Skip to content

deps(deps): bump the maven-dependencies group across 1 directory with 31 updates#408

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/maven/maven-dependencies-7b340e9a10
Open

deps(deps): bump the maven-dependencies group across 1 directory with 31 updates#408
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/maven/maven-dependencies-7b340e9a10

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps the maven-dependencies group with 31 updates in the / directory:

Package From To
com.google.protobuf:protobuf-java 4.33.3 4.34.0
org.junit.jupiter:junit-jupiter-engine 6.0.2 6.0.3
org.junit.jupiter:junit-jupiter-params 6.0.2 6.0.3
org.assertj:assertj-core 3.27.6 3.27.7
com.puppycrawl.tools:checkstyle 13.0.0 13.3.0
net.sourceforge.pmd:pmd-core 7.20.0 7.22.0
net.sourceforge.pmd:pmd-java 7.20.0 7.22.0
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.15.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.5
software.amazon.awssdk:bom 2.41.10 2.42.4
com.fasterxml.jackson.core:jackson-databind 2.21.0 2.21.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.0 2.21.1
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.21.0 2.21.1
org.dhatim:fastexcel 0.19.0 0.20.0
org.dhatim:fastexcel-reader 0.19.0 0.20.0
com.nimbusds:oauth2-oidc-sdk 11.31.1 11.33
com.auth0:auth0 3.0.0 3.2.0
com.auth0:java-jwt 4.5.0 4.5.1
com.google.auth:google-auth-library-oauth2-http 1.41.0 1.43.0
com.mchange:mchange-commons-java 0.3.2 0.4.0
net.bytebuddy:byte-buddy 1.18.4 1.18.7
org.mockito:mockito-core 5.21.0 5.22.0
org.apache.sshd:sshd-sftp 2.16.0 2.17.1
com.mysql:mysql-connector-j 9.5.0 9.6.0
com.mchange:c3p0 0.11.2 0.12.0
org.xerial:sqlite-jdbc 3.51.1.0 3.51.2.0
org.postgresql:postgresql 42.7.9 42.7.10
org.mongodb:mongodb-driver-sync 5.6.2 5.6.4
com.kingsrook.qqq:qqq-frontend-material-dashboard 0.28.0-20251201.170136-2 0.36.1
org.jetbrains.kotlin:kotlin-stdlib 2.3.0 2.3.10
com.slack.api:slack-api-client 1.46.0 1.47.0

Updates com.google.protobuf:protobuf-java from 4.33.3 to 4.34.0

Commits

Updates org.junit.jupiter:junit-jupiter-engine from 6.0.2 to 6.0.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-params from 6.0.2 to 6.0.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-params's releases.

JUnit 6.0.3 = Platform 6.0.3 + Jupiter 6.0.3 + Vintage 6.0.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.2...r6.0.3

Commits
  • 36e3253 Release 6.0.3
  • 295561f Finalize 6.0.3 release notes
  • ea18076 Fix deadlock in NamespacedHierarchicalStore.computeIfAbsent() (#5348)
  • 869e232 Add 5.14.3 release notes
  • d4b34c4 Fix links to User Guide
  • 5c8fb0f Reliably support JRE.OTHER with @⁠EnabledOnJre and @⁠DisabledOnJre
  • febb13f Check out entire repo so switching to main branch works in last step
  • 71fba90 Install poppler-utils for pdfinfo
  • 740e9e0 Update API baseline
  • 2ba535f Use release branch of examples repo
  • Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.6 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

  • Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

  • Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.18.3
  • Upgrade to JUnit BOM 5.14.1

Guava

  • Upgrade to Guava 33.5.0-jre
Commits
  • e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
  • 85ca7eb Deprecate XmlStringPrettyFormatter
  • 77081dc Merge commit from fork
  • b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
  • 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
  • d393ef1 Abort tests when symbolic links cannot be created (#3788)
  • 2212433 Add IntelliJ custom inspection for test class names
  • 5717d02 Update JetBrains icon
  • a8ec20b Add icon for JetBrains products
  • c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
  • Additional commits viewable in compare view

Updates com.puppycrawl.tools:checkstyle from 13.0.0 to 13.3.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-13.3.0

Checkstyle 13.3.0 - https://checkstyle.org/releasenotes.html#Release_13.3.0

Breaking backward compatibility:

#18146 - Clean up grammar for discontinued preview feature (pattern matching for switch)

New:

#15180 - NewCheck: UseEnhancedSwitch #18494 - New Check: GoogleNonConstantFieldNameCheck to enforce Google Java Style Guide member naming #18109 - new Check: LineEnding

Bug fixes:

#9719 - Indentation check regression with "new" #17541 - Empty line separator is not enforced in package-info.java file

... (truncated)

Commits
  • cf81ad6 [maven-release-plugin] prepare release checkstyle-13.3.0
  • 714ace0 doc: release notes for 13.3.0
  • 5d0aa7b Issue #15180: New check UseEnhancedSwitch
  • 5a92f82 dependency: bump actions/upload-artifact from 6 to 7
  • 8135d34 Issue #11163: Split InputHiddenField2 into focused test inputs
  • 9259fc6 Issue #18494: Add GoogleNonConstantFieldNameCheck for Google Java Style compl...
  • 6d3136d Issue #18146: Remove ANTLR grammar for discontinued pattern matching preview ...
  • 07fa29e Issue #9719: Fix Indentation check false positive for 'new' in ternary operator
  • 427acbf Issue #18926: Re-enable RedundantSuppression inspection
  • a9ccd97 Issue #18926: Re-enable 'EqualsWithItself' inspection
  • Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-core from 7.20.0 to 7.22.0

Release notes

Sourced from net.sourceforge.pmd:pmd-core's releases.

PMD 7.22.0 (27-February-2026)

27-February-2026 - 7.22.0

The PMD team is pleased to announce PMD 7.22.0.

This is a minor release.

Table Of Contents

🚀️ New and noteworthy

Security fixes

  • This release fixes a stored XSS vulnerability in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages.
    Affects CI/CD pipelines that run PMD with --format vbhtml or --format yahtml on untrusted source code (e.g. pull requests from external contributors) and expose the HTML report as a build artifact. JavaScript executes in the browser context of anyone who opens the report.
    Note: The default html format is not affected by unescaped violation messages, but a similar problem existed with suppressed violation markers.
    If you use these reports, it is recommended to upgrade PMD.
    Reported by Smaran Chand (@​smaranchand).

🌟️ New and Changed Rules

New Rules

  • The new Java rule UnnecessaryInterfaceDeclaration detects classes that implement interfaces that are already implemented by its superclass, and interfaces that extend other interfaces already declared by their superinterfaces.
    These declarations are redundant and can be removed to simplify the code.

Changed Rules

  • The rule CloseResource introduces a new property, allowedResourceMethodPatterns, which lets you specify method invocation patterns whose return values are resources managed externally. This is useful for ignoring managed resources - for example, Reader/Writer instances obtained from HttpServletRequest/HttpServletResponse - because the servlet container, not application code, is responsible for closing them. By default, the rule ignores InputStream/OutputStream/Reader/Writer resources returned by methods on (Http)ServletRequest and (Http)ServletResponse

... (truncated)

Commits
  • 7f74d77 [release] prepare release pmd_releases/7.22.0
  • 1d1d51d Prepare pmd release 7.22.0
  • f150d3d Update security.md (refs #6475)
  • 5523b33 Update contributors for 7.22.0
  • c140c0e [core] Fix stored XSS in VBHTMLRenderer and YAHTMLRenderer (#6475)
  • 96598aa [core] Fix stored XSS in VBHTMLRenderer and YAHTMLRenderer
  • 0f84b4d chore(deps): bump faraday from 2.13.3 to 2.14.1 (#6474)
  • 0304cfc chore(deps): bump nokogiri to 1.19.1 (#6473)
  • 5d5f969 [core] Fix BaseAntlrTerminalNode getTokenKind to return type instead of index...
  • 41e6b68 [doc] Update release notes (#6471, #6472)
  • Additional commits viewable in compare view

Updates net.sourceforge.pmd:pmd-java from 7.20.0 to 7.22.0

Release notes

Sourced from net.sourceforge.pmd:pmd-java's releases.

PMD 7.22.0 (27-February-2026)

27-February-2026 - 7.22.0

The PMD team is pleased to announce PMD 7.22.0.

This is a minor release.

Table Of Contents

🚀️ New and noteworthy

Security fixes

  • This release fixes a stored XSS vulnerability in VBHTMLRenderer and YAHTMLRenderer via unescaped violation messages.
    Affects CI/CD pipelines that run PMD with --format vbhtml or --format yahtml on untrusted source code (e.g. pull requests from external contributors) and expose the HTML report as a build artifact. JavaScript executes in the browser context of anyone who opens the report.
    Note: The default html format is not affected by unescaped violation messages, but a similar problem existed with suppressed violation markers.
    If you use these reports, it is recommended to upgrade PMD.
    Reported by Smaran Chand (@​smaranchand).

🌟️ New and Changed Rules

New Rules

  • The new Java rule UnnecessaryInterfaceDeclaration detects classes that implement interfaces that are already implemented by its superclass, and interfaces that extend other interfaces already declared by their superinterfaces.
    These declarations are redundant and can be removed to simplify the code.

Changed Rules

  • The rule CloseResource introduces a new property, allowedResourceMethodPatterns, which lets you specify method invocation patterns whose return values are resources managed externally. This is useful for ignoring managed resources - for example, Reader/Writer instances obtained from HttpServletRequest/HttpServletResponse - because the servlet container, not application code, is responsible for closing them. By default, the rule ignores InputStream/OutputStream/Reader/Writer resources returned by methods on (Http)ServletRequest and (Http)ServletResponse

... (truncated)

Commits
  • 7f74d77 [release] prepare release pmd_releases/7.22.0
  • 1d1d51d Prepare pmd release 7.22.0
  • f150d3d Update security.md (refs #6475)
  • 5523b33 Update contributors for 7.22.0
  • c140c0e [core] Fix stored XSS in VBHTMLRenderer and YAHTMLRenderer (#6475)
  • 96598aa [core] Fix stored XSS in VBHTMLRenderer and YAHTMLRenderer
  • 0f84b4d chore(deps): bump faraday from 2.13.3 to 2.14.1 (#6474)
  • 0304cfc chore(deps): bump nokogiri to 1.19.1 (#6473)
  • 5d5f969 [core] Fix BaseAntlrTerminalNode getTokenKind to return type instead of index...
  • 41e6b68 [doc] Update release notes (#6471, #6472)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.4 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

  • Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @​jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)
  • Properly work with test failures caused during beforeAll phase (#3194) @​Frawless

📝 Documentation updates

  • Clarify how late placeholder replacement (@{...}) deals with (#3208) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 968cb38 [maven-release-plugin] prepare release surefire-3.5.5
  • 8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
  • 4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
  • 8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
  • 68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
  • 0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
  • 688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
  • e5c01a6 Build only by the latest Maven on Jenkins (#3255)
  • 9c99e97 Fix Jenkin badges in README (#3254)
  • 20930ea Bump parent from 44 to 47 (#3253)
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.41.10 to 2.42.4

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.0 to 2.21.1

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.0 to 2.21.1

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.21.0 to 2.21.1

Commits
  • 499c5b0 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.1
  • 06ffd1d Prep for 2.21.1 release
  • c824883 Merge branch '2.20' into 2.21
  • 887d7cb Merge branch '2.19' into 2.20
  • ddd9d68 Merge branch '2.18' into 2.19
  • e2df4d2 Fix 2.18 pom.xml
  • f45225a Merge branch '2.20' into 2.21
  • f6e636c Merge branch '2.19' into 2.20
  • cd8aa78 Merge branch '2.18' into 2.19
  • 957a0fd Post-release dep version bump
  • Additional commits viewable in compare view

Updates org.dhatim:fastexcel from 0.19.0 to 0.20.0

Release notes

Sourced from org.dhatim:fastexcel's releases.

0.20.0

What's Changed

New Contributors

Full Changelog: dhatim/fastexcel@0.19.1...0.20.0

Commits
  • b93e596 Merge pull request #595 from ochedru/chore/fix-deploy
  • f90d962 chore: fix deploy
  • c094272 Merge pull request #594 from ochedru/chore/fix-readme
  • 5bac75c chore: fix readme
  • d2680e3 Merge pull request #581 from dhatim/renovate/junit-framework-monorepo
  • 6d955d8 fix(deps): update dependency org.junit:junit-bom to v5.14.3
  • c7faaaa Merge pull request #593 from ochedru/chore/update-surefire
  • 499db0e chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin...
  • 9024285 Merge pull request #591 from evmetatron/visible-openoffice
  • 7e29e79 Merge branch 'master' into visible-openoffice
  • Additional commits viewable in compare view

Updates org.dhatim:fastexcel-reader from 0.19.0 to 0.20.0

Release notes

Sourced from org.dhatim:fastexcel-reader's releases.

0.20.0

What's Changed

New Contributors

Full Changelog: dhatim/fastexcel@0.19.1...0.20.0

Commits
  • b93e596 Merge pull request #595 from ochedru/chore/fix-deploy
  • f90d962 chore: fix deploy
  • c094272 Merge pull request #594 from ochedru/chore/fix-readme
  • 5bac75c chore: fix readme
  • d2680e3 Merge pull request #581 from dhatim/renovate/junit-framework-monorepo
  • 6d955d8 fix(deps): update dependency org.junit:junit-bom to v5.14.3
  • c7faaaa Merge pull request #593 from ochedru/chore/update-surefire
  • 499db0e chore(deps): update dependency org.apache.maven.plugins:maven-surefire-plugin...
  • 9024285 Merge pull request #591 from evmetatron/visible-openoffice
  • 7e29e79 Merge branch 'master' into visible-openoffice
  • Additional commits viewable in compare view

Updates com.nimbusds:oauth2-oidc-sdk from 11.31.1 to 11.33

Changelog

Sourced from com.nimbusds:oauth2-oidc-sdk's changelog.

version 1.0 (2012-05-29) * First official release with authorisation endpoint, token endpoint, check ID endpoint and UserInfo endpoint support. * JSON Web Tokens (JWTs) support through the Nimbus-JWT library. * Language Tags (RFC 5646) support through the Nimbus-LangTag library. * JSON support through the JSON Smart library.

version 2.0 (2013-05-13) * Intermediary development release with Maven build, published to Maven Central.

version 2.1 (2013-06-06) * Updates the APIs to OpenID Connect Messages draft 20, OpenID Connect Standard draft 21, OpenID Connect Discovery draft 17 and OpenID Connect Registration draft 19. * Major refactoring of the APIs for greater simplicity. * Adds JUnit tests.

version 2.2 (2013-06-18) * Refactors dynamic OpenID Connect client registration. * Adds partial support of the OAuth 2.0 Dynamic Client Registration Protocol (draft-ietf-oauth-dyn-reg-12). * Optimises parsing of request parameters consisting of one or more tokens (scope, response type, etc).

version 2.3 (2013-06-19) * Renames OAuth 2.0 dynamic client registration package. * Adds ClientInformation.getClientMetadata() method. * Adds OIDCClientInformation class.

version 2.4 (2013-06-20) * Adds static OIDCClientInformation.parse(JSONObject) method.

version 2.5 (2013-06-22) * Adds support OAuth 2.0 dynamic client update. * Adds OpenID Connect dynamic client registration classes.

version 2.6 (2013-06-25) * Enforces order of preference of ACR values in OpenID Connect client metadata, as required by the specification. * Documentation and performance improvements.

version 2.7 (2013-06-26) * Switches Identifier generation to java.security.SecureRandom.

version 2.8 (2013-06-30) * Fixes serialisation and assignment bugs in ClientMetadata. * Switches Secret generation to java.security.SecureRandom.

version 2.9 (2013-09-17)

... (truncated)

Commits
  • db01993 [maven-release-plugin] prepare for next developme...

    Description has been truncated

@dependabot
deps(deps): bump the maven-dependencies group across 1 directory with…
2bcd00e 
… 31 updates

Bumps the maven-dependencies group with 31 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.33.3` | `4.34.0` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.0.2` | `6.0.3` |
| [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit-framework) | `6.0.2` | `6.0.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.6` | `3.27.7` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `13.0.0` | `13.3.0` |
| [net.sourceforge.pmd:pmd-core](https://github.com/pmd/pmd) | `7.20.0` | `7.22.0` |
| [net.sourceforge.pmd:pmd-java](https://github.com/pmd/pmd) | `7.20.0` | `7.22.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.1` | `3.15.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.5` |
| software.amazon.awssdk:bom | `2.41.10` | `2.42.4` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.0` | `2.21.1` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.21.0` | `2.21.1` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.21.0` | `2.21.1` |
| [org.dhatim:fastexcel](https://github.com/dhatim/fastexcel) | `0.19.0` | `0.20.0` |
| [org.dhatim:fastexcel-reader](https://github.com/dhatim/fastexcel) | `0.19.0` | `0.20.0` |
| [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) | `11.31.1` | `11.33` |
| [com.auth0:auth0](https://github.com/auth0/auth0-java) | `3.0.0` | `3.2.0` |
| [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.5.0` | `4.5.1` |
| com.google.auth:google-auth-library-oauth2-http | `1.41.0` | `1.43.0` |
| [com.mchange:mchange-commons-java](https://github.com/swaldman/mchange-commons-java) | `0.3.2` | `0.4.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.4` | `1.18.7` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.21.0` | `5.22.0` |
| [org.apache.sshd:sshd-sftp](https://github.com/apache/mina-sshd) | `2.16.0` | `2.17.1` |
| [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `9.5.0` | `9.6.0` |
| [com.mchange:c3p0](https://github.com/swaldman/c3p0) | `0.11.2` | `0.12.0` |
| [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) | `3.51.1.0` | `3.51.2.0` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.9` | `42.7.10` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.6.2` | `5.6.4` |
| [com.kingsrook.qqq:qqq-frontend-material-dashboard](https://github.com/Kingsrook/qqq-frontend-material-dashboard) | `0.28.0-20251201.170136-2` | `0.36.1` |
| [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) | `2.3.0` | `2.3.10` |
| [com.slack.api:slack-api-client](https://github.com/slackapi/java-slack-sdk) | `1.46.0` | `1.47.0` |



Updates `com.google.protobuf:protobuf-java` from 4.33.3 to 4.34.0
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.2...r6.0.3)

Updates `org.junit.jupiter:junit-jupiter-params` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.2...r6.0.3)

Updates `org.assertj:assertj-core` from 3.27.6 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.6...assertj-build-3.27.7)

Updates `com.puppycrawl.tools:checkstyle` from 13.0.0 to 13.3.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-13.0.0...checkstyle-13.3.0)

Updates `net.sourceforge.pmd:pmd-core` from 7.20.0 to 7.22.0
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](pmd/pmd@pmd_releases/7.20.0...pmd_releases/7.22.0)

Updates `net.sourceforge.pmd:pmd-java` from 7.20.0 to 7.22.0
- [Release notes](https://github.com/pmd/pmd/releases)
- [Commits](pmd/pmd@pmd_releases/7.20.0...pmd_releases/7.22.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.5
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.5)

Updates `software.amazon.awssdk:bom` from 2.41.10 to 2.42.4

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.21.1
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.0 to 2.21.1

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.21.0 to 2.21.1
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.21.0...jackson-dataformats-text-2.21.1)

Updates `org.dhatim:fastexcel` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/dhatim/fastexcel/releases)
- [Commits](dhatim/fastexcel@0.19.0...0.20.0)

Updates `org.dhatim:fastexcel-reader` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/dhatim/fastexcel/releases)
- [Commits](dhatim/fastexcel@0.19.0...0.20.0)

Updates `com.nimbusds:oauth2-oidc-sdk` from 11.31.1 to 11.33
- [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.33..11.31.1)

Updates `com.auth0:auth0` from 3.0.0 to 3.2.0
- [Release notes](https://github.com/auth0/auth0-java/releases)
- [Changelog](https://github.com/auth0/auth0-java/blob/master/CHANGELOG.md)
- [Commits](auth0/auth0-java@3.0.0...3.2.0)

Updates `com.auth0:java-jwt` from 4.5.0 to 4.5.1
- [Release notes](https://github.com/auth0/java-jwt/releases)
- [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md)
- [Commits](auth0/java-jwt@4.5.0...4.5.1)

Updates `com.google.auth:google-auth-library-oauth2-http` from 1.41.0 to 1.43.0

Updates `com.mchange:mchange-commons-java` from 0.3.2 to 0.4.0
- [Release notes](https://github.com/swaldman/mchange-commons-java/releases)
- [Commits](swaldman/mchange-commons-java@v0.3.2...v0.4.0)

Updates `net.bytebuddy:byte-buddy` from 1.18.4 to 1.18.7
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.4...byte-buddy-1.18.7)

Updates `org.mockito:mockito-core` from 5.21.0 to 5.22.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.21.0...v5.22.0)

Updates `org.apache.sshd:sshd-sftp` from 2.16.0 to 2.17.1
- [Release notes](https://github.com/apache/mina-sshd/releases)
- [Changelog](https://github.com/apache/mina-sshd/blob/master/CHANGES.md)
- [Commits](apache/mina-sshd@sshd-2.16.0...sshd-2.17.1)

Updates `com.mysql:mysql-connector-j` from 9.5.0 to 9.6.0
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES)
- [Commits](mysql/mysql-connector-j@9.5.0...9.6.0)

Updates `com.mchange:c3p0` from 0.11.2 to 0.12.0
- [Changelog](https://github.com/swaldman/c3p0/blob/0.12.x/CHANGELOG)
- [Commits](swaldman/c3p0@v0.11.2...v0.12.0)

Updates `org.xerial:sqlite-jdbc` from 3.51.1.0 to 3.51.2.0
- [Release notes](https://github.com/xerial/sqlite-jdbc/releases)
- [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG)
- [Commits](xerial/sqlite-jdbc@3.51.1.0...3.51.2.0)

Updates `org.postgresql:postgresql` from 42.7.9 to 42.7.10
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.9...REL42.7.10)

Updates `org.mongodb:mongodb-driver-sync` from 5.6.2 to 5.6.4
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.6.2...r5.6.4)

Updates `com.kingsrook.qqq:qqq-frontend-material-dashboard` from 0.28.0-20251201.170136-2 to 0.36.1
- [Release notes](https://github.com/Kingsrook/qqq-frontend-material-dashboard/releases)
- [Changelog](https://github.com/QRun-IO/qqq-frontend-material-dashboard/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/Kingsrook/qqq-frontend-material-dashboard/commits)

Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.3.0 to 2.3.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.0...v2.3.10)

Updates `com.slack.api:slack-api-client` from 1.46.0 to 1.47.0
- [Release notes](https://github.com/slackapi/java-slack-sdk/releases)
- [Commits](slackapi/java-slack-sdk@v1.46.0...v1.47.0)

---
updated-dependencies:
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-params
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: net.sourceforge.pmd:pmd-core
  dependency-version: 7.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: net.sourceforge.pmd:pmd-java
  dependency-version: 7.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.42.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.dhatim:fastexcel
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.dhatim:fastexcel-reader
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.nimbusds:oauth2-oidc-sdk
  dependency-version: '11.33'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.auth0:auth0
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.auth0:java-jwt
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.google.auth:google-auth-library-oauth2-http
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.mchange:mchange-commons-java
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.sshd:sshd-sftp
  dependency-version: 2.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.mysql:mysql-connector-j
  dependency-version: 9.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.mchange:c3p0
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.xerial:sqlite-jdbc
  dependency-version: 3.51.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.kingsrook.qqq:qqq-frontend-material-dashboard
  dependency-version: 0.36.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib
  dependency-version: 2.3.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.slack.api:slack-api-client
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file security labels Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file security

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants