Skip to content

chore(deps): bump the maven-dependencies group across 1 directory with 7 updates - #4783

Merged
hatzlj merged 2 commits into
mainfrom
dependabot/maven/maven-dependencies-2dfdc56502
Jul 27, 2026
Merged

chore(deps): bump the maven-dependencies group across 1 directory with 7 updates#4783
hatzlj merged 2 commits into
mainfrom
dependabot/maven/maven-dependencies-2dfdc56502

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 7 updates in the / directory:

Package From To
org.codehaus.mojo:flatten-maven-plugin 1.7.3 1.8.0
org.apache.maven.plugins:maven-jar-plugin 3.5.0 3.5.1
org.junit.jupiter:junit-jupiter-api 6.1.2 6.1.2
org.junit.jupiter:junit-jupiter-engine 6.1.2 6.1.2
org.flywaydb:flyway-core 12.11.0 13.0.0
io.axoniq.platform:axoniq-platform-framework-client 5.1.1 5.2.0
ch.qos.logback:logback-classic 1.5.38 1.6.0

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.8.0

🚀 New features and improvements

🐛 Bug Fixes

🔧 Build

📦 Dependency updates

Commits
  • 1b21193 [maven-release-plugin] prepare release 1.8.0
  • f693210 Add PR automation workflow to GitHub Actions
  • cff2c4f Document revisionVariableName parameter with @since 1.8.0 tag
  • f18a67d Fix for #408, ensure nested dependency exclusions aren't overrided (#485)
  • 35396b6 Bump mavenVersion from 3.9.15 to 3.9.16
  • f78e07e Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 25f849e Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5fcc98f Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml
  • 4bd9eda Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 7bacd0e Fix for Maven 3.10.x (#517)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-api from 6.1.2 to 6.1.2

Commits

Updates org.junit.jupiter:junit-jupiter-engine from 6.1.2 to 6.1.2

Commits

Updates org.flywaydb:flyway-core from 12.11.0 to 13.0.0

Updates io.axoniq.platform:axoniq-platform-framework-client from 5.1.1 to 5.2.0

Commits

Updates org.junit.jupiter:junit-jupiter-engine from 6.1.1 to 6.1.2

Commits

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the maven-dependencies group across 1 directory wit…
78cb28b 
…h 7 updates

Bumps the maven-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.3` | `1.8.0` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.5.0` | `3.5.1` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.1.2` | `6.1.2` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework) | `6.1.2` | `6.1.2` |
| org.flywaydb:flyway-core | `12.11.0` | `13.0.0` |
| [io.axoniq.platform:axoniq-platform-framework-client](https://github.com/AxonIQ/platform-framework-client) | `5.1.1` | `5.2.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.0` |



Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

Updates `org.junit.jupiter:junit-jupiter-api` from 6.1.2 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.2)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.1.2 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.2)

Updates `org.flywaydb:flyway-core` from 12.11.0 to 13.0.0

Updates `io.axoniq.platform:axoniq-platform-framework-client` from 5.1.1 to 5.2.0
- [Release notes](https://github.com/AxonIQ/platform-framework-client/releases)
- [Commits](https://github.com/AxonIQ/platform-framework-client/commits)

Updates `org.junit.jupiter:junit-jupiter-engine` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.2)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.axoniq.platform:axoniq-platform-framework-client
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added this to the Release 5.3.0 milestone Jul 26, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 26, 2026 03:07
@dependabot dependabot Bot added Priority 1: Must Highest priority. A release cannot be made if this issue isn’t resolved. Type: Dependency Upgrade Use to signal an issue that adjusts the project’s dependencies. Typically used by dependabot only. labels Jul 26, 2026
@dependabot
dependabot Bot requested review from jangalinski, laura-devriendt-lemon and zambrovski and removed request for a team July 26, 2026 03:07
@dependabot dependabot Bot added Priority 1: Must Highest priority. A release cannot be made if this issue isn’t resolved. Type: Dependency Upgrade Use to signal an issue that adjusts the project’s dependencies. Typically used by dependabot only. labels Jul 26, 2026
@hatzlj hatzlj self-assigned this Jul 27, 2026
@hatzlj hatzlj added Status: In Progress Use to signal this issue is actively worked on. and removed Status: In Progress Use to signal this issue is actively worked on. labels Jul 27, 2026
@hatzlj
hatzlj enabled auto-merge July 27, 2026 04:30
@hatzlj
hatzlj merged commit 7011c44 into main Jul 27, 2026
9 checks passed
@hatzlj
hatzlj deleted the dependabot/maven/maven-dependencies-2dfdc56502 branch July 27, 2026 04:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hatzlj hatzlj hatzlj approved these changes
@github-actions github-actions[bot] github-actions[bot] approved these changes
@zambrovski zambrovski Awaiting requested review from zambrovski zambrovski is a code owner automatically assigned from AxonIQ/framework-developers
@jangalinski jangalinski Awaiting requested review from jangalinski jangalinski is a code owner automatically assigned from AxonIQ/framework-developers
@laura-devriendt-lemon laura-devriendt-lemon Awaiting requested review from laura-devriendt-lemon laura-devriendt-lemon is a code owner automatically assigned from AxonIQ/framework-developers

Assignees

@hatzlj hatzlj

Labels

Priority 1: Must Highest priority. A release cannot be made if this issue isn’t resolved. Type: Dependency Upgrade Use to signal an issue that adjusts the project’s dependencies. Typically used by dependabot only.

Projects

None yet

Milestone

Release 5.3.0

Development

Successfully merging this pull request may close these issues.

2 participants

@hatzlj @smcvb