This is an automated email from the ASF dual-hosted git repository.
fpapon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/main by this push:
new 601674155 chore(deps): bump the maven-dependencies group with 9
updates (#2919)
601674155 is described below
commit 601674155f2eda47080f27800ff794ec82c95098
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Oct 25 09:22:56 2026 +0100
chore(deps): bump the maven-dependencies group with 9 updates (#2919)
* chore(deps): bump the maven-dependencies group with 9 updates
Bumps the maven-dependencies group with 9 updates:
| Package | From | To |
| --- | --- | --- |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) |
`1.18.14` | `1.18.15` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) |
`1.18.14` | `1.18.15` |
| [org.owasp.encoder:encoder](https://github.com/OWASP/owasp-java-encoder)
| `1.5.0` | `1.5.1` |
|
[com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp)
| `0.26.3` | `0.26.5` |
|
[jakarta.json.bind:jakarta.json.bind-api](https://github.com/jakartaee/jsonb-api)
| `3.0.3` | `3.0.4` |
|
[io.openliberty.tools:liberty-maven-plugin](https://github.com/OpenLiberty/ci.maven)
| `3.12.3` | `3.12.4` |
|
[com.flowlogix.depchain:integration-test](https://github.com/flowlogix/depchain)
| `132` | `133` |
| [com.flowlogix:flowlogix-jee](https://github.com/flowlogix/flowlogix) |
`11.7.1` | `11.7.3` |
| [fish.payara.extras:payara-micro](https://github.com/payara/payara) |
`7.2026.9` | `7.2026.10` |
Updates `net.bytebuddy:byte-buddy` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15)
Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15)
Updates `net.bytebuddy:byte-buddy-agent` from 1.18.14 to 1.18.15
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.14...byte-buddy-1.18.15)
Updates `org.owasp.encoder:encoder` from 1.5.0 to 1.5.1
- [Release notes](https://github.com/OWASP/owasp-java-encoder/releases)
-
[Changelog](https://github.com/OWASP/owasp-java-encoder/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/OWASP/owasp-java-encoder/compare/v1.5.0...v1.5.1)
Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.26.3 to
0.26.5
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
-
[Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.26.3...japicmp-base-0.26.5)
Updates `jakarta.json.bind:jakarta.json.bind-api` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/jakartaee/jsonb-api/releases)
- [Commits](https://github.com/jakartaee/jsonb-api/compare/3.0.3...3.0.4)
Updates `io.openliberty.tools:liberty-maven-plugin` from 3.12.3 to 3.12.4
- [Release notes](https://github.com/OpenLiberty/ci.maven/releases)
-
[Commits](https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.3...liberty-maven-3.12.4)
Updates `com.flowlogix.depchain:integration-test` from 132 to 133
- [Release notes](https://github.com/flowlogix/depchain/releases)
- [Commits](https://github.com/flowlogix/depchain/commits)
Updates `com.flowlogix:flowlogix-jee` from 11.7.1 to 11.7.3
- [Release notes](https://github.com/flowlogix/flowlogix/releases)
-
[Commits](https://github.com/flowlogix/flowlogix/compare/Version-11.7.1...Version-11.7.3)
Updates `fish.payara.extras:payara-micro` from 7.2026.9 to 7.2026.10
- [Release notes](https://github.com/payara/payara/releases)
-
[Commits](https://github.com/payara/payara/compare/payara-server-7.2026.9...payara-server-7.2026.10)
---
updated-dependencies:
- dependency-name: net.bytebuddy:byte-buddy
dependency-version: 1.18.15
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-version: 1.18.15
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-version: 1.18.15
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.owasp.encoder:encoder
dependency-version: 1.5.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
dependency-version: 0.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: jakarta.json.bind:jakarta.json.bind-api
dependency-version: 3.0.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: io.openliberty.tools:liberty-maven-plugin
dependency-version: 3.12.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: com.flowlogix.depchain:integration-test
dependency-version: '133'
dependency-type: direct:development
update-type: version-update:semver-major
dependency-group: maven-dependencies
- dependency-name: com.flowlogix:flowlogix-jee
dependency-version: 11.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: fish.payara.extras:payara-micro
dependency-version: 7.2026.10
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
* bump FL depchain to 135
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: lprimak <[email protected]>
---
integration-tests/jakarta-ee/pom.xml | 6 +++---
integration-tests/jaxrs/openliberty/pom.xml | 2 +-
integration-tests/jaxrs/tests/pom.xml | 2 +-
pom.xml | 6 +++---
4 files changed, 8 insertions(+), 8 deletions(-)
diff --git a/integration-tests/jakarta-ee/pom.xml
b/integration-tests/jakarta-ee/pom.xml
index f07f05b2d..c40138d8b 100644
--- a/integration-tests/jakarta-ee/pom.xml
+++ b/integration-tests/jakarta-ee/pom.xml
@@ -36,7 +36,7 @@
<arquillian.graphene.version>3.0.1.Final</arquillian.graphene.version>
<drone.browser>firefox</drone.browser>
- <payara.version>7.2026.9</payara.version>
+ <payara.version>7.2026.10</payara.version>
<payara.start.skip>${skipITs}</payara.start.skip>
<asadmin.cmd>asadmin</asadmin.cmd>
<unix-sed-skip>${payara.start.skip}</unix-sed-skip>
@@ -93,7 +93,7 @@
<dependency>
<groupId>com.flowlogix.depchain</groupId>
<artifactId>integration-test</artifactId>
- <version>132</version>
+ <version>135</version>
<scope>test</scope>
</dependency>
@@ -106,7 +106,7 @@
<dependency>
<groupId>com.flowlogix</groupId>
<artifactId>flowlogix-jee</artifactId>
- <version>11.7.1</version>
+ <version>11.7.3</version>
</dependency>
<dependency>
diff --git a/integration-tests/jaxrs/openliberty/pom.xml
b/integration-tests/jaxrs/openliberty/pom.xml
index c0d62e6b3..bd6f11990 100644
--- a/integration-tests/jaxrs/openliberty/pom.xml
+++ b/integration-tests/jaxrs/openliberty/pom.xml
@@ -60,7 +60,7 @@
<plugin>
<groupId>io.openliberty.tools</groupId>
<artifactId>liberty-maven-plugin</artifactId>
- <version>3.12.3</version>
+ <version>3.12.4</version>
<configuration>
<serverName>shiro-its-jaxrs-openliberty</serverName>
<features>
diff --git a/integration-tests/jaxrs/tests/pom.xml
b/integration-tests/jaxrs/tests/pom.xml
index 34e0af510..30a7aef4a 100644
--- a/integration-tests/jaxrs/tests/pom.xml
+++ b/integration-tests/jaxrs/tests/pom.xml
@@ -54,7 +54,7 @@
<dependency>
<groupId>jakarta.json.bind</groupId>
<artifactId>jakarta.json.bind-api</artifactId>
- <version>3.0.3</version>
+ <version>3.0.4</version>
<scope>compile</scope>
</dependency>
<dependency>
diff --git a/pom.xml b/pom.xml
index b815853d7..c8d541da3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@
<tomcat.version>11.0.27</tomcat.version>
<jakarta.ee.version>11.0.0</jakarta.ee.version>
<jetty.version>12.1.14</jetty.version>
- <owasp.java.encoder.version>1.5.0</owasp.java.encoder.version>
+ <owasp.java.encoder.version>1.5.1</owasp.java.encoder.version>
<!-- Don't change this version without also changing the shiro-quartz
and shiro-features
modules' OSGi metadata: -->
<quartz.version>2.5.2</quartz.version>
@@ -125,7 +125,7 @@
<!-- Test 3rd-party dependencies: -->
<easymock.version>5.7.0</easymock.version>
<mockito.version>5.24.0</mockito.version>
- <bytebuddy.version>1.18.14</bytebuddy.version>
+ <bytebuddy.version>1.18.15</bytebuddy.version>
<gmaven.version>5.1.0</gmaven.version>
<groovy.version>6.0.0</groovy.version>
<junit.version>6.1.3</junit.version>
@@ -468,7 +468,7 @@
<plugin>
<groupId>com.github.siom79.japicmp</groupId>
<artifactId>japicmp-maven-plugin</artifactId>
- <version>0.26.3</version>
+ <version>0.26.5</version>
<configuration>
<!-- If specific old version is needed, uncomment the
following and set the version to compare against
<oldVersion>