Skip to content

Bump the "dependencies" group with 2 updates across multiple ecosystems - #619

Merged
redcatbear merged 2 commits into
mainfrom
dependabot/dependencies-a1b1a20759
Oct 3, 2026
Merged

Bump the "dependencies" group with 2 updates across multiple ecosystems#619
redcatbear merged 2 commits into
mainfrom
dependabot/dependencies-a1b1a20759

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 1 update: tcort/github-action-markdown-link-check.

Updates tcort/github-action-markdown-link-check from 1.1.2 to 1.1.3

Changelog

Sourced from tcort/github-action-markdown-link-check's changelog.

Changes

Version 1.1.3

  • update entrypoint.sh to use markdown-link-check 3.15.0
  • update Dockerfile to use node:24.18.0-alpine3.24
  • Add CHANGELOG.md and MAINT.md
Commits
  • e047c5b chore(entrypoint): new markdown-link-check
  • f324e89 chore(Dockerfile): update to node:24.18.0-alpine3.24
  • See full diff in compare view

Bumps the dependencies group with 12 updates:

Package From To
org.apache.maven.plugins:maven-deploy-plugin 3.1.4 3.2.0
org.sonarsource.scanner.maven:sonar-maven-plugin 5.7.0.6970 5.8.0.7211
org.mockito:mockito-junit-jupiter 5.23.0 5.24.0
net.sourceforge.plantuml:plantuml 1.2026.7 1.2026.8
io.github.git-commit-id:git-commit-id-maven-plugin 10.0.0 10.0.1
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-failsafe-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-surefire-report-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-artifact-plugin 3.6.1 3.7.0
org.codehaus.mojo:versions-maven-plugin 2.21.0 2.22.0
org.apache.maven.plugins:maven-install-plugin 3.1.4 3.2.0

Updates org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0

Release notes

Sourced from org.apache.maven.plugins:maven-deploy-plugin's releases.

3.2.0

🚀 New features and improvements

🐛 Bug Fixes

  • Backport security audit fixes to 3.x (f004-f008, f010, f012) (#701) @​gnodet

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

... (truncated)

Commits
  • 7aab9fb [maven-release-plugin] prepare release maven-deploy-plugin-3.2.0
  • 1f3eef5 Backport security audit fixes to 3.x (f004-f008, f010, f012)
  • 307f328 Simplify remote repository creation
  • 7b1bbc4 Cache projectsWithDeployExecution to fix O(N²) reactor scan
  • a9177c6 Clarify deploy without editing this projects POM
  • 7c40513 Restore the plain form of the ASF licence header
  • 5969234 Update Release Drafter configuration to use custom tag template and remove un...
  • df7b3fa Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • b4e8aed work around Maven 4 CLI lack of interpolation
  • d634bb4 enable build with Maven 4
  • Additional commits viewable in compare view

Updates org.sonarsource.scanner.maven:sonar-maven-plugin from 5.7.0.6970 to 5.8.0.7211

Release notes

Sourced from org.sonarsource.scanner.maven:sonar-maven-plugin's releases.

5.8.0.7211

Release notes - Sonar Scanner for Maven - 5.8

Maintenance

SCANMAVEN-382 Prepare next development iteration 5.8.0

SCANMAVEN-384 Fix QG broken by the new testing rules

SCANMAVEN-385 Code Quality reorganization from jvm to CI Experience Squad

SCANMAVEN-386 ToggleLockBranch: Add additional-message

SCANMAVEN-387 Code Quality Slack channel reorganization

SCANMAVEN-390 Upgrade orchestrator to version 6.3.0

SCANMAVEN-392 Upgrade jetty test dependencies to version 9.4.58.v20250814

SCANMAVEN-395 Remove scheduled invocation of sonar:sonar shorthand test

SCANMAVEN-397 Replace Maven 4.0.0-rc-5 in ITs with Maven 4.0.0-rc-6

SCANMAVEN-398 Upgrade orchestrator to version 6.4.0

SCANMAVEN-399 Update sonar-scanner-java-library to 4.1.2.1663

SCANMAVEN-401 Upgrade Jetty used by e2e tests

SCANMAVEN-402 Upgrade orchestrator to version 6.4.3.4676

Feature

SCANMAVEN-403 Releasability status fails on property-dump-plugin version

Commits
  • 7347a92 SCANMAVEN-403 Releasability status fails on property-dump-plugin version (#426)
  • 002f55c SCANMAVEN-402 Upgrade orchestrator to version 6.4.3.4676 (#425)
  • fc7515f SCANMAVEN-401 Upgrade Jetty used by e2e tests (#424)
  • 16dedb3 SCANMAVEN-399 Update sonar-scanner-java-library to 4.1.2.1663 (#421)
  • ad81956 SCANMAVEN-397 Upgrade Maven 4 to 4.0.0-rc-6 in tests (#420)
  • 86e9516 SCANMAVEN-398 Upgrade orchestrator to version 6.4.0 (#419)
  • c26335c SCANMAVEN-395 Remove scheduled invocation of sonar:sonar shorthand test (#417)
  • 6a79ca6 SCANMAVEN-392 Upgrade jetty test dependencies to version 9.4.58.v20250814 (#416)
  • 57bb131 SCANMAVEN-390 Upgrade orchestrator to version 6.3.0 (#414)
  • 9d50b6d GHA-355 Add statuses: write permission for release-lock feature (#412)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates net.sourceforge.plantuml:plantuml from 1.2026.7 to 1.2026.8

Release notes

Sourced from net.sourceforge.plantuml:plantuml's releases.

v1.2026.8

What's Changed

New Contributors

Full Changelog: plantuml/plantuml@v1.2026.7...v1.2026.8

Changelog

Sourced from net.sourceforge.plantuml:plantuml's changelog.

V1.2026.8 (Sep 5, 2026)

Commits
  • 149874a 🎉 version 1.2026.8
  • 1f35648 ✅ add non-regression tests about mindmap and wbs
  • 2db0db8 🍵 Stdlib includes for every host: PLANTUML_STDLIB_BASE and PLANTUML_STDLIB_LO...
  • d857925 Bump actions/setup-node from 6 to 7 (#2844)
  • dea3374 📝 fix javadoc warning in Sonar
  • 24b4fb1 📝 Document missing Javadoc @​param tags #2629 (#2850)
  • d6890f0 👷 perf-bench: recenter expected bands on the measured ratios (#2862)
  • 834f59f 👷 update sonar action and GPL_ONLY var. usage (#2871)
  • cd67d0d 👷 Move perf-bench and browser-test under tools/ (#2868)
  • 0e4f452 ♻️ Add README to site folder and reorganize JDepend tools (#2869)
  • Additional commits viewable in compare view

Updates io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1

Release notes

Sourced from io.github.git-commit-id:git-commit-id-maven-plugin's releases.

Version 10.0.1 is finally there and includes various bug-fixes and improvements :-)

What's Changed

Dependencies used by the plugin

Github Action

Maven Plugins used by the plugin

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:

<dependency>
    <groupId>io.github.git-commit-id</groupId>
    <artifactId>git-commit-id-maven-plugin</artifactId>
    <version>10.0.1</version>
</dependency>

Getting the latest snapshot (build automatically)

If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by github actions:

<pluginRepositories>
    <pluginRepository>
        <id>sonatype-snapshots</id>
        <name>Sonatype Snapshots</name>
         <url>https://s01.oss.sonatype.org/content/repositories/snapshots/</url>
    </pluginRepository>
</pluginRepositories>

Even though the github actions will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.

Known Issues / Limitations:

  • This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in ktoso/maven-git-commit-id-plugin#279
  • Using maven's plugin prefix resolution (e.g. mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with <injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to git-commit-id/maven-git-commit-id-plugin#287 or git-commit-id/maven-git-commit-id-plugin#413 for details and potential workarounds

... (truncated)

Commits
  • 73542f2 Bump version: 10.0.0 → 10.0.1
  • 7e95a7e Revert "add tests for java 27"
  • dae217c add tests for java 27
  • dc5b90b run tests with the latest maven versions 3.9.9 -> 3.9.16; 4.0.0-rc-5 -> 4.0.0...
  • 28f14aa bump git-commit-id-plugin-core from 6.2.0 to 6.2.1 (refs https://github.com/g...
  • dcf31ab Merge pull request #934 from git-commit-id/dependabot/maven/org.apache.maven....
  • e4e48ba Merge pull request #933 from git-commit-id/dependabot/maven/org.jspecify-jspe...
  • ef3c336 Merge pull request #935 from git-commit-id/dependabot/github_actions/actions/...
  • eacd498 Merge pull request #930 from git-commit-id/dependabot/maven/org.sonatype.cent...
  • d892203 build(deps): bump actions/setup-java from 5 to 6
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache...

Description has been truncated

@dependabot
Bump tcort/github-action-markdown-link-check
800f7d8 
Bumps the dependencies group with 1 update: [tcort/github-action-markdown-link-check](https://github.com/tcort/github-action-markdown-link-check).


Updates `tcort/github-action-markdown-link-check` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/tcort/github-action-markdown-link-check/releases)
- [Changelog](https://github.com/tcort/github-action-markdown-link-check/blob/master/CHANGELOG.md)
- [Commits](tcort/github-action-markdown-link-check@e7c7a18...e047c5b)
Bump the dependencies group with 12 updates

Bumps the dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) | `3.1.4` | `3.2.0` |
| [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven) | `5.7.0.6970` | `5.8.0.7211` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` |
| [net.sourceforge.plantuml:plantuml](https://github.com/plantuml/plantuml) | `1.2026.7` | `1.2026.8` |
| [io.github.git-commit-id:git-commit-id-maven-plugin](https://github.com/git-commit-id/git-commit-id-maven-plugin) | `10.0.0` | `10.0.1` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-surefire-report-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-artifact-plugin](https://github.com/apache/maven-artifact-plugin) | `3.6.1` | `3.7.0` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.21.0` | `2.22.0` |
| [org.apache.maven.plugins:maven-install-plugin](https://github.com/apache/maven-install-plugin) | `3.1.4` | `3.2.0` |


Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0)

Updates `org.sonarsource.scanner.maven:sonar-maven-plugin` from 5.7.0.6970 to 5.8.0.7211
- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)
- [Commits](SonarSource/sonar-scanner-maven@5.7.0.6970...5.8.0.7211)

Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `net.sourceforge.plantuml:plantuml` from 1.2026.7 to 1.2026.8
- [Release notes](https://github.com/plantuml/plantuml/releases)
- [Changelog](https://github.com/plantuml/plantuml/blob/master/CHANGES.md)
- [Commits](plantuml/plantuml@v1.2026.7...v1.2026.8)

Updates `io.github.git-commit-id:git-commit-id-maven-plugin` from 10.0.0 to 10.0.1
- [Release notes](https://github.com/git-commit-id/git-commit-id-maven-plugin/releases)
- [Commits](git-commit-id/git-commit-id-maven-plugin@v10.0.0...v10.0.1)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-artifact-plugin` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/apache/maven-artifact-plugin/releases)
- [Commits](apache/maven-artifact-plugin@maven-artifact-plugin-3.6.1...maven-artifact-plugin-3.7.0)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.21.0...2.22.0)

Updates `org.apache.maven.plugins:maven-install-plugin` from 3.1.4 to 3.2.0
- [Release notes](https://github.com/apache/maven-install-plugin/releases)
- [Commits](apache/maven-install-plugin@maven-install-plugin-3.1.4...maven-install-plugin-3.2.0)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

---
updated-dependencies:
- dependency-name: tcort/github-action-markdown-link-check
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin
  dependency-version: 5.8.0.7211
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: net.sourceforge.plantuml:plantuml
  dependency-version: 1.2026.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.github.git-commit-id:git-commit-id-maven-plugin
  dependency-version: 10.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-artifact-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-install-plugin
  dependency-version: 3.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Oct 1, 2026
@dependabot dependabot Bot added the github_actions Pull requests that update Github_actions code label Oct 1, 2026
@github-project-automation github-project-automation Bot moved this to 📫 Backlog in OpenFastTrace Oct 1, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 3, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@redcatbear
redcatbear merged commit 3786b0d into main Oct 3, 2026
14 checks passed
@redcatbear
redcatbear deleted the dependabot/dependencies-a1b1a20759 branch October 3, 2026 09:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@redcatbear redcatbear redcatbear approved these changes
@kaklakariada kaklakariada kaklakariada approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

OpenFastTrace
Status: ✅ Closed

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@redcatbear @kaklakariada