chore(deps): update maven

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.netcracker.cloud:core-error-handling-rest	3.2.6 → 3.3.0
com.netcracker.core:process-engine	1.2.6 → 1.3.0
com.arangodb:arangodb-java-driver (source)	7.24.2 → 7.25.0
com.clickhouse:clickhouse-jdbc (source)	0.9.5 → 0.9.6
org.opensearch.client:opensearch-java	3.4.0 → 3.5.0
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	2.18.4 → 2.19.4
org.springframework.data:spring-data-mongodb (source)	4.5.7 → 4.5.8
com.netcracker.cloud.quarkus:cloud-core-quarkus-bom-publish	8.2.2 → 8.3.0
com.netcracker.cloud.junit.cloudcore:cloud-core-extension	8.5.1 → 8.7.1
io.quarkus:quarkus-maven-plugin	3.27.1 → 3.27.2
io.quarkus.platform:quarkus-bom	3.27.1 → 3.27.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

Netcracker/qubership-core-error-handling (com.netcracker.cloud:core-error-handling-rest)

v3.3.0

Compare Source

Netcracker/qubership-core-process-orchestrator (com.netcracker.core:process-engine)

v1.3.0

Compare Source

arangodb/arangodb-java-driver (com.arangodb:arangodb-java-driver)

v7.25.0

Compare Source

• added SSL configuration from files (#​623, DE-505)

ClickHouse/clickhouse-java (com.clickhouse:clickhouse-jdbc)

v0.9.6

Compare Source

Release is aimed to address potential security risk in one of the dependencies (see below). We strongly recommend to upgrade.

Dependencies

• [repo] - upgraded lz4-java to 1.10.2. Previously used version had a vulnerability https://www.cve.org/CVERecord?id=CVE-2025-66566. (#​2706)
• [repo] - upgraded commons-lang3 to 3.20.0. Previously used version had a vulnerability https://www.cve.org/CVERecord?id=CVE-2025-48924. (#​2696)

New Features

• [jdbc-v2] - support of dot notation for table names without quotes. (#​2650)

opensearch-project/opensearch-java (org.opensearch.client:opensearch-java)

v3.5.0

Compare Source

Added

• Fix formatting of the main method to run for various samples (#​1749)
• Fix NPE when null ObjectBuilder is accessed (#​1717)
• Added BulkIngester helper for efficient bulk operations with buffering, retries, and backpressure. Ported from elasticsearch-java (commit e7120d4) (#​1809)
• Added equals and hashCode implementation to JsonDataImpl (#​1803)

Dependencies

• Bump com.github.jk1.dependency-license-report from 2.9 to 3.0.1 (#​1779, #​1781)

Changed

Deprecated

Removed

Fixed

Security

spring-projects/spring-data-mongodb (org.springframework.data:spring-data-mongodb)

v4.5.8

Compare Source

📗 Links

• Spring Data MongoDB 4.5 Reference documentation
• Spring Data MongoDB 4.5 Javadoc

📔 Documentation

• Update compatibility matrix documentation #​5137
• Update Driver Compatibility Matrix #​5136
• Documentation about optimistic locking could be more precise #​5126
• Polish: fix grammar in mongo-encryption.adoc #​5026
• Add Readme templates #​2758

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

• @​MonkeyMix

Netcracker/qubership-core-quarkus-extensions (com.netcracker.cloud.quarkus:cloud-core-quarkus-bom-publish)

v8.3.0

Compare Source

Netcracker/qubership-core-junit-k8s-extension (com.netcracker.cloud.junit.cloudcore:cloud-core-extension)

v8.7.1

Compare Source

v8.7.0

Compare Source

quarkusio/quarkus (io.quarkus:quarkus-maven-plugin)

v3.27.2

Compare Source

Complete changelog

• #​48915 - Bump maven to 3.9.11
• #​49504 - continuous-testing=disabled causes NPE and does not disable continuous testing mode
• #​49906 - Upgrade to Maven 3.9.11
• #​50207 - Allow configuring Cache-Control when OIDC session cookie is created
• #​50249 - Add OIDC CacheControl configuration
• #​50301 - DevUI WorkspaceProcessor fails when files change during the processing
• #​50390 - Quarkus OIDC incorrecty selects request filters for the token revocation
• #​50397 - Fix OIDC TokenRevocation filter binding and improve request logging
• #​50452 - ArC: fix subclass generation with not visible decorators
• #​50619 - FORMAT_FAILURE encountered in Camel logging from dev mode
• #​50646 - Improve handling of quarkus.test.continuous-testing=false
• #​50672 - Mask some HTTP headers in the HTTP access log
• #​50701 - Make sure dev ui workspace don't prevent dev mode from starting up
• #​50705 - Make sure local quarkus-versions config are effective when the default registry provides its own
• #​50755 - Bug for JAX-RS Sub-Resources - 405 Method Not Allowed
• #​50760 - Redis Client: add sentinel topology cache TTL configuration
• #​50764 - Filter for client imports on class level only when discovering Endpoints
• #​50772 - Registry client option to set a low boundary for recommended streams on the client side
• #​50776 - Update to slf4j-jboss-logmanager 2.0.2.Final
• #​50799 - Fix StreamingOutput connection reset on mid-stream errors
• #​50884 - Bump com.github.ben-manes.caffeine:caffeine from 3.2.2 to 3.2.3
• #​50886 - Closing in gRPC interceptor causes double close in Vert.x gRPC implementation
• #​50890 - Account for random order of DevservicesElasticsearchBuildItems when comparing versions/distributions
• #​50913 - Duplicate Key in Kafka Message crashes Dev UI
• #​50919 - Java classes generated by wsdl2java not passed to Gradle compileKotlin since 3.26.1
• #​50933 - gRPC: Avoid repeatedly starting call and closing call on a server call closed by custom interceptor
• #​50945 - Bump version of Hibernate Reactive to 3.1.8.Final
• #​50988 - Fix Dev UI crash when Kafka messages contain duplicate headers
• #​50999 - Fix display issues caused by missing source directives for code blocks
• #​51001 - Add information about how to put realm config file into target/classes
• #​51002 - Quarkus 3.29.2 - Testcontainers version: 1.21.3 - Docker environment not found Linux Fedora
• #​51007 - Fix issues displaying code blocks
• #​51035 - java.lang.NoSuchMethodException in native Quarkus REST`
• #​51050 - Make SseEventSink work in native
• #​51054 - Make it clearer in OIDC bearer token tutorial when to copy the realm file
• #​51087 - Download all dependencies by default when going offline
• #​51116 - Docs fix: Minor corrections to OpenShift guide based on downstream QE feedback
• #​51141 - Fully disable Develocity capture of resource usage
• #​51202 - Bump snappy.version from 1.1.10.5 to 1.1.10.8
• #​51234 - Switch to the docs.hibernate.org for all Hibernate projects docs
• #​51245 - Docker compose dev services fails on Docker v29
• #​51247 - Fix Docker Compose Dev Services NPE on Docker v29
• #​51266 - Quarkus maven plugin sometimes fails to acquire maven lock
• #​51269 - Re-running failing test fails with classloader errors
• #​51272 - Re-try Maven resolver lock acquisition errors with a blocking task runner
• #​51298 - Dispose of the FacadeClassLoader at the end of every test plan so surefire reruns are tolerated
• #​51335 - Fix typo
• #​51341 - Use correct name for org.graalvm.sdk:nativebridge dependency
• #​51424 - Add missing imports to Decorator example in cdi.adoc
• #​51440 - In Gradle, change compilation tasks' source dirs to their parent
• #​51447 - Update the extension guide to rename enable to enabled
• #​51575 - [3.27] Bump to Vert.x 4.5.23 and Netty 4.1.130.Final
• #​51576 - DB connection might leak if the HTTP client closes the HTTP connection
• #​51590 - Docs: First Extension Asciidoc fix
• #​51642 - quarkus-maven-plugin generate-code-tests fails with some mvn -f paths
• #​51654 - [3.27] Hibernate upgrades
• #​51664 - Make sure the project directory is normalized in LocalProject
• #​51704 - [3.27] Bump the hibernate group with 8 updates
• #​51785 - Add note about REST Client connection pool size
• #​51793 - [3.27] Exclude org.lz4:lz4-java in favor of at.yawk.lz4:lz4-java
• #​51798 - [3.27] Bump the hibernate group with 7 updates
• #​51801 - Fix typos in kubernetes-config documentation

quarkusio/quarkus-platform (io.quarkus.platform:quarkus-bom)

v3.27.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[ArkuNC]

Waiting for Netcracker/qubership-core-quarkus-extensions#148 to be merged,