This is an automated email from the ASF dual-hosted git repository.
lprimak pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/2.x by this push:
new 37d1ef7fd chore(deps): bump the maven-dependencies group with 25
updates (#2848)
37d1ef7fd is described below
commit 37d1ef7fdbe5449265bb064eaf94b1034d11fde6
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Aug 2 07:34:40 2026 -0500
chore(deps): bump the maven-dependencies group with 25 updates (#2848)
Bumps the maven-dependencies group with 30 updates:
| Package | From | To |
| --- | --- | --- |
| [org.apache.groovy:groovy-all](https://github.com/apache/groovy) |
`4.0.32` | `4.0.33` |
| [org.apache.groovy:groovy](https://github.com/apache/groovy) | `4.0.32` |
`4.0.33` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) |
`1.18.10` | `1.18.11` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) |
`1.18.10` | `1.18.11` |
| org.apache.logging.log4j:log4j-slf4j2-impl | `2.26.0` | `2.26.1` |
| org.apache.logging.log4j:log4j-core-test | `2.26.0` | `2.26.1` |
| org.apache.logging.log4j:log4j-api | `2.26.0` | `2.26.1` |
| org.apache.logging.log4j:log4j-core | `2.26.0` | `2.26.1` |
| org.apache.logging.log4j:log4j-jul | `2.26.0` | `2.26.1` |
| org.apache.logging.log4j:log4j-to-slf4j | `2.26.0` | `2.26.1` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) |
`1.5.37` | `1.6.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) |
`1.5.37` | `1.6.1` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) |
`1.84` | `1.85` |
|
[org.apache.maven.plugins:maven-help-plugin](https://github.com/apache/maven-help-plugin)
| `3.5.1` | `3.5.2` |
|
[org.codehaus.gmavenplus:gmavenplus-plugin](https://github.com/groovy/GMavenPlus)
| `5.0.0` | `5.1.0` |
|
[com.mycila:license-maven-plugin](https://github.com/mathieucarbou/license-maven-plugin)
| `5.0.0` | `5.1.1` |
| org.apache.tomcat.embed:tomcat-embed-core | `9.0.119` | `9.0.120` |
| org.apache.tomcat.embed:tomcat-embed-el | `9.0.119` | `9.0.120` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `9.0.119` | `9.0.120` |
| org.apache.tomcat:tomcat-jaspic-api | `9.0.119` | `9.0.120` |
| org.apache.tomcat:tomcat-catalina | `9.0.119` | `9.0.120` |
| [org.omnifaces:omnifaces](https://github.com/omnifaces/omnifaces) |
`3.14.21` | `3.14.23` |
|
[io.openliberty.tools:liberty-maven-plugin](https://github.com/OpenLiberty/ci.maven)
| `3.12.0` | `3.12.1` |
| org.apache.tomcat.embed:tomcat-embed-core | `10.1.56` | `10.1.57` |
| org.apache.tomcat.embed:tomcat-embed-el | `10.1.56` | `10.1.57` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `10.1.56` | `10.1.57` |
| org.apache.tomcat:tomcat-jaspic-api | `10.1.56` | `10.1.57` |
| org.apache.tomcat:tomcat-catalina | `10.1.56` | `10.1.57` |
| org.apache.tomcat:tomcat-jasper | `10.1.56` | `10.1.57` |
| org.apache.tomcat:tomcat-jasper-el | `10.1.56` | `10.1.57` |
Updates `org.apache.groovy:groovy-all` from 4.0.32 to 4.0.33
- [Commits](https://github.com/apache/groovy/commits)
Updates `org.apache.groovy:groovy` from 4.0.32 to 4.0.33
- [Commits](https://github.com/apache/groovy/commits)
Updates `org.apache.groovy:groovy` from 4.0.32 to 4.0.33
- [Commits](https://github.com/apache/groovy/commits)
Updates `net.bytebuddy:byte-buddy` from 1.18.10 to 1.18.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.10...byte-buddy-1.18.11)
Updates `net.bytebuddy:byte-buddy-agent` from 1.18.10 to 1.18.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.10...byte-buddy-1.18.11)
Updates `net.bytebuddy:byte-buddy-agent` from 1.18.10 to 1.18.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.10...byte-buddy-1.18.11)
Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-core-test` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-jul` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-core-test` from 2.26.0 to 2.26.1
Updates `ch.qos.logback:logback-core` from 1.5.37 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1)
Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1)
Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-jul` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-to-slf4j` from 2.26.0 to 2.26.1
Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85
-
[Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)
Updates `org.apache.maven.plugins:maven-help-plugin` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/apache/maven-help-plugin/releases)
-
[Commits](https://github.com/apache/maven-help-plugin/compare/maven-help-plugin-3.5.1...maven-help-plugin-3.5.2)
Updates `org.codehaus.gmavenplus:gmavenplus-plugin` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/groovy/GMavenPlus/releases)
- [Commits](https://github.com/groovy/GMavenPlus/compare/5.0.0...5.1.0)
Updates `com.mycila:license-maven-plugin` from 5.0.0 to 5.1.1
- [Release
notes](https://github.com/mathieucarbou/license-maven-plugin/releases)
-
[Changelog](https://github.com/mathieucarbou/license-maven-plugin/blob/master/docs/releases.md)
-
[Commits](https://github.com/mathieucarbou/license-maven-plugin/compare/v5.0.0...v5.1.1)
Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.119 to 9.0.120
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.119 to 9.0.120
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.119 to
9.0.120
Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.119 to 9.0.120
Updates `org.apache.tomcat:tomcat-catalina` from 9.0.119 to 9.0.120
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.119 to 9.0.120
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.119 to
9.0.120
Updates `org.omnifaces:omnifaces` from 3.14.21 to 3.14.23
- [Commits](https://github.com/omnifaces/omnifaces/commits)
Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.119 to 9.0.120
Updates `org.apache.tomcat:tomcat-catalina` from 9.0.119 to 9.0.120
Updates `io.openliberty.tools:liberty-maven-plugin` from 3.12.0 to 3.12.1
- [Release notes](https://github.com/OpenLiberty/ci.maven/releases)
-
[Commits](https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.0...liberty-maven-3.12.1)
Updates `org.apache.tomcat.embed:tomcat-embed-core` from 10.1.56 to 10.1.57
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 10.1.56 to 10.1.57
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 10.1.56 to
10.1.57
Updates `org.apache.tomcat:tomcat-jaspic-api` from 10.1.56 to 10.1.57
Updates `org.apache.tomcat:tomcat-catalina` from 10.1.56 to 10.1.57
Updates `org.apache.tomcat:tomcat-jasper` from 10.1.56 to 10.1.57
Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.56 to 10.1.57
Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.56 to 10.1.57
---
updated-dependencies:
- dependency-name: org.apache.groovy:groovy-all
dependency-version: 4.0.33
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.groovy:groovy
dependency-version: 4.0.33
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.groovy:groovy
dependency-version: 4.0.33
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy
dependency-version: 1.18.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-version: 1.18.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-version: 1.18.11
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core-test
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-jul
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-to-slf4j
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core-test
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-core
dependency-version: 1.6.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.6.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-jul
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.logging.log4j:log4j-to-slf4j
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
dependency-version: '1.85'
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-help-plugin
dependency-version: 3.5.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.codehaus.gmavenplus:gmavenplus-plugin
dependency-version: 5.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: com.mycila:license-maven-plugin
dependency-version: 5.1.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.omnifaces:omnifaces
dependency-version: 3.14.23
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 9.0.120
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: io.openliberty.tools:liberty-maven-plugin
dependency-version: 3.12.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
dependency-version: 10.1.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 10.1.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 10.1.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 10.1.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 10.1.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper
dependency-version: 10.1.57
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
dependency-version: 10.1.57
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
dependency-version: 10.1.57
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
integration-tests/jakarta-ee/pom.xml | 2 +-
integration-tests/jaxrs/openliberty/pom.xml | 2 +-
pom.xml | 22 +++++++++++-----------
support/jakarta-ee/pom.xml | 2 +-
4 files changed, 14 insertions(+), 14 deletions(-)
diff --git a/integration-tests/jakarta-ee/pom.xml
b/integration-tests/jakarta-ee/pom.xml
index 18b4c4e8d..0d4a59db1 100644
--- a/integration-tests/jakarta-ee/pom.xml
+++ b/integration-tests/jakarta-ee/pom.xml
@@ -65,7 +65,7 @@
<dependency>
<groupId>org.omnifaces</groupId>
<artifactId>omnifaces</artifactId>
- <version>3.14.21</version>
+ <version>3.14.23</version>
</dependency>
<dependency>
<groupId>org.projectlombok</groupId>
diff --git a/integration-tests/jaxrs/openliberty/pom.xml
b/integration-tests/jaxrs/openliberty/pom.xml
index fc473e93a..095ff998d 100644
--- a/integration-tests/jaxrs/openliberty/pom.xml
+++ b/integration-tests/jaxrs/openliberty/pom.xml
@@ -60,7 +60,7 @@
<plugin>
<groupId>io.openliberty.tools</groupId>
<artifactId>liberty-maven-plugin</artifactId>
- <version>3.12.0</version>
+ <version>3.12.1</version>
<configuration>
<serverName>shiro-its-jaxrs-openliberty</serverName>
<features>
diff --git a/pom.xml b/pom.xml
index ef8b8b6e9..c14f9ec85 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,28 +108,28 @@
<jcache.api.version>1.1.1</jcache.api.version>
<jdk.version>11</jdk.version>
<jetty.version>9.4.58.v20250814</jetty.version>
- <tomcat.version>9.0.119</tomcat.version>
- <tomcat10.version>10.1.56</tomcat10.version>
+ <tomcat.version>9.0.120</tomcat.version>
+ <tomcat10.version>10.1.57</tomcat10.version>
<owasp.java.encoder.version>1.4.0</owasp.java.encoder.version>
<!-- Don't change this version without also changing the shiro-quartz
and shiro-features
modules' OSGi metadata: -->
<quartz.version>2.5.2</quartz.version>
<quartz.docs.version>2.3.0</quartz.docs.version>
<slf4j.version>2.0.18</slf4j.version>
- <log4j.version>2.26.0</log4j.version>
+ <log4j.version>2.26.1</log4j.version>
<spring.version>5.3.39</spring.version>
<spring-boot.version>2.7.18</spring-boot.version>
<guice.version>4.2.3</guice.version>
<jaxrs.api.version>2.1.6</jaxrs.api.version>
<htmlunit.version>4.21.0</htmlunit.version>
- <bouncycastle.version>1.84</bouncycastle.version>
+ <bouncycastle.version>1.85</bouncycastle.version>
<!-- Test 3rd-party dependencies: -->
<easymock.version>5.6.0</easymock.version>
<mockito.version>5.23.0</mockito.version>
- <bytebuddy.version>1.18.10</bytebuddy.version>
- <gmaven.version>5.0.0</gmaven.version>
- <groovy.version>4.0.32</groovy.version>
+ <bytebuddy.version>1.18.11</bytebuddy.version>
+ <gmaven.version>5.1.0</gmaven.version>
+ <groovy.version>4.0.33</groovy.version>
<junit.version>5.14.4</junit.version>
<junit.engine.version>1.14.4</junit.engine.version>
<junit.server.jetty.version>3.5.0</junit.server.jetty.version>
@@ -331,7 +331,7 @@
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-help-plugin</artifactId>
- <version>3.5.1</version>
+ <version>3.5.2</version>
</plugin>
<plugin>
<groupId>org.apache.felix</groupId>
@@ -421,7 +421,7 @@
<plugin>
<groupId>com.mycila</groupId>
<artifactId>license-maven-plugin</artifactId>
- <version>5.0.0</version>
+ <version>5.1.1</version>
<configuration>
<aggregate>true</aggregate>
<header>${root.dir}/src/license/header.txt</header>
@@ -1230,12 +1230,12 @@
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-core</artifactId>
- <version>1.5.37</version>
+ <version>1.6.1</version>
</dependency>
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
- <version>1.5.37</version>
+ <version>1.6.1</version>
</dependency>
<dependency>
diff --git a/support/jakarta-ee/pom.xml b/support/jakarta-ee/pom.xml
index 9b3a4048b..897ca891f 100644
--- a/support/jakarta-ee/pom.xml
+++ b/support/jakarta-ee/pom.xml
@@ -72,7 +72,7 @@
<dependency>
<groupId>org.omnifaces</groupId>
<artifactId>omnifaces</artifactId>
- <version>3.14.21</version>
+ <version>3.14.23</version>
</dependency>
<dependency>
<groupId>org.jsoup</groupId>
