[12.0.x Root pom] Bump the dev-dependencies group with 9 updates

[dependabot]

Bumps the dev-dependencies group with 9 updates:

Package	From	To
io.netty:netty-bom	4.2.8.Final	4.2.9.Final
org.ow2.asm:asm-bom	9.9	9.9.1
org.ow2.asm:asm	9.9	9.9.1
org.ow2.asm:asm-commons	9.9	9.9.1
org.apache.logging.log4j:log4j-api	2.25.2	2.25.3
org.apache.logging.log4j:log4j-core	2.25.2	2.25.3
org.apache.logging.log4j:log4j-slf4j2-impl	2.25.2	2.25.3
org.mariadb.jdbc:mariadb-java-client	3.5.6	3.5.7
eu.maveniverse.maven.mimir:extension3	0.10.6	0.11.0

Updates io.netty:netty-bom from 4.2.8.Final to 4.2.9.Final

Commits

• a853a39 [maven-release-plugin] prepare release netty-4.2.9.Final
• 6d29a4f Add missing publishing config for the bom module
• ea911de Optimize HTTP startline validation (#16030)
• d7108a3 LocalChannel: Reduce GC by re-using same Runnable (#16014)
• 207afcb Fix MpscIntQueue bug (#16023)
• 27bfd56 Fix HTTP startline validation (#16022)
• 40ab418 [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Updates org.ow2.asm:asm-bom from 9.9 to 9.9.1

Updates org.ow2.asm:asm from 9.9 to 9.9.1

Updates org.ow2.asm:asm-commons from 9.9 to 9.9.1

Updates org.apache.logging.log4j:log4j-api from 2.25.2 to 2.25.3

Updates org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.2 to 2.25.3

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.6 to 3.5.7

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.7

3.5.7 (Dec 2025)

Full Changelog

Key Enhancements

• CONJ-1282 - Added TLS SNI (Server Name Indication) support
• CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

• CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
• CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
• CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
• CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
• CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
• CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+

Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.7 (Dec 2025)

Full Changelog

Key Enhancements

• CONJ-1282 - Added TLS SNI (Server Name Indication) support
• CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

• CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
• CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
• CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
• CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
• CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
• CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+

Commits

• 46c3a4d [CONJ-1296] ResultSetMetaData.getSchemas() column labels might be returned in...
• 6d9179b bump 3.5.7 version
• 5c9b41c [CONJ-1271] Add MariaDbDataTruncation class to properly handle data truncati...
• 1b48cd0 [CONJ-1283] fix INSERT rewrite detection when VALUES clause has trailing pare...
• 6c0fb70 Merge branch 'fork/necposs/fix/conj-1286' into develop
• efd77b1 [CONJ-1290] fix syncNewState to use previous client state when switching betw...
• 0559d02 [CONJ-1291] PooledConnection behavior clarification.
• 995eecd [CONJ-1293] add unit test
• 52e5e20 [misc] micro optimization
• ae3704d [misc] code style correction: fix IPUtility
• Additional commits viewable in compare view

Updates org.ow2.asm:asm from 9.9 to 9.9.1

Updates org.ow2.asm:asm-commons from 9.9 to 9.9.1

Updates org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.2 to 2.25.3

Updates eu.maveniverse.maven.mimir:extension3 from 0.10.6 to 0.11.0

Release notes

Sourced from eu.maveniverse.maven.mimir:extension3's releases.

0.11.0

IMPORTANT: Cache format changes; caches must to be rebuilt.

What's Changed

• Bump eu.maveniverse.maven.plugins:toolbox from 0.14.6 to 0.14.7 by @​dependabot[bot] in maveniverse/mimir#196
• Bump org.immutables:value from 2.11.7 to 2.12.0 by @​dependabot[bot] in maveniverse/mimir#197
• Bump org.jgroups:jgroups from 5.5.1.Final to 5.5.2.Final by @​dependabot[bot] in maveniverse/mimir#199
• Replace msgpack-java with Java standard serialization by @​gnodet in maveniverse/mimir#201
• Testcontainers 2.x by @​cstamas in maveniverse/mimir#204
• Switch to more scalable FS layout by @​cstamas in maveniverse/mimir#205
• FileNode improvements by @​cstamas in maveniverse/mimir#206
• Bump version.testcontainers from 2.0.2 to 2.0.3 by @​dependabot[bot] in maveniverse/mimir#208
• Bump version.mima from 2.4.37 to 2.4.38 by @​dependabot[bot] in maveniverse/mimir#209
• Bump eu.maveniverse.maven.plugins:toolbox from 0.14.7 to 0.14.9 by @​dependabot[bot] in maveniverse/mimir#211
• Update parent pom and workflow by @​cstamas in maveniverse/mimir#212
• Parent POM, MIMA, Maven/Resolver update by @​cstamas in maveniverse/mimir#213
• Parent POM 49 by @​cstamas in maveniverse/mimir#214

New Contributors

• @​gnodet made their first contribution in maveniverse/mimir#201

Full Changelog: maveniverse/mimir@release-0.10.6...release-0.11.0

Commits

• 724c1b2 [maven-release-plugin] prepare release release-0.11.0 [skip ci]
• 934da04 Parent POM 49 (#214)
• 2d7a2cc Parent POM, MIMA, Maven/Resolver update (#213)
• 7ec694c Update parent pom and workflow (#212)
• 916d23f Bump eu.maveniverse.maven.plugins:toolbox from 0.14.7 to 0.14.9 (#211)
• 619a3d4 Bump version.mima from 2.4.37 to 2.4.38 (#209)
• 0bc0fee Bump version.testcontainers from 2.0.2 to 2.0.3 (#208)
• 9c0eea9 FileNode improvements (#206)
• f22a022 Switch to more scalable FS layout (#205)
• ee15442 Testcontainers 2.x (#204)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[olamy]

@dependabot merge

[dependabot]

Beginning January 27, 2026, Dependabot will no longer support the @dependabot merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.