Update all non-major dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.owasp:dependency-check-maven (source)	11.1.0 -> 11.1.1
org.jacoco:jacoco-maven-plugin (source)	0.8.12 -> 0.8.13
org.apache.maven.plugins:maven-clean-plugin	3.4.0 -> 3.4.1
org.apache.maven.plugins:maven-javadoc-plugin	3.11.1 -> 3.11.2
ch.qos.logback:logback-classic (source, changelog)	1.5.12 -> 1.5.18
org.slf4j:slf4j-api (source, changelog)	2.0.16 -> 2.0.17
org.entur:netex-parser-java (source)	3.1.29 -> 3.1.45

---

Release Notes

dependency-check/DependencyCheck (org.owasp:dependency-check-maven)

v11.1.1

Compare Source

• fix: re-enable issue locking (#​7220)
• fix: add username/password properties to be able to authenticate for central.content.url and analyzer.central.url again (#​7169)
• fix: rework replaceOrAddVulnerability (#​7177)
• fix: do not log loading of JDBC driver (#​7155)
• fix: expose flag to disable version check (#​7147)
• fix: Gracefully handle CVEs with bad configuration nodes missing CPE match expressions (#​7125)
• chore: cleanup base suppression (#​7138)
• docs: update gradle configuration documentation (#​7176)
• docs: update documentation for Gradle plugin (#​7143)
• docs: improve false positive issue templat (#​7130)

See the full listing of changes.

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

v0.8.13: 0.8.13

Compare Source

New Features

• JaCoCo now officially supports Java 23 and Java 24 (GitHub #​1757, #​1631, #​1867).
• Experimental support for Java 25 class files (GitHub #​1807).
• Calculation of line coverage for Kotlin inline functions (GitHub #​1670).
• Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #​1670, #​1700).
• Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #​1700).
• Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #​1616).
• Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #​1475).
• Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #​1283).
• Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #​1774).
• Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #​1769).
• Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #​1810, #​1818).
• Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #​1625).
• Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub #​1768).

Fixed bugs

• Fixed interpretation of Kotlin SMAP (GitHub #​1525).
• File extensions are preserved in HTML report in case of clashes of normalized file names (GitHub #​1660).

Non-functional Changes

• JaCoCo build now uses Maven Wrapper and requires at least Maven 3.9.9 (GitHub #​1708, #​1707, #​1681).
• JaCoCo now depends on ASM 9.8 (GitHub #​1862).
• More context information when IllegalArgumentException occurs during reading of zip file (GitHub #​1833).

qos-ch/logback (ch.qos.logback:logback-classic)

v1.5.18

v1.5.17

qos-ch/slf4j (org.slf4j:slf4j-api)

v2.0.17

entur/netex-parser-java (org.entur:netex-parser-java)

v3.1.45

Compare Source

v3.1.44

Compare Source

v3.1.43

Compare Source

v3.1.42

Compare Source

v3.1.41

Compare Source

v3.1.40

Compare Source

v3.1.39

Compare Source

v3.1.38

Compare Source

v3.1.37

Compare Source

v3.1.36

Compare Source

v3.1.35

Compare Source

v3.1.34

Compare Source

v3.1.33

Compare Source

v3.1.32

Compare Source

v3.1.30

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud