chore(deps): Bump the version-updates group across 1 directory with 8 updates

[dependabot]

Bumps the version-updates group with 8 updates in the / directory:

Package	From	To
commons-codec:commons-codec	1.22.0	1.22.1
com.fasterxml.jackson.core:jackson-databind	2.21.4	2.22.1
io.rest-assured:rest-assured	6.0.0	6.0.1
io.rest-assured:json-schema-validator	6.0.0	6.0.1
commons-validator:commons-validator	1.10.1	1.11.0
io.qameta.allure:allure-bom	2.35.2	2.35.4
org.junit:junit-bom	6.1.0	6.1.2
gradle-wrapper	9.5.1	9.6.1

Updates commons-codec:commons-codec from 1.22.0 to 1.22.1

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.22.1 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.1.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

Fixed Bugs

• CODEC-344: Base64.Builder.setEncodeTable(byte...) accepts invalid custom alphabets. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-340: Base58.Builder.setEncodeTable(byte...) is ignored when encoding and decoding. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-342: Base32.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-343: Base32.Builder.setHexDecodeTable(boolean) sets the encode table to a decode lookup table. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-341: Base16.Builder.setEncodeTable(byte...) can create a codec that cannot decode its own output. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-339: URLCodec.encodeUrl(BitSet, byte[]) allows custom safe sets to emit URL encoding control characters. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-338: PercentCodec loses literal '+' when plusForSpace is enabled. Thanks to Ruiqi Dong, Gary Gregory.
• CODEC-337: Digest ALL reuses System.in, so only the first algorithm sees the real input (#431). Thanks to Ruiqi Dong, Gary Gregory.

•         Fix Base64.toIntegerBytes(BigInteger) for zero edge case ([#441](https://github.com/apache/commons-codec/issues/441)). Thanks to Gary Gregory.
  

•         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
  

•         Add messages when throwing NullPointerException. Thanks to Gary Gregory.
  

•         StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails fast on null input. Thanks to Gary Gregory.
  

Changes

•         Bump org.apache.commons:commons-parent from 98 to 103. Thanks to Gary Gregory.
  

•         Bump commons-io:commons-io from 2.21.0 to 2.22.0. Thanks to Gary Gregory.
  

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

---

Commits

• dc8f6c8 Prepare for the release candidate 1.22.1 RC1
• 8203c1c Prepare for the next release candidate
• 5647fe2 StringEncoderComparator.StringEncoderComparator(StringEncoder) now fails
• 00c27a9 Reduce vertical whitespace
• 568f2d7 Remove unused method
• 316fb15 Remove unused method
• bf6b543 Bump actions/checkout from 7.0.0 to 7.0.1
• e14cdfe Extract redundant code.
• 3351e63 Add messages when throwing NullPointerException.
• f22dab7 Update SCM tag
• Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.4 to 2.22.1

Commits

• See full diff in compare view

Updates io.rest-assured:rest-assured from 6.0.0 to 6.0.1

Changelog

Sourced from io.rest-assured:rest-assured's changelog.

Changelog 6.0.1 (2026-07-10)

• Fix a JsonPath denial-of-service where oversized numeric literals in untrusted JSON were parsed into arbitrarily large BigIntegers, an O(n^2) CPU and heap cost. JSON number tokens are now capped at 1000 characters by default, configurable via JsonPathConfig.numberLengthLimit and JsonConfig.numberLengthLimit (a negative value disables the check). Thanks to Brian Lee (PhD security researcher, Georgia Tech SSLab) for the private report.
• Use custom Jackson 3 object mapper in JsonPath (#1858) (thanks to gkiel for PR)
• Fix Spring MockMvc cookie handling with Jakarta-only servlet APIs (fixes #1853)
• Use Jackson 3 mapper in JsonPath deserialization when Jackson 3 is the only Jackson on the classpath (#1865) (thanks to dickerpulli for PR)
• Add JsonPath.using(Jackson3ObjectMapperFactory) overload (#1861) (thanks to Anusha-7254 for PR)
• Fix typo in duplicate-finder-maven-plugin phase property (#1866) (thanks to metacosm for PR)
• Fix incorrect serialization of enum constants declared with a body when used as query/path parameters (#1799)
• The spring-mock-mvc and spring-web-test-client modules now target Spring Framework 7 and no longer expose their own Spring version as a transitive dependency (the Spring dependencies are declared optional), so they no longer drag Spring 5 onto a Spring Boot 4 / Spring Framework 7 classpath. This removes the need for manual Spring exclusions on Spring Boot 4 (fixes #1853, #1868). Thanks to spencerarq for the detailed investigation.

Changelog 5.5.7 (2026-01-16)

• Spring MockMvc module now supports Spring Framework 7.0 (thanks to Marcin Grzejszczak for PR)

Commits

• 8cc835a [maven-release-plugin] prepare release rest-assured-6.0.1
• 92551ed Sync dist and OSGi module versions during release
• 29b55e2 Sync dist and osgi module parent versions to 6.0.1-SNAPSHOT
• f1abe77 [ci skip] Preparing for release
• d134dfb Target Spring Framework 7 in the Spring modules and stop leaking Spring onto ...
• a146f56 Add AGENTS.md with changelog convention, reference it from CLAUDE.md
• 2bbb19a Fix remaining duplicate-finder property typo in spring7-mvc-webapp
• c5214b8 Fix serialization of enum constants declared with a body (#1799)
• bc4608f [ci skip] Updated changelog to reflect the latest changes
• 2054f37 Add JsonPath.using(Jackson3ObjectMapperFactory) overload
• Additional commits viewable in compare view

Updates io.rest-assured:json-schema-validator from 6.0.0 to 6.0.1

Updates io.rest-assured:json-schema-validator from 6.0.0 to 6.0.1

Updates commons-validator:commons-validator from 1.10.1 to 1.11.0

Changelog

Sourced from commons-validator:commons-validator's changelog.

Apache Commons Validator 1.11.0 RELEASE NOTES

The Apache Commons Validator team is pleased to announce the release of Apache Commons Validator 1.11.0.

Apache Commons Validator provides the building blocks for both client-side and server-side data validation. It may be used standalone or with a framework like Struts.

This is a feature and maintenance release. Java 8 or later is required.

For complete information on Apache Commons Validator, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Validator website:

https://commons.apache.org/proper/commons-validator/

Download page: https://commons.apache.org/proper/commons-validator/download_validator.cgi

Changes in this version

New features

•             Add and use CheckDigitException.CheckDigitException(String, Object...) ([#389](https://github.com/apache/commons-validator/issues/389)). Thanks to Gary Gregory.
  

•             Add and use ValidatorException.ValidatorException(Throwable). Call sites that previously called new ValidatorException(Throwable#getMessage()) now preserve that exception ([#390](https://github.com/apache/commons-validator/issues/390)). Thanks to Gary Gregory.
  

•             Add and use ValidatorException.ValidatorException(String, Object...) ([#391](https://github.com/apache/commons-validator/issues/391)). Thanks to Gary Gregory.
  

•             Add and use ValidatorException(String, Throwable) ([#392](https://github.com/apache/commons-validator/issues/392)). Thanks to Gary Gregory.
  

Fixed Bugs

•             Fix Apache RAT plugin console warnings. Thanks to Gary Gregory.
  

•             Fixes to non-final static fields.
  

• VALIDATOR-503: DomainValidator Revocation for .dunlop: https://www.iana.org/reports/tld-transfer/20251021-dunlop. Thanks to Gary Gregory.
• VALIDATOR-504: DomainValidator ICAAN .kerrylogistics Registry Agreement - Terminated: https://www.icann.org/en/registry-agreements/terminated/kerrylogistics. Thanks to Gary Gregory.
• VALIDATOR-505: DomainValidator ICAAN .lancaster Registry Agreement - Terminated: https://www.icann.org/en/registry-agreements/terminated/lancaster. Thanks to Gary Gregory.
• VALIDATOR-506: DomainValidator ICAAN Revocation for .lipsy: https://www.iana.org/reports/tld-transfer/20250227-lipsy. Thanks to Gary Gregory.
• VALIDATOR-507: DomainValidator ICAAN Revocation for .pramerica" https://www.iana.org/reports/tld-transfer/20250516-pramerica. Thanks to Gary Gregory.
• VALIDATOR-508: DomainValidator ICAAN Revocation for .redstone: https://www.iana.org/reports/tld-transfer/20250826-redstone. Thanks to Gary Gregory.
• VALIDATOR-508: Reject signed hex group in InetAddressValidator.isValidInet6Address(String) #379. Thanks to Sahana Surendra Bogar, Gary Gregory.

•             CheckDigit implementations check for input in the alphanumeric range ([#385](https://github.com/apache/commons-validator/issues/385)). Thanks to Gary Gregory, sahvx655-wq.
  

•             Removing a country code from an IBANValidator now removes associated "other" codes ([#386](https://github.com/apache/commons-validator/issues/386)). Thanks to Gary Gregory, sahvx655-wq.
  

•             DoubleValidator and FloatValidator now treat special symbols consistently ([#388](https://github.com/apache/commons-validator/issues/388)). Thanks to Gary Gregory, sahvx655-wq.
  

•             Fix long range check in GenericTypeValidator.formatLong ([#387](https://github.com/apache/commons-validator/issues/387)). Thanks to Gary Gregory, sahvx655-wq.
  

•             Fix BigIntegerValidator minValue(), maxValue(), and processParsedValue() for out of Long range values ([#397](https://github.com/apache/commons-validator/issues/397)). Thanks to Gary Gregory, sahvx655-wq.
  

•             Add missing tests for ValidatorUtils.replace and ValidatorUtils.copyMap ([#396](https://github.com/apache/commons-validator/issues/396)). Thanks to Mauricio Bento, Gary Gregory.
  

•             Fix RegexValidator.validate() returning null for a valid match ([#395](https://github.com/apache/commons-validator/issues/395)). Thanks to sahvx655-wq, Gary Gregory.
  

•             Compare CAS and EC check digit against validated code, not raw input ([#398](https://github.com/apache/commons-validator/issues/398)). Thanks to sahvx655-wq, Gary Gregory.
  

•             Prevent URL path traversal bypass via percent encoding in UrlValidator ([#383](https://github.com/apache/commons-validator/issues/383)). Thanks to sahvx655-wq.
  

... (truncated)

Commits

• eaee281 Prepare for the release candidate 1.11.0 RC1
• 1a0292a Prepare for the next release candidate
• 519c3ba Precompile Pattern in ISSNValidator.convertToEAN13(String, String).
• e07dfa6 Bump actions/checkout from 7.0.0 to 7.0.1
• 5a28bc4 Reject nameprep-stripped code points in unicodeToASCII (#429).
• b41a464 Merge pull request #429 from sahvx655-wq/domain-reject-nameprep-stripped
• b608cb5 cover zero-width non-joiner in testIDNFormatCodePoints
• 21722b1 reject nameprep-stripped code points in unicodeToASCII
• 8cd7a4f Require the IPv6: tag for bracketed IPv6 email literals (#428).
• aeacecf Merge pull request #428 from sahvx655-wq/email-ipv6-literal-tag
• Additional commits viewable in compare view

Updates io.qameta.allure:allure-bom from 2.35.2 to 2.35.4

Release notes

Sourced from io.qameta.allure:allure-bom's releases.

2.35.4

What's Changed

⬆️ Dependency Updates

• chore: bump jackson to 2.22.1 by @​pratushnyi in allure-framework/allure-java#1343

Full Changelog: allure-framework/allure-java@2.35.3...2.35.4

2.35.3

What's Changed

⬆️ Dependency Updates

• chore: bump jackson to 2.22.0 by @​pratushnyi in allure-framework/allure-java#1300

New Contributors

• @​pratushnyi made their first contribution in allure-framework/allure-java#1300

Full Changelog: allure-framework/allure-java@2.35.2...2.35.3

Commits

• 5324352 release 2.35.4
• c387403 chore: bump jackson to 2.22.1 (via #1343)
• 983747e release 2.35.3
• 2842132 chore: bump jackson to 2.22.0 (via #1300)
• See full diff in compare view

Updates org.junit:junit-bom from 6.1.0 to 6.1.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits

• b685426 Release 6.1.2
• ae244a6 Remove blanket outputDirectoryCreator from SuiteEngineTests (#5793)
• 43bd154 Finalize 6.1.2 release notes
• 0cd9510 Fix order of release note sections
• a1507cb Add initial 6.1.2 release notes to release notes index
• 9326641 Fix NoTestsDiscoveredException for suites containing only dynamic tests (#5839)
• 2ef1123 Create initial 6.1.2 release notes from template
• 83fa9ab Back to snapshots for further development
• 0d85889 Release 6.1.1
• 0363eee Finalize 6.1.1 release notes
• Additional commits viewable in compare view

Updates gradle-wrapper from 9.5.1 to 9.6.1

Release notes

Sourced from gradle-wrapper's releases.

9.6.1

The Gradle team is excited to announce Gradle 9.6.1.

Here are the highlights of this release:

• Improved Configuration Cache hit rates
• Additional CLI rendering options
• Important project hierarchy lookup deprecations

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aharnish Solanki, Benedikt Johannes, Devendra Reddy Pennabadi, Dmytro Rodionov, Dreeam, Elías Hernández Rodríguez, Eng Zer Jun, FinlayRJW, Kamal Kansal, Marcono1234, Nelson Osacky, Philip Wedemann, Ravi, Roberto Perez Alcolea, Ryan Schmitt, Sebastian Schuberth, seunghun.ham, sk-reddy17, Suvrat Acharya, Vedant Madane.

Upgrade instructions

Switch your build to use Gradle 9.6.1 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.6.1 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.6.0

... (truncated)

Commits

• 309d128 Update fixed issues in release notes for 9.6.1 (#38328)
• 040a978 Update fixed issues in release notes for 9.6.1
• e0b8325 Restore --non-interactive flag instead of --interactive/--no-interactive (#38...
• 946f3e6 Limit explicit temp file permission setting to intended use case (#38300)
• 65f8224 Restore --non-interactive flag instead of --interactive/--no-interactive
• e346a5e Adjust CLI flag to configure non-interactive console (#38301)
• 9b53be9 Adjust CLI flag to configure non-interactive console
• 0dd3b53 Limit explicit temp file permission setting to intended use case
• 48e5ac2 Add reproducers
• 25598fd Prepare 9.6.1 patch release (#38293)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions