Skip to content

Bump the maven-minor-and-patch group with 9 updates - #26

Merged
rcbjBlueMars merged 2 commits into
developfrom
dependabot/maven/develop/maven-minor-and-patch-182616d7c3
Nov 8, 2026
Merged

rcbjBlueMars merged 2 commits into
developfrom
dependabot/maven/develop/maven-minor-and-patch-182616d7c3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-and-patch group with 9 updates:

Package From To
com.nimbusds:nimbus-jose-jwt 10.0.2 10.10
org.apache.maven.plugins:maven-compiler-plugin 3.11.0 3.16.0
org.apache.maven.plugins:maven-surefire-plugin 3.2.5 3.6.1
org.codehaus.mojo:build-helper-maven-plugin 3.6.0 3.6.2
org.apache.maven.plugins:maven-source-plugin 3.3.1 3.4.0
org.apache.maven.plugins:maven-javadoc-plugin 3.11.2 3.12.0
org.apache.maven.plugins:maven-gpg-plugin 3.2.7 3.2.8
org.codehaus.mojo:exec-maven-plugin 3.1.0 3.6.4
org.apache.maven.plugins:maven-dependency-plugin 3.6.1 3.11.0

Updates com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.10

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.0.2 (2025-02-25) * Updates JSONObjectUtils.parse and JSONArrayUtils.parse to reject JSON strings with object and array nesting deeper than 255. This is intended to prevent StackOverflowError's in Gson when a parsed JSON string with excessive nesting is serialised, for example to log the claims of a parsed JWT. Note that in Gson the JSON reader is not susceptible to StackOverflowError's, only the serialisation. The nesting limit of depth 255 is introduced in Gson 2.12.0 (iss #583). * Updates GSon to 2.12.1.

10.1 (2025-04-03) * Restores module-info.java. * Adds ExpiredJWTException extends BadJWTException to enable easy programmatic detection whether a JWT has expired (iss #585). * Adds URLBasedJWKSetSource getJWKSetURL and getResourceRetriever methods to ease class extension.

10.2 (2025-04-07) * Gson is made a direct instead of a shaded dependency to address module issues introduced in 10.1 (iss #550).

10.3 (2025-05-09) * Restores the Gson shading, adding placeholder interfaces to prevent NoClassDefFoundError occurrences at runtime when the JAR is used on a module path (iss #550).

10.3.1 (2025-07-01) * OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom (iss #590).

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

... (truncated)

Commits
  • 78e86f8 DefaultJWTClaimsVerifier accepted "aud" (audience) argument must be compatibl...
  • d4c1e05 [maven-release-plugin] prepare release 10.6
  • 6a6d0b3 [maven-release-plugin] prepare for next development iteration
  • 72ba7d2 Add configurable max compressed cipher text length for JWE decryption (iss #570)
  • 74d1dd1 Merged in feature/configurable-max-compressed-ciphertext-length (pull request...
  • 1b4a3eb Edits JavaDocs, CHANGELOG.txt for 10.7 release
  • 9f4752d Adds casts to tests
  • ebdea4e [maven-release-plugin] prepare release 10.7
  • 9509dc5 [maven-release-plugin] prepare for next development iteration
  • 0e27c9c Adds a PasswordBasedDecrypter(byte[], Set<String>) constructor to specify nam...
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.11.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.15.0

... (truncated)

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.0 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.6.2

🐛 Bug Fixes

👻 Maintenance

  • Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#248) @​slachiewicz

📦 Dependency updates

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 813bc7d [maven-release-plugin] prepare release 3.6.2
  • 07d9109 Remove redundant maven-resolver-api and ignore Resolver/SLF4J 2.x in Dependabot
  • 9abd552 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • 3c15526 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 3b1f104 Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 1749855 Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5230041 Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3
  • c0e9375 Delete .github/release-drafter.yml
  • 84a839e Bump org.codehaus.mojo:mojo-parent from 95 to 96
  • a85c668 Replace raw NPEx with customized exception message
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-source-plugin from 3.3.1 to 3.4.0

Release notes

Sourced from org.apache.maven.plugins:maven-source-plugin's releases.

3.4.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • ecf937a [maven-release-plugin] prepare release maven-source-plugin-3.4.0
  • 95b3bf4 Revert "[maven-release-plugin] prepare for next development iteration"
  • 7a9a770 [maven-release-plugin] prepare for next development iteration
  • 292c1ce Use plexus-utils version from parent
  • bf79b71 Bump m-invoker-p to 3.9.1
  • 4f3fcb9 Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • a867442 Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • 51c66ac Bump org.apache.maven:maven-archiver from 3.6.4 to 3.6.5
  • 267df46 Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.3
  • ef85324 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.12.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.12.0

💥 Breaking changes

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.11.3

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

  • Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use --source-path in legacy mode) (#1217) @​fridrich
  • [MJAVADOC-826] - Don't try to modify project source roots (#358) @​oehme

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 2a06bed [maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0
  • a71ecf9 bump version 3.12.0-SNAPSHOT
  • 88f2b71 [maven-release-plugin] prepare for next development iteration
  • 7e18956 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4
  • c11b76c In legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...
  • bc9904b remove fix mojo (#1263)
  • f310135 Fix package {...} does not exist in legacyMode (#1243)
  • c8270f9 detectOfflineLinks is now false per default for all jar mojo issue #1258 ...
  • 953e609 Delete flaky test (#1260)
  • 2bba7a4 Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
  • 7012821 Fix issueManagement, ciManagement system and url
  • a9a8c84 Make empty classifier null (not empty string) (#287)
  • a8368b0 Add .mvn
  • f0e45e0 Update parent POM to 45 (#284)
  • cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
  • 5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
  • 8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
  • 54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
  • a6a412d Remove old JIRA issue link
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.1.0 to 3.6.4

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.4

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.3

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • 56083f0 [maven-release-plugin] prepare release 3.6.4
  • 57c594b Ignore Maven Resolver >= 2.0 and SLF4J >= 2.0 in Dependabot
  • c2f5d4e Update required module name in jigsaw IT to org.codehaus.plexus.util
  • d227ee6 Bump org.codehaus.plexus:plexus-utils in /src/it/projects/jigsaw
  • 388fd99 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • 30106e8 Stop dependab...

    Description has been truncated

Bumps the maven-minor-and-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.10` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.11.0` | `3.16.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.6.1` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.0` | `3.6.2` |
| [org.apache.maven.plugins:maven-source-plugin](https://github.com/apache/maven-source-plugin) | `3.3.1` | `3.4.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.12.0` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.7` | `3.2.8` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.1.0` | `3.6.4` |
| [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.6.1` | `3.11.0` |


Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.10
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.10..10.0.2)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.11.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.11.0...maven-compiler-plugin-3.16.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.6.1)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.0 to 3.6.2
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.6.0...3.6.2)

Updates `org.apache.maven.plugins:maven-source-plugin` from 3.3.1 to 3.4.0
- [Release notes](https://github.com/apache/maven-source-plugin/releases)
- [Commits](apache/maven-source-plugin@maven-source-plugin-3.3.1...maven-source-plugin-3.4.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.12.0)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.7...maven-gpg-plugin-3.2.8)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.1.0 to 3.6.4
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@exec-maven-plugin-3.1.0...3.6.4)

Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.6.1 to 3.11.0
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.6.1...maven-dependency-plugin-3.11.0)

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-source-plugin
  dependency-version: 3.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-version: 3.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 3, 2026
@rcbjBlueMars
rcbjBlueMars merged commit d08e2a9 into develop Nov 8, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant