Skip to content

Bump the maven-minor-and-patch group across 1 directory with 5 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-and-patch-84f274cd29
Open

Bump the maven-minor-and-patch group across 1 directory with 5 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-and-patch-84f274cd29

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-and-patch group with 5 updates in the / directory:

Package From To
com.tngtech.archunit:archunit-junit5 1.4.2 1.5.0
org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.17 2.9.0
org.cyclonedx:cyclonedx-maven-plugin 2.9.2 2.9.3
org.apache.maven:apache-maven 3.9.9 3.9.16
org.apache.maven.wrapper:maven-wrapper 3.3.2 3.3.4

Updates com.tngtech.archunit:archunit-junit5 from 1.4.2 to 1.5.0

Release notes

Sourced from com.tngtech.archunit:archunit-junit5's releases.

ArchUnit 1.5.0

Enhancements

Core

  • Support Java 27 / class file major version 71 (#1618)
  • Improve descriptions of JavaAccess.Predicates.originOwner and JavaAccess.Predicates.targetOwner (#1603; thanks to @​StefanGraeber 👋)
  • Expose information on sealed classes via JavaClass: isSealed() and getPermittedSubclasses() (#1677)
  • Consider dependencies from caught exceptions (#1555; thanks to @​bannmann 👋)
  • ImportOption.DoNotIncludeTests and OnlyIncludeTests consider tests in custom Gradle source sets (#1660; thanks to @​Develop-KIM 👋)

Lang

  • ArchConditions offers new ArchCondition<JavaClass> haveAnyDependenciesThat(DescribedPredicate<Dependency>) (#1580; thanks to @​wakingrufus 👋)

Library

  • ArchitectureMetrics.lakosMetrics is computed much more performantly (#1629; thanks to @​ThanosTsiamis 👋)
  • TextFileBasedViolationStore is now thread-safe under parallel test execution (#1656; thanks to @​kelunik 👋)
  • ModuleDependency now provides stable descriptions (#1648; thanks to @​DragonFSKY 👋)

JUnit

Documentation

Internal Improvements

Commits
  • 502d782 prepare release 1.5.0
  • 4f26fcc fix testRelease exec() and task registration for Gradle 9
  • 96af984 add new developers
  • e427828 consolidate POM checks during CI and release
  • a30f6e3 Bump gradle/actions from 6 to 6.2.0
  • a036c08 Bump com.github.ben-manes.versions from 0.57.0 to 0.58.0
  • 24a9d9e Bump actions/setup-java from 5.6.0 to 5.7.0
  • 9944244 detect custom Gradle test source sets in test import options (#1660)
  • 51fd6c9 detect custom Gradle test source sets in test import options
  • 65f4cd3 add support for dependencies from caught exceptions (#1555)
  • Additional commits viewable in compare view

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.8.17 to 2.9.0

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v2.9.0 released!

What's Changed

  • Upgrade Spring Boot to version 3.5.16
  • Upgrade swagger-core to version 2.2.52
  • Upgrade swagger-ui to version 5.32.11
  • Upgrade commons-lang to version 3.20.0
  • Act upon SonarQube warnings (#3306, #3307)

Added

  • Allow request-specific Swagger UI index transformation
  • Add a mechanism to disable nullable for Kotlin properties

Fixed

  • #3304 – Kotlin parent class's field is not properly marked as nullable
  • #3298 – Update Spring Boot to 3.5.16
  • #3294 – Duplicated path getting swagger-config
  • #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
  • #3291 – Fix vulnerabilities: upgrade Spring Boot to 3.5.14 and swagger-ui to 5.32.5
  • #3288 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
  • #3281 – Stabilize Spring Data Page schema property order
  • #3274 – Description disappears from the generated JSON after upgrade to 3.0.3
  • #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
  • #3263 – Null key for a Map not allowed in JSON
  • #3262 – Fix version mismatch in springdoc-openapi-tests modules

New Contributors

Full Changelog: springdoc/springdoc-openapi@v2.8.17...v2.9.0

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[2.9.0] - 2026-07-31

Added

  • Allow request-specific Swagger UI index transformation
  • Add a mechanism to disable nullable for Kotlin properties

Changed

  • Upgrade Spring Boot to version 3.5.16
  • Upgrade swagger-core to version 2.2.52
  • Upgrade swagger-ui to version 5.32.11
  • Upgrade commons-lang to version 3.20.0
  • Act upon SonarQube warnings (#3306, #3307)

Fixed

  • #3304 – Kotlin parent class's field is not properly marked as nullable
  • #3298 – Update Spring Boot to 3.5.16
  • #3294 – Duplicated path getting swagger-config
  • #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
  • #3291 – Fix vulnerabilities: upgrade Spring Boot to 3.5.14 and swagger-ui to 5.32.5
  • #3288 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
  • #3281 – Stabilize Spring Data Page schema property order
  • #3274 – Description disappears from the generated JSON after upgrade to 3.0.3
  • #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
  • #3263 – Null key for a Map not allowed in JSON
  • #3262 – Fix version mismatch in springdoc-openapi-tests modules
Commits
  • 458b4d3 [maven-release-plugin] prepare release v2.9.0
  • 1840a5d CHANGELOG.md update
  • efa10ec swagger-ui upgrade to version 5.32.11
  • a60859e Fix sonarqube issues
  • aca2d43 fixed sonar issues
  • a6e0f23 chore: act upon SonarQube warnings #3307
  • 06f8e63 upgrade to commons-lang 3.20.0
  • 1910b1b Kotlin parent class's field is not properly marked as nullable. Fixes #3304
  • 72611bf Merge pull request #3306 from Mattias-Sehlstedt/sonar-qube
  • 1c4e1d8 chore: act upon SonarQube warnings
  • Additional commits viewable in compare view

Updates org.cyclonedx:cyclonedx-maven-plugin from 2.9.2 to 2.9.3

Release notes

Sourced from org.cyclonedx:cyclonedx-maven-plugin's releases.

2.9.3

🚀 New features and improvements

📦 Dependency updates

  • Bump org.apache.maven.shared:maven-dependency-analyzer from 1.16.0 to 1.17.1 (#665) @dependabot[bot]
Commits
  • 93e97e1 [maven-release-plugin] prepare release cyclonedx-maven-plugin-2.9.3
  • d0f7a11 Handle central-publishing-maven-plugin out of the box
  • c5221f2 Bump org.apache.maven.shared:maven-dependency-analyzer
  • d92339e Fix #671: handle Maven 4 ArtifactResult$NoRepository in dependency resolution
  • 132b702 Replace Maven's deprecated @​Component annotation by JSR-330 @​Inject
  • 997c60c [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates org.apache.maven:apache-maven from 3.9.9 to 3.9.16

Updates org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4

Release notes

Sourced from org.apache.maven.wrapper:maven-wrapper's releases.

3.3.4

🐛 Bug Fixes

👻 Maintenance

  • Ensure Path Traversal is fully addressed in MavenWrapperDownloader (#363) @​hazendaz

3.3.3

💥 Breaking changes

🚀 New features and improvements

  • Fix Maven wrapper support for snapshot distributions (#335) @​gnodet

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 524486a [maven-release-plugin] prepare release maven-wrapper-3.3.4
  • 17c1ec9 Revert wrapper version removal (#365)
  • 366207f Ensure Path Traversal is fully addressed in MavenWrapperDownloader
  • 086b1c9 [maven-release-plugin] prepare for next development iteration
  • e2a0c81 [maven-release-plugin] prepare release maven-wrapper-3.3.3
  • 80952cd Clarify usage of MAVEN_USER_HOME
  • 08e7200 Remove wrapper lifecycle
  • 36886fa Support for snapshot distributions - fix (#352)
  • d02d845 Use invoker version from parent
  • af7671b Bump mavenVersion from 3.9.6 to 3.9.11 (#360)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.tngtech.archunit:archunit-junit5](https://github.com/TNG/ArchUnit) | `1.4.2` | `1.5.0` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.17` | `2.9.0` |
| [org.cyclonedx:cyclonedx-maven-plugin](https://github.com/CycloneDX/cyclonedx-maven-plugin) | `2.9.2` | `2.9.3` |
| org.apache.maven:apache-maven | `3.9.9` | `3.9.16` |
| [org.apache.maven.wrapper:maven-wrapper](https://github.com/apache/maven-wrapper) | `3.3.2` | `3.3.4` |



Updates `com.tngtech.archunit:archunit-junit5` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/TNG/ArchUnit/releases)
- [Commits](TNG/ArchUnit@v1.4.2...v1.5.0)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.17 to 2.9.0
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/v2.9.0/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.17...v2.9.0)

Updates `org.cyclonedx:cyclonedx-maven-plugin` from 2.9.2 to 2.9.3
- [Release notes](https://github.com/CycloneDX/cyclonedx-maven-plugin/releases)
- [Commits](CycloneDX/cyclonedx-maven-plugin@cyclonedx-maven-plugin-2.9.2...cyclonedx-maven-plugin-2.9.3)

Updates `org.apache.maven:apache-maven` from 3.9.9 to 3.9.16

Updates `org.apache.maven.wrapper:maven-wrapper` from 3.3.2 to 3.3.4
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](apache/maven-wrapper@maven-wrapper-3.3.2...maven-wrapper-3.3.4)

---
updated-dependencies:
- dependency-name: com.tngtech.archunit:archunit-junit5
  dependency-version: 1.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-and-patch
- dependency-name: org.cyclonedx:cyclonedx-maven-plugin
  dependency-version: 2.9.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
- dependency-name: org.apache.maven.wrapper:maven-wrapper
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants