chore(deps): bump the java-dependencies group across 1 directory with 19 updates by dependabot[bot] · Pull Request #54 · AlphaSudo/EventDebug

dependabot · 2026-05-25T21:21:48Z

Bumps the java-dependencies group with 18 updates in the / directory:

Package	From	To
org.slf4j:slf4j-api	`2.0.17`	`2.0.18`
org.junit.jupiter:junit-jupiter	`6.0.3`	`6.1.0`
org.owasp.dependencycheck	`12.2.0`	`12.2.2`
org.cyclonedx.bom	`3.2.0`	`3.2.4`
com.fasterxml.jackson.core:jackson-databind	`2.21.2`	`2.21.3`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.21.2`	`2.21.3`
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	`2.21.2`	`2.21.3`
com.github.ben-manes.caffeine:caffeine	`3.2.3`	`3.2.4`
com.zaxxer:HikariCP	`5.1.0`	`7.0.2`
org.xerial:sqlite-jdbc	`3.50.3.0`	`3.53.1.0`
org.postgresql:postgresql	`42.7.10`	`42.7.11`
com.mysql:mysql-connector-j	`9.6.0`	`9.7.0`
org.apache.kafka:kafka-clients	`4.2.0`	`4.3.0`
org.junit.jupiter:junit-jupiter-api	`6.0.3`	`6.1.0`
io.javalin:javalin	`7.1.0`	`7.2.2`
com.nimbusds:nimbus-jose-jwt	`10.8`	`10.9`
io.micrometer:micrometer-core	`1.16.4`	`1.16.5`
gradle-wrapper	`9.4.1`	`9.5.1`

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.junit.jupiter:junit-jupiter from 6.0.3 to 6.1.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

@JarvisCraft made their first contribution in junit-team/junit-framework#5633

@Maran23 made their first contribution in junit-team/junit-framework#5644

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

@mariokhoury4 made their first contribution in junit-team/junit-framework#4574

@Ogu1208 made their first contribution in junit-team/junit-framework#5145

@HyungGeun94 made their first contribution in junit-team/junit-framework#5271

@yalishevant made their first contribution in junit-team/junit-framework#5316

@JINU-CHANG made their first contribution in junit-team/junit-framework#5290

@jaschdoc made their first contribution in junit-team/junit-framework#5427

@kawshikbuet17 made their first contribution in junit-team/junit-framework#5561

@msridhar made their first contribution in junit-team/junit-framework#5602

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

@vy made their first contribution in junit-team/junit-framework#5041

@Pankraz76 made their first contribution in junit-team/junit-framework#5006

@arukiidou made their first contribution in junit-team/junit-framework#5066

@laeubi made their first contribution in junit-team/junit-framework#5092

@jihun4452 made their first contribution in junit-team/junit-framework#5088

@TWiStErRob made their first contribution in junit-team/junit-framework#5133

Full Changelog: junit-team/junit-framework@r6.0.0...r6.1.0-M1

Commits

0dc3af1 Release 6.1.0
1d13002 Prepare 6.1.0 release notes
072b217 Update plugin spotless to v8.5.0 (#5668)
3a53480 Update Gradle to v9.5.1 (#5666)
0e18a20 Update zizmorcore/zizmor-action action to v0.5.4 (#5669)
0a2634f Update github/codeql-action action to v4.35.5 (#5671)
4dbd556 Restructure workflows to have single "status" job (#5670)
f2194ce Increase timeout to reduce flakiness
5c8fdd2 Update dependency org.apache.groovy:groovy to v5.0.6 (#5659)
43c6982 Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (#5667)
Additional commits viewable in compare view

Updates org.owasp.dependencycheck from 12.2.0 to 12.2.2

Updates org.cyclonedx.bom from 3.2.0 to 3.2.4

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.2 to 2.21.3

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.21.2 to 2.21.3

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-yaml from 2.21.2 to 2.21.3

Commits

ccfcc95 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.3
5e81617 Prep for 2.21.3 release
52ab617 Merge branch '2.20' into 2.21
84f99f7 Merge branch '2.19' into 2.20
4fe54cb Merge branch '2.18' into 2.19
f18c578 Post-release dep version bump
8db1032 [maven-release-plugin] prepare for next development iteration
7afb263 [maven-release-plugin] prepare release jackson-dataformats-text-2.18.7
ec50f24 Prep for 2.18.7 release
a8bedbd Post-release dep version bump
Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.3 to 3.2.4

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.2.4

Improved access expiration's read performance by avoiding false sharing effects caused by the timestamp update

Fixed head-of-line blocking of expiration queues caused by in-flight async entries (#1954)

Fixed various minor issues found using AI audits

Added ObjectInputFilter support to JCache

Commits

836b65c use a consistent expiration tolerance calculation
0dc7daf resurrect in-flight async entries on expiration
0bac8b5 handle head-of-line blocking of expiration queues (fixes #1954)
ff25836 test polish
f3a6176 Fix JCache close/createCache races and recursive teardown
622fbe7 Fix removal in identity views and widen hill-climber counters
8da5a7a defer weighing the entry until after the putIfAbsent hit fast-path
94ad0ff Record eviction stats before notifying the removal listener consistently
f94c011 Auto-assert eviction stats alongside notifications.withCause.exclusively
2e945e0 Skip timestamp writes within tolerance on the read path.
Additional commits viewable in compare view

Updates com.zaxxer:HikariCP from 5.1.0 to 7.0.2

Changelog

Sourced from com.zaxxer:HikariCP's changelog.

HikariCP Changes

Changes in 7.0.2

decrease thread yield frequency in ConcurrentBag.unreserve()

Changes in 7.0.1

merged #2346 fix regression with setSchema behavior

decrease thread yield frequency in ConcurrentBag.requite()

Changes in 7.0.0

merged #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

fixed #1294 add support for HikariCredentialsProvider class

fixed #2265 bail out of the pool filling loop if the thread is interrupted

Changes in 6.3.3

backport #2340 NoSuchMethodException error that is thrown when setting a metric registry, fixes to UtilityElf reflection code to use the correct method signature.

Changes in 6.3.2

fixed #2342 restore module-info.class to jar file, which was lost in 6.3.1

fixed #2256 add support for legacy override of getUsername()/getPassword() of HikariDataSource. See project page for documentation of system property com.zaxxer.hikari.legacy.supportUserPassDataSourceOverride.

fixed #2323 right or wrong (wrt driver behavior) return to previous Connection.get/setSchema behavior

fixed #2288 upgrade dependencies and fix build warnings

Changes in 6.3.1

fixed #2315 source jar contains also binary .class files and missing some .java files

fixed #2307 remove improper hardcoded timout, use validationTimeout

fixed #2305 keep properties key and values as is rather than forcing stringification. Also fixes #2286 and #2304

upgraded various maven plugin dependencies to latest versions

Changes in 6.3.0

increase keepaliveTime variance from 10% to 20%

... (truncated)

Commits

80c46ae [maven-release-plugin] prepare release HikariCP-7.0.2
cba7ebe decrease thread yield frequency in ConcurrentBag.unreserve()
22cc9bd Update README.md
86915ee [maven-release-plugin] prepare for next development iteration
217bcc8 [maven-release-plugin] prepare release HikariCP-7.0.1
29ad2f4 update changes log
b81bbc9 fixes #2323 always reset schema upon connection retrieval (#2346)
ee5328d decrease yield() frequency during direct hand-off attempts
1da3a33 Update README.md
17c4b33 Update README.md
Additional commits viewable in compare view

Updates org.xerial:sqlite-jdbc from 3.50.3.0 to 3.53.1.0

Release notes

Sourced from org.xerial:sqlite-jdbc's releases.

Release 3.53.1.0

Changelog

🚀 Features

sqlite

upgrade to sqlite 3.53.1 (8263322)

🔄️ Changes

rewrite amalgamation_version.sh for POSIX shell (52522d0)

fix android usage (7ef8e0f)

🛠 Build

deps

bump gummy-bears-api-24 to 0.14.0 (a28d6ce)

bump gummy-bears-api-24 to 0.13.0 (248e1e9)

deps-dev

bump org.jreleaser:jreleaser-maven-plugin (396fdf3)

bump com.tngtech.archunit:archunit-junit5 (458abe1)

unscoped

conditionally bootstrap SLF4J API JAR (bc7d223)

make JAVA_CLASSPATH configurable (5aa7426)

Contributors

We'd like to thank the following people for their contributions: Gauthier, Gauthier Roebroeck, Michael Osipov

Release 3.53.0.0

Changelog

🚀 Features

jdbc

expose wal_autocheckpoint pragma in SQLiteConfig (dd2adcc), closes #1397

sqlite

upgrade to sqlite 3.53.0 (baaf087)

unscoped

publish multiple classifer jars (bdd2b64), closes #1273

better Android support (7eb6f3f), closes #1378

🛠 Build

deps

bump org.sonatype.central:central-publishing-maven-plugin (19259e5)

bump EndBug/add-and-commit from 9 to 10 (f572217)

deps-dev

... (truncated)

Commits

b01674f chore(release): 3.53.1.0 [skip ci]
e6719db chore: update native libraries
8263322 feat(sqlite): upgrade to sqlite 3.53.1
396fdf3 build(deps-dev): bump org.jreleaser:jreleaser-maven-plugin
bc7d223 build: conditionally bootstrap SLF4J API JAR
4cd221a chore: remove execute bit on non-executable files
5aa7426 build: make JAVA_CLASSPATH configurable
52522d0 refactor: rewrite amalgamation_version.sh for POSIX shell
a28d6ce build(deps): bump gummy-bears-api-24 to 0.14.0
458abe1 build(deps-dev): bump com.tngtech.archunit:archunit-junit5
Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.7.10 to 42.7.11

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.11

Security

fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Changes

fix: Add sources and javadocs to shaded published lib generation @sehrope (#4043)

update Changelog and website for release of 42.7.11 @davecramer (#4042)

Fix scram fix location in changelog and update published artifact developer list @sehrope (#4041)

Restrict test with scram_iterations to v16+ and release notes @sehrope (#4040)

chore(deps): update ubuntu:24.04 docker digest to 84e77de @renovate-bot (#4017)

test: add tests for QueryExecutor#getTransactionState @vlsi (#4006)

chore(deps): update actions/create-github-app-token action to v2.2.2 @renovate-bot (#3983)

fix: fix flaky CopyBothResponseTest by using WAL flush LSN @vlsi (#3979)

fix: fix flaky replication restart tests by waiting for confirmed_flush_lsn @vlsi (#3975)

test: fix flaky LogicalReplicationStatusTest by polling pg_stat_replication @vlsi (#3974)

chore: replace Appveyor with ikalnytskyi/action-setup-postgres @vlsi (#3966)

test: move test table creation from @BeforeEach to @BeforeAll @vlsi (#3967)

Return jsonb as PGObject fixes Issue #3926 @davecramer (#3956)

Update docker scripts @davecramer (#3958)

implement require_auth, this is pretty much how libpq does this. @davecramer (#3895)

docs: add SCRAM authentication test setup section to TESTING.md @emmaeng700 (#3945)

Add RequireServerVersion annotation for tests @sehrope (#3939)

🐛 Bug Fixes

fix: ensure extended protocol messages end with Sync message @vlsi (#3728)

fix: enable cursor-based fetching in extended protocol when transaction started via SQL command @vlsi (#3996)

fix: retry with SSL on IOException when sslMode=ALLOW @vlsi (#3973)

fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in @vlsi (#3968)

fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers @vlsi (#3962)

fix: use compareTo for LogSequenceNumber comparison @vlsi (#3961)

fix: release COPY lock on IOException to prevent connection hang (#3957) @vlsi (#3960)

🧰 Maintenance

style: replace @exception with @throws in getBoolean javadoc @vlsi (#4035)

chore: use @vlsi/github-actions-random-matrix npm package @vlsi (#4008)

chore: use tag names for pinning github actions, pin ikalnytskyi/action-setup-postgres @vlsi (#4007)

chore: bump errorprone to 2.48.0 @vlsi (#4005)

test: add @DisableLogger annotation to suppress expected log warnings in tests @vlsi (#3971)

chore: suppress deprecations in test code to reduce build verbosity @vlsi (#3972)

chore: replace log warning in ConnectionFactory.closeStream with Throwable.addSuppressed @vlsi (#3970)

chore: use greedy pairwise coverage for CI matrix generation @vlsi (#3965)

chore: use full version tags in GitHub Actions comments @vlsi (#3963)

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.11] (2026-04-28)

Security

fix: Limit SCRAM PBKDF2 iterations accepted from the server. pgjdbc was vulnerable to a client-side denial of service in SCRAM-SHA-256 authentication, where a malicious or compromised PostgreSQL server could specify an extremely large PBKDF2 iteration count, causing the client to consume unbounded CPU and potentially exhaust connection pools. The fix introduces a new scramMaxIterations connection property (defaulting to 100,000) to cap iteration counts before computation begins. See the Security Advisory for more detail. The following CVE-2026-42198 has been issued.

Added

feat: implement require_auth connection property, aligning with libpq behavior [PR #3895](pgjdbc/pgjdbc#3895)

Changed

chore: replace Appveyor CI with ikalnytskyi/action-setup-postgres [PR #3966](pgjdbc/pgjdbc#3966)

chore: upgrade Gradle to v9 [PR #3978](pgjdbc/pgjdbc#3978)

Fixed

fix: ensure extended protocol messages end with Sync message [PR #3728](pgjdbc/pgjdbc#3728)

fix: enable cursor-based fetching in extended protocol when transaction started via SQL command [PR #3996](pgjdbc/pgjdbc#3996)

fix: retry with SSL on IOException when sslMode=ALLOW [PR #3973](pgjdbc/pgjdbc#3973)

fix: make sure the driver honours connectTimeout when retrying the connection [PR #3968](pgjdbc/pgjdbc#3968)

fix: allow fallback to non-SSL connection when sslMode=prefer and sslResponseTimeout kicks in [PR #3968](pgjdbc/pgjdbc#3968)

fix: catch SecurityException from setContextClassLoader on ForkJoinPool workers [PR #3962](pgjdbc/pgjdbc#3962)

fix: use compareTo for LogSequenceNumber comparison to handle unsigned values correctly [PR #3961](pgjdbc/pgjdbc#3961)

fix: release COPY lock on IOException to prevent connection hang [PR #3957](pgjdbc/pgjdbc#3957)

fix: return jsonb as PGObject instead of String [PR #3956](pgjdbc/pgjdbc#3956)

fix: align SSL key file permission check with libpq [PR #3952](pgjdbc/pgjdbc#3952)

fix: guard connection closed flag with a reentrant lock to protect against concurrent close [PR #3905](pgjdbc/pgjdbc#3905)

Commits

78e261f fix: Add sources and javadocs to shaded published lib generation
1e09fa0 update Changelog and website for release of 42.7.11 (#4042)
d479fa5 Fix scram fix location in changelog and update published artifact developer l...
b04fc46 docs: Add scram max iters fix to changelog
cf54822 test: Disable scram test on older version without scram_iterations GUC
7dbcc79 test: Add SCRAM max iteration tests
c9d41d1 fix: Limit SCRAM PBKDF2 iterations accepted from the server
a340cb2 style: replace @exception with @throws in getBoolean javadoc
77837f8 fix(deps): update dependency org.openrewrite.rewrite:org.openrewrite.rewrite....
23af03b chore(deps): update actions/checkout action to v6
Additional commits viewable in compare view

Updates com.mysql:mysql-connector-j from 9.6.0 to 9.7.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 9.7.0

Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

Fix for Bug#119271 (Bug#38599496), Connector/J fails to accept legacy value zeroDateTimeBehavior=convertToNull on multi-host URLs (failover).

Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them.

Version 9.5.0

Fix for Bug#72036 (Bug#18403804), XA isSameRM() shouldn't take database into account.

Fix for Bug#62693 (Bug#16722068), XAConnection savepoint capability.

Fix for Bug#81128 (Bug#23146631), Master host list overwritten by slave list when loadBalanceConnectionGroup used.

Fix for Bug#19887224, RUNNING THE TEST SUITE WITH SOCKSPROXY* PROPERTIES HANGS IN TEST TESTBUG56429.

Fix for Bug#98699 (Bug#30932850), Allow empty keyStore file for keyStoreTypes that do not require files. Thanks to Kolbe Kegel for his contribution.

Fix for Bug#118938 (Bug#38396227), DatabaseMetaDataInformationSchema#getSchemas has a bug.

Fix for Bug#99292 (Bug#31195955), Contribution: Support Windows time zone 'Coordinated Universal Time'. Thanks to Frédéric Barrière for his contribution.

Fix for Bug#107094 (Bug#34104230), NullPointerException when calling equals with null on MultiHostConnectionProxy.

... (truncated)

Commits

0aade1f Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durat...
b6d5baa Update for GPL license book.
a7cc5a9 Fix for DateTimeTest failures after some of the work done for WL#16669 in MyS...
6a0c818 WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.
5f96e85 Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into'...
8d779fc Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF...
1391179 Copyright header year bump.
5c764b4 Post-release version bump.
See full diff in compare view

Updates org.apache.kafka:kafka-clients from 4.2.0 to 4.3.0

Updates org.junit.jupiter:junit-jupiter-api from 6.0.3 to 6.1.0

Release notes

Sourced from org.junit.jupiter:junit-jupiter-api's releases.

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

@JarvisCraft made their first contribution in junit-team/junit-framework#5633

@Maran23 made their first contribution in junit-team/junit-framework#5644

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

@mariokhoury4 made their first contribution in junit-team/junit-framework#4574

@Ogu1208 made their first contribution in junit-team/junit-framework#5145

@HyungGeun94 made their first contribution in junit-team/junit-framework#5271

@yalishevant made their first contribution in junit-team/junit-framework#5316

@JINU-CHANG made their first contribution in junit-team/junit-framework#5290

@jaschdoc made their first contribution in junit-team/junit-framework#5427

@kawshikbuet17 made their first contribution in junit-team/junit-framework#5561

@msridhar made their first contribution in junit-team/junit-framework#5602

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

@vy made their first contribution in junit-team/junit-framework#5041

@Pankraz76 made their first contribution in junit-team/junit-framework#5006

@arukiidou made their first contribution in junit-team/junit-framework#5066

@laeubi made their first contribution in junit-team/junit-framework#5092

@jihun4452 made their first contribution in junit-team/junit-framework#5088

@TWiStErRob made their first contribution in junit-team/junit-framework#5133

Full Changelog: junit-team/junit-framework@r6.0.0...r6.1.0-M1

Commits

0dc3af1 Release 6.1.0
1d13002 Prepare 6.1.0 release notes
072b217 Update plugin spotless to v8.5.0 (#5668)
3a53480 Update Gradle to v9.5.1 (#5666)
0e18a20 Update zizmorcore/zizmor-action action to v0.5.4 (#5669)
0a2634f Update github/codeql-action action to v4.35.5 (#5671)
4dbd556 Restructure workflows to have single "status" job (#5670)
f2194ce Increase timeout to reduce flakiness
5c8fdd2 Update dependency org.apache.groovy:groovy to v5.0.6 (#5659)
43c6982 Update dependency org.slf4j:slf4j-jdk14 to v2.0.18 (#5667)
Additional commits viewable in compare view

Updates io.javalin:javalin from 7.1.0 to 7.2.2

Release notes

Sourced from io.javalin:javalin's releases.

7.2.2

What's Changed

[build] Bump Maven Wrapper to 3.9.15 by @tipsy in javalin/javalin#2590

[deps]: Bump the dependencies group with 12 updates by @dependabot[bot] in javalin/javalin#2589

Fix DevLoggingPlugin websocket query-parameter handling by @Copilot in javalin/javalin#2595

Full Changelog: javalin/javalin@javalin-parent-7.2.0...javalin-parent-7.2.2

7.2.1

⚠️ Unstable release containing a version of Jetty which has a bug. Use 7.2.2 instead.

7.2.0

What's Changed

[performance] Replace Stream API with List and reduce per-request allocations by @tipsy in javalin/javalin#2567

feat: introduce JavalinJackson3 as an optional JsonMapper implementation for Jackson 3 by @yvasyliev in javalin/javalin#2548

[workflow]: Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the dependencies group by @dependabot[bot] in javalin/javalin#2569

Add path role inheritance by @AoElite in javalin/javalin#2553

[deps]: Bump the dependencies group across 1 directory with 23 updates by @dependabot[bot] in javalin/javalin#2575

[workflow]: Bump codecov/codecov-action from 5.5.3 to 6.0.0 in the dependencies group across 1 directory by @dependabot[bot] in javalin/javalin#2570

[workflow]: Bump actions/github-script from 8 to 9 in the dependencies group by @dependabot[bot] in javalin/javalin#2581

[cleanup] Remove JavalinTest.class by @vorburger in javalin/javalin#2584

[deps] Bump Jetty from 12.1.7 to 12.1.8 by @vorburger in javalin/javalin#2585

Add ability to emit plain data messages in SSE by @1cg in javalin/javalin#2578

fix: sanitize newlines in SSE event and id fields by @eddieran in javalin/javalin#2580

[deps] Bump stable deps and sync OptionalDependency.kt by @tipsy in javalin/javalin#2588

New Contributors

@AoElite made their first contribution in javalin/javalin#2553

@vorburger made their first contribution in javalin/javalin#2584

@1cg made their first contribution in javalin/javalin#2578

@eddieran made their first contribution in javalin/javalin#2580

Full Changelog: javalin/javalin@javalin-parent-7.1.0...javalin-parent-7.2.0

Commits

d4db959 [maven-release-plugin] prepare release javalin-parent-7.2.2
18fc65a [deps] Revert back to working version of Jetty
0d10c8d [maven-release-plugin] prepare for next development iteration
74f48df [maven-release-plugin] prepare release javalin-parent-7.2.1
c2f9a8b [deps] Bump dependencies
3a6077f [websocket] Fix DevLoggingPlugin query-parameter handling (#2595)
a964404 [routing] Fix missing path params in beforeMatched
fff7e0d [deps]: Bump the dependencies group with 12 updates (#2589)
cfa070e [build] Bump Maven Wrapper to 3.9.15 (#2590)
7078afc [readme] Bump Javalin version
Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.8 to 10.9

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

version 1.0 (2012-03-01)

First version based on the OpenInfoCard JWT, JWS and JWE code base.

version 1.1 (2012-03-06)

Introduces type-safe enumeration of the JSON Web Algorithms (JWA).

Refactors the JWT class.

version 1.2 (2012-03-08)

Moves JWS and JWE code into separate classes.

version 1.3 (2012-03-09)

Switches to Apache Commons Codec for Base64URL encoding and decoding

Consolidates the crypto utilities within the package.

Introduces a JWT content serialiser class.

version 1.4 (2012-03-09)

Refactoring of JWT class and JUnit tests.

version 1.5 (2012-03-18)

Switches to JSON Smart for JSON serialisation and parsing.

Introduces claims set class with JSON objects, string, Base64URL and byte array views.

version 1.6 (2012-03-20)

Creates class for representing, serialising and parsing JSON Web Keys (JWK).

Introduces separate class for representing JWT headers.

version 1.7 (2012-04-01)

Introduces separate classes for plain, JWS and JWE headers.

Introduces separate classes for plain, signed and encrypted JWTs.

Removes the JWTContent class.

Removes password-based (PE820) encryption support.

version 1.8 (2012-04-03)

Adds support for the ZIP JWE header parameter.

Removes unsupported algorithms from the JWA enumeration.

version 1.9 (2012-04-03)

Renames JWEHeader.{get|set}EncryptionAlgorithm() to JWEHeader.{get|set}EncryptionMethod().

version 1.9.1 (2012-04-03)

Upgrades JSON Smart JAR to 1.1.1.

version 1.10 (2012-04-14)

Introduces serialize() method to base abstract JWT class.

version 1.11 (2012-05-13)

JWT.serialize() throws checked JWTException instead of

... (truncated)

Commits

e48aa07 [maven-release-plugin] prepare for next development iteration
4b02531 Adds X509CertUtils.computeSHA1Thumbprint(X509Certificate) method
6b52455 [maven-release-plugin] prepare release 10.9
See full diff in compare view

Updates io.micrometer:micrometer-core from 1.16.4 to 1.16.5

Release notes

Sourced from io.micrometer:micrometer-core's releases.

1.16.5

🐞 Bug Fixes

Invalid reflection hint in micrometer-core for native GraalVM 25 build #7316

ObservationGrpcClientInterceptor throws NPE when NameResolver returns empty authority #7380

Wrong Nullability Information in OkHttpMetricsEventListener #7373

🔨 Dependency Upgrades

Bump com.netflix.spectator:spectator-reg-atlas from 1.9.4 to 1.9.6 #7393

Bump spring6 from 6.2.16 to 6.2.17 #7294

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Joowon-Seo, and @ribafish

Commits

Description has been truncated

… 19 updates Bumps the java-dependencies group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | org.slf4j:slf4j-api | `2.0.17` | `2.0.18` | | [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` | | org.owasp.dependencycheck | `12.2.0` | `12.2.2` | | org.cyclonedx.bom | `3.2.0` | `3.2.4` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.21.2` | `2.21.3` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.21.2` | `2.21.3` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-yaml](https://github.com/FasterXML/jackson-dataformats-text) | `2.21.2` | `2.21.3` | | [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.3` | `3.2.4` | | [com.zaxxer:HikariCP](https://github.com/brettwooldridge/HikariCP) | `5.1.0` | `7.0.2` | | [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) | `3.50.3.0` | `3.53.1.0` | | [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.10` | `42.7.11` | | [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `9.6.0` | `9.7.0` | | org.apache.kafka:kafka-clients | `4.2.0` | `4.3.0` | | [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit-framework) | `6.0.3` | `6.1.0` | | [io.javalin:javalin](https://github.com/javalin/javalin) | `7.1.0` | `7.2.2` | | [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.8` | `10.9` | | [io.micrometer:micrometer-core](https://github.com/micrometer-metrics/micrometer) | `1.16.4` | `1.16.5` | | [gradle-wrapper](https://github.com/gradle/gradle) | `9.4.1` | `9.5.1` | Updates `org.slf4j:slf4j-api` from 2.0.17 to 2.0.18 Updates `org.junit.jupiter:junit-jupiter` from 6.0.3 to 6.1.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.3...r6.1.0) Updates `org.owasp.dependencycheck` from 12.2.0 to 12.2.2 Updates `org.cyclonedx.bom` from 3.2.0 to 3.2.4 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.2 to 2.21.3 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.21.2 to 2.21.3 Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-yaml` from 2.21.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.21.2...jackson-dataformats-text-2.21.3) Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.3 to 3.2.4 - [Release notes](https://github.com/ben-manes/caffeine/releases) - [Commits](ben-manes/caffeine@v3.2.3...v3.2.4) Updates `com.zaxxer:HikariCP` from 5.1.0 to 7.0.2 - [Changelog](https://github.com/brettwooldridge/HikariCP/blob/dev/CHANGES) - [Commits](brettwooldridge/HikariCP@HikariCP-5.1.0...HikariCP-7.0.2) Updates `org.xerial:sqlite-jdbc` from 3.50.3.0 to 3.53.1.0 - [Release notes](https://github.com/xerial/sqlite-jdbc/releases) - [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG) - [Commits](xerial/sqlite-jdbc@3.50.3.0...3.53.1.0) Updates `org.postgresql:postgresql` from 42.7.10 to 42.7.11 - [Release notes](https://github.com/pgjdbc/pgjdbc/releases) - [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md) - [Commits](pgjdbc/pgjdbc@REL42.7.10...REL42.7.11) Updates `com.mysql:mysql-connector-j` from 9.6.0 to 9.7.0 - [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES) - [Commits](mysql/mysql-connector-j@9.6.0...9.7.0) Updates `org.apache.kafka:kafka-clients` from 4.2.0 to 4.3.0 Updates `org.junit.jupiter:junit-jupiter-api` from 6.0.3 to 6.1.0 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.3...r6.1.0) Updates `io.javalin:javalin` from 7.1.0 to 7.2.2 - [Release notes](https://github.com/javalin/javalin/releases) - [Commits](javalin/javalin@7.1.0...javalin-parent-7.2.2) Updates `com.nimbusds:nimbus-jose-jwt` from 10.8 to 10.9 - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9..10.8) Updates `io.micrometer:micrometer-core` from 1.16.4 to 1.16.5 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.16.4...v1.16.5) Updates `io.micrometer:micrometer-registry-prometheus` from 1.16.4 to 1.16.5 - [Release notes](https://github.com/micrometer-metrics/micrometer/releases) - [Commits](micrometer-metrics/micrometer@v1.16.4...v1.16.5) Updates `gradle-wrapper` from 9.4.1 to 9.5.1 - [Release notes](https://github.com/gradle/gradle/releases) - [Commits](gradle/gradle@v9.4.1...v9.5.1) --- updated-dependencies: - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: org.junit.jupiter:junit-jupiter dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.owasp.dependencycheck dependency-version: 12.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: org.cyclonedx.bom dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: com.github.ben-manes.caffeine:caffeine dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: com.zaxxer:HikariCP dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: java-dependencies - dependency-name: org.xerial:sqlite-jdbc dependency-version: 3.53.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.postgresql:postgresql dependency-version: 42.7.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: com.mysql:mysql-connector-j dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.apache.kafka:kafka-clients dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: org.junit.jupiter:junit-jupiter-api dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: io.javalin:javalin dependency-version: 7.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-version: '10.9' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies - dependency-name: io.micrometer:micrometer-core dependency-version: 1.16.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: io.micrometer:micrometer-registry-prometheus dependency-version: 1.16.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: java-dependencies - dependency-name: gradle-wrapper dependency-version: 9.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: java-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 25, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the java-dependencies group across 1 directory with 19 updates#54

chore(deps): bump the java-dependencies group across 1 directory with 19 updates#54
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/java-dependencies-bc8a686ce1

dependabot Bot commented on behalf of github May 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026

New Contributors

New Contributors

New Contributors

3.2.4

Release 3.53.1.0

Changelog

🚀 Features

🔄️ Changes

🛠 Build

Contributors

Release 3.53.0.0

Changelog

🚀 Features

🛠 Build

v42.7.11

Security

Changes

🐛 Bug Fixes

🧰 Maintenance

⬆️ Dependencies

[42.7.11] (2026-04-28)

Security

Added

Changed

Fixed

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

New Contributors

New Contributors

New Contributors

7.2.2

What's Changed

7.2.1

⚠️ Unstable release containing a version of Jetty which has a bug. Use 7.2.2 instead.

7.2.0

What's Changed

New Contributors

1.16.5

🐞 Bug Fixes

🔨 Dependency Upgrades

❤️ Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants