Merge pull request #1567 from xael-fry/dependencies-update-2026-07

Dependencies update 2026 07

Author: mergify[bot]

framework/dependencies.yml

@@ -7,36 +7,36 @@ transitiveDependencies: false
 
 # This core dependencies are required by Play framework
 require:    &allDependencies
-    - antlr4-runtime 4.13.0
+    - antlr4-runtime 4.13.2
     - com.mchange -> c3p0 0.10.2
     - com.zaxxer -> HikariCP 5.1.0
-    - org.ow2.asm -> asm 9.8
-    - org.ow2.asm -> asm-commons 9.8
-    - org.ow2.asm -> asm-util 9.8
-    - org.ow2.asm -> asm-tree 9.8
-    - org.ow2.asm -> asm-analysis 9.8
+    - org.ow2.asm -> asm 9.10.1
+    - org.ow2.asm -> asm-commons 9.10.1
+    - org.ow2.asm -> asm-util 9.10.1
+    - org.ow2.asm -> asm-tree 9.10.1
+    - org.ow2.asm -> asm-analysis 9.10.1
     - cglib -> cglib 3.3.0
-    - com.google.code.gson -> gson 2.13.1
+    - com.google.code.gson -> gson 2.14.0
     - com.jamonapi -> jamon 2.82
     - com.ning -> async-http-client 1.9.40
     - commons-beanutils 1.11.0
-    - commons-codec 1.18.0
+    - commons-codec 1.22.0
     - org.apache.commons -> commons-email2-core 2.0.0-M1
     - org.apache.commons -> commons-email2-jakarta 2.0.0-M1
     - commons-fileupload 1.6.0
-    - commons-io 2.19.0
+    - commons-io 2.22.0
     - com.google.code.maven-play-plugin.org.apache.commons -> commons-javaflow 1590792
-    - org.apache.commons -> commons-lang3 3.18.0
-    - org.apache.commons -> commons-text 1.13.1
-    - commons-logging 1.3.5
+    - org.apache.commons -> commons-lang3 3.20.0
+    - org.apache.commons -> commons-text 1.15.0
+    - commons-logging 1.4.0
     - org.dom4j -> dom4j 2.2.0
     - com.h2database -> h2 2.2.224
     - jakarta.activation -> jakarta.activation-api 2.1.3
     - com.sun.mail -> jakarta.mail 2.0.2
     - jakarta.inject -> jakarta.inject-api 2.0.1
     - jakarta.validation -> jakarta.validation-api 3.1.1
     - jaxen 2.0.0
-    - joda-time 2.14.0
+    - joda-time 2.14.2
     - org.hamcrest -> hamcrest-all 1.3
     - org.junit.jupiter -> junit-jupiter-api 5.13.4
     - org.junit.jupiter -> junit-jupiter-engine 5.13.4
@@ -53,12 +53,12 @@ require:    &allDependencies
     - net.sf.ezmorph -> ezmorph 1.0.6
     - net.sf.jsr107cache -> jsr107cache 1.1
     - net.sf.oval -> oval 4.0.0
-    - com.mysql -> mysql-connector-j 9.3.0
+    - com.mysql -> mysql-connector-j 9.7.0
     - oauth.signpost -> signpost-core 1.2.1.2
     - jakarta.servlet -> jakarta.servlet-api 6.0.0
-    - org.apache.ivy -> ivy 2.5.3
-    - org.bouncycastle -> bcprov-jdk18on 1.81
-    - org.bouncycastle -> bcpkix-jdk18on 1.81
+    - org.apache.ivy -> ivy 2.6.0
+    - org.bouncycastle -> bcprov-jdk18on 1.85
+    - org.bouncycastle -> bcpkix-jdk18on 1.85
     - org.codehaus.groovy -> groovy 3.0.25
     - org.codehaus.groovy -> groovy-xml 3.0.25
     - org.eclipse.jdt -> org.eclipse.jdt.core 3.40.0
@@ -68,21 +68,21 @@ require:    &allDependencies
     - jakarta.persistence -> jakarta.persistence-api 3.1.0
     - org.hibernate.common -> hibernate-commons-annotations 7.0.3.Final
     - org.hibernate -> hibernate-validator 5.4.3.Final
-    - io.smallrye -> jandex 3.2.7
-    - org.jboss.logging -> jboss-logging 3.6.1.Final
+    - io.smallrye -> jandex 3.6.0
+    - org.jboss.logging -> jboss-logging 3.6.3.Final
     - jakarta.transaction -> jakarta.transaction-api 2.0.1
     - jakarta.xml.bind -> jakarta.xml.bind-api 4.0.2
     - org.glassfish.jaxb -> jaxb-runtime 2.3.9
-    - com.fasterxml -> classmate 1.7.0
+    - com.fasterxml -> classmate 1.7.3
     - org.hibernate -> hibernate-c3p0 6.6.31.Final
     - org.hibernate -> hibernate-jcache 6.6.31.Final
     - com.mchange -> mchange-commons-java 0.3.2
-    - org.javassist -> javassist 3.30.2-GA
+    - org.javassist -> javassist 3.32.0-GA
     - io.netty -> netty 3.10.6.Final
-    - org.postgresql -> postgresql 42.7.7
+    - org.postgresql -> postgresql 42.7.13
     - org.slf4j -> slf4j-api 2.0.17
     - org.apache.logging.log4j -> log4j-slf4j2-impl 2.23.1
-    - org.yaml -> snakeyaml 2.4
+    - org.yaml -> snakeyaml 2.6
     - net.spy -> spymemcached 2.12.3
     - com.thoughtworks.xstream -> xstream 1.4.21
     - xmlpull 1.1.3.4d_b4_min