Skip to content

chore(deps): bump the maven-minor group across 1 directory with 21 updates - #676

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-811f225ae5
Open

chore(deps): bump the maven-minor group across 1 directory with 21 updates#676
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-811f225ae5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor group with 21 updates in the / directory:

Package From To
org.apache.myfaces.core:myfaces-api 4.1.3 4.1.4
org.apache.myfaces.core:myfaces-impl 4.1.3 4.1.4
org.apache.myfaces.core:myfaces-impl 4.1.3 4.1.4
org.hibernate.validator:hibernate-validator 9.1.4.Final 9.1.5.Final
org.omnifaces:omnifaces 5.5.4 5.5.6
org.primefaces:primefaces 16.0.0 16.0.1
com.twelvemonkeys.servlet:servlet 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-bmp 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-jpeg 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-tiff 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-hdr 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-webp 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-bmp 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-jpeg 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-tiff 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-hdr 3.15.2 3.15.3
com.twelvemonkeys.imageio:imageio-webp 3.15.2 3.15.3
org.flywaydb:flyway-core 13.9.0 13.11.1
org.flywaydb:flyway-mysql 13.9.0 13.11.1
org.flywaydb:flyway-mysql 13.9.0 13.11.1
io.sentry:sentry-log4j2 8.59.0 8.61.1
com.github.ben-manes.caffeine:caffeine 3.3.0 3.3.1
org.commonmark:commonmark 0.30.0 0.31.0
org.eclipse.jetty.ee11:jetty-ee11-cdi 12.1.13 12.1.14
org.eclipse.jetty.ee11:jetty-ee11-maven-plugin 12.1.13 12.1.14
com.github.spotbugs:spotbugs-maven-plugin 4.10.4.1 4.10.5.0
org.apache.maven.plugins:maven-surefire-plugin 3.6.0 3.6.1
org.eclipse.jetty.ee11:jetty-ee11-maven-plugin 12.1.13 12.1.14
org.codehaus.mojo:versions-maven-plugin 2.22.0 2.23.0

Updates org.apache.myfaces.core:myfaces-api from 4.1.3 to 4.1.4

Updates org.apache.myfaces.core:myfaces-impl from 4.1.3 to 4.1.4

Updates org.apache.myfaces.core:myfaces-impl from 4.1.3 to 4.1.4

Updates org.hibernate.validator:hibernate-validator from 9.1.4.Final to 9.1.5.Final

Release notes

Sourced from org.hibernate.validator:hibernate-validator's releases.

Release 9.1.5.Final

Hibernate Validator 9.1.5.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.5.Final.

You can find the full list of 9.1.5.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.validator:hibernate-validator's changelog.

9.1.5.Final (2026-10-13)

Full changelog

Bug

  • HV-2256 - addMessageParameter fix

Improvement

  • HV-2263 - Bump joda-time to 2.14.4
Commits
  • 257c5b8 [Jenkins release job] Preparing release 9.1.5.Final
  • 79140b6 [Jenkins release job] changelog.md updated by release build 9.1.5.Final
  • 3c73c34 [Jenkins release job] README.md updated by release build 9.1.5.Final
  • 188fa51 HV-2256 Add updates to migration guide/what's new doc
  • f4ddf9e HV-2256 Escape message parameters by default
  • f0b26b8 [9.1] Bump the build-dependencies group across 1 directory with 4 updates
  • 668c038 Bump joda-time to 2.14.4 HV-2263
  • 3b87bf0 [9.1] Bump org.hibernate.infra:hibernate-asciidoctor-theme
  • 8d8cc71 [9.1] Bump org.asciidoctor:asciidoctorj-pdf
  • 5c8ca50 [Jenkins release job] Preparing next development iteration
  • See full diff in compare view

Updates org.omnifaces:omnifaces from 5.5.4 to 5.5.6

Commits
  • a22ed9e Prepare 5.5.6 release
  • 75a77f9 Merge branch '4.x' into 5.x
  • f80f28f Branch is now ready for 4.7.18 development
  • e94b991 Prepare 4.7.17 release
  • 209119f Merge branch '3.x' into 4.x
  • a00c389 Branch is now ready for 3.14.29 development
  • 9f10f24 Prepare 3.14.28 release
  • 4fa29f9 Merge #1023 from 4.x into 5.x
  • 27def38 Fix #1023: let the unrendered view scope IT pass on Liberty
  • 3d3bcef Merge pull request #1022 from omnifaces/dependabot/npm_and_yarn/src/main/ts/n...
  • Additional commits viewable in compare view

Updates org.primefaces:primefaces from 16.0.0 to 16.0.1

Release notes

Sourced from org.primefaces:primefaces's releases.

16.0.1

What's Changed

Full Changelog: primefaces/primefaces@v16.0.0...v16.0.1

Commits
  • 61ba509 Release version 16.0.1
  • e5ea297 Fix #14991: 16.X DataTable: draggable column order lost after live/virtual sc...
  • 8ea05f3 Fix #15268: 16.X DataTable: sort unfiltered value after clearing a filter (#1...
  • ac48b22 Fix #13590: 16.X TreeTable Exporter: incorrect output in SelectionOnly and Pa...
  • a2ae445 showcase cosmetics
  • 40e7046 Fix #15328: 16.X TreeTable emptyMessage attribute ignored (#15330)
  • 7996b48 Fix #13755: 16.X keep carousel keyboard focus on visible items (#15323) (#15325)
  • ef6a490 some cosmetics
  • b6052e2 readded support
  • 43879cc 16.X: FileDownload: encode server-set cookie names the way js-cookie does (#1...
  • Additional commits viewable in compare view

Updates com.twelvemonkeys.servlet:servlet from 3.15.2 to 3.15.3

Release notes

Sourced from com.twelvemonkeys.servlet:servlet's releases.

TwelveMonkeys ImageIO 3.15.3 release notes

This is a bug fix release.

What's Changed

New Contributors

Full Changelog: haraldk/TwelveMonkeys@twelvemonkeys-3.15.2...twelvemonkeys-3.15.3

Commits
  • ed21cf6 [maven-release-plugin] prepare release twelvemonkeys-3.15.3
  • 312477b validate XWD header fields before sizing buffers (#1359)
  • 3922c1b #1346 PSD: Further strengthen parsing (#1360)
  • aaac802 validate register and line bounds when reading PCHG chunk
  • 9d92a8c reset allowExternalResources in SVGImageReader.resetMembers
  • ec8815a Fix CompoundReader reset across reader boundaries
  • 18d7858 #1353: Upgrade macos-14 image to macos-26 (#1354)
  • a66ff7f Bump the codeql-action group in /.github/workflows with 4 updates
  • 467ce25 Bump the codeql-action group in /.github/workflows with 4 updates
  • 3e53fc9 Bump org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0
  • Additional commits viewable in compare view

Updates com.twelvemonkeys.imageio:imageio-bmp from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-jpeg from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-tiff from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-hdr from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-webp from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-bmp from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-jpeg from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-tiff from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-hdr from 3.15.2 to 3.15.3

Updates com.twelvemonkeys.imageio:imageio-webp from 3.15.2 to 3.15.3

Updates org.flywaydb:flyway-core from 13.9.0 to 13.11.1

Updates org.flywaydb:flyway-mysql from 13.9.0 to 13.11.1

Updates org.flywaydb:flyway-mysql from 13.9.0 to 13.11.1

Updates io.sentry:sentry-log4j2 from 8.59.0 to 8.61.1

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.61.1

Fixes

  • Session Replay: Fix a native crash (SIGABRT on the RenderThread) when stopping a replay that uses the canvas screenshot strategy (#6342)
  • Session Replay: Keep the segment videos of a replay that stopped before the startup cleanup of previous replays ran (#6343)
  • Report the number of dropped spans in client reports when a batched span envelope item is discarded, instead of a quantity of 1 (e.g. for Flutter span streaming) (#6265)
  • Session Replay: Keep the flushed video and do not reuse its segment id when stop() is called right after flush() in buffer mode (#6340)
  • Keep sending events from Android 7.1.0 and older devices after Sentry changes its TLS certificate authority (#6227)
    • In February 2027, Sentry moves its TLS certificates from DigiCert to Let's Encrypt and Google Trust Services (announcement).
    • Android 7.1.0 (API 25) and older don't trust the Let's Encrypt root certificate (ISRG Root X1), so without this fix, the SDK on those devices can no longer send events to Sentry after the switch.
    • The SDK now bundles ISRG Root X1 and trusts it in addition to the device's root certificates on API 25 and lower. This only applies to the SDK's own uploads to Sentry SaaS (DSNs on sentry.io), not to self-hosted Sentry, not to any other connection your app makes, and not if you set your own SentryOptions.setSslSocketFactory.
    • Apps need to update to an SDK version with this fix to keep sending events from these devices.
  • Session Replay: Use a software canvas for video encoding on the Android Emulator to avoid a native crash in eglDestroySurface (#6282)

Internal

  • Measure the hostname cache TTL on the monotonic ticker the options provide, so that a device time change no longer shortens or extends it (#6100)
  • Measure Session Replay's 1h recording cap and its touch-move debounce on a monotonic clock, so a device time change no longer stops a healthy recording early, keeps a finished one alive, or suppresses gesture events (#6090)
  • Add ScreenshotUtils.takeMaskedScreenshot so Hybrid SDKs can capture screenshots masked according to SentryAndroidOptions.getScreenshot() (#6281)

Dependencies

8.61.0

Fixes

  • Session Replay: Backfill release, environment and SDK info for replays sent on the next launch after the app was killed or crashed (#6253)
  • Fix SDK callback error handling (#6140)
    • Drop telemetry when a beforeSend* callback throws and report it using DiscardReason.CALLBACK_ERROR.
    • Drop transactions when tracesSampler throws instead of inheriting the parent sampling decision or falling back to tracesSampleRate (#6163).
    • Drop spans when beforeSpan throws without disrupting requests, covering OkHttp, OpenFeign, GraphQL, Ktor, and Apollo—including Apollo 5 (#6167, #6238).
    • Drop telemetry and record callback_error when a customer event processor throws instead of continuing with a potentially partially processed item. SDK-owned processor failures are logged and processing continues.
    • Drop breadcrumbs when beforeBreadcrumb throws instead of storing exception details on the breadcrumb.
    • No longer fail Spring requests when a TransactionNameProvider throws, falling back to <unlabeled transaction> (#6241).
    • No longer fail Spring requests when a SentryUserProvider throws and overwrite the user with an empty user object (#6240).
    • Disable profiling when profilesSampler throws instead of falling back to profilesSampleRate or inheriting the parent profiling decision (#6164).
    • Report attached profiles dropped by transaction callback errors as callback_error in client reports and OnDiscardCallback (#6166).
    • Skip replay capture when beforeErrorSampling throws while retaining the error event (#6165).
    • Skip Android screenshots or view hierarchies when their capture callbacks throw while retaining the error event (#6167).
    • Keep the Android feedback form available when its options configurator throws (#6239).
    • Isolate nonfatal callback throwables while continuing to propagate fatal JVM errors (#6251).

Internal

  • Hold the hostname cache on SentryOptions instead of a static singleton (#6117)

Dependencies

... (truncated)

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.61.1

Fixes

  • Session Replay: Fix a native crash (SIGABRT on the RenderThread) when stopping a replay that uses the canvas screenshot strategy (#6342)
  • Session Replay: Keep the segment videos of a replay that stopped before the startup cleanup of previous replays ran (#6343)
  • Report the number of dropped spans in client reports when a batched span envelope item is discarded, instead of a quantity of 1 (e.g. for Flutter span streaming) (#6265)
  • Session Replay: Keep the flushed video and do not reuse its segment id when stop() is called right after flush() in buffer mode (#6340)
  • Keep sending events from Android 7.1.0 and older devices after Sentry changes its TLS certificate authority (#6227)
    • In February 2027, Sentry moves its TLS certificates from DigiCert to Let's Encrypt and Google Trust Services (announcement).
    • Android 7.1.0 (API 25) and older don't trust the Let's Encrypt root certificate (ISRG Root X1), so without this fix, the SDK on those devices can no longer send events to Sentry after the switch.
    • The SDK now bundles ISRG Root X1 and trusts it in addition to the device's root certificates on API 25 and lower. This only applies to the SDK's own uploads to Sentry SaaS (DSNs on sentry.io), not to self-hosted Sentry, not to any other connection your app makes, and not if you set your own SentryOptions.setSslSocketFactory.
    • Apps need to update to an SDK version with this fix to keep sending events from these devices.
  • Session Replay: Use a software canvas for video encoding on the Android Emulator to avoid a native crash in eglDestroySurface (#6282)

Internal

  • Measure the hostname cache TTL on the monotonic ticker the options provide, so that a device time change no longer shortens or extends it (#6100)
  • Measure Session Replay's 1h recording cap and its touch-move debounce on a monotonic clock, so a device time change no longer stops a healthy recording early, keeps a finished one alive, or suppresses gesture events (#6090)
  • Add ScreenshotUtils.takeMaskedScreenshot so Hybrid SDKs can capture screenshots masked according to SentryAndroidOptions.getScreenshot() (#6281)

Dependencies

8.61.0

Fixes

  • Session Replay: Backfill release, environment and SDK info for replays sent on the next launch after the app was killed or crashed (#6253)
  • Fix SDK callback error handling (#6140)
    • Drop telemetry when a beforeSend* callback throws and report it using DiscardReason.CALLBACK_ERROR.
    • Drop transactions when tracesSampler throws instead of inheriting the parent sampling decision or falling back to tracesSampleRate (#6163).
    • Drop spans when beforeSpan throws without disrupting requests, covering OkHttp, OpenFeign, GraphQL, Ktor, and Apollo—including Apollo 5 (#6167, #6238).
    • Drop telemetry and record callback_error when a customer event processor throws instead of continuing with a potentially partially processed item. SDK-owned processor failures are logged and processing continues.
    • Drop breadcrumbs when beforeBreadcrumb throws instead of storing exception details on the breadcrumb.
    • No longer fail Spring requests when a TransactionNameProvider throws, falling back to <unlabeled transaction> (#6241).
    • No longer fail Spring requests when a SentryUserProvider throws and overwrite the user with an empty user object (#6240).
    • Disable profiling when profilesSampler throws instead of falling back to profilesSampleRate or inheriting the parent profiling decision (#6164).
    • Report attached profiles dropped by transaction callback errors as callback_error in client reports and OnDiscardCallback (#6166).
    • Skip replay capture when beforeErrorSampling throws while retaining the error event (#6165).
    • Skip Android screenshots or view hierarchies when their capture callbacks throw while retaining the error event (#6167).
    • Keep the Android feedback form available when its options configurator throws (#6239).
    • Isolate nonfatal callback throwables while continuing to propagate fatal JVM errors (#6251).

Internal

  • Hold the hostname cache on SentryOptions instead of a static singleton (#6117)

... (truncated)

Commits
  • e220ec4 release: 8.61.1
  • eb32cb5 fix(replay): Keep replays of this process in the startup cleanup (#6343)
  • 28c6417 fix(replay): Do not recycle the canvas screenshot during a pixel copy (#6342)
  • 814ae44 fix(replay): Keep flushed video and segment id when stop follows flush (#6340)
  • a0ac761 fix(replay): Use software canvas for the video encoder on the Android Emulato...
  • b731c0b test: Move the system-test envelope matchers into sentry-test-support (#6267)
  • 5e493bd chore(build): Compile with a JDK 21 toolchain and upgrade Mockito and Error P...
  • 8d7b785 ci: Use the latest Python 3.10 patch in CI (#6339)
  • ece9581 test: Add an in-process MockSentryServer to sentry-test-support (#6266)
  • 37d61d8 build(deps): Bump certifi to 2026.10.19 (#6333)
  • Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.3.0 to 3.3.1

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.3.1

  • Added a workaround for ForkJoinPool queue corruption caused by resubmitting a reusable ForkJoinTask (#2021)
  • Improved JCache read performance when using access expiration
  • Fixed various minor issues found using AI audits
Commits
  • aabb242 record the prefix-cache and warm-up findings
  • 0117302 stop JCache access expiry from writing every hit
  • 27fc6b8 skip rewriting an unchanged deadline on a read
  • 7f87a7e restore coverage lost to recent fixes
  • 75e2dc0 minor polish
  • 5155a5a use nullRef() for null futures rejected by NullAway's generic inference (#2023)
  • 998978c Avoid reusing a ForkJoinTask for maintenance (fixes #2021)
  • 6999bfd add the Qwen Bailian prefix-cache traces
  • 76dcbb5 fix canary test races and misc cleanups
  • 7f46a43 pad the eviction sizes off the hit path's lines
  • Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.30.0 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark's releases.

v0.31.0

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

commonmark-java 0.30.1

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)
Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.31.0] - 2026-10-22

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

[0.30.1] - 2026-10-11

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)
Commits
  • 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
  • b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
  • 9ed1e0a Prepare CHANGELOG for version 0.31.0
  • db9a549 Fix quadratic runtime for parsing deeply nested image brackets
  • a78b400 Fix for large number of lines starting with block opening characters
  • 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
  • cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
  • 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
  • e4589e6 Merge pull request #465 from commonmark/issue-460
  • 0982a26 Fix title/source spans for link reference definitions with unclosed titles
  • Additional commits viewable in compare view

Updates org.eclipse.jetty.ee11:jetty-ee11-cdi from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-maven-plugin from 12.1.13 to 12.1.14

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.10.4.1 to 4.10.5.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.10.5.0

What's Changed

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.1...spotbugs-maven-plugin-4.10.5.0

Commits
  • 74f5dd6 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.5.0
  • 37501b1 [pom] Exclude jcl over slf4j from maven core
  • fe7730c [pom] Adjust required to build maven to 3.9.16 as 3.10.0 needs more work
  • ee87607 [pom] Build internals off maven 3.10.0
  • 18a8404 [pom] Bump maven shared utils to 3.5.0
  • abd6753 [pom] Bump groovy to 5.1.3
  • 187fad4 [pom] Bump base parent to 62
  • 9e4846b [pom] Bump commons-lang to 3.21.0
  • 27cd67a [pom] Bump asm to 9.11
  • c556077 [pom] Bump to spotbugs 4.10.5
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

@dependabot
chore(deps): bump the maven-minor group across 1 directory with 21 up…
a91d8bc 
…dates

Bumps the maven-minor group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.myfaces.core:myfaces-api | `4.1.3` | `4.1.4` |
| org.apache.myfaces.core:myfaces-impl | `4.1.3` | `4.1.4` |
| org.apache.myfaces.core:myfaces-impl | `4.1.3` | `4.1.4` |
| [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator) | `9.1.4.Final` | `9.1.5.Final` |
| [org.omnifaces:omnifaces](https://github.com/omnifaces/omnifaces) | `5.5.4` | `5.5.6` |
| [org.primefaces:primefaces](https://github.com/primefaces/primefaces) | `16.0.0` | `16.0.1` |
| [com.twelvemonkeys.servlet:servlet](https://github.com/haraldk/TwelveMonkeys) | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-bmp | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-jpeg | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-tiff | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-hdr | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-webp | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-bmp | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-jpeg | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-tiff | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-hdr | `3.15.2` | `3.15.3` |
| com.twelvemonkeys.imageio:imageio-webp | `3.15.2` | `3.15.3` |
| org.flywaydb:flyway-core | `13.9.0` | `13.11.1` |
| org.flywaydb:flyway-mysql | `13.9.0` | `13.11.1` |
| org.flywaydb:flyway-mysql | `13.9.0` | `13.11.1` |
| [io.sentry:sentry-log4j2](https://github.com/getsentry/sentry-java) | `8.59.0` | `8.61.1` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.3.0` | `3.3.1` |
| [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) | `0.30.0` | `0.31.0` |
| org.eclipse.jetty.ee11:jetty-ee11-cdi | `12.1.13` | `12.1.14` |
| org.eclipse.jetty.ee11:jetty-ee11-maven-plugin | `12.1.13` | `12.1.14` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.10.4.1` | `4.10.5.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.6.0` | `3.6.1` |
| org.eclipse.jetty.ee11:jetty-ee11-maven-plugin | `12.1.13` | `12.1.14` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.22.0` | `2.23.0` |



Updates `org.apache.myfaces.core:myfaces-api` from 4.1.3 to 4.1.4

Updates `org.apache.myfaces.core:myfaces-impl` from 4.1.3 to 4.1.4

Updates `org.apache.myfaces.core:myfaces-impl` from 4.1.3 to 4.1.4

Updates `org.hibernate.validator:hibernate-validator` from 9.1.4.Final to 9.1.5.Final
- [Release notes](https://github.com/hibernate/hibernate-validator/releases)
- [Changelog](https://github.com/hibernate/hibernate-validator/blob/9.1.5.Final/changelog.md)
- [Commits](hibernate/hibernate-validator@9.1.4.Final...9.1.5.Final)

Updates `org.omnifaces:omnifaces` from 5.5.4 to 5.5.6
- [Commits](omnifaces/omnifaces@5.5.4...5.5.6)

Updates `org.primefaces:primefaces` from 16.0.0 to 16.0.1
- [Release notes](https://github.com/primefaces/primefaces/releases)
- [Commits](primefaces/primefaces@v16.0.0...v16.0.1)

Updates `com.twelvemonkeys.servlet:servlet` from 3.15.2 to 3.15.3
- [Release notes](https://github.com/haraldk/TwelveMonkeys/releases)
- [Commits](haraldk/TwelveMonkeys@twelvemonkeys-3.15.2...twelvemonkeys-3.15.3)

Updates `com.twelvemonkeys.imageio:imageio-bmp` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-jpeg` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-tiff` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-hdr` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-webp` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-bmp` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-jpeg` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-tiff` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-hdr` from 3.15.2 to 3.15.3

Updates `com.twelvemonkeys.imageio:imageio-webp` from 3.15.2 to 3.15.3

Updates `org.flywaydb:flyway-core` from 13.9.0 to 13.11.1

Updates `org.flywaydb:flyway-mysql` from 13.9.0 to 13.11.1

Updates `org.flywaydb:flyway-mysql` from 13.9.0 to 13.11.1

Updates `io.sentry:sentry-log4j2` from 8.59.0 to 8.61.1
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.59.0...8.61.1)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.3.0...v3.3.1)

Updates `org.commonmark:commonmark` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/commonmark/commonmark-java/releases)
- [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md)
- [Commits](commonmark/commonmark-java@commonmark-parent-0.30.0...commonmark-parent-0.31.0)

Updates `org.eclipse.jetty.ee11:jetty-ee11-cdi` from 12.1.13 to 12.1.14

Updates `org.eclipse.jetty.ee11:jetty-ee11-maven-plugin` from 12.1.13 to 12.1.14

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.4.1 to 4.10.5.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.4.1...spotbugs-maven-plugin-4.10.5.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.eclipse.jetty.ee11:jetty-ee11-maven-plugin` from 12.1.13 to 12.1.14

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.22.0 to 2.23.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.22.0...2.23.0)

---
updated-dependencies:
- dependency-name: org.apache.myfaces.core:myfaces-api
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.apache.myfaces.core:myfaces-impl
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.apache.myfaces.core:myfaces-impl
  dependency-version: 4.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.hibernate.validator:hibernate-validator
  dependency-version: 9.1.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.omnifaces:omnifaces
  dependency-version: 5.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.primefaces:primefaces
  dependency-version: 16.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.servlet:servlet
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-bmp
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-jpeg
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-tiff
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-hdr
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-webp
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-bmp
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-jpeg
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-tiff
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-hdr
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.twelvemonkeys.imageio:imageio-webp
  dependency-version: 3.15.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 13.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: org.flywaydb:flyway-mysql
  dependency-version: 13.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: org.flywaydb:flyway-mysql
  dependency-version: 13.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: io.sentry:sentry-log4j2
  dependency-version: 8.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.commonmark:commonmark
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor
- dependency-name: org.eclipse.jetty.ee11:jetty-ee11-cdi
  dependency-version: 12.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.eclipse.jetty.ee11:jetty-ee11-maven-plugin
  dependency-version: 12.1.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.5.0
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.eclipse.jetty.ee11:jetty-ee11-maven-plugin
  dependency-version: 12.1.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 26, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants