This is an automated email from the ASF dual-hosted git repository.
lprimak pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/main by this push:
new 54c6740bc chore(deps): bump the maven-dependencies group with 9
updates (#2906)
54c6740bc is described below
commit 54c6740bc5740ba5f4c2f7d350763866f243c675
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Oct 6 22:59:04 2026 -0500
chore(deps): bump the maven-dependencies group with 9 updates (#2906)
* chore(deps): bump the maven-dependencies group with 9 updates
Bumps the maven-dependencies group with 9 updates:
| Package | From | To |
| --- | --- | --- |
|
[com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) |
`14.1.0` | `14.3.0` |
| org.apache.commons:commons-lang3 | `3.20.0` | `3.21.0` |
| [org.owasp.encoder:encoder](https://github.com/OWASP/owasp-java-encoder)
| `1.4.0` | `1.5.0` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) |
`1.6.4` | `1.6.5` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) |
`1.6.4` | `1.6.5` |
|
[org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm)
| `7.4.10.Final` | `7.4.11.Final` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.7.1-jre`
| `33.7.2-jre` |
|
[org.seleniumhq.selenium:selenium-bom](https://github.com/SeleniumHQ/selenium)
| `4.49.0` | `4.50.0` |
| org.apache.maven:apache-maven | `3.9.16` | `3.10.0` |
Updates `com.puppycrawl.tools:checkstyle` from 14.1.0 to 14.3.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
-
[Commits](https://github.com/checkstyle/checkstyle/compare/checkstyle-14.1.0...checkstyle-14.3.0)
Updates `org.apache.commons:commons-lang3` from 3.20.0 to 3.21.0
Updates `org.owasp.encoder:encoder` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/OWASP/owasp-java-encoder/releases)
-
[Changelog](https://github.com/OWASP/owasp-java-encoder/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/OWASP/owasp-java-encoder/compare/v1.4.0...v1.5.0)
Updates `ch.qos.logback:logback-core` from 1.6.4 to 1.6.5
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.4...v_1.6.5)
Updates `ch.qos.logback:logback-classic` from 1.6.4 to 1.6.5
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.4...v_1.6.5)
Updates `org.hibernate.orm:hibernate-core` from 7.4.10.Final to 7.4.11.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
-
[Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.11/changelog.txt)
-
[Commits](https://github.com/hibernate/hibernate-orm/compare/7.4.10...7.4.11)
Updates `com.google.guava:guava` from 33.7.1-jre to 33.7.2-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)
Updates `org.seleniumhq.selenium:selenium-bom` from 4.49.0 to 4.50.0
- [Release notes](https://github.com/SeleniumHQ/selenium/releases)
-
[Commits](https://github.com/SeleniumHQ/selenium/compare/selenium-4.49.0...selenium-4.50.0)
Updates `org.apache.maven:apache-maven` from 3.9.16 to 3.10.0
---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
dependency-version: 14.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.commons:commons-lang3
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.owasp.encoder:encoder
dependency-version: 1.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-core
dependency-version: 1.6.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.6.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.hibernate.orm:hibernate-core
dependency-version: 7.4.11.Final
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: com.google.guava:guava
dependency-version: 33.7.2-jre
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.seleniumhq.selenium:selenium-bom
dependency-version: 4.50.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.maven:apache-maven
dependency-version: 3.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
* restore mvnw.cmd
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: lprimak <[email protected]>
---
.mvn/wrapper/maven-wrapper.properties | 2 +-
integration-tests/jakarta-ee/pom.xml | 2 +-
pom.xml | 14 +++++++-------
3 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/.mvn/wrapper/maven-wrapper.properties
b/.mvn/wrapper/maven-wrapper.properties
index 216df0589..bb58b3c26 100644
--- a/.mvn/wrapper/maven-wrapper.properties
+++ b/.mvn/wrapper/maven-wrapper.properties
@@ -1,3 +1,3 @@
wrapperVersion=3.3.4
distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.16/apache-maven-3.9.16-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.10.0/apache-maven-3.10.0-bin.zip
diff --git a/integration-tests/jakarta-ee/pom.xml
b/integration-tests/jakarta-ee/pom.xml
index fc9118d99..5a48bbff7 100644
--- a/integration-tests/jakarta-ee/pom.xml
+++ b/integration-tests/jakarta-ee/pom.xml
@@ -150,7 +150,7 @@
<dependency>
<groupId>org.seleniumhq.selenium</groupId>
<artifactId>selenium-bom</artifactId>
- <version>4.49.0</version>
+ <version>4.50.0</version>
<scope>import</scope>
<type>pom</type>
</dependency>
diff --git a/pom.xml b/pom.xml
index 4afe47ad0..1af699e73 100644
--- a/pom.xml
+++ b/pom.xml
@@ -98,7 +98,7 @@
<commons.cli.version>1.11.0</commons.cli.version>
<commons.collection.version>3.2.2</commons.collection.version>
<commons.configuration2.version>2.15.1</commons.configuration2.version>
- <commons.lang3.version>3.20.0</commons.lang3.version>
+ <commons.lang3.version>3.21.0</commons.lang3.version>
<commons.logging.version>1.4.0</commons.logging.version>
<commons.text.version>1.8</commons.text.version>
<hsqldb.version>2.7.4</hsqldb.version>
@@ -108,7 +108,7 @@
<tomcat.version>11.0.26</tomcat.version>
<jakarta.ee.version>11.0.0</jakarta.ee.version>
<jetty.version>12.1.13</jetty.version>
- <owasp.java.encoder.version>1.4.0</owasp.java.encoder.version>
+ <owasp.java.encoder.version>1.5.0</owasp.java.encoder.version>
<!-- Don't change this version without also changing the shiro-quartz
and shiro-features
modules' OSGi metadata: -->
<quartz.version>2.5.2</quartz.version>
@@ -130,7 +130,7 @@
<groovy.version>6.0.0</groovy.version>
<junit.version>6.1.3</junit.version>
<junit.server.jetty.version>3.5.0</junit.server.jetty.version>
- <hibernate.version>7.4.10.Final</hibernate.version>
+ <hibernate.version>7.4.11.Final</hibernate.version>
<taglibs.standard.version>1.2.5</taglibs.standard.version>
<lombok.version>1.18.48</lombok.version>
@@ -522,7 +522,7 @@
<dependency>
<groupId>com.puppycrawl.tools</groupId>
<artifactId>checkstyle</artifactId>
- <version>14.1.0</version>
+ <version>14.3.0</version>
</dependency>
</dependencies>
</plugin>
@@ -1117,12 +1117,12 @@
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-core</artifactId>
- <version>1.6.4</version>
+ <version>1.6.5</version>
</dependency>
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
- <version>1.6.4</version>
+ <version>1.6.5</version>
</dependency>
<dependency>
@@ -1346,7 +1346,7 @@
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
- <version>33.7.1-jre</version>
+ <version>33.7.2-jre</version>
</dependency>
<dependency>