chore(deps): bump the maven-dependencies group with 13 updates

[dependabot]

Bumps the maven-dependencies group with 13 updates:

Package	From	To
org.apache.groovy:groovy-all	5.0.6	5.0.7
org.apache.groovy:groovy	5.0.6	5.0.7
net.bytebuddy:byte-buddy	1.18.10	1.18.11
net.bytebuddy:byte-buddy-agent	1.18.10	1.18.11
org.apache.logging.log4j:log4j-slf4j2-impl	2.26.0	2.26.1
org.apache.logging.log4j:log4j-core-test	2.26.0	2.26.1
org.apache.logging.log4j:log4j-api	2.26.0	2.26.1
org.apache.logging.log4j:log4j-core	2.26.0	2.26.1
org.apache.logging.log4j:log4j-jul	2.26.0	2.26.1
org.apache.logging.log4j:log4j-to-slf4j	2.26.0	2.26.1
org.hibernate.orm:hibernate-core	7.4.3.Final	7.4.4.Final
org.codehaus.gmavenplus:gmavenplus-plugin	5.0.0	5.1.0
com.flowlogix.depchain:integration-test	125	127

Updates org.apache.groovy:groovy-all from 5.0.6 to 5.0.7

Commits

• See full diff in compare view

Updates org.apache.groovy:groovy from 5.0.6 to 5.0.7

Commits

• See full diff in compare view

Updates org.apache.groovy:groovy from 5.0.6 to 5.0.7

Commits

• See full diff in compare view

Updates net.bytebuddy:byte-buddy from 1.18.10 to 1.18.11

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

2. July 2026: version 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Commits

• 88dd0a3 [publish] Releasing Byte Buddy 1.18.11
• 46fcade [release] Release new version
• 6a68de6 Prevent path traversal from crafted type names when writing class files to fo...
• 9ba4ab6 Pin ClusterFuzzLite base image and actions by hash.
• dd4f81e Add SBOM to build.
• 7dd9a0d Update internal Byte Buddy and release notes
• d6b3e15 [publish] Start next development iteration 1.18.11-SNAPSHOT
• See full diff in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.10 to 1.18.11

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

2. July 2026: version 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Commits

• 88dd0a3 [publish] Releasing Byte Buddy 1.18.11
• 46fcade [release] Release new version
• 6a68de6 Prevent path traversal from crafted type names when writing class files to fo...
• 9ba4ab6 Pin ClusterFuzzLite base image and actions by hash.
• dd4f81e Add SBOM to build.
• 7dd9a0d Update internal Byte Buddy and release notes
• d6b3e15 [publish] Start next development iteration 1.18.11-SNAPSHOT
• See full diff in compare view

Updates net.bytebuddy:byte-buddy-agent from 1.18.10 to 1.18.11

Release notes

Sourced from net.bytebuddy:byte-buddy-agent's releases.

Byte Buddy 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Changelog

Sourced from net.bytebuddy:byte-buddy-agent's changelog.

2. July 2026: version 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Commits

• 88dd0a3 [publish] Releasing Byte Buddy 1.18.11
• 46fcade [release] Release new version
• 6a68de6 Prevent path traversal from crafted type names when writing class files to fo...
• 9ba4ab6 Pin ClusterFuzzLite base image and actions by hash.
• dd4f81e Add SBOM to build.
• 7dd9a0d Update internal Byte Buddy and release notes
• d6b3e15 [publish] Start next development iteration 1.18.11-SNAPSHOT
• See full diff in compare view

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-core-test from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-api from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-jul from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-core-test from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-api from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-core from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-jul from 2.26.0 to 2.26.1

Updates org.apache.logging.log4j:log4j-to-slf4j from 2.26.0 to 2.26.1

Updates org.hibernate.orm:hibernate-core from 7.4.3.Final to 7.4.4.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.4

Hibernate ORM 7.4.4.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.4.Final.

You can find the full list of 7.4.4.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.4.Final (July 05, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/39929

** Bug * HHH-20647 Binding an NClob attribute fails on PostgreSQL with "Could not convert 'java.sql.NClob' to 'java.sql.Clob'" * HHH-20634 Property based id generator configuration no longer working for EmbeddedId * HHH-20633 Unnecessary cast to SessionFactoryImplementor in AuditLogFactory * HHH-20614 AnnotationBasedGenerator is not initialized when the interface is implemented by an (abstract) superclass instead of the concrete class (after upgrading to hibernate 7.3/7.4) * HHH-20586 GlobalRegistrationsImpl is not extracting query hints correctly * HHH-20582 Envers ToOneRelationMetadataGenerator.checkMappedByAudited fails when inverse @OneToOne mappedBy points to a property declared on a superclass @Entity * HHH-20550 SqmSelectStatement.createCountQuery() doesn't copy CTE statements * HHH-20467 StackOverflow with Converters with unbounded Generics * HHH-20318 Unable to update CLOB column * HHH-20146 Cascade delete with bytecode enhancement throws transient exception * HHH-19569 Hibernate 6 alias injection in native query problem when using Joined Inheritance

** Task * HHH-20642 Handle renaming of Panache Next to Quarkus Data in hibernate-processor and add name SPI

Commits

• 0f115c4 [Jenkins release job] Preparing release 7.4.4.Final
• 3578615 [Jenkins release job] changelog.txt updated by release build 7.4.4.Final
• 0ac8b71 HHH-20647 Handle Clob unwrap/wrap in NClobJavaType
• 1621b05 HHH-20318 Fix CCE in Clob/NClob unwrap CharacterStream branch
• bfd89d8 HHH-20622 locate() with start position returns wrong value when pattern is no...
• e187168 HHH-20467 Resolve type variables to bounds when context is not parameterized
• 057a026 HHH-20146: Fix multi-level cascade delete with bytecode enhancement
• c23d31a HHH-20582 Accommodate PR feedback in tests
• 68a0f61 HHH-20582 Walk superclass auditing data when resolving @​OneToOne mappedBy
• 86c220c HHH-20642 Extract Quarkus Data type names into a ServiceLoader SPI
• Additional commits viewable in compare view

Updates org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0

Release notes

Sourced from org.codehaus.gmavenplus:gmavenplus-plugin's releases.

5.1.0

Bugs

• fix: Use Maven source-root removal APIs (#341)
• Drop warnings about missing dependencies down to debug (#390)

Enhancements

• Add to Java 25 enum LanguageLevel by @​jonesbusy in #346
• feat: Honor compiler release for Groovy bytecode (#387)

Potentially breaking changes

None.

Notes

None.

New Contributors

• @​jonesbusy made their first contribution in #346

Full Changelog

groovy/GMavenPlus@5.0.0...5.1.0

Commits

• 33ac4f5 [maven-release-plugin] prepare release 5.1.0
• fadc578 Merge pull request #391 from groovy/adjust-dependency-logging
• 2180de9 Drop warnings about missing dependencies down to debug (closes #390)
• 3991ff8 Merge pull request #389 from groovy/feat/honor-compiler-release
• 3d29b11 feat: Honor compiler release for Groovy bytecode (closes #387)
• b7bb980 build: Bump version
• 5622987 doc: Update redeploy instructions
• 0951225 doc: Add a skill for updating everything
• e510e45 doc: Add a skill for updating everything
• aec8eb1 doc: Update developer documentation
• Additional commits viewable in compare view

Updates com.flowlogix.depchain:integration-test from 125 to 127

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions