This is an automated email from the ASF dual-hosted git repository.
boris-petrov pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/2.x by this push:
new 665aa0fe9 chore(deps): bump the maven-dependencies group with 11
updates (#2825)
665aa0fe9 is described below
commit 665aa0fe9415b9b3b1e8fa0f698dfba36141f0ee
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Jul 6 09:55:33 2026 +0300
chore(deps): bump the maven-dependencies group with 11 updates (#2825)
Bumps the maven-dependencies group with 16 updates:
| Package | From | To |
| --- | --- | --- |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `38`
| `39` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) |
`1.5.34` | `1.5.37` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) |
`1.5.34` | `1.5.37` |
| org.apache.tomcat.embed:tomcat-embed-core | `9.0.118` | `9.0.119` |
| org.apache.tomcat.embed:tomcat-embed-el | `9.0.118` | `9.0.119` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `9.0.118` | `9.0.119` |
| org.apache.tomcat:tomcat-jaspic-api | `9.0.118` | `9.0.119` |
| org.apache.tomcat:tomcat-catalina | `9.0.118` | `9.0.119` |
| [org.javassist:javassist](https://github.com/jboss-javassist/javassist) |
`3.31.0-GA` | `3.32.0-GA` |
| org.apache.tomcat.embed:tomcat-embed-core | `10.1.55` | `10.1.56` |
| org.apache.tomcat.embed:tomcat-embed-el | `10.1.55` | `10.1.56` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-jaspic-api | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-catalina | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-jasper | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-jasper-el | `10.1.55` | `10.1.56` |
Updates `org.apache:apache` from 38 to 39
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)
Updates `ch.qos.logback:logback-core` from 1.5.34 to 1.5.37
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.37)
Updates `ch.qos.logback:logback-classic` from 1.5.34 to 1.5.37
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.37)
Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.118 to 9.0.119
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.118 to 9.0.119
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.118 to
9.0.119
Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.118 to 9.0.119
Updates `org.apache.tomcat:tomcat-catalina` from 9.0.118 to 9.0.119
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.118 to 9.0.119
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.118 to
9.0.119
Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.118 to 9.0.119
Updates `org.apache.tomcat:tomcat-catalina` from 9.0.118 to 9.0.119
Updates `org.javassist:javassist` from 3.31.0-GA to 3.32.0-GA
- [Release notes](https://github.com/jboss-javassist/javassist/releases)
-
[Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md)
- [Commits](https://github.com/jboss-javassist/javassist/commits)
Updates `org.apache.tomcat.embed:tomcat-embed-core` from 10.1.55 to 10.1.56
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 10.1.55 to 10.1.56
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 10.1.55 to
10.1.56
Updates `org.apache.tomcat:tomcat-jaspic-api` from 10.1.55 to 10.1.56
Updates `org.apache.tomcat:tomcat-catalina` from 10.1.55 to 10.1.56
Updates `org.apache.tomcat:tomcat-jasper` from 10.1.55 to 10.1.56
Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.55 to 10.1.56
Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.55 to 10.1.56
---
updated-dependencies:
- dependency-name: org.apache:apache
dependency-version: '39'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-core
dependency-version: 1.5.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 9.0.119
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.javassist:javassist
dependency-version: 3.32.0-GA
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
dependency-version: 10.1.56
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 10.1.56
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 10.1.56
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 10.1.56
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 10.1.56
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper
dependency-version: 10.1.56
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
dependency-version: 10.1.56
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
dependency-version: 10.1.56
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
integration-tests/jakarta-ee/pom.xml | 2 +-
pom.xml | 10 +++++-----
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/integration-tests/jakarta-ee/pom.xml
b/integration-tests/jakarta-ee/pom.xml
index 635af1934..18b4c4e8d 100644
--- a/integration-tests/jakarta-ee/pom.xml
+++ b/integration-tests/jakarta-ee/pom.xml
@@ -237,7 +237,7 @@
<dependency>
<groupId>org.javassist</groupId>
<artifactId>javassist</artifactId>
- <version>3.31.0-GA</version>
+ <version>3.32.0-GA</version>
<scope>test</scope>
</dependency>
diff --git a/pom.xml b/pom.xml
index 779b26e71..ef8b8b6e9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,7 +25,7 @@
<parent>
<groupId>org.apache</groupId>
<artifactId>apache</artifactId>
- <version>38</version>
+ <version>39</version>
</parent>
<groupId>org.apache.shiro</groupId>
@@ -108,8 +108,8 @@
<jcache.api.version>1.1.1</jcache.api.version>
<jdk.version>11</jdk.version>
<jetty.version>9.4.58.v20250814</jetty.version>
- <tomcat.version>9.0.118</tomcat.version>
- <tomcat10.version>10.1.55</tomcat10.version>
+ <tomcat.version>9.0.119</tomcat.version>
+ <tomcat10.version>10.1.56</tomcat10.version>
<owasp.java.encoder.version>1.4.0</owasp.java.encoder.version>
<!-- Don't change this version without also changing the shiro-quartz
and shiro-features
modules' OSGi metadata: -->
@@ -1230,12 +1230,12 @@
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-core</artifactId>
- <version>1.5.34</version>
+ <version>1.5.37</version>
</dependency>
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
- <version>1.5.34</version>
+ <version>1.5.37</version>
</dependency>
<dependency>
