Skip to content

build(deps): bump the dependencies group with 14 updates #3833

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
jknack merged 1 commit into from
Dec 22, 2025
Merged

build(deps): bump the dependencies group with 14 updates #3833

jknack merged 1 commit into from
Dec 22, 2025
+13 −13

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025 •
edited
Loading

Bumps the dependencies group with 14 updates:

Package From To
com.amazonaws:aws-java-sdk-bom 1.12.795 1.12.796
org.ow2.asm:asm 9.9 9.9.1
org.ow2.asm:asm-util 9.9 9.9.1
io.avaje:avaje-inject 12.1 12.2
io.avaje:avaje-inject-generator 12.1 12.2
ch.qos.logback:logback-classic 1.5.22 1.5.23
io.swagger.parser.v3:swagger-parser 2.1.36 2.1.37
org.codehaus.mojo:exec-maven-plugin 3.6.2 3.6.3
org.apache.maven:maven-plugin-api 3.9.11 3.9.12
org.apache.maven:maven-core 3.9.11 3.9.12
com.github.eirslett:frontend-maven-plugin 1.15.4 2.0.0
net.bytebuddy:byte-buddy 1.18.2 1.18.3
software.amazon.awssdk:bom 2.40.8 2.40.13
org.asynchttpclient:async-http-client 3.0.4 3.0.5

Updates com.amazonaws:aws-java-sdk-bom from 1.12.795 to 1.12.796

Changelog

Sourced from com.amazonaws:aws-java-sdk-bom's changelog.

1.12.796 2025-12-18

AWS Kinesis Video

  • Features

    • Upgrade Netty to 4.1.130-Final
Commits

Updates org.ow2.asm:asm from 9.9 to 9.9.1

Updates org.ow2.asm:asm-util from 9.9 to 9.9.1

Updates org.ow2.asm:asm-util from 9.9 to 9.9.1

Updates io.avaje:avaje-inject from 12.1 to 12.2

Release notes

Sourced from io.avaje:avaje-inject's releases.

12.2

What's Changed

Full Changelog: avaje/avaje-inject@12.1...12.2

Commits
  • 8406f14 Version 12.2
  • 418883e Merge pull request #957 from avaje/dependabot/maven/master/dependencies-acaed...
  • 20779de Update assertion for bean size in CustomScopeTest
  • ddfcc6b Bump the dependencies group with 7 updates
  • 96658fa Merge pull request #958 from avaje/dependabot/github_actions/master/actions/c...
  • 4e5dc7f [workflow]: Bump actions/cache from 4 to 5
  • 2b5fc5b fix generic wildcard field injection (#956)
  • 9bf19e7 Add avaje-inject-bom bill of materials (#955)
  • bacb492 Version 12.2-RC1
  • ac02ee3 Make isBeanAbsent not count secondary beans (#953)
  • Additional commits viewable in compare view

Updates io.avaje:avaje-inject-generator from 12.1 to 12.2

Updates io.avaje:avaje-inject-generator from 12.1 to 12.2

Updates ch.qos.logback:logback-classic from 1.5.22 to 1.5.23

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 0bcc3fe prepare release 1.5.23
  • 4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
  • 299f091 add collision test in presence of conditional processing
  • b446f3f In Context, remove collision map
  • a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
  • 681b2be remove unused method, minor comment edits
  • 17a3edf start work on 1.5.23-SNAPSHOT
  • See full diff in compare view

Updates io.swagger.parser.v3:swagger-parser from 2.1.36 to 2.1.37

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.37 released!

  • fix: parse large file with resolve option set to true (#2258)
Commits

Updates org.codehaus.mojo:exec-maven-plugin from 3.6.2 to 3.6.3

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.3

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • fe1fa8c [maven-release-plugin] prepare release 3.6.3
  • 5b3feca Bump asm.version from 9.9 to 9.9.1
  • efc7faa Bump org.apache.commons:commons-exec from 1.5.0 to 1.6.0
  • cdaf267 JUnit 5 best practices (#505)
  • f3f5997 Move ExecJavaMojoTest, ExecMojoTest to JUnit 5
  • 03b87b5 Document thread group isolation limitation in java goal (#503)
  • 7a66c3e Add support for JEP 512 for for package-private static main methods with and ...
  • a6d01ef Move to JUnit 5
  • 88d5961 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven:maven-plugin-api from 3.9.11 to 3.9.12

Release notes

Sourced from org.apache.maven:maven-plugin-api's releases.

3.9.12

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 848fbb4 [maven-release-plugin] prepare release maven-3.9.12
  • c1b65f6 Bump actions/cache from 4.3.0 to 5.0.0 (#11542)
  • 88681b8 [3.9.x] Apply resolver changes and improvements (#11536)
  • 148fcc8 Bump resolverVersion from 1.9.24 to 1.9.25 (#11533)
  • c433909 Simplify formatting of prerequisites-requirements error
  • ec21f4b Update formatting of prerequisites-requirements error to improve readability
  • f839cc1 Add default implementation for new method in MavenPluginManager
  • 0a7e149 Bump actions/checkout from 6.0.0 to 6.0.1 (#11512)
  • ed09c2a Bump actions/setup-java from 5.0.0 to 5.1.0 (#11519)
  • 00ca9b0 Fix javadoc in MavenRepositorySystem
  • Additional commits viewable in compare view

Updates org.apache.maven:maven-core from 3.9.11 to 3.9.12

Updates com.github.eirslett:frontend-maven-plugin from 1.15.4 to 2.0.0

Changelog

Sourced from com.github.eirslett:frontend-maven-plugin's changelog.

2.0.0

This is a major version release, but there are no new features. Lots of dependencies and minimum version requirements have been upgraded, potentially breaking backwards compatibility.

Commits
  • 2569405 [maven-release-plugin] prepare release frontend-plugins-2.0.0
  • 72d555a Upgrade frontend library versions and node/npm/pnpm versions
  • b085a45 Merge branch with dependency updates'
  • 1a7009f Apparently this should fix extraction on Windows with Java 25
  • 1b899e7 Update maven-invoker-plugin
  • a15add3 Further dependency updates
  • de0bea4 Update java versions in GitHub action
  • 1c72fbd chore: uses the configuration release for the maven-compiler-plugin
  • 0ce69c7 chore: switched to Java 17
  • e962688 chore: updates Maven dependencies
  • Additional commits viewable in compare view

Updates net.bytebuddy:byte-buddy from 1.18.2 to 1.18.3

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.3

  • Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
  • Add additional safety when processing class files with illegally formed parameters.
  • Update to latest ASM.
Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

26. November 2025: version 1.18.3

  • Avoid using Class File API when Byte Buddy is loaded on the boot loader where multi-release jars are not available.
  • Add additional safety when processing class files with illegally formed parameters.
  • Update to latest ASM.
Commits
  • 6f358c8 [maven-release-plugin] prepare release byte-buddy-1.18.3
  • 57df2c7 [release] Release new version.
  • 1111a18 [release] Release new version.
  • 6698c45 [release] Release new version
  • 04a89c6 Avoid using class file API when loaded on the boot path as multi release jar ...
  • ba05f0d Remove unused import.
  • ec50316 Adds safety for illegally compiled parameters.
  • e720b5e Update README.md
  • a966b04 Update README.md
  • dfa50ad Update release notes and internal Byte Buddy.
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:bom from 2.40.8 to 2.40.13

Updates org.asynchttpclient:async-http-client from 3.0.4 to 3.0.5

Release notes

Sourced from org.asynchttpclient:async-http-client's releases.

AHC v3.0.5 Release

What's Changed

Full Changelog: AsyncHttpClient/async-http-client@async-http-client-project-3.0.4...async-http-client-project-3.0.5

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Dec 22, 2025
@jknack
Copy link
Member

jknack commented Dec 22, 2025

@dependabot recreate

@dependabot
build(deps): bump the dependencies group with 14 updates
7a7bbda 
Bumps the dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [com.amazonaws:aws-java-sdk-bom](https://github.com/aws/aws-sdk-java) | `1.12.795` | `1.12.796` |
| org.ow2.asm:asm | `9.9` | `9.9.1` |
| org.ow2.asm:asm-util | `9.9` | `9.9.1` |
| [io.avaje:avaje-inject](https://github.com/avaje/avaje-inject) | `12.1` | `12.2` |
| io.avaje:avaje-inject-generator | `12.1` | `12.2` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.22` | `1.5.23` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.36` | `2.1.37` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.2` | `3.6.3` |
| [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) | `3.9.11` | `3.9.12` |
| org.apache.maven:maven-core | `3.9.11` | `3.9.12` |
| [com.github.eirslett:frontend-maven-plugin](https://github.com/eirslett/frontend-maven-plugin) | `1.15.4` | `2.0.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.18.2` | `1.18.3` |
| software.amazon.awssdk:bom | `2.40.8` | `2.40.13` |
| [org.asynchttpclient:async-http-client](https://github.com/AsyncHttpClient/async-http-client) | `3.0.4` | `3.0.5` |


Updates `com.amazonaws:aws-java-sdk-bom` from 1.12.795 to 1.12.796
- [Changelog](https://github.com/aws/aws-sdk-java/blob/master/CHANGELOG.md)
- [Commits](aws/aws-sdk-java@1.12.795...1.12.796)

Updates `org.ow2.asm:asm` from 9.9 to 9.9.1

Updates `org.ow2.asm:asm-util` from 9.9 to 9.9.1

Updates `org.ow2.asm:asm-util` from 9.9 to 9.9.1

Updates `io.avaje:avaje-inject` from 12.1 to 12.2
- [Release notes](https://github.com/avaje/avaje-inject/releases)
- [Commits](avaje/avaje-inject@12.1...12.2)

Updates `io.avaje:avaje-inject-generator` from 12.1 to 12.2

Updates `io.avaje:avaje-inject-generator` from 12.1 to 12.2

Updates `ch.qos.logback:logback-classic` from 1.5.22 to 1.5.23
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.22...v_1.5.23)

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.36 to 2.1.37
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.36...v2.1.37)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.2...3.6.3)

Updates `org.apache.maven:maven-plugin-api` from 3.9.11 to 3.9.12
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.9.11...maven-3.9.12)

Updates `org.apache.maven:maven-core` from 3.9.11 to 3.9.12

Updates `com.github.eirslett:frontend-maven-plugin` from 1.15.4 to 2.0.0
- [Changelog](https://github.com/eirslett/frontend-maven-plugin/blob/master/CHANGELOG.md)
- [Commits](eirslett/frontend-maven-plugin@frontend-plugins-1.15.4...frontend-plugins-2.0.0)

Updates `net.bytebuddy:byte-buddy` from 1.18.2 to 1.18.3
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.18.2...byte-buddy-1.18.3)

Updates `software.amazon.awssdk:bom` from 2.40.8 to 2.40.13

Updates `org.asynchttpclient:async-http-client` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/AsyncHttpClient/async-http-client/releases)
- [Changelog](https://github.com/AsyncHttpClient/async-http-client/blob/main/CHANGES.md)
- [Commits](AsyncHttpClient/async-http-client@async-http-client-project-3.0.4...async-http-client-project-3.0.5)

---
updated-dependencies:
- dependency-name: com.amazonaws:aws-java-sdk-bom
  dependency-version: 1.12.796
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm
  dependency-version: 9.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm-util
  dependency-version: 9.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.ow2.asm:asm-util
  dependency-version: 9.9.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject
  dependency-version: '12.2'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-version: '12.2'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-version: '12.2'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-plugin-api
  dependency-version: 3.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.eirslett:frontend-maven-plugin
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.40.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.asynchttpclient:async-http-client
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/dependencies-5114f8ed19 branch from 7928e90 to 7a7bbda Compare December 22, 2025 18:12
@jknack jknack added this to the 4.0.13 milestone Dec 22, 2025
@jknack jknack merged commit 8ffaf2b into main Dec 22, 2025
5 checks passed
@dependabot dependabot bot deleted the dependabot/maven/dependencies-5114f8ed19 branch December 22, 2025 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

4.0.13

Development

Successfully merging this pull request may close these issues.

2 participants

@jknack