From 1b10a75c9851b6c4d4f945ab98d3290b5c31e220 Mon Sep 17 00:00:00 2001
From: Tobias Langer <tobias.langer@conplement.de>
Date: Fri, 30 Oct 2026 08:37:04 +0100
Subject: [PATCH 1/2] Bump outdated dependencies

We bump several Java build dependencies.
---
 dev_scripts/semantic-patching/pom.xml |  2 +-
 pom.xml                               | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/dev_scripts/semantic-patching/pom.xml b/dev_scripts/semantic-patching/pom.xml
index b5a3775a4..55d69186e 100644
--- a/dev_scripts/semantic-patching/pom.xml
+++ b/dev_scripts/semantic-patching/pom.xml
@@ -20,7 +20,7 @@
     <dependency>
         <groupId>com.github.javaparser</groupId>
         <artifactId>javaparser-core</artifactId>
-        <version>3.25.9</version>
+        <version>3.28.2</version>
     </dependency>
   </dependencies>
 
diff --git a/pom.xml b/pom.xml
index 5c3606d82..fa9b9724c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,9 +51,9 @@
         <maven.compiler.release>8</maven.compiler.release>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <jackson.version>2.22.4</jackson.version>
-        <dk.brics.version>1.12-4</dk.brics.version>
-        <spotless.maven.plugin.version>3.2.1</spotless.maven.plugin.version>
-        <javadoc.maven.plugin.version>3.6.3</javadoc.maven.plugin.version>
+        <dk.brics.version>1.13-1</dk.brics.version>
+        <spotless.maven.plugin.version>3.10.4</spotless.maven.plugin.version>
+        <javadoc.maven.plugin.version>3.12.0</javadoc.maven.plugin.version>
         <!-- Disable gpg signing per default to allow mvn install and alike w/o gpg setup -->
         <gpg.skip>true</gpg.skip>
     </properties>
@@ -61,7 +61,7 @@
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter-api</artifactId>
-            <version>5.9.3</version>
+            <version>5.14.4</version>
             <scope>test</scope>
         </dependency>
         <dependency>
@@ -116,7 +116,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-source-plugin</artifactId>
-                <version>2.2.1</version>
+                <version>3.4.0</version>
                 <executions>
                     <execution>
                         <id>attach-sources</id>
@@ -148,7 +148,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-gpg-plugin</artifactId>
-                <version>3.2.2</version>
+                <version>3.2.8</version>
                 <executions>
                     <execution>
                         <id>sign-artifacts</id>
@@ -169,7 +169,7 @@
             <plugin>
                 <groupId>org.sonatype.central</groupId>
                 <artifactId>central-publishing-maven-plugin</artifactId>
-                <version>0.4.0</version>
+                <version>0.12.0</version>
                 <extensions>true</extensions>
                 <configuration>
                     <publishingServerId>central</publishingServerId>

From 09dba0908401a09904aa82ad35434803af991300 Mon Sep 17 00:00:00 2001
From: Tobias Langer <tobias.langer@conplement.de>
Date: Fri, 30 Oct 2026 08:37:29 +0100
Subject: [PATCH 2/2] Bump build pipeline actions

In the light of recent security vulnerabilities, we bump the pipeline
actions to their most recent versions.
---
 .github/workflows/build-doc.yaml         | 6 +++---
 .github/workflows/ci-for-dev-scripts.yml | 4 ++--
 .github/workflows/ci.yml                 | 4 ++--
 .github/workflows/deploy.yaml            | 4 ++--
 4 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/build-doc.yaml b/.github/workflows/build-doc.yaml
index 6f4c30373..2aa575038 100644
--- a/.github/workflows/build-doc.yaml
+++ b/.github/workflows/build-doc.yaml
@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Set up JDK 21
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           java-version: '21'
           distribution: 'corretto'
@@ -21,7 +21,7 @@ jobs:
         run: mvn javadoc:javadoc
 
       - name: Deploy to gh-pages 🚀
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@v4
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: target/site/apidocs/
diff --git a/.github/workflows/ci-for-dev-scripts.yml b/.github/workflows/ci-for-dev-scripts.yml
index 099b45786..63b1ada78 100644
--- a/.github/workflows/ci-for-dev-scripts.yml
+++ b/.github/workflows/ci-for-dev-scripts.yml
@@ -19,10 +19,10 @@ jobs:
         python-version: ['3.10']
 
     steps:
-      - uses: actions/checkout@master
+      - uses: actions/checkout@v7
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ matrix.python-version }}
 
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a4364eade..fd3452c77 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,10 +12,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up JDK 21
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           java-version: '21'
           distribution: 'corretto'
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 88a02d6d8..759be9c89 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -10,10 +10,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Maven Central Repository
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           java-version: '21'
           distribution: 'corretto'