Skip to content

Bump the maven group across 1 directory with 12 updates - #3411

Closed
dependabot[bot] wants to merge 1 commit into
spring-boot-3from
dependabot/maven/spring-boot-3/maven-dc3f38857b
Closed

Bump the maven group across 1 directory with 12 updates#3411
dependabot[bot] wants to merge 1 commit into
spring-boot-3from
dependabot/maven/spring-boot-3/maven-dc3f38857b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the maven group with 12 updates in the / directory:

Package From To
org.apache.commons:commons-lang3 3.20.0 3.21.0
io.jsonwebtoken:jjwt 0.9.1 0.13.0
org.openapitools:jackson-databind-nullable 0.2.8 0.2.13
org.springframework.cloud:spring-cloud-function-dependencies 4.2.4 4.3.4
com.scalar.maven:scalar-core 0.6.83 0.6.87
com.scalar.maven:scalar-webmvc 0.6.83 0.6.87
com.scalar.maven:scalar-webflux 0.6.83 0.6.87
com.scalar.maven:scalar-webmvc 0.6.83 0.6.87
com.scalar.maven:scalar-webflux 0.6.83 0.6.87
com.github.therapi:therapi-runtime-javadoc 0.15.0 0.16.0
com.github.therapi:therapi-runtime-javadoc-scribe 0.15.0 0.16.0
com.github.therapi:therapi-runtime-javadoc-scribe 0.15.0 0.16.0
org.apache.maven.plugins:maven-gpg-plugin 3.2.7 3.2.8
org.sonatype.central:central-publishing-maven-plugin 0.11.0 0.12.0
org.codehaus.mojo:flatten-maven-plugin 1.5.0 1.8.0

Updates org.apache.commons:commons-lang3 from 3.20.0 to 3.21.0

Updates io.jsonwebtoken:jjwt from 0.9.1 to 0.13.0

Release notes

Sourced from io.jsonwebtoken:jjwt's releases.

0.13.0

This is the last minor JJWT release branch that will support Java 7.

Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

What's Changed

This release contains a single change:

  • The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claimTypeMap) constructor is now public for those that want register a claims type converter on their own specified ObjectMapper instance. Thank you to @​kesrishubham2510 for PR #972. See Issue 914.

Full Changelog: jwtk/jjwt@0.12.7...0.13.0

0.12.7

This patch release:

  • Adds a new Maven BOM! This is useful for multi-module projects. See Issue 967.

  • Allows the JwtParserBuilder to have empty nested algorithm collections, effectively disabling the parser's associated feature:

    • Emptying the zip() nested collection disables JWT decompression.
    • Emptying the sig() nested collection disables JWS mac/signature verification (i.e. all JWSs will be unsupported/rejected).
    • Emptying either the enc() or key() nested collections disables JWE decryption (i.e. all JWEs will be unsupported/rejected)

    See Issue 996.

  • Fixes bug 961 where JwtParserBuilder nested collection builders were not correctly replacing algorithms with the same id.

  • Ensures a JwkSet's keys collection is no longer entirely secret/redacted by default. This was an overzealous default that was unnecessarily restrictive; the keys collection itself should always be public, and each individual key within should determine which fields should be redacted when printed. See Issue 976.

  • Improves performance slightly by ensuring all jjwt-api utility methods that create *Builder instances (Jwts.builder(), Jwts.parserBuilder(), Jwks.builder(), etc) no longer use reflection.

    Instead,static factories are created via reflection only once during initial jjwt-api classloading, and then *Builders are created via standard instantiation using the new operator thereafter. This also benefits certain environments that may not have ideal ClassLoader implementations (e.g. Tomcat in some cases).

    NOTE: because this changes which classes are loaded via reflection, any environments that must explicitly reference reflective class names (e.g. GraalVM applications) will need to be updated to reflect the new factory class names.

    See Issue 988.

  • Upgrades the Gson dependency to 2.11.0

  • Upgrades the BouncyCastle dependency to 1.78.1

New Contributors

Full Changelog: jwtk/jjwt@0.12.6...0.12.7

0.12.6

This patch release:

  • Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See jwtk/jjwt#947.

... (truncated)

Changelog

Sourced from io.jsonwebtoken:jjwt's changelog.

0.13.0

This is the last minor JJWT release branch that will support Java 7. Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

This 0.13.0 minor release has only one change:

  • The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claimTypeMap) constructor is now public for those that want register a claims type converter on their own specified ObjectMapper instance. See Issue 914.

0.12.7

This patch release:

  • Adds a new Maven BOM, useful for multi-module projects. See Issue 967.

  • Allows the JwtParserBuilder to have empty nested algorithm collections, effectively disabling the parser's associated feature:

    • Emptying the zip() nested collection disables JWT decompression.
    • Emptying the sig() nested collection disables JWS mac/signature verification (i.e. all JWSs will be unsupported/rejected).
    • Emptying either the enc() or key() nested collections disables JWE decryption (i.e. all JWEs will be unsupported/rejected)

    See Issue 996.

  • Fixes bug 961 where JwtParserBuilder nested collection builders were not correctly replacing algorithms with the same id.

  • Ensures a JwkSet's keys collection is no longer entirely secret/redacted by default. This was an overzealous default that was unnecessarily restrictive; the keys collection itself should always be public, and each individual key within should determine which fields should be redacted when printed. See Issue 976.

  • Improves performance slightly by ensuring all jjwt-api utility methods that create *Builder instances (Jwts.builder(), Jwts.parserBuilder(), Jwks.builder(), etc) no longer use reflection.

    Instead,static factories are created via reflection only once during initial jjwt-api classloading, and then *Builders are created via standard instantiation using the new operator thereafter. This also benefits certain environments that may not have ideal ClassLoader implementations (e.g. Tomcat in some cases).

    NOTE: because this changes which classes are loaded via reflection, any environments that must explicitly reference reflective class names (e.g. GraalVM applications) will need to be updated to reflect the new factory class names.

    See Issue 988.

  • Upgrades the Gson dependency to 2.11.0

  • Upgrades the BouncyCastle dependency to 1.78.1

0.12.6

This patch release:

  • Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See Issue 947.
  • Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a zip header of GZIP. See Issue 949.
  • Upgrades BouncyCastle to 1.78 via PR 941.
  • Ensures that a JwkSet's keys list member is no longer considered secret and is not redacted by default. However, each individual JWK element within the keys list may still have redacted private or secret members as expected. See Issue 976.

0.12.5

This patch release:

  • Ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer

... (truncated)

Commits

Updates org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.13

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.13 released

0.2.13 adds @Present for JsonNullable (#208, closes #176, asked for by @​jpfinne): the value must be set, so undefined() fails validation and an explicit null passes. It comes for jakarta.validation and javax.validation, used with payload = Unwrapping.Skip.class as the README explains.

New helpers ofNull(), isNull(), isNonNull() and ifNonNull(...) (#204, thanks @​Thorsrud22, and @​DunkanMcLoud for the first version in #56). JsonNullable as a record component is now tested on Jackson 2 and 3 and documented (#206).

The javadoc jar has content again; from 0.2.10 to 0.2.12 it was empty (#205). Publishing works with Maven 3.10 on the runner (#207, #219).

What's Changed

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.12...v0.2.13

v0.2.12 released

Highlights

  • New mapBlankStringToNull option on both modules: with it on, a blank string for a non-String JsonNullable reads as of(null) instead of undefined() (#186, thanks @​Thorsrud22, and @​krangerich for the first version in #126).
  • Character, CharSequence and deserializers you register yourself now get the empty string instead of undefined() (#187, fixes #26 and #46). Two cases behave differently from 0.2.11: a wrapper deserializer that neither extends DelegatingDeserializer nor overrides getDelegatee() is judged by its own class, so the deserializer it wraps can now throw on ""; and a subclass of FromStringDeserializer now reads "" as of(null). Content converters (@JsonDeserialize(contentConverter = ...)) still don't see "". Thanks @​Thorsrud22 for testing it past the suite.
  • Docs: module-path registration on Java 17+ (#188) and what NON_NULL does in the usage example (#190).
  • CI runs on JDK 17, 21 and 25 (#171), and CreatorTest is back on (#170), thanks @​davidpavlovschi.

What's Changed

... (truncated)

Commits

Updates org.springframework.cloud:spring-cloud-function-dependencies from 4.2.4 to 4.3.4

Release notes

Sourced from org.springframework.cloud:spring-cloud-function-dependencies's releases.

4.3.4

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

4.3.3

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

4.3.2

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

4.3.1

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

4.3.0

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

4.3.0-M3

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

4.3.0-M2

... (truncated)

Commits
  • 7d614a4 Update SNAPSHOT to 4.3.4
  • fbb97da Merge pull request #652 from spring-cloud/dependabot/npm_and_yarn/docs/4.3.x/...
  • e806e67 Bump @​springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
  • 56c12f8 Merge pull request #647 from jonatan-ivanov/add-antora-command
  • e4e3763 Add command to generate the docs site
  • 77b3327 Upgrade node version to v22.22.0
  • c7d4922 Bump Spring Boot to 3.5.15-SNAPSHOT
  • 986377c Merge pull request #636 from spring-cloud/dependabot/npm_and_yarn/docs/4.3.x/...
  • 92329f3 Bump @​springio/antora-extensions from 1.14.10 to 1.14.11 in /docs
  • a4fec94 Merge pull request #635 from ryanjbaxter/use-new-pr-workflow
  • Additional commits viewable in compare view

Updates com.scalar.maven:scalar-core from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webmvc from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webflux from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webmvc from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webflux from 0.6.83 to 0.6.87

Commits

Updates com.github.therapi:therapi-runtime-javadoc from 0.15.0 to 0.16.0

Release notes

Sourced from com.github.therapi:therapi-runtime-javadoc's releases.

0.16.0

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Changelog

Sourced from com.github.therapi:therapi-runtime-javadoc's changelog.

0.16.0 - October 27, 2026

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Commits
  • ac7499c Prepare 0.16.0 release
  • ccfa79e Fix parsing of block tags aligned by a code formatter
  • 9e31e56 Fix NullPointerException when formatting empty inline tags
  • b24b64a Upgrade tests to JUnit 5 and compile-testing 0.24.0
  • 9df0c72 Snazzy Maven Central batch was pointing to wrong repo
  • 7913073 Clean up gradle build scripts stragglers
  • 6fe9c64 Fix regression in 93fa733c:
  • 93fa733 Only run record tests on platforms that support records
  • e59d087 Build with Maven instead of Gradle
  • 3f71f56 Add fancy maven central version tag
  • Additional commits viewable in compare view

Updates com.github.therapi:therapi-runtime-javadoc-scribe from 0.15.0 to 0.16.0

Release notes

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's releases.

0.16.0

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Changelog

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's changelog.

0.16.0 - October 27, 2026

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Commits
  • ac7499c Prepare 0.16.0 release
  • ccfa79e Fix parsing of block tags aligned by a code formatter
  • 9e31e56 Fix NullPointerException when formatting empty inline tags
  • b24b64a Upgrade tests to JUnit 5 and compile-testing 0.24.0
  • 9df0c72 Snazzy Maven Central batch was pointing to wrong repo
  • 7913073 Clean up gradle build scripts stragglers
  • 6fe9c64 Fix regression in 93fa733c:
  • 93fa733 Only run record tests on platforms that support records
  • e59d087 Build with Maven instead of Gradle
  • 3f71f56 Add fancy maven central version tag
  • Additional commits viewable in compare view

Updates com.github.therapi:therapi-runtime-javadoc-scribe from 0.15.0 to 0.16.0

Release notes

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's releases.

0.16.0

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Changelog

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's changelog.

0.16.0 - October 27, 2026

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Commits
  • ac7499c Prepare 0.16.0 release
  • ccfa79e Fix parsing of block tags aligned by a code formatter
  • 9e31e56 Fix NullPointerException when formatting empty inline tags
  • b24b64a Upgrade tests to JUnit 5 and compile-testing 0.24.0
  • 9df0c72 Snazzy Maven Central batch was pointing to wrong repo
  • 7913073 Clean up gradle build scripts stragglers
  • 6fe9c64 Fix regression in 93fa733c:
  • 93fa733 Only run record tests on platforms that support records
  • e59d087 Build with Maven instead of Gradle
  • 3f71f56 Add fancy maven central version tag
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 8a46455 [maven-release-plugin] prepare release maven-gpg-plugin-3.2.8
  • 7012821 Fix issueManagement, ciManagement system and url
  • a9a8c84 Make empty classifier null (not empty string) (#287)
  • a8368b0 Add .mvn
  • f0e45e0 Update parent POM to 45 (#284)
  • cb1236c Bump bouncycastleVersion from 1.78.1 to 1.80 (#127)
  • 5377a10 Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133)
  • 8b63932 Bump org.apache.maven.plugins:maven-invoker-plugin from 3.8.0 to 3.9.0 (#125)
  • 54ea518 Bump org.simplify4u.plugins:pgpverify-maven-plugin from 1.18.2 to 1.19.1
  • a6a412d Remove old JIRA issue link
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12.0

Release notes

Sourced from org.sonatype.central:central-publishing-maven-plugin's releases.

release-0.12.0

What's Changed

Full Changelog: sonatype-nexus-community/central-publishing-maven-plugin@release-0.11.1...release-0.12.0

0.11.1

This is the same source as for release 0.11.0, but now open-sourced under Apache-2.0 license.

Full Changelog: https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.11.1

Commits
  • See full diff in

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 6, 2026
@bnasslahsen

bnasslahsen commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
Bump the maven group across 1 directory with 12 updates
439cebf 
Bumps the maven group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.commons:commons-lang3 | `3.20.0` | `3.21.0` |
| [io.jsonwebtoken:jjwt](https://github.com/jwtk/jjwt) | `0.9.1` | `0.13.0` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.8` | `0.2.13` |
| [org.springframework.cloud:spring-cloud-function-dependencies](https://github.com/spring-cloud/spring-cloud-build) | `4.2.4` | `4.3.4` |
| [com.scalar.maven:scalar-core](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webmvc](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webflux](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webmvc](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webflux](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.github.therapi:therapi-runtime-javadoc](https://github.com/dnault/therapi-runtime-javadoc) | `0.15.0` | `0.16.0` |
| [com.github.therapi:therapi-runtime-javadoc-scribe](https://github.com/dnault/therapi-runtime-javadoc) | `0.15.0` | `0.16.0` |
| [com.github.therapi:therapi-runtime-javadoc-scribe](https://github.com/dnault/therapi-runtime-javadoc) | `0.15.0` | `0.16.0` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.7` | `3.2.8` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.5.0` | `1.8.0` |



Updates `org.apache.commons:commons-lang3` from 3.20.0 to 3.21.0

Updates `io.jsonwebtoken:jjwt` from 0.9.1 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.9.1...0.13.0)

Updates `org.openapitools:jackson-databind-nullable` from 0.2.8 to 0.2.13
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.8...v0.2.13)

Updates `org.springframework.cloud:spring-cloud-function-dependencies` from 4.2.4 to 4.3.4
- [Release notes](https://github.com/spring-cloud/spring-cloud-build/releases)
- [Changelog](https://github.com/spring-cloud/spring-cloud-build/blob/main/release-train-settings.xml)
- [Commits](spring-cloud/spring-cloud-build@v4.2.4...v4.3.4)

Updates `com.scalar.maven:scalar-core` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webmvc` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webflux` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webmvc` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webflux` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.github.therapi:therapi-runtime-javadoc` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/dnault/therapi-runtime-javadoc/releases)
- [Changelog](https://github.com/dnault/therapi-runtime-javadoc/blob/main/CHANGES.md)
- [Commits](dnault/therapi-runtime-javadoc@0.15.0...0.16.0)

Updates `com.github.therapi:therapi-runtime-javadoc-scribe` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/dnault/therapi-runtime-javadoc/releases)
- [Changelog](https://github.com/dnault/therapi-runtime-javadoc/blob/main/CHANGES.md)
- [Commits](dnault/therapi-runtime-javadoc@0.15.0...0.16.0)

Updates `com.github.therapi:therapi-runtime-javadoc-scribe` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/dnault/therapi-runtime-javadoc/releases)
- [Changelog](https://github.com/dnault/therapi-runtime-javadoc/blob/main/CHANGES.md)
- [Commits](dnault/therapi-runtime-javadoc@0.15.0...0.16.0)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.7...maven-gpg-plugin-3.2.8)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases)
- [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.5.0 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.5.0...1.8.0)

---
updated-dependencies:
- dependency-name: com.github.therapi:therapi-runtime-javadoc
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.github.therapi:therapi-runtime-javadoc-scribe
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.github.therapi:therapi-runtime-javadoc-scribe
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-core
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webflux
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webflux
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webmvc
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webmvc
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.jsonwebtoken:jjwt
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.springframework.cloud:spring-cloud-function-dependencies
  dependency-version: 4.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the maven group with 12 updates Bump the maven group across 1 directory with 12 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/spring-boot-3/maven-dc3f38857b branch from 101a6a7 to 439cebf Compare November 6, 2026 00:59
@bnasslahsen

bnasslahsen commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 6, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/spring-boot-3/maven-dc3f38857b branch November 6, 2026 01:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bnasslahsen