Skip to content

Bump the maven group across 1 directory with 12 updates - #3414

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-d004082bd3
Closed

Bump the maven group across 1 directory with 12 updates#3414
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-d004082bd3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the maven group with 12 updates in the / directory:

Package From To
io.jsonwebtoken:jjwt 0.9.1 0.13.0
org.openapitools:jackson-databind-nullable 0.2.8 0.2.13
com.github.therapi:therapi-runtime-javadoc 0.15.0 0.16.0
com.github.therapi:therapi-runtime-javadoc-scribe 0.15.0 0.16.0
com.github.therapi:therapi-runtime-javadoc-scribe 0.15.0 0.16.0
com.scalar.maven:scalar-core 0.6.83 0.6.87
com.scalar.maven:scalar-webmvc 0.6.83 0.6.87
com.scalar.maven:scalar-webflux 0.6.83 0.6.87
org.springframework.ai:spring-ai-bom 2.0.1 2.0.2
com.scalar.maven:scalar-webmvc 0.6.83 0.6.87
com.scalar.maven:scalar-webflux 0.6.83 0.6.87
org.apache.maven.plugins:maven-gpg-plugin 3.2.7 3.2.8
org.sonatype.central:central-publishing-maven-plugin 0.11.0 0.12.0
org.apache.maven.plugins:maven-release-plugin 3.1.1 3.3.1
org.codehaus.mojo:flatten-maven-plugin 1.5.0 1.8.0

Updates io.jsonwebtoken:jjwt from 0.9.1 to 0.13.0

Release notes

Sourced from io.jsonwebtoken:jjwt's releases.

0.13.0

This is the last minor JJWT release branch that will support Java 7.

Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

What's Changed

This release contains a single change:

  • The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claimTypeMap) constructor is now public for those that want register a claims type converter on their own specified ObjectMapper instance. Thank you to @​kesrishubham2510 for PR #972. See Issue 914.

Full Changelog: jwtk/jjwt@0.12.7...0.13.0

0.12.7

This patch release:

  • Adds a new Maven BOM! This is useful for multi-module projects. See Issue 967.

  • Allows the JwtParserBuilder to have empty nested algorithm collections, effectively disabling the parser's associated feature:

    • Emptying the zip() nested collection disables JWT decompression.
    • Emptying the sig() nested collection disables JWS mac/signature verification (i.e. all JWSs will be unsupported/rejected).
    • Emptying either the enc() or key() nested collections disables JWE decryption (i.e. all JWEs will be unsupported/rejected)

    See Issue 996.

  • Fixes bug 961 where JwtParserBuilder nested collection builders were not correctly replacing algorithms with the same id.

  • Ensures a JwkSet's keys collection is no longer entirely secret/redacted by default. This was an overzealous default that was unnecessarily restrictive; the keys collection itself should always be public, and each individual key within should determine which fields should be redacted when printed. See Issue 976.

  • Improves performance slightly by ensuring all jjwt-api utility methods that create *Builder instances (Jwts.builder(), Jwts.parserBuilder(), Jwks.builder(), etc) no longer use reflection.

    Instead,static factories are created via reflection only once during initial jjwt-api classloading, and then *Builders are created via standard instantiation using the new operator thereafter. This also benefits certain environments that may not have ideal ClassLoader implementations (e.g. Tomcat in some cases).

    NOTE: because this changes which classes are loaded via reflection, any environments that must explicitly reference reflective class names (e.g. GraalVM applications) will need to be updated to reflect the new factory class names.

    See Issue 988.

  • Upgrades the Gson dependency to 2.11.0

  • Upgrades the BouncyCastle dependency to 1.78.1

New Contributors

Full Changelog: jwtk/jjwt@0.12.6...0.12.7

0.12.6

This patch release:

  • Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See jwtk/jjwt#947.

... (truncated)

Changelog

Sourced from io.jsonwebtoken:jjwt's changelog.

0.13.0

This is the last minor JJWT release branch that will support Java 7. Any necessary emergency bug fixes will be fixed in subsequent 0.13.x patch releases, but all new development, including Java 8 compatible changes, will be in the next minor (0.14.0) release.

All future JJWT major and minor versions ( 0.14.0 and later) will require Java 8 or later.

This 0.13.0 minor release has only one change:

  • The previously private JacksonDeserializer(ObjectMapper objectMapper, Map<String, Class<?>> claimTypeMap) constructor is now public for those that want register a claims type converter on their own specified ObjectMapper instance. See Issue 914.

0.12.7

This patch release:

  • Adds a new Maven BOM, useful for multi-module projects. See Issue 967.

  • Allows the JwtParserBuilder to have empty nested algorithm collections, effectively disabling the parser's associated feature:

    • Emptying the zip() nested collection disables JWT decompression.
    • Emptying the sig() nested collection disables JWS mac/signature verification (i.e. all JWSs will be unsupported/rejected).
    • Emptying either the enc() or key() nested collections disables JWE decryption (i.e. all JWEs will be unsupported/rejected)

    See Issue 996.

  • Fixes bug 961 where JwtParserBuilder nested collection builders were not correctly replacing algorithms with the same id.

  • Ensures a JwkSet's keys collection is no longer entirely secret/redacted by default. This was an overzealous default that was unnecessarily restrictive; the keys collection itself should always be public, and each individual key within should determine which fields should be redacted when printed. See Issue 976.

  • Improves performance slightly by ensuring all jjwt-api utility methods that create *Builder instances (Jwts.builder(), Jwts.parserBuilder(), Jwks.builder(), etc) no longer use reflection.

    Instead,static factories are created via reflection only once during initial jjwt-api classloading, and then *Builders are created via standard instantiation using the new operator thereafter. This also benefits certain environments that may not have ideal ClassLoader implementations (e.g. Tomcat in some cases).

    NOTE: because this changes which classes are loaded via reflection, any environments that must explicitly reference reflective class names (e.g. GraalVM applications) will need to be updated to reflect the new factory class names.

    See Issue 988.

  • Upgrades the Gson dependency to 2.11.0

  • Upgrades the BouncyCastle dependency to 1.78.1

0.12.6

This patch release:

  • Ensures that after successful JWS signature verification, an application-configured Base64Url Decoder output is used to construct a Jws instance (instead of JJWT's default decoder). See Issue 947.
  • Fixes a decompression memory leak in concurrent/multi-threaded environments introduced in 0.12.0 when decompressing JWTs with a zip header of GZIP. See Issue 949.
  • Upgrades BouncyCastle to 1.78 via PR 941.
  • Ensures that a JwkSet's keys list member is no longer considered secret and is not redacted by default. However, each individual JWK element within the keys list may still have redacted private or secret members as expected. See Issue 976.

0.12.5

This patch release:

  • Ensures that builders' NestedCollection changes are applied to the collection immediately as mutation methods are called, no longer

... (truncated)

Commits

Updates org.openapitools:jackson-databind-nullable from 0.2.8 to 0.2.13

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.13 released

0.2.13 adds @Present for JsonNullable (#208, closes #176, asked for by @​jpfinne): the value must be set, so undefined() fails validation and an explicit null passes. It comes for jakarta.validation and javax.validation, used with payload = Unwrapping.Skip.class as the README explains.

New helpers ofNull(), isNull(), isNonNull() and ifNonNull(...) (#204, thanks @​Thorsrud22, and @​DunkanMcLoud for the first version in #56). JsonNullable as a record component is now tested on Jackson 2 and 3 and documented (#206).

The javadoc jar has content again; from 0.2.10 to 0.2.12 it was empty (#205). Publishing works with Maven 3.10 on the runner (#207, #219).

What's Changed

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.12...v0.2.13

v0.2.12 released

Highlights

  • New mapBlankStringToNull option on both modules: with it on, a blank string for a non-String JsonNullable reads as of(null) instead of undefined() (#186, thanks @​Thorsrud22, and @​krangerich for the first version in #126).
  • Character, CharSequence and deserializers you register yourself now get the empty string instead of undefined() (#187, fixes #26 and #46). Two cases behave differently from 0.2.11: a wrapper deserializer that neither extends DelegatingDeserializer nor overrides getDelegatee() is judged by its own class, so the deserializer it wraps can now throw on ""; and a subclass of FromStringDeserializer now reads "" as of(null). Content converters (@JsonDeserialize(contentConverter = ...)) still don't see "". Thanks @​Thorsrud22 for testing it past the suite.
  • Docs: module-path registration on Java 17+ (#188) and what NON_NULL does in the usage example (#190).
  • CI runs on JDK 17, 21 and 25 (#171), and CreatorTest is back on (#170), thanks @​davidpavlovschi.

What's Changed

... (truncated)

Commits

Updates com.github.therapi:therapi-runtime-javadoc from 0.15.0 to 0.16.0

Release notes

Sourced from com.github.therapi:therapi-runtime-javadoc's releases.

0.16.0

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Changelog

Sourced from com.github.therapi:therapi-runtime-javadoc's changelog.

0.16.0 - October 27, 2026

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Commits
  • ac7499c Prepare 0.16.0 release
  • ccfa79e Fix parsing of block tags aligned by a code formatter
  • 9e31e56 Fix NullPointerException when formatting empty inline tags
  • b24b64a Upgrade tests to JUnit 5 and compile-testing 0.24.0
  • 9df0c72 Snazzy Maven Central batch was pointing to wrong repo
  • 7913073 Clean up gradle build scripts stragglers
  • 6fe9c64 Fix regression in 93fa733c:
  • 93fa733 Only run record tests on platforms that support records
  • e59d087 Build with Maven instead of Gradle
  • 3f71f56 Add fancy maven central version tag
  • Additional commits viewable in compare view

Updates com.github.therapi:therapi-runtime-javadoc-scribe from 0.15.0 to 0.16.0

Release notes

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's releases.

0.16.0

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Changelog

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's changelog.

0.16.0 - October 27, 2026

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Commits
  • ac7499c Prepare 0.16.0 release
  • ccfa79e Fix parsing of block tags aligned by a code formatter
  • 9e31e56 Fix NullPointerException when formatting empty inline tags
  • b24b64a Upgrade tests to JUnit 5 and compile-testing 0.24.0
  • 9df0c72 Snazzy Maven Central batch was pointing to wrong repo
  • 7913073 Clean up gradle build scripts stragglers
  • 6fe9c64 Fix regression in 93fa733c:
  • 93fa733 Only run record tests on platforms that support records
  • e59d087 Build with Maven instead of Gradle
  • 3f71f56 Add fancy maven central version tag
  • Additional commits viewable in compare view

Updates com.github.therapi:therapi-runtime-javadoc-scribe from 0.15.0 to 0.16.0

Release notes

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's releases.

0.16.0

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Changelog

Sourced from com.github.therapi:therapi-runtime-javadoc-scribe's changelog.

0.16.0 - October 27, 2026

✨ #83 The annotation processor is now declared as "isolating", so Gradle can process annotations incrementally instead of recompiling everything.

🐛 #73 An empty {@link} tag, like in @return {@link }, no longer causes a NullPointerException.

🐛 #75 Block tags aligned by a code formatter, like @param name description, are now parsed correctly. Previously, such @param tags lost their names (so all but one were discarded), and @see tags with a string or HTML link were ignored.

🐛 #79 Formatting a comment with an empty {@code} or {@literal} tag no longer throws NullPointerException. This also affected Comment.toString(). Other tags without content, like {@inheritDoc}, are no longer rendered as {@inheritDoc null}.

🐛 {@link} and {@value} tags with whitespace before the closing brace, like {@link Foo }, are no longer silently dropped.

🔥 The annotation processor JAR no longer bundles a repackaged copy of JavaPoet. The runtime library now includes minimal-json as source code instead of a repackaged JAR. Its package name is unchanged, so the annotation processor and runtime library from different versions still work together.

Breaking changes

⚠️ #79 InlineTag.getValue() now returns an empty string instead of null when the tag has no content, and the InlineTag constructor throws NullPointerException if the tag name is null.

Build changes

🔧 The project is now built with Maven instead of Gradle. The published POMs are self-contained, without a parent POM. The annotation processor's POM now declares its dependency on the runtime library with compile scope instead of runtime scope.

Commits
  • ac7499c Prepare 0.16.0 release
  • ccfa79e Fix parsing of block tags aligned by a code formatter
  • 9e31e56 Fix NullPointerException when formatting empty inline tags
  • b24b64a Upgrade tests to JUnit 5 and compile-testing 0.24.0
  • 9df0c72 Snazzy Maven Central batch was pointing to wrong repo
  • 7913073 Clean up gradle build scripts stragglers
  • 6fe9c64 Fix regression in 93fa733c:
  • 93fa733 Only run record tests on platforms that support records
  • e59d087 Build with Maven instead of Gradle
  • 3f71f56 Add fancy maven central version tag
  • Additional commits viewable in compare view

Updates com.scalar.maven:scalar-core from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webmvc from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webflux from 0.6.83 to 0.6.87

Commits

Updates org.springframework.ai:spring-ai-bom from 2.0.1 to 2.0.2

Release notes

Sourced from org.springframework.ai:spring-ai-bom's releases.

v2.0.2

For upgrading from 2.0.1 to 2.0.2, please refer to the upgrade notes here.

⭐ New Features

  • Upgrade the Anthropic Java SDK to 2.72.0 #7164
  • Add observability support for TextToSpeechModel, TranscriptionModel and StabilityAiImageModel #7141
  • Configure Redis vector store metadata fields #6870
  • Add customizers for stateless MCP servers #6539

🐞 Bug Fixes

  • Fix numeric filters in Cassandra vector store #7117
  • Fix StructuredOutputValidationAdvisor repeating tool call requests #7100
  • Handle Ollama responses without a message #7066
  • Return final answer first in AnthropicChatModel #7001
  • Honor disabled reasoning in tool history #6984
  • Include thinking text in Anthropic streaming chunks #6982
  • Fix Neo4j chat memory index properties #6967
  • Fix invalid JSON in Bedrock tool-call arguments #6963
  • Backfill additionalProperties: false in OpenAI strict tool schemas #6865
  • Restore honoring the configured OpenAI timeout #6837
  • Fix JsoupDocumentReader dropping relative link URLs #6803
  • Close the resource stream in TextReader #6797
  • Fix tool call extraction in GoogleGenAiChatModel for mixed content responses #5468

📔 Documentation

  • Document Anthropic server-side spans in traces #7165
  • Correct stale API names in AI metadata docs #7032
  • docs: document OpenAI reasoning effort property #6943
  • Document MCP client scope and session boundaries #6820

🔨 Dependency Upgrades

  • Upgrade OpenAI Java SDK to 4.80.0 #7170
  • Upgrade AWS SDK and Bedrock runtime to 2.55.14 #7169

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​CodeTrainerMan, @​CryoThrust, @​JamesBLewis, @​Lubaoshuai, @​Rainmemery, @​ashakirin, @​chabinhwang, @​chengwudi1, @​chensishang, @​dimitarproynov, @​dlwldn30, @​flex-ilsub, @​herder, @​ikaitist, @​iuliiasobolevska, @​jhpark1227, @​jianran, @​kezhenxu94, @​lazer-dev, @​martin-grofcik, @​nicolaskrier, @​pengjonas, @​pengmoubuaixuexi, @​rvullriede, @​ryujungkyun, @​seo92js, @​sharanrenukeshbharmshetty, @​sobychacko, @​tzolov, @​vinayreddykalluri, @​wantaekchoi, @​xujiantop-crypto, and @​zxuhan

Commits
  • fcb4de0 Release 2.0.2
  • 356201d Upgrade Spring Boot version to 4.1.2
  • 9b13935 Prepare 2.0.2 internal branch
  • 8f31b19 Upgrade MCP SDK from 2.0.0 to 2.1.0
  • 3f69977 Fix trace header test for OpenTelemetry 1.67
  • 0bce08c Fix OpenAI diarized transcription handling
  • 351c272 Upgrade OpenAI SDK to 4.80.0
  • a839fc5 Upgrade AWS SDK and Bedrock runtime to 2.55.14
  • d3111c6 Document Anthropic server-side spans in traces
  • 5d9b4a2 Upgrade the Anthropic Java SDK to 2.72.0
  • Additional commits viewable in compare view

Updates com.scalar.maven:scalar-webmvc from 0.6.83 to 0.6.87

Commits

Updates com.scalar.maven:scalar-webflux from 0.6.83 to 0.6.87

Commits

Updates org.apache.maven.plugins:maven-gpg-plugin from 3.2.7 to 3.2.8

Release notes

Sourced from org.apache.maven.plugins:maven-gpg-plugin's releases.

3.2.8

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 6, 2026
@bnasslahsen

bnasslahsen commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
Bump the maven group across 1 directory with 12 updates
3552961 
Bumps the maven group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.jsonwebtoken:jjwt](https://github.com/jwtk/jjwt) | `0.9.1` | `0.13.0` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.8` | `0.2.13` |
| [com.github.therapi:therapi-runtime-javadoc](https://github.com/dnault/therapi-runtime-javadoc) | `0.15.0` | `0.16.0` |
| [com.github.therapi:therapi-runtime-javadoc-scribe](https://github.com/dnault/therapi-runtime-javadoc) | `0.15.0` | `0.16.0` |
| [com.github.therapi:therapi-runtime-javadoc-scribe](https://github.com/dnault/therapi-runtime-javadoc) | `0.15.0` | `0.16.0` |
| [com.scalar.maven:scalar-core](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webmvc](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webflux](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) | `2.0.1` | `2.0.2` |
| [com.scalar.maven:scalar-webmvc](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [com.scalar.maven:scalar-webflux](https://github.com/scalar/scalar) | `0.6.83` | `0.6.87` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.7` | `3.2.8` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` |
| [org.apache.maven.plugins:maven-release-plugin](https://github.com/apache/maven-release) | `3.1.1` | `3.3.1` |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.5.0` | `1.8.0` |



Updates `io.jsonwebtoken:jjwt` from 0.9.1 to 0.13.0
- [Release notes](https://github.com/jwtk/jjwt/releases)
- [Changelog](https://github.com/jwtk/jjwt/blob/main/CHANGELOG.md)
- [Commits](jwtk/jjwt@0.9.1...0.13.0)

Updates `org.openapitools:jackson-databind-nullable` from 0.2.8 to 0.2.13
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.8...v0.2.13)

Updates `com.github.therapi:therapi-runtime-javadoc` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/dnault/therapi-runtime-javadoc/releases)
- [Changelog](https://github.com/dnault/therapi-runtime-javadoc/blob/main/CHANGES.md)
- [Commits](dnault/therapi-runtime-javadoc@0.15.0...0.16.0)

Updates `com.github.therapi:therapi-runtime-javadoc-scribe` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/dnault/therapi-runtime-javadoc/releases)
- [Changelog](https://github.com/dnault/therapi-runtime-javadoc/blob/main/CHANGES.md)
- [Commits](dnault/therapi-runtime-javadoc@0.15.0...0.16.0)

Updates `com.github.therapi:therapi-runtime-javadoc-scribe` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/dnault/therapi-runtime-javadoc/releases)
- [Changelog](https://github.com/dnault/therapi-runtime-javadoc/blob/main/CHANGES.md)
- [Commits](dnault/therapi-runtime-javadoc@0.15.0...0.16.0)

Updates `com.scalar.maven:scalar-core` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webmvc` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webflux` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `org.springframework.ai:spring-ai-bom` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Changelog](https://github.com/spring-projects/spring-ai/blob/main/release-train-settings.xml)
- [Commits](spring-projects/spring-ai@v2.0.1...v2.0.2)

Updates `com.scalar.maven:scalar-webmvc` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `com.scalar.maven:scalar-webflux` from 0.6.83 to 0.6.87
- [Release notes](https://github.com/scalar/scalar/releases)
- [Changelog](https://github.com/scalar/scalar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/scalar/scalar/commits)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.7 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.7...maven-gpg-plugin-3.2.8)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases)
- [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0)

Updates `org.apache.maven.plugins:maven-release-plugin` from 3.1.1 to 3.3.1
- [Release notes](https://github.com/apache/maven-release/releases)
- [Commits](apache/maven-release@maven-release-3.1.1...maven-release-3.3.1)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.5.0 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.5.0...1.8.0)

---
updated-dependencies:
- dependency-name: com.github.therapi:therapi-runtime-javadoc
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.github.therapi:therapi-runtime-javadoc-scribe
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.github.therapi:therapi-runtime-javadoc-scribe
  dependency-version: 0.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-core
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webflux
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webflux
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webmvc
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.scalar.maven:scalar-webmvc
  dependency-version: 0.6.87
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.jsonwebtoken:jjwt
  dependency-version: 0.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-release-plugin
  dependency-version: 3.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the maven group with 12 updates Bump the maven group across 1 directory with 12 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/maven-d004082bd3 branch from 0dbec01 to 3552961 Compare November 6, 2026 01:00
@bnasslahsen

bnasslahsen commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

@dependabot recreate

@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 6, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-d004082bd3 branch November 6, 2026 01:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bnasslahsen