Merge remote-tracking branch 'origin/dependabot/github_actions/action…

f94cf85

…s/github-script-8' into feature/dependabot-update

Merge remote-tracking branch 'origin/dependabot/maven/org.json-json-2…

04e37aa

…0250517' into feature/dependabot-update

Merge remote-tracking branch 'origin/dependabot/maven/org.codehaus.mo…

d6eae84

…jo-appassembler-maven-plugin-2.1.0' into feature/dependabot-update

removed gha ci

e8d6180

Merge remote-tracking branch 'origin/dependabot/maven/com.google.api-…

61cff96

…client-google-api-client-2.8.1' into feature/dependabot-update

KofTwentyTwo requested review from darinkelkhoff and tim-chamberlain October 1, 2025 20:38

KofTwentyTwo added the dependencies Pull requests that update a dependency file label Oct 1, 2025

KofTwentyTwo added this to QQQ Roadmap Oct 1, 2025

KofTwentyTwo linked an issue Oct 1, 2025 that may be closed by this pull request

Quarterly Dependency Updates (Q4 2025) #240

Closed

Merge branch 'develop' into feature/dependabot-update

aa50895

KofTwentyTwo closed this Dec 27, 2025

github-project-automation bot moved this to Done in QQQ Roadmap Dec 27, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Feature/dependabot update#241

Feature/dependabot update#241
KofTwentyTwo wants to merge 25 commits intodevelopfrom
feature/dependabot-update

KofTwentyTwo commented Oct 1, 2025

Uh oh!

github-actions bot commented Oct 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

KofTwentyTwo commented Oct 1, 2025

Pull Request

📝 Description

🔍 Type of Change

🧪 Testing

📋 Checklist

Uh oh!

github-actions bot commented Oct 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant