This is an automated email from the ASF dual-hosted git repository.
lprimak pushed a commit to branch 2.x
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/2.x by this push:
new 9edea4f43 chore(deps): bump the maven-dependencies group across 1
directory with 41 updates (#2936)
9edea4f43 is described below
commit 9edea4f43f461d06a3003e1e4d45a9d3bcf52910
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Nov 1 22:00:53 2026 -0600
chore(deps): bump the maven-dependencies group across 1 directory with 41
updates (#2936)
Bumps the maven-dependencies group with 41 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `39`
| `40` |
| org.apache.commons:commons-lang3 | `3.20.0` | `3.21.0` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.23.0`
| `5.24.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) |
`5.23.0` | `5.24.0` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) |
`1.18.12` | `1.18.16` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) |
`1.18.12` | `1.18.16` |
| [net.bytebuddy:byte-buddy-agent](https://github.com/raphw/byte-buddy) |
`1.18.12` | `1.18.16` |
| [org.owasp.encoder:encoder](https://github.com/OWASP/owasp-java-encoder)
| `1.4.0` | `1.6.0` |
| org.slf4j:slf4j-api | `2.0.18` | `2.0.20` |
| org.slf4j:slf4j-simple | `2.0.18` | `2.0.20` |
| org.slf4j:jcl-over-slf4j | `2.0.18` | `2.0.20` |
| org.slf4j:slf4j-jdk14 | `2.0.18` | `2.0.20` |
| org.slf4j:slf4j-reload4j | `2.0.18` | `2.0.20` |
| org.slf4j:slf4j-simple | `2.0.18` | `2.0.20` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) |
`1.6.3` | `1.6.6` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) |
`1.6.3` | `1.6.6` |
| org.slf4j:jcl-over-slf4j | `2.0.18` | `2.0.20` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) |
`1.85.2` | `1.86` |
|
[org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions)
| `2.21.0` | `2.23.0` |
|
[org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin)
| `3.6.1` | `3.6.2` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) |
`0.8.15` | `0.8.16` |
|
[com.github.siom79.japicmp:japicmp-maven-plugin](https://github.com/siom79/japicmp)
| `0.26.1` | `0.26.5` |
|
[org.codehaus.mojo:buildnumber-maven-plugin](https://github.com/mojohaus/buildnumber-maven-plugin)
| `3.3.0` | `3.3.1` |
|
[org.codehaus.mojo:taglist-maven-plugin](https://github.com/mojohaus/taglist-maven-plugin)
| `3.2.2` | `3.2.3` |
|
[org.codehaus.mojo:jdepend-maven-plugin](https://github.com/mojohaus/jdepend-maven-plugin)
| `2.2.0` | `2.2.1` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) |
`5.23.0` | `5.24.0` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) |
`1.18.46` | `1.18.48` |
| org.apache.tomcat.embed:tomcat-embed-core | `9.0.121` | `9.0.123` |
| org.apache.tomcat.embed:tomcat-embed-el | `9.0.121` | `9.0.123` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `9.0.121` | `9.0.123` |
| org.apache.tomcat:tomcat-jaspic-api | `9.0.121` | `9.0.123` |
| org.apache.tomcat:tomcat-catalina | `9.0.121` | `9.0.123` |
| org.apache.tomcat.embed:tomcat-embed-el | `9.0.121` | `9.0.123` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `9.0.121` | `9.0.123` |
|
[org.codehaus.mojo:xml-maven-plugin](https://github.com/mojohaus/xml-maven-plugin)
| `1.2.1` | `1.2.2` |
| org.apache.cxf:cxf-rt-frontend-jaxrs | `3.6.12` | `3.6.13` |
| org.apache.karaf.features:framework | `4.4.11` | `4.4.12` |
| org.slf4j:slf4j-jdk14 | `2.0.18` | `2.0.20` |
| [org.omnifaces:omnifaces](https://github.com/omnifaces/omnifaces) |
`3.14.24` | `3.14.28` |
| org.apache.cxf:cxf-bom | `3.6.12` | `3.6.13` |
| org.apache.johnzon:johnzon-jsonb | `1.3.0` | `1.3.1` |
| org.apache.tomcat:tomcat-jaspic-api | `9.0.121` | `9.0.123` |
| org.apache.tomcat:tomcat-catalina | `9.0.121` | `9.0.123` |
| org.yaml:snakeyaml | `2.6` | `2.7` |
| org.apache.cxf:cxf-rt-rs-client | `3.6.12` | `3.6.13` |
|
[io.openliberty.tools:liberty-maven-plugin](https://github.com/OpenLiberty/ci.maven)
| `3.12.3` | `3.12.4` |
|
[org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin)
| `3.6.3` | `3.6.4` |
| org.slf4j:slf4j-reload4j | `2.0.18` | `2.0.20` |
| org.apache.tomcat.embed:tomcat-embed-core | `10.1.59` | `10.1.61` |
| org.apache.tomcat.embed:tomcat-embed-el | `10.1.59` | `10.1.61` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `10.1.59` | `10.1.61` |
| org.apache.tomcat:tomcat-jaspic-api | `10.1.59` | `10.1.61` |
| org.apache.tomcat:tomcat-catalina | `10.1.59` | `10.1.61` |
| org.apache.tomcat:tomcat-jasper | `10.1.59` | `10.1.61` |
| org.apache.tomcat:tomcat-jasper-el | `10.1.59` | `10.1.61` |
| org.apache.tomcat:tomcat-jasper-el | `10.1.59` | `10.1.61` |
| org.apache.maven:apache-maven | `3.9.16` | `3.10.0` |
Updates `org.apache:apache` from 39 to 40
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)
Updates `org.apache.commons:commons-lang3` from 3.20.0 to 3.21.0
Updates `org.mockito:mockito-core` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.23.0...v5.24.0)
Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.23.0...v5.24.0)
Updates `net.bytebuddy:byte-buddy` from 1.18.12 to 1.18.16
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.12...byte-buddy-1.18.16)
Updates `net.bytebuddy:byte-buddy-agent` from 1.18.12 to 1.18.16
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.12...byte-buddy-1.18.16)
Updates `net.bytebuddy:byte-buddy-agent` from 1.18.12 to 1.18.16
- [Release notes](https://github.com/raphw/byte-buddy/releases)
-
[Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
-
[Commits](https://github.com/raphw/byte-buddy/compare/byte-buddy-1.18.12...byte-buddy-1.18.16)
Updates `org.owasp.encoder:encoder` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/OWASP/owasp-java-encoder/releases)
-
[Changelog](https://github.com/OWASP/owasp-java-encoder/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/OWASP/owasp-java-encoder/compare/v1.4.0...v1.6.0)
Updates `org.slf4j:slf4j-api` from 2.0.18 to 2.0.20
Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.20
Updates `org.slf4j:jcl-over-slf4j` from 2.0.18 to 2.0.20
Updates `org.slf4j:slf4j-jdk14` from 2.0.18 to 2.0.20
Updates `org.slf4j:slf4j-reload4j` from 2.0.18 to 2.0.20
Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.20
Updates `ch.qos.logback:logback-core` from 1.6.3 to 1.6.6
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.6)
Updates `ch.qos.logback:logback-classic` from 1.6.3 to 1.6.6
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.6)
Updates `org.slf4j:jcl-over-slf4j` from 2.0.18 to 2.0.20
Updates `org.bouncycastle:bcprov-jdk18on` from 1.85.2 to 1.86
-
[Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.md)
- [Commits](https://github.com/bcgit/bc-java/commits)
Updates `org.codehaus.mojo:versions-maven-plugin` from 2.21.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
-
[Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/mojohaus/versions/compare/2.21.0...2.23.0)
Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.1 to 3.6.2
- [Release
notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/build-helper-maven-plugin/compare/3.6.1...3.6.2)
Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.15...v0.8.16)
Updates `com.github.siom79.japicmp:japicmp-maven-plugin` from 0.26.1 to
0.26.5
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
-
[Commits](https://github.com/siom79/japicmp/compare/japicmp-base-0.26.1...japicmp-base-0.26.5)
Updates `org.codehaus.mojo:buildnumber-maven-plugin` from 3.3.0 to 3.3.1
- [Release
notes](https://github.com/mojohaus/buildnumber-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/buildnumber-maven-plugin/compare/buildnumber-maven-plugin-3.3.0...buildnumber-maven-plugin-3.3.1)
Updates `org.codehaus.mojo:taglist-maven-plugin` from 3.2.2 to 3.2.3
- [Release notes](https://github.com/mojohaus/taglist-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/taglist-maven-plugin/compare/taglist-maven-plugin-3.2.2...3.2.3)
Updates `org.codehaus.mojo:jdepend-maven-plugin` from 2.2.0 to 2.2.1
- [Release notes](https://github.com/mojohaus/jdepend-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/jdepend-maven-plugin/compare/jdepend-maven-plugin-2.2.0...jdepend-maven-plugin-2.2.1)
Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.23.0...v5.24.0)
Updates `org.projectlombok:lombok` from 1.18.46 to 1.18.48
-
[Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
-
[Commits](https://github.com/projectlombok/lombok/compare/v1.18.46...v1.18.48)
Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.121 to 9.0.123
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.121 to 9.0.123
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.121 to
9.0.123
Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.121 to 9.0.123
Updates `org.apache.tomcat:tomcat-catalina` from 9.0.121 to 9.0.123
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.121 to 9.0.123
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.121 to
9.0.123
Updates `org.codehaus.mojo:xml-maven-plugin` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/mojohaus/xml-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/xml-maven-plugin/compare/xml-maven-plugin-1.2.1...xml-maven-plugin-1.2.2)
Updates `org.apache.cxf:cxf-rt-frontend-jaxrs` from 3.6.12 to 3.6.13
Updates `org.apache.karaf.features:framework` from 4.4.11 to 4.4.12
Updates `org.slf4j:slf4j-jdk14` from 2.0.18 to 2.0.20
Updates `org.omnifaces:omnifaces` from 3.14.24 to 3.14.28
-
[Commits](https://github.com/omnifaces/omnifaces/compare/3.14.24...3.14.28)
Updates `org.apache.cxf:cxf-bom` from 3.6.12 to 3.6.13
Updates `org.apache.johnzon:johnzon-jsonb` from 1.3.0 to 1.3.1
Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.121 to 9.0.123
Updates `org.apache.tomcat:tomcat-catalina` from 9.0.121 to 9.0.123
Updates `org.yaml:snakeyaml` from 2.6 to 2.7
Updates `org.apache.cxf:cxf-rt-rs-client` from 3.6.12 to 3.6.13
Updates `io.openliberty.tools:liberty-maven-plugin` from 3.12.3 to 3.12.4
- [Release notes](https://github.com/OpenLiberty/ci.maven/releases)
-
[Commits](https://github.com/OpenLiberty/ci.maven/compare/liberty-maven-3.12.3...liberty-maven-3.12.4)
Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.3 to 3.6.4
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.6.3...3.6.4)
Updates `org.slf4j:slf4j-reload4j` from 2.0.18 to 2.0.20
Updates `org.apache.tomcat.embed:tomcat-embed-core` from 10.1.59 to 10.1.61
Updates `org.apache.tomcat.embed:tomcat-embed-el` from 10.1.59 to 10.1.61
Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 10.1.59 to
10.1.61
Updates `org.apache.tomcat:tomcat-jaspic-api` from 10.1.59 to 10.1.61
Updates `org.apache.tomcat:tomcat-catalina` from 10.1.59 to 10.1.61
Updates `org.apache.tomcat:tomcat-jasper` from 10.1.59 to 10.1.61
Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.59 to 10.1.61
Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.59 to 10.1.61
Updates `org.apache.maven:apache-maven` from 3.9.16 to 3.10.0
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.6.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-core
dependency-version: 1.6.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: com.github.siom79.japicmp:japicmp-maven-plugin
dependency-version: 0.26.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: io.openliberty.tools:liberty-maven-plugin
dependency-version: 3.12.4
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy
dependency-version: 1.18.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-version: 1.18.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: net.bytebuddy:byte-buddy-agent
dependency-version: 1.18.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.commons:commons-lang3
dependency-version: 3.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.cxf:cxf-bom
dependency-version: 3.6.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.cxf:cxf-rt-frontend-jaxrs
dependency-version: 3.6.13
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.cxf:cxf-rt-rs-client
dependency-version: 3.6.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.johnzon:johnzon-jsonb
dependency-version: 1.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.karaf.features:framework
dependency-version: 4.4.12
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.maven:apache-maven
dependency-version: 3.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
dependency-version: 10.1.61
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 10.1.61
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 10.1.61
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 10.1.61
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper
dependency-version: 10.1.61
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
dependency-version: 10.1.61
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
dependency-version: 10.1.61
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 10.1.61
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
dependency-version: 9.0.123
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.apache:apache
dependency-version: '40'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: maven-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
dependency-version: '1.86'
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
dependency-version: 3.6.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:buildnumber-maven-plugin
dependency-version: 3.3.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:exec-maven-plugin
dependency-version: 3.6.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:jdepend-maven-plugin
dependency-version: 2.2.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:taglist-maven-plugin
dependency-version: 3.2.3
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
dependency-version: 2.23.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.codehaus.mojo:xml-maven-plugin
dependency-version: 1.2.2
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
dependency-version: 0.8.16
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
dependency-version: 5.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-junit-jupiter
dependency-version: 5.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-junit-jupiter
dependency-version: 5.24.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.omnifaces:omnifaces
dependency-version: 3.14.28
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.owasp.encoder:encoder
dependency-version: 1.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
- dependency-name: org.projectlombok:lombok
dependency-version: 1.18.48
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:jcl-over-slf4j
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:jcl-over-slf4j
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-api
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-jdk14
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-jdk14
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-reload4j
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-reload4j
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-simple
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.slf4j:slf4j-simple
dependency-version: 2.0.20
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: maven-dependencies
- dependency-name: org.yaml:snakeyaml
dependency-version: '2.7'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: maven-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.mvn/wrapper/maven-wrapper.properties | 2 +-
integration-tests/jakarta-ee/pom.xml | 4 +--
integration-tests/jaxrs/app/pom.xml | 2 +-
integration-tests/jaxrs/openliberty/pom.xml | 2 +-
integration-tests/jaxrs/tests/pom.xml | 4 +--
integration-tests/meecrowave-support/pom.xml | 4 +--
pom.xml | 38 ++++++++++++++--------------
samples/quickstart-guice/pom.xml | 2 +-
samples/quickstart/pom.xml | 2 +-
samples/spring/pom.xml | 2 +-
samples/web-jakarta/pom.xml | 4 +--
support/features/pom.xml | 2 +-
support/jakarta-ee/pom.xml | 2 +-
support/jaxrs/pom.xml | 2 +-
support/servlet-plugin/pom.xml | 2 +-
15 files changed, 37 insertions(+), 37 deletions(-)
diff --git a/.mvn/wrapper/maven-wrapper.properties
b/.mvn/wrapper/maven-wrapper.properties
index 216df0589..bb58b3c26 100644
--- a/.mvn/wrapper/maven-wrapper.properties
+++ b/.mvn/wrapper/maven-wrapper.properties
@@ -1,3 +1,3 @@
wrapperVersion=3.3.4
distributionType=only-script
-distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.16/apache-maven-3.9.16-bin.zip
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.10.0/apache-maven-3.10.0-bin.zip
diff --git a/integration-tests/jakarta-ee/pom.xml
b/integration-tests/jakarta-ee/pom.xml
index 1bbb15cfd..49908f4f3 100644
--- a/integration-tests/jakarta-ee/pom.xml
+++ b/integration-tests/jakarta-ee/pom.xml
@@ -65,7 +65,7 @@
<dependency>
<groupId>org.omnifaces</groupId>
<artifactId>omnifaces</artifactId>
- <version>3.14.24</version>
+ <version>3.14.28</version>
</dependency>
<dependency>
<groupId>org.projectlombok</groupId>
@@ -386,7 +386,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>exec-maven-plugin</artifactId>
- <version>3.6.3</version>
+ <version>3.6.4</version>
<configuration>
<executable>${project.build.directory}/dependency/payara5/bin/${asadmin.cmd}</executable>
<skip>${payara.start.skip}</skip>
diff --git a/integration-tests/jaxrs/app/pom.xml
b/integration-tests/jaxrs/app/pom.xml
index ed59daaa5..fa7615430 100644
--- a/integration-tests/jaxrs/app/pom.xml
+++ b/integration-tests/jaxrs/app/pom.xml
@@ -50,7 +50,7 @@
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
- <version>2.6</version>
+ <version>2.7</version>
</dependency>
<dependency>
diff --git a/integration-tests/jaxrs/openliberty/pom.xml
b/integration-tests/jaxrs/openliberty/pom.xml
index 566c14ed4..89fb4cbdf 100644
--- a/integration-tests/jaxrs/openliberty/pom.xml
+++ b/integration-tests/jaxrs/openliberty/pom.xml
@@ -61,7 +61,7 @@
<plugin>
<groupId>io.openliberty.tools</groupId>
<artifactId>liberty-maven-plugin</artifactId>
- <version>3.12.3</version>
+ <version>3.12.4</version>
<configuration>
<skip>${liberty.start.skip}</skip>
<serverName>shiro-its-jaxrs-openliberty</serverName>
diff --git a/integration-tests/jaxrs/tests/pom.xml
b/integration-tests/jaxrs/tests/pom.xml
index 3b4a6957c..81452ea69 100644
--- a/integration-tests/jaxrs/tests/pom.xml
+++ b/integration-tests/jaxrs/tests/pom.xml
@@ -35,7 +35,7 @@
<properties>
<module.name>its.jaxrs.tests</module.name>
<jaxrs.api.version>2.1.1</jaxrs.api.version>
- <johnzon.version>1.3.0</johnzon.version>
+ <johnzon.version>1.3.1</johnzon.version>
</properties>
<dependencies>
@@ -67,7 +67,7 @@
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-rt-rs-client</artifactId>
- <version>3.6.12</version>
+ <version>3.6.13</version>
<scope>runtime</scope>
</dependency>
<dependency>
diff --git a/integration-tests/meecrowave-support/pom.xml
b/integration-tests/meecrowave-support/pom.xml
index 678cdd1f7..8488a07c0 100644
--- a/integration-tests/meecrowave-support/pom.xml
+++ b/integration-tests/meecrowave-support/pom.xml
@@ -78,14 +78,14 @@
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-bom</artifactId>
- <version>3.6.12</version>
+ <version>3.6.13</version>
<scope>import</scope>
<type>pom</type>
</dependency>
<dependency>
<groupId>org.apache.johnzon</groupId>
<artifactId>johnzon-jsonb</artifactId>
- <version>1.3.0</version>
+ <version>1.3.1</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat</groupId>
diff --git a/pom.xml b/pom.xml
index 9a801bbf3..f710202ab 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,7 +25,7 @@
<parent>
<groupId>org.apache</groupId>
<artifactId>apache</artifactId>
- <version>39</version>
+ <version>40</version>
</parent>
<groupId>org.apache.shiro</groupId>
@@ -97,7 +97,7 @@
<commons.cli.version>1.11.0</commons.cli.version>
<commons.collection.version>3.2.2</commons.collection.version>
<commons.configuration2.version>2.15.1</commons.configuration2.version>
- <commons.lang3.version>3.20.0</commons.lang3.version>
+ <commons.lang3.version>3.21.0</commons.lang3.version>
<commons.logging.version>1.4.0</commons.logging.version>
<commons.text.version>1.8</commons.text.version>
<!-- Don't change this version without also changing the shiro-ehcache
and shiro-features
@@ -110,26 +110,26 @@
<jcache.api.version>1.1.1</jcache.api.version>
<jdk.version>11</jdk.version>
<jetty.version>9.4.58.v20250814</jetty.version>
- <tomcat.version>9.0.121</tomcat.version>
- <tomcat10.version>10.1.59</tomcat10.version>
- <owasp.java.encoder.version>1.4.0</owasp.java.encoder.version>
+ <tomcat.version>9.0.123</tomcat.version>
+ <tomcat10.version>10.1.61</tomcat10.version>
+ <owasp.java.encoder.version>1.6.0</owasp.java.encoder.version>
<!-- Don't change this version without also changing the shiro-quartz
and shiro-features
modules' OSGi metadata: -->
<quartz.version>2.5.2</quartz.version>
<quartz.docs.version>2.3.0</quartz.docs.version>
- <slf4j.version>2.0.18</slf4j.version>
+ <slf4j.version>2.0.20</slf4j.version>
<log4j.version>2.26.1</log4j.version>
<spring.version>5.3.39</spring.version>
<spring-boot.version>2.7.18</spring-boot.version>
<guice.version>4.2.3</guice.version>
<jaxrs.api.version>2.1.6</jaxrs.api.version>
<htmlunit.version>4.21.0</htmlunit.version>
- <bouncycastle.version>1.85.2</bouncycastle.version>
+ <bouncycastle.version>1.86</bouncycastle.version>
<!-- Test 3rd-party dependencies: -->
<easymock.version>5.7.0</easymock.version>
- <mockito.version>5.23.0</mockito.version>
- <bytebuddy.version>1.18.12</bytebuddy.version>
+ <mockito.version>5.24.0</mockito.version>
+ <bytebuddy.version>1.18.16</bytebuddy.version>
<gmaven.version>5.1.0</gmaven.version>
<groovy.version>4.0.33</groovy.version>
<junit.version>5.14.4</junit.version>
@@ -138,7 +138,7 @@
<hibernate.version>5.6.15.Final</hibernate.version>
<taglibs.standard.version>1.2.5</taglibs.standard.version>
<jakarta.annotations.version>1.3.5</jakarta.annotations.version>
- <lombok.version>1.18.46</lombok.version>
+ <lombok.version>1.18.48</lombok.version>
<maven.compiler.release>${jdk.version}</maven.compiler.release>
@@ -400,7 +400,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>versions-maven-plugin</artifactId>
- <version>2.21.0</version>
+ <version>2.23.0</version>
</plugin>
<!-- Allow writing tests in Groovy: -->
<plugin>
@@ -420,12 +420,12 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>build-helper-maven-plugin</artifactId>
- <version>3.6.1</version>
+ <version>3.6.2</version>
</plugin>
<plugin>
<groupId>org.jacoco</groupId>
<artifactId>jacoco-maven-plugin</artifactId>
- <version>0.8.15</version>
+ <version>0.8.16</version>
</plugin>
<plugin>
<groupId>com.mycila</groupId>
@@ -469,7 +469,7 @@
<plugin>
<groupId>com.github.siom79.japicmp</groupId>
<artifactId>japicmp-maven-plugin</artifactId>
- <version>0.26.1</version>
+ <version>0.26.5</version>
<configuration>
<!-- If specific old version is needed, uncomment the
following and set the version to compare against
<oldVersion>
@@ -777,7 +777,7 @@
-->
<groupId>org.codehaus.mojo</groupId>
<artifactId>buildnumber-maven-plugin</artifactId>
- <version>3.3.0</version>
+ <version>3.3.1</version>
<executions>
<execution>
<phase>validate</phase>
@@ -1251,12 +1251,12 @@
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-core</artifactId>
- <version>1.6.3</version>
+ <version>1.6.6</version>
</dependency>
<dependency>
<groupId>ch.qos.logback</groupId>
<artifactId>logback-classic</artifactId>
- <version>1.6.3</version>
+ <version>1.6.6</version>
</dependency>
<dependency>
@@ -1627,7 +1627,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>taglist-maven-plugin</artifactId>
- <version>3.2.2</version>
+ <version>3.2.3</version>
<configuration>
<tagListOptions>
<tagClasses>
@@ -1660,7 +1660,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>jdepend-maven-plugin</artifactId>
- <version>2.2.0</version>
+ <version>2.2.1</version>
<reportSets>
<reportSet>
<reports>
diff --git a/samples/quickstart-guice/pom.xml b/samples/quickstart-guice/pom.xml
index aef8a6c09..0f970c65a 100644
--- a/samples/quickstart-guice/pom.xml
+++ b/samples/quickstart-guice/pom.xml
@@ -38,7 +38,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>exec-maven-plugin</artifactId>
- <version>3.6.3</version>
+ <version>3.6.4</version>
<executions>
<execution>
<goals>
diff --git a/samples/quickstart/pom.xml b/samples/quickstart/pom.xml
index 55957607f..1b55ec4ad 100644
--- a/samples/quickstart/pom.xml
+++ b/samples/quickstart/pom.xml
@@ -40,7 +40,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>exec-maven-plugin</artifactId>
- <version>3.6.3</version>
+ <version>3.6.4</version>
<executions>
<execution>
<goals>
diff --git a/samples/spring/pom.xml b/samples/spring/pom.xml
index 1a6ebc608..bea4faec6 100644
--- a/samples/spring/pom.xml
+++ b/samples/spring/pom.xml
@@ -72,7 +72,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>exec-maven-plugin</artifactId>
- <version>3.6.3</version>
+ <version>3.6.4</version>
<configuration>
<mainClass>org.apache.shiro.samples.spring.CliApp</mainClass>
</configuration>
diff --git a/samples/web-jakarta/pom.xml b/samples/web-jakarta/pom.xml
index ae06a18c9..d01488cc3 100644
--- a/samples/web-jakarta/pom.xml
+++ b/samples/web-jakarta/pom.xml
@@ -48,14 +48,14 @@
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-bom</artifactId>
- <version>3.6.12</version>
+ <version>3.6.13</version>
<scope>import</scope>
<type>pom</type>
</dependency>
<dependency>
<groupId>org.apache.johnzon</groupId>
<artifactId>johnzon-jsonb</artifactId>
- <version>1.3.0</version>
+ <version>1.3.1</version>
</dependency>
<dependency>
<groupId>org.apache.tomcat.embed</groupId>
diff --git a/support/features/pom.xml b/support/features/pom.xml
index 057d32ae3..38aae3374 100644
--- a/support/features/pom.xml
+++ b/support/features/pom.xml
@@ -40,7 +40,7 @@
<!-- Not a Shiro dependency - used for quartz bundle resolution only
(see features.xml): -->
<commons.collections.version>3.2.2</commons.collections.version>
<!-- karaf plugin version -->
- <karaf.version>4.4.11</karaf.version>
+ <karaf.version>4.4.12</karaf.version>
</properties>
<dependencies>
diff --git a/support/jakarta-ee/pom.xml b/support/jakarta-ee/pom.xml
index 12d28260c..f0ff71b19 100644
--- a/support/jakarta-ee/pom.xml
+++ b/support/jakarta-ee/pom.xml
@@ -72,7 +72,7 @@
<dependency>
<groupId>org.omnifaces</groupId>
<artifactId>omnifaces</artifactId>
- <version>3.14.24</version>
+ <version>3.14.28</version>
</dependency>
<dependency>
<groupId>org.jsoup</groupId>
diff --git a/support/jaxrs/pom.xml b/support/jaxrs/pom.xml
index 82df45be5..7438207ed 100644
--- a/support/jaxrs/pom.xml
+++ b/support/jaxrs/pom.xml
@@ -74,7 +74,7 @@
<dependency>
<groupId>org.apache.cxf</groupId>
<artifactId>cxf-rt-frontend-jaxrs</artifactId>
- <version>3.6.12</version>
+ <version>3.6.13</version>
<scope>test</scope>
<exclusions>
<exclusion>
diff --git a/support/servlet-plugin/pom.xml b/support/servlet-plugin/pom.xml
index fa6028ef7..62b51f891 100644
--- a/support/servlet-plugin/pom.xml
+++ b/support/servlet-plugin/pom.xml
@@ -50,7 +50,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>xml-maven-plugin</artifactId>
- <version>1.2.1</version>
+ <version>1.2.2</version>
<executions>
<execution>
<goals>
