chore(deps): bump the third-parties group with 3 updates

[dependabot]

Bumps the third-parties group with 3 updates: org.commonmark:commonmark, com.diffplug.spotless:spotless-maven-plugin and com.github.eirslett:frontend-maven-plugin.

Updates org.commonmark:commonmark from 0.25.1 to 0.26.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.26.0

Changed

• A LinkProcessor using replaceWith now also stops outer links from being parsed as links, same as with wrapTextIn. This prevents nested links, see footnotes change below.

Fixed

• Fix rendering of image alt text to include contents of code spans (`code`). (#398)
• footnotes: Fix footnotes nested within links. Before, both the link and the footnote reference would be parsed and lead to nested <a> elements, which is disallowed. Now, only the footnote is parsed and the outer link becomes plain text; this matches the behavior of links. (#400)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.26.0] - 2025-09-13

Changed

• A LinkProcessor using replaceWith now also stops outer links from being parsed as links, same as with wrapTextIn. This prevents nested links, see footnotes change below.

Fixed

• Fix rendering of image alt text to include contents of code spans (`code`). (#398)
• footnotes: Fix footnotes nested within links. Before, both the link and the footnote reference would be parsed and lead to nested <a> elements, which is disallowed. Now, only the footnote is parsed and the outer link becomes plain text; this matches the behavior of links. (#400)

Commits

• 6874637 [maven-release-plugin] prepare release commonmark-parent-0.26.0
• 00f0451 Merge pull request #404 from commonmark/release-0.26.0
• 729ba3f Prepare for version 0.26.0
• 47e21c3 Prepare CHANGELOG for version 0.26.0
• 3459a5d Merge pull request #403 from commonmark/list-item-docs
• c126ad3 Add docs to ListItem and its appendChild about tight lists
• e60be15 Merge pull request #402 from commonmark/footnotes-within-links
• 926013c Disallow link when a footnote is nested inside it
• 4ad81e4 Merge pull request #401 from rdestefa/issue-398-alt-text-code
• 77cadac Update CHANGELOG.md
• Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.46.1 to 3.0.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Lib v3.0.0

Headline changes

• All steps now support roundtrip serialization (end of #987).
• Spotless now supports linting in addition to formatting.

Changed

• Allow setting Eclipse config from a string, not only from files (#2337)
• Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
• Add Sort Members feature based on Eclipse JDT implementation. (#2312)
• Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
• Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
• Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
• Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
• Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

• You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
• The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

Maven Plugin v3.0.0

Changes

• BREAKING Bump the required Java to 17. (#2375, #2540)
• BREAKING Renamed removeWildcardImports to forbidWildcardImports. (#2633)
• BREAKING spotless:install-git-pre-push-hook task is now always installed in the root .git/hooks directory by resolving the top-level project base directory. (#2570)
• Bump JGit from 6.10.1 to 7.3.0 (#2257)
  • Adds support for worktrees (fixes #1765)
• Bump default google-java-format version to latest 1.24.0 -> 1.28.0. (#2345)
• Bump default gson version to latest 2.13.1 -> 2.13.2. (#2615)
• Bump default jackson version to latest 2.19.2 -> 2.20.0. (#2606)
• Bump default ktfmt version to latest 0.53 -> 0.58 (#2613)
  • BREAKING use TrailingCommaManagementStrategy enum instead of manageTrailingCommas boolean configuration option
• Bump default ktlint version to latest 1.5.0 -> 1.7.1. (#2555)
• Bump default palantir-java-format version to latest 2.57.0 -> 2.71.0.

Fixed

• Fix spaceBeforeSeparator in Jackson formatter. (#2103)

Added

• <lintSupressions> API (#2309)
• There is now a forbidRegex(String name, String searchRegex, String lintDetail) which throws a lint anytime the regex matches. (#2633)

Lib v3.0.0.BETA4

Added

• APIs to support linting. (implemented in #2148, #2149, #2307)
  • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
  • Lint models a single change. A FormatterStep can create a lint by:
    • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
    • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
• Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changes

• BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
  • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.

Fixed

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

[3.0.0] - 2025-01-06

Headline changes

• All steps now support roundtrip serialization (end of #987).
• Spotless now supports linting in addition to formatting.

Changed

• Allow setting Eclipse config from a string, not only from files (#2337)
• Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
• Add Sort Members feature based on Eclipse JDT implementation. (#2312)
• Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
• Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
• Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
• Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
• Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

• You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
• The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

[3.0.0.BETA4] - 2024-10-24

Added

• APIs to support linting. (implemented in #2148, #2149, #2307)
  • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
  • Lint models a single change. A FormatterStep can create a lint by:
    • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
    • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
• Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changed

• BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
  • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.
• FenceStep now uses ConfigurationCacheHack. (#2378 fixes #2317)

Fixed

• ktlint steps now read from the string instead of the file so they don't clobber earlier steps. (fixes #1599)

[3.0.0.BETA3] - 2024-10-15

Added

• Support for rdf (#2261)
• Support for buf on maven plugin (#2291)
• ConfigurationCacheHack so we can support Gradle's configuration cache and remote build cache at the same time. (#2298 fixes #2168)

Changed

• Support configuring the Equo P2 cache. (#2238)
• Add explicit support for JSONC / CSS via biome, via the file extensions .css and .jsonc. (#2259)
• Bump default buf version to latest 1.24.0 -> 1.44.0. (#2291)
• Bump default google-java-format version to latest 1.23.0 -> 1.24.0. (#2294)
• Bump default jackson version to latest 2.17.2 -> 2.18.0. (#2279)
• Bump default cleanthat version to latest 2.21 -> 2.22. (#2296)

Fixed

• Java import order, ignore duplicate group entries. (#2293)

... (truncated)

Commits

• 1c2435b Published lib/3.0.0
• 771b628 Update changelogs.
• 719f9a4 update default versions for Eclipse Java and Groovy formatters (#2381)
• 83bc8f3 Update changelogs.
• 1b8dd4e Revert the Greclipse version bump.
• 9507db3 Merge branch 'main' into update-greclipse
• bd03fa0 Prepare to publish non-beta. Huzzah!
• ea71030 fix gradle custom step with closure and configuration cache (#2376 fixes #2...
• 7a985fb Add an explanatory comment on why we are zeroing out the global .gitconfig.
• 922c7ea Update changelog.
• Additional commits viewable in compare view

Updates com.github.eirslett:frontend-maven-plugin from 1.15.1 to 1.15.4

Changelog

Sourced from com.github.eirslett:frontend-maven-plugin's changelog.

frontend-maven-plugin

Last public release:

Changelog

Commits

• 1f5dc4a [maven-release-plugin] prepare release frontend-plugins-1.15.4
• 580644a Fix missing <name> data
• 63a9644 [maven-release-plugin] rollback the release of frontend-plugins-1.15.3
• bccce60 [maven-release-plugin] prepare for next development iteration
• cc79127 [maven-release-plugin] prepare release frontend-plugins-1.15.3
• 664ed95 New attempt: try to fix publishing
• 825aba9 Try to fix publishing
• 8871dd4 [maven-release-plugin] prepare for next development iteration
• e65b185 [maven-release-plugin] prepare release frontend-plugins-1.15.2
• ad6b309 readme: replace unresolving badge with pointer to github actions
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[anthonydahanne]

not sure about the spotless major upgrade... I haven't tested it

cc @montrealjug/montrealjug-friends