Skip to content

Bump the dependencies group across 1 directory with 17 updates#2349

Open
dependabot[bot] wants to merge 1 commit intov2.7.xfrom
dependabot/maven/v2.7.x/dependencies-282e15d1f8
Open

Bump the dependencies group across 1 directory with 17 updates#2349
dependabot[bot] wants to merge 1 commit intov2.7.xfrom
dependabot/maven/v2.7.x/dependencies-282e15d1f8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 20, 2026

Bumps the dependencies group with 16 updates in the / directory:

Package From To
com.fasterxml.jackson.core:jackson-core 2.21.1 2.21.2
com.fasterxml.jackson.dataformat:jackson-dataformat-xml 2.21.1 2.21.2
com.github.dasniko:testcontainers-keycloak 4.1.1 4.2.0
com.google.guava:guava 33.5.0-jre 33.6.0-jre
io.prometheus:prometheus-metrics-bom 1.5.0 1.5.1
org.eclipse.jetty.ee10:jetty-ee10-servlet 12.1.7 12.1.8
org.jooq:jooq 3.20.11 3.21.2
org.jooq:jooq-codegen 3.20.11 3.21.2
org.jooq:jooq-meta 3.20.11 3.21.2
org.mariadb.jdbc:mariadb-java-client 3.5.7 3.5.8
org.testcontainers:testcontainers-bom 2.0.3 2.0.4
io.github.git-commit-id:git-commit-id-maven-plugin 9.0.2 10.0.0
com.diffplug.spotless:spotless-maven-plugin 3.3.0 3.4.0
org.owasp:dependency-check-maven 12.2.0 12.2.1
de.fraunhofer.iosb.io.moquette:moquette-broker 0.18.3 0.18.4
de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus 0.18.3 0.18.4

Updates com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.21.1 to 2.21.2

Commits
  • 6bdc593 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.2
  • f15dce9 Prep for 2.21.2 release
  • 3503394 Post-release dep version bump
  • b19143d [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.21.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.21.1 to 2.21.2

Commits
  • 6bdc593 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.2
  • f15dce9 Prep for 2.21.2 release
  • 3503394 Post-release dep version bump
  • b19143d [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates com.github.dasniko:testcontainers-keycloak from 4.1.1 to 4.2.0

Release notes

Sourced from com.github.dasniko:testcontainers-keycloak's releases.

v4.2.0

Noteable Changes

I've deprecated the default no-args constructor, as the behavior will most likely change in future (starting with KC v27). So, it's recommended that you always specify explicitly the image which you are running your tests against!

Additionally, I've also deprecated for removal some more-or-less internal methods (withNightly and getKeycloakDefaultVersion), they were never officially documented. Most likely they will be removed in the future.

What's Changed

Full Changelog: dasniko/testcontainers-keycloak@v4.1.1...v4.2.0

Commits
  • f0d6de5 prepare for 4.2 release by updating keycloak dependencies and version
  • c3b1893 chore: bump testcontainers.version to 2.0.4
  • f1b3241 improve Maven deploy configuration
  • 2f0ca0c chore: bump crazy-max/ghaction-import-gpg from 6 to 7 (#290)
  • b9f52dd add pull request template
  • ce04109 add CONTRIBUTING.md
  • a687df5 add customizable image pull policy with 24h default refresh (#289)
  • be3b434 improve README SEO: richer intro and clearer feature flags heading
  • 269a9a1 fix image tag: use keycloak:26.4 instead of non-existent keycloak:26
  • df8f064 add Spring Boot and Quarkus integration guides
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 33.5.0-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)
Commits

Updates io.prometheus:prometheus-metrics-bom from 1.5.0 to 1.5.1

Release notes

Sourced from io.prometheus:prometheus-metrics-bom's releases.

v1.5.1

1.5.1 (2026-03-20)

Bug Fixes

  • deps: update dependency io.prometheus:prometheus-metrics-bom to v1.5.0 (#1877) (043fc57)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.3 (#1900) (0d800d0)
  • deps: update jetty monorepo to v12.1.7 (#1932) (5bd3b79)
  • deps: update junit-framework monorepo to v6.0.3 (#1880) (05ad751)
  • exclude standalone examples from mise run format (#1931) (537fb88)
  • fix release-please PR title pattern and permissions (#1978) (d737978)
  • Handle empty datapoints in otel exporter (#1898) (59c8552)
  • inline set-version logic in build-release.sh (#1884) (c050435)
  • reduce lychee retries to avoid compounding GitHub 429s (#1940) (cc17d6e)
  • remove version manipulation from build-release.sh (#1886) (93e2b6d)
  • trigger Maven deploy on release-please published events (#1966) (643d0e7)
  • use /tree/ instead of /blob/ for directory URL (#1944) (b81332e)
  • use maven release type for release-please (#1967) (ff3bd2d)

Documentation

  • document DCO sign-off requirement for contributions (#1937) (0860e77)
Changelog

Sourced from io.prometheus:prometheus-metrics-bom's changelog.

1.5.1 (2026-03-20)

Bug Fixes

  • deps: update dependency io.prometheus:prometheus-metrics-bom to v1.5.0 (#1877) (043fc57)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.3 (#1900) (0d800d0)
  • deps: update jetty monorepo to v12.1.7 (#1932) (5bd3b79)
  • deps: update junit-framework monorepo to v6.0.3 (#1880) (05ad751)
  • exclude standalone examples from mise run format (#1931) (537fb88)
  • fix release-please PR title pattern and permissions (#1978) (d737978)
  • Handle empty datapoints in otel exporter (#1898) (59c8552)
  • inline set-version logic in build-release.sh (#1884) (c050435)
  • reduce lychee retries to avoid compounding GitHub 429s (#1940) (cc17d6e)
  • remove version manipulation from build-release.sh (#1886) (93e2b6d)
  • trigger Maven deploy on release-please published events (#1966) (643d0e7)
  • use /tree/ instead of /blob/ for directory URL (#1944) (b81332e)
  • use maven release type for release-please (#1967) (ff3bd2d)

Documentation

  • document DCO sign-off requirement for contributions (#1937) (0860e77)
Commits

Updates org.eclipse.jetty.ee10:jetty-ee10-servlet from 12.1.7 to 12.1.8

Updates org.jooq:jooq from 3.20.11 to 3.21.2

Updates org.jooq:jooq-codegen from 3.20.11 to 3.21.2

Updates org.jooq:jooq-meta from 3.20.11 to 3.21.2

Updates org.jooq:jooq-codegen from 3.20.11 to 3.21.2

Updates org.jooq:jooq-meta from 3.20.11 to 3.21.2

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.7 to 3.5.8

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.8

3.5.8 (Apr 2026)

Full Changelog

Issues Resolved

  • CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections
  • CONJ-1303 - Statement.cancel() fails to kill running query during result streaming

Other

  • CONJ-1298 - Performance improvement: avoid decoding extended format
Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.8 (Apr 2026)

Full Changelog

Issues Resolved

  • CONJ-1305 - XAResource.isSameRM() incorrectly returns true when rewriteBatchedStatements differs between connections
  • CONJ-1303 - Statement.cancel() fails to kill running query during result streaming

Other

  • CONJ-1298 - Performance improvement: avoid decoding extended format
Commits
  • 26b34a2 Merge branch 'develop'
  • 06d6efe bump CI actions/checkout@v5
  • a86a83c bump 3.5.8
  • 975f991 [misc] refactor TimestampCodec to implement Codec directly and extract shared...
  • 75bb509 [misc] code formatting cleanup
  • 4c0b6a0 [misc] refactor TimestampCodec to extend UtilDateCodec and extract common dat...
  • a5b7fb1 [misc] convert Reader and Writer from interfaces to final class implementatio...
  • d31eb06 [misc] convert ReadableByteBuf from interface to final class implementation, ...
  • 11d45a9 [misc] optimize binary row decoder null bitmap checks and simplify signed Big...
  • 5aad14c [misc] optimize BigInt column decoding and improve type safety in codec inter...
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers-bom from 2.0.3 to 2.0.4

Release notes

Sourced from org.testcontainers:testcontainers-bom's releases.

2.0.4

What's Changed

📖 Documentation

📦 Dependency updates

Commits

Updates io.github.git-commit-id:git-commit-id-maven-plugin from 9.0.2 to 10.0.0

Release notes

Sourced from io.github.git-commit-id:git-commit-id-maven-plugin's releases.

Version 10.0.0 is finally there and includes various bug-fixes and improvements :-)

⚠️ This is a potentially breaking release. Read the release-notes carefully ⚠️

Potential Breaking changes:

The main key-aspects that might cause a breakage when migrating to the new version:

  • #913 / #914: Require Maven 3.9.0 [Maven 3.6.3 is EOL] ⚠️

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:

<dependency>
    <groupId>io.github.git-commit-id</groupId>
    <artifactId>git-commit-id-maven-plugin</artifactId>
    <version>10.0.0</version>
</dependency>

Getting the latest snapshot (build automatically)

If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by github actions:

<pluginRepositories>
    <pluginRepository>
        <id>sonatype-snapshots</id>
        <name>Sonatype Snapshots</name>
         <url>https://s01.oss.sonatype.org/content/repositories/snapshots/</url>
    </pluginRepository>
</pluginRepositories>

Even though the github actions will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.

Known Issues / Limitations:

  • This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in ktoso/maven-git-commit-id-plugin#279
  • Using maven's plugin prefix resolution (e.g. mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with <injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to git-commit-id/maven-git-commit-id-plugin#287 or git-commit-id/maven-git-commit-id-plugin#413 for details and potential workarounds

Reporting Problems

If you find any problem with this plugin, feel free to report it here

Full Changelog: git-commit-id/git-commit-id-maven-plugin@v9.2.0...v10.0.0

Version 9.2.0 is finally there and includes various bug-fixes and improvements :-)

New Features / Bug-Fixes:

The main key-aspects that have been improved or being worked on are the following:

... (truncated)

Commits

Updates com.diffplug.spotless:spotless-maven-plugin from 3.3.0 to 3.4.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.4.0

Added

  • Add tableTest format type for standalone .table files. (#2880)

Changes

  • Bump default tabletest-formatter version 1.0.1 -> 1.1.1, now works with Java 17+. (#2880)

Lib v3.3.1

Fixed

  • GitPrePushHookInstaller didn't work on windows, now fixed. (#2562)
Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

spotless-lib and spotless-lib-extra releases

If you are a Spotless user (as opposed to developer), then you are probably looking for:

This document is intended for Spotless developers.

We adhere to the keepachangelog format (starting after version 1.27.0).

[Unreleased]

[4.5.0] - 2026-03-18

Added

  • Add tableTest format type for standalone .table files. (#2880)

Changes

  • Bump default tabletest-formatter version 1.0.1 -> 1.1.1, now works with Java 17+. (#2880)

[4.4.0] - 2026-03-02

Added

  • Add tabletest-formatter support for Java and Kotlin. (#2860)

Fixed

  • Fix the ability to specify a wildcard version (*) for external formatter executables, which did not work. (#2848)
  • [fix] ConcurrentModificationException in expandWildcardImports (#2830)

[4.3.0] - 2026-01-27

Added

  • Add P2Provisioner interface in lib-extra to enable build-tool-specific caching strategies for Eclipse P2 dependencies, fixing OutOfMemoryError in large multi-project builds. (#2788)

Fixed

  • removeSemicolons() should not be applied to multiline strings in groovy #2780 (#2792)

[4.2.0] - 2026-01-22

Added

  • Add a expandWildcardImports API for java (#2679)
  • Add the ability to specify a wildcard version (*) for external formatter executables. (#2757)

Fixed

  • Prevent race conditions when multiple npm-based formatters launch the server process simultaneously while sharing the same node_modules directory. (#2786)
  • Git ratchet no longer throws an error with Git worktrees. (#2779)

Changes

  • Bump default ktfmt version to latest 0.59 -> 0.61. (2804)
  • Bump default ktlint version to latest 1.7.1 -> 1.8.0. (2763)
  • Bump default gherkin-utils version to latest 9.2.0 -> 10.0.0. (#2619)

[4.1.0] - 2025-11-18

Changes

  • Bump default ktfmt version to latest 0.58 -> 0.59. (#2681
  • Bump default jackson version to latest 2.20.0 -> 2.20.1. (#2730)
  • Bump default cleanthat version to latest 2.23 -> 2.24. (#2620)

... (truncated)

Commits
  • 708a1b0 Published maven/3.4.0
  • 1cc0163 Published gradle/8.4.0
  • a4cd808 Published lib/4.5.0
  • 9066bf6 Add links to the changelog.
  • db8dc1c Fix for illegal mutation issue with predeclareDeps (#2892)
  • 0eb98a9 chore: Updated gradle plugin change
  • 3f7f12e chore: Removes check for predeclare as it's not needed anymore
  • 55c0c5c fix: IsolatedProjectTest.predeclaredIsUnsupported() is now actually supported...
  • 47489af fix: avoid IllegalMutationException when root project uses predeclareDeps() w...
  • 4010e8b test: Introduce a test harnessing predeclared deps
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 12.2.0 to 12.2.1

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 12.2.1

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 12.2.1 (2026-04-11)

  • build: improve GHA workflow experience for forks (#8285)
  • build: use maven jdk toolchains to build with Java 25; test against Java 11/17/21/25 (#8292)
  • chore: avoid use of parent pom and maven properties where unnecessary (#8322)
  • chore: bump java development to 25.0 (#8365)
  • chore: fix Charset warnings; preferring typed charsets (#8326)
  • chore: fix Maven scm tags after 12.2.1-SNAPSHOT bump (#8265)
  • chore: pin GitHub actions to specific SHAs rather than mutable tags (#8381)
  • chore: remove unused properties and schemas (#8378)
  • docs: define schema locations in XML examples (#8254)
  • docs: document external data sources and hostnames (#8219)
  • docs: ensure OSS Index URL override is consistently documented (#8338)
  • docs: fix minor typo in README (#8246)
  • fix(core): correct xml schema validation handling without needing external access (#8272)
  • fix(deps): upgrade slf4j and logback (#8306)
  • fix(test): disable pnpm analyzer during test (#8305)
  • fix: Correct published/hosted suppressions namespace header and indent (#8258)
  • fix: Suppress noisy WARN logging from Apache Lucene within Maven and Ant plugins (#8248)
  • fix: #8140 AssemblyAnalyzer version resolution issue (#8352)
  • fix: #8140 fix version resolution
  • fix: #8140 hint azure_identity_library_for_.net
  • fix: #8356 narrow down VersionFilterAnalyzer scope to JAR files (#8358)
  • fix: correct parsing for CVSSv4 strings with Provider Urgency (#8377)
  • fix: evidence source in Retire JS analyzer (#8303)
  • fix: exclude deprecations from Yarn Berry audit results (#8380)
  • fix: improve PEAnalyzer reliability by migrating to maintained PE/COFF 4J library fork (#8245)
  • fix: improve configuration consistency (casing) (#8355)
  • fix: improve logging of unexpected Java Errors during processing of NVD (#8250)
  • fix: raw type warning in ProcessReader (#8324)
  • fix: suppress false positives for zabbix-utils #8087 (#8218)
  • fix: update docs (#8405)
  • fix: warn if deprecated configs are used (#8366)
  • test: Make tests locale independent (#8328)
  • test: #8140 reproduce current behavior
  • test: avoid polluting test classpaths with sample dependencies to be scanned (#8267)

See the full listing of changes

Commits
  • bda36b8 build: prepare release v12.2.1
  • ef83e7b docs: prepare release 12.2.1
  • 09af10d fix: update docs (#8405)
  • 3562775 build(deps): bump golang from 1.26.1-alpine to 1.26.2-alpine (#8403)
  • 9ef93be build(deps): bump golang from 1.26.1-alpine to 1.26.2-alpine
  • ca79bd5 build(deps-dev): bump com.github.spotbugs:spotbugs-maven-plugin from 4.9.8.2 ...
  • 6b58069 build(deps): bump apache.ant.version from 1.10.15 to 1.10.16 (#8401)
  • 91c6972 fix: correct parsing for CVSSv4 strings with Provider Urgency (#8377)
  • 267e7eb build(deps): bump the actions-deps group with 2 updates (#8394)
  • 53f58ab build(deps): bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 (#8389)
  • Additional commits viewable in compare view

Updates de.fraunhofer.iosb.io.moquette:moquette-broker from 0.18.3 to 0.18.4

Changelog

Sourced from de.fraunhofer.iosb.io.moquette:moquette-broker's changelog.

Version 0.18.4-SNAPSHOT: [feature] Added optional, configurable timeout to session queue offers. [Cleanup] Improved metrics implementation handling. [feature] Added topic rewriting, allowing the internally used topic to be different from the topic the client used. [Cleanup] Cleaned up subscription handling.

Version 0.18.3: [fix] Fixed SegmentedQueues not being cleaned up on session purge. (#833)

Version 0.18.2: [fix] Metrics - Appended _total to names of counters. - Changed queue fill levels to be relative (0-1) instead of absolute.

Version 0.18.1: [feature] Added metrics framework and Prometheus implementation. - Enable by setting metrics_provider_class to MetricsProviderPrometheus. - Metrics endpoint can be found on http://localhost:9400/metrics by default. - port can be changed with metrics_endpoint_port. Set to 0 to disable http endpoint.

Version 0.18: [fix] Update Netty to 4.1.116 and H2 2.1.214 [feature] Server keep alive: added configuration setting so that the broker can specify a keep alive other then the one selected by clients. (#789) [feature] User properties: covered publish with user properties with tests and fixed publish of will messages. (#877) [feature] Topic alias: implemented handling of topic alias received by publishers. (#873) [feature] Flow-control: Handled client's receive maximum property to configure the inflight window through the client. (#858) [feature] Generate correct MANIFEST.MF with bnd-maven-plugin. (#848) [feature] Flow-control: implemented publish's quota management on the server side. (#852) [fix] Incorrect reference used in compareAndSet in CTrie.cleanTomb. (#841) [feature] Implement response-information property for request-response flow. (#840) [fix] Optimised page file opening for disk-based queues. (#837) [feature] Manage payload format indicator property, when set verify payload format. (#826) [refactoring] Refactory of PostOffice to pass publish message in hits entirety avoiding decomposition into single parameters. (#827) [feature] Add Netty native transport support on MacOS. Bundle all the native transport module by default (#806) [feature] message expiry interval: (issue #818) - Implements the management of message expiry for retained part. (#819) - Avoid to publish messages that has elapsed its expire property. (#822) - Update the message expiry property remaining seconds when a publish is forwarded. (

@dependabot
Bump the dependencies group across 1 directory with 17 updates
5c684e6 
Bumps the dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.21.1` | `2.21.2` |
| [com.fasterxml.jackson.dataformat:jackson-dataformat-xml](https://github.com/FasterXML/jackson-dataformat-xml) | `2.21.1` | `2.21.2` |
| [com.github.dasniko:testcontainers-keycloak](https://github.com/dasniko/testcontainers-keycloak) | `4.1.1` | `4.2.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| [io.prometheus:prometheus-metrics-bom](https://github.com/prometheus/client_java) | `1.5.0` | `1.5.1` |
| org.eclipse.jetty.ee10:jetty-ee10-servlet | `12.1.7` | `12.1.8` |
| org.jooq:jooq | `3.20.11` | `3.21.2` |
| org.jooq:jooq-codegen | `3.20.11` | `3.21.2` |
| org.jooq:jooq-meta | `3.20.11` | `3.21.2` |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.7` | `3.5.8` |
| [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) | `2.0.3` | `2.0.4` |
| [io.github.git-commit-id:git-commit-id-maven-plugin](https://github.com/git-commit-id/git-commit-id-maven-plugin) | `9.0.2` | `10.0.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.3.0` | `3.4.0` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.2.0` | `12.2.1` |
| [de.fraunhofer.iosb.io.moquette:moquette-broker](https://github.com/FraunhoferIOSB/moquette) | `0.18.3` | `0.18.4` |
| de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus | `0.18.3` | `0.18.4` |



Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.1 to 2.21.2
- [Commits](FasterXML/jackson-core@jackson-core-2.21.1...jackson-core-2.21.2)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.1 to 2.21.2
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.21.1...jackson-dataformat-xml-2.21.2)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.1 to 2.21.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.1 to 2.21.2
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.21.1...jackson-dataformat-xml-2.21.2)

Updates `com.github.dasniko:testcontainers-keycloak` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/dasniko/testcontainers-keycloak/releases)
- [Commits](dasniko/testcontainers-keycloak@v4.1.1...v4.2.0)

Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `io.prometheus:prometheus-metrics-bom` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/prometheus/client_java/releases)
- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_java@v1.5.0...v1.5.1)

Updates `org.eclipse.jetty.ee10:jetty-ee10-servlet` from 12.1.7 to 12.1.8

Updates `org.jooq:jooq` from 3.20.11 to 3.21.2

Updates `org.jooq:jooq-codegen` from 3.20.11 to 3.21.2

Updates `org.jooq:jooq-meta` from 3.20.11 to 3.21.2

Updates `org.jooq:jooq-codegen` from 3.20.11 to 3.21.2

Updates `org.jooq:jooq-meta` from 3.20.11 to 3.21.2

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.7 to 3.5.8
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.7...3.5.8)

Updates `org.testcontainers:testcontainers-bom` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@2.0.3...2.0.4)

Updates `io.github.git-commit-id:git-commit-id-maven-plugin` from 9.0.2 to 10.0.0
- [Release notes](https://github.com/git-commit-id/git-commit-id-maven-plugin/releases)
- [Commits](git-commit-id/git-commit-id-maven-plugin@v9.0.2...v10.0.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/3.3.0...maven/3.4.0)

Updates `org.owasp:dependency-check-maven` from 12.2.0 to 12.2.1
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.0...v12.2.1)

Updates `de.fraunhofer.iosb.io.moquette:moquette-broker` from 0.18.3 to 0.18.4
- [Changelog](https://github.com/FraunhoferIOSB/moquette/blob/v0.18.x/ChangeLog.txt)
- [Commits](FraunhoferIOSB/moquette@v0.18.3...v0.18.4)

Updates `de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus` from 0.18.3 to 0.18.4

Updates `de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus` from 0.18.3 to 0.18.4

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.github.dasniko:testcontainers-keycloak
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.prometheus:prometheus-metrics-bom
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.eclipse.jetty.ee10:jetty-ee10-servlet
  dependency-version: 12.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jooq:jooq
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-codegen
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-meta
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-codegen
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jooq:jooq-meta
  dependency-version: 3.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.github.git-commit-id:git-commit-id-maven-plugin
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: de.fraunhofer.iosb.io.moquette:moquette-broker
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: de.fraunhofer.iosb.io.moquette:moquette-metrics-prometheus
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants