Skip to content

Bump the gradle-dependencies group across 1 directory with 10 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-47ff19d62c
Open

Bump the gradle-dependencies group across 1 directory with 10 updates#15
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-dependencies-47ff19d62c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle-dependencies group with 10 updates in the / directory:

Package From To
io.swagger.parser.v3:swagger-parser 2.1.22 2.1.45
com.diffplug.spotless:spotless-plugin-gradle 8.8.0 8.9.0
com.diffplug.spotless 8.8.0 8.9.0
ch.qos.logback:logback-classic 1.5.38 1.6.0
ch.qos.logback:logback-core 1.5.38 1.6.0
io.netty:netty-bom 4.2.15.Final 4.2.16.Final
com.fasterxml.jackson:jackson-bom 2.21.5 2.22.1
org.apache.commons:commons-compress 1.26.0 1.28.0
org.apache.commons:commons-lang3 3.18.0 3.20.0
org.mozilla:rhino 1.7.14.1 1.9.1

Updates io.swagger.parser.v3:swagger-parser from 2.1.22 to 2.1.45

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.45 released!

  • bump swagger-core to 2.2.52 (#2359)
  • build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.11.0 (#2354)
  • build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.22.0 (#2352)
  • build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.4.0 (#2350)
  • chore: fix syntax error in next-snapshot workflow (#2347)
  • build(deps): bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.5.0 (#2329)
  • build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.12.0 (#2328)

Swagger-parser 2.1.44 released!

  • fix: Replace the unsafe Yaml instantiation in ReferenceVisitor.getYam… (#2344)

Swagger-parser 2.1.43 released!

  • fix: resolve refs within external schemas (#2338)

Swagger-parser 2.1.42 released!

  • Update swagger-core to 2.2.50 (#2334)
  • fix: use explicit prefix for array items with dotted property names (#2330)
  • chore: migrate from tibdex/github-app-token to actions/create-github-app-token (#2324)
  • build(deps): bump commons-io:commons-io from 2.20.0 to 2.22.0 (#2319)
  • build(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0 (#2318)
  • build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.5 (#2316)

Swagger-parser 2.1.41 released!

  • Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
  • chore: update v2 parser to 1.0.76 (#2314)
  • Prevent StackOverflowError in ResolverFully (#2297)
  • Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
  • fix(converter): keep x-nullable in shared $ref responses (#2276)

Swagger-parser 2.1.40 released!

  • Update peter-evans/create-pull-request to v8 (#2308)
  • chore: bump core version to 2.2.48 (#2306)
  • fix: ensure maxYamlCodePoints is reliably set and cleaned up in large file tests (#2305)
  • Update gh actions (#2300)

Swagger-parser 2.1.39 released!

  • chore: bump core version to 2.2.45 (#2288)
  • fix: distinguish between default and example set to null and not set at all #2050 (#2286)
  • chore: upgrade jackson from 2.19.0 to 2.21.1 (#2285)

... (truncated)

Commits
  • 05c2b71 prepare release 2.1.45 (#2360)
  • ef9f551 bump swagger-core to 2.2.52 (#2359)
  • 75c0366 build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
  • 3e0726b build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin (#...
  • fa0cc91 build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
  • a901e02 build(deps): bump com.fasterxml.jackson.core:jackson-databind (#2352)
  • 3e57896 build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin (#2350)
  • 993bef6 build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin (#2328)
  • e7dc08c build(deps): bump org.apache.maven.plugins:maven-jar-plugin (#2329)
  • 2ce81b1 chore: fix syntax error in next-snapshot workflow (#2347)
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-plugin-gradle from 8.8.0 to 8.9.0

Release notes

Sourced from com.diffplug.spotless:spotless-plugin-gradle's releases.

Gradle Plugin v8.9.0

Added

Fixed

  • Prevent parallel Gradle input fingerprinting from failing when toggleOffOn() wraps a slow lazy formatter step with no matching target files. (#2994)

Changes

  • Bump default greclipse version to latest 4.39 -> 4.40. (#2989)
  • Bump default tabletest-formatter version 1.1.1 -> 1.1.2.
Commits
  • cbd01c4 Published gradle/8.9.0
  • c724e70 Published lib/4.9.0
  • 793638d Replace de.atextor:turtle-formatter with cool.rdf:cool-rdf-formatter (#2995)
  • 3cb7227 Note Java 25+ requirement for RDF formatter; tidy changelogs
  • fd9eb96 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
  • d407109 Add support for prince-of-space Java formatter (#2991)
  • cb64859 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
  • f88db43 Bump tabletest-formatter to 1.1.2 (#3001)
  • ec7db39 Bump tabletest-formatter to 1.1.2
  • a0e59b6 Remove the round of tests for JRE 25 (breaks elsewhere)
  • Additional commits viewable in compare view

Updates com.diffplug.spotless from 8.8.0 to 8.9.0

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates io.netty:netty-bom from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.16.Final

What's Changed

... (truncated)

Commits
  • 3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
  • 63bbb2c Update rust toolchain - add required parameters
  • ac06c1b Update rust toolchain
  • 5b68c61 Merge branches from forks (#17063)
  • de5d276 Update lz4-java to 1.11.1 (#17061)
  • da22048 Pin github actions to reduce risk (#17043)
  • 0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
  • 7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
  • 06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
  • bc4b983 Implement Adaptive Cumulator (#16731)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.21.5 to 2.22.1

Commits
  • b749a0c [maven-release-plugin] prepare release jackson-bom-2.22.1
  • 569073f Prep for 2.22.1 release
  • 87627b1 Merge branch '2.21' into 2.22
  • da540ae Post-release dep version bump
  • 5f0462e [maven-release-plugin] prepare for next development iteration
  • f6c940d Post-release dep version bump
  • 31cfc40 [maven-release-plugin] prepare for next development iteration
  • 112e859 [maven-release-plugin] prepare release jackson-bom-2.22.0
  • 2cae2ce Prep for 2.22.0 release
  • 7955d21 Merge branch '2.21' into 2.x
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-compress from 1.26.0 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 

  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 

  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 

  •        Add GzipParameters.toString(). Thanks to Gary Gregory.
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 

  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 

  •        Add ZipFile.stream(). Thanks to Gary Gregory. 

  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 

  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 

  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory.
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory.
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory.
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

... (truncated)

Commits

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0

Updates org.mozilla:rhino from 1.7.14.1 to 1.9.1

Release notes

Sourced from org.mozilla:rhino's releases.

Rhino 1.9.1

February 15, 2026

This release fixes a few small regressions introduced in Rhino 1.9.0.

  • Ensure that the "global" object is present, necessary for core-js to run
  • Prevent compiled methods from introducing illegal characters in their names
  • Support reserved words like "class" as names of XML attributes
  • Fix a performance regression in the RegExp engine.

Thanks to all who contributed!

Full Changelog: mozilla/rhino@Rhino1_9_0_Release...Rhino1_9_1_Release

Rhino 1.9.0

This release represents about a year of work on Rhino by a growing team of contributors.

Some of the improvements include:

  • Compatibility improvements in areas like destructuring and spread syntax.
  • Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode
  • Better support for generics and other things when Java integration is used.

Some other improvements:

JavaScript Language Updates:

  • ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.
  • RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.
  • Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.

Core Engine Enhancements:

  • Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.
  • Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.

Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.

As such, the next version going forward will be 2.0.0-SNAPSHOT.

... (truncated)

Changelog

Sourced from org.mozilla:rhino's changelog.

Rhino 1.9.0

December 22, 2025

This release represents about a year of work on Rhino by a growing team of contributors.

Some of the improvements include:

  • Compatibility improvements in areas like destructuring and spread syntax.
  • Performance improvements from 10 to 30% in benchmarks like Delta Blue, Earley-Boyer, and Crypto in both interpreted and compiled mode
  • Better support for generics and other things when Java integration is used.

Some other improvements:

JavaScript Language Updates:

  • ES6+: Significant advancements in destructuring, spread syntax for arrays/objects, Symbol API, and improved let/const scoping. TypedArray.from/of and BigInt.asUintN/asIntN fixes.
  • RegExp: New features like named capture groups, lookbehind assertions, and Unicode mode support.
  • Future ES (ES2024/2025): Early implementation of proposals such as Promise.withResolvers, Promise.try, ArrayBuffer transfer methods, and new Set methods.

Core Engine Enhancements:

  • Major Refactoring: Extensive migration of built-in objects to a lambda-based architecture and a comprehensive overhaul of the interpreter bytecodes for better performance and maintainability.
  • Concurrency & Interop: Continued focus on thread safety improvements and enhanced Java interoperability, including better generics support.

Going forward -- we have lots of plans for Rhino, including some changes that may affect compatibility for projects that embed Rhino into larger frameworks. We think that these changes will be worth it because they will unlock better language compatibility and performance.

As such, the next version going forward will be 2.0.0-SNAPSHOT.

Thanks to everyone who contributed!

Commits

Updates com.diffplug.spotless from 8.8.0 to 8.9.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the gradle-dependencies group across 1 directory with 10 updates
e4563e2 
Bumps the gradle-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.22` | `2.1.45` |
| [com.diffplug.spotless:spotless-plugin-gradle](https://github.com/diffplug/spotless) | `8.8.0` | `8.9.0` |
| com.diffplug.spotless | `8.8.0` | `8.9.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.0` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.0` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.15.Final` | `4.2.16.Final` |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.21.5` | `2.22.1` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.26.0` | `1.28.0` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.20.0` |
| [org.mozilla:rhino](https://github.com/mozilla/rhino) | `1.7.14.1` | `1.9.1` |



Updates `io.swagger.parser.v3:swagger-parser` from 2.1.22 to 2.1.45
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.22...v2.1.45)

Updates `com.diffplug.spotless:spotless-plugin-gradle` from 8.8.0 to 8.9.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@gradle/8.8.0...gradle/8.9.0)

Updates `com.diffplug.spotless` from 8.8.0 to 8.9.0

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `ch.qos.logback:logback-core` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.16.Final)

Updates `com.fasterxml.jackson:jackson-bom` from 2.21.5 to 2.22.1
- [Commits](FasterXML/jackson-bom@jackson-bom-2.21.5...jackson-bom-2.22.1)

Updates `ch.qos.logback:logback-core` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `org.apache.commons:commons-compress` from 1.26.0 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.26.0...rel/commons-compress-1.28.0)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.20.0

Updates `org.mozilla:rhino` from 1.7.14.1 to 1.9.1
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `com.diffplug.spotless` from 8.8.0 to 8.9.0

---
updated-dependencies:
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.diffplug.spotless:spotless-plugin-gradle
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: io.netty:netty-bom
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-dependencies
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: org.mozilla:rhino
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
- dependency-name: com.diffplug.spotless
  dependency-version: 8.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 28, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 28, 2026 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants