Skip to content

Update dependencies and Java to 21#2

Merged
sumerjabri merged 2 commits intocraftercms:masterfrom
phuongnq:security/cs-1110-update-dependencies-4x
Apr 9, 2025
Merged

Update dependencies and Java to 21#2
sumerjabri merged 2 commits intocraftercms:masterfrom
phuongnq:security/cs-1110-update-dependencies-4x

Conversation

@phuongnq
Copy link
Copy Markdown
Member

@phuongnq phuongnq commented Apr 8, 2025

#1

dependabot Bot and others added 2 commits April 9, 2025 06:08
Bumps the dependencies group with 38 updates:

| Package | From | To |
| --- | --- | --- |
| org.apache.commons:commons-lang3 | `3.14.0` | `3.17.0` |
| org.apache.commons:commons-text | `1.12.0` | `1.13.0` |
| [org.springframework:spring-webmvc](https://github.com/spring-projects/spring-framework) | `6.1.10` | `6.2.5` |
| [org.springframework:spring-test](https://github.com/spring-projects/spring-framework) | `6.1.10` | `6.2.5` |
| org.slf4j:slf4j-api | `2.0.13` | `2.0.17` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.17.1` | `2.18.3` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.6` | `1.5.18` |
| [org.junit.jupiter:junit-jupiter-api](https://github.com/junit-team/junit5) | `5.10.3` | `5.12.1` |
| [org.junit.jupiter:junit-jupiter-params](https://github.com/junit-team/junit5) | `5.10.3` | `5.12.1` |
| [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit5) | `5.10.3` | `5.12.1` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.2` | `2.4` |
| [org.hamcrest:hamcrest](https://github.com/hamcrest/JavaHamcrest) | `2.2` | `3.0` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.12.0` | `5.17.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.13.0` | `3.14.0` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.7.0` | `3.11.2` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.3.0` | `3.5.3` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.43.0` | `2.44.4` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.3.0` | `3.5.0` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `3.2.4` | `3.2.7` |
| [org.antlr:antlr4-runtime](https://github.com/antlr/antlr4) | `4.13.1` | `4.13.2` |
| [org.antlr:antlr4-maven-plugin](https://github.com/antlr/antlr4) | `4.13.1` | `4.13.2` |
| [org.openjdk.nashorn:nashorn-core](https://github.com/openjdk/nashorn) | `15.4` | `15.6` |
| [org.jacoco:org.jacoco.agent](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.13` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.13` |
| [org.junit.platform:junit-platform-suite](https://github.com/junit-team/junit5) | `1.10.3` | `1.12.1` |
| commons-io:commons-io | `2.16.1` | `2.18.0` |
| org.apache.felix:maven-bundle-plugin | `5.1.9` | `6.0.0` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.12.7` | `2.14.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.2.1-jre` | `33.4.6-jre` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.1.8` | `3.2.0` |
| [org.apache.maven:maven-plugin-api](https://github.com/apache/maven) | `3.9.8` | `3.9.9` |
| org.apache.maven:maven-core | `3.9.8` | `3.9.9` |
| [org.apache.maven.plugin-tools:maven-plugin-annotations](https://github.com/apache/maven-plugin-tools) | `3.13.1` | `3.15.1` |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `4.0.1` | `4.0.2` |
| [org.codehaus.plexus:plexus-xml](https://github.com/codehaus-plexus/plexus-xml) | `4.0.4` | `4.1.0` |
| com.google.javascript:closure-compiler | `v20240317` | `v20250402` |
| [org.apache.maven.plugins:maven-plugin-plugin](https://github.com/apache/maven-plugin-tools) | `3.13.1` | `3.15.1` |
| [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) | `3.1.2` | `3.1.4` |


Updates `org.apache.commons:commons-lang3` from 3.14.0 to 3.17.0

Updates `org.apache.commons:commons-text` from 1.12.0 to 1.13.0

Updates `org.springframework:spring-webmvc` from 6.1.10 to 6.2.5
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.10...v6.2.5)

Updates `org.springframework:spring-test` from 6.1.10 to 6.2.5
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.10...v6.2.5)

Updates `org.springframework:spring-test` from 6.1.10 to 6.2.5
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.10...v6.2.5)

Updates `org.slf4j:slf4j-api` from 2.0.13 to 2.0.17

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.1 to 2.18.3
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `ch.qos.logback:logback-classic` from 1.5.6 to 1.5.18
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.6...v_1.5.18)

Updates `org.junit.jupiter:junit-jupiter-api` from 5.10.3 to 5.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.10.3...r5.12.1)

Updates `org.junit.jupiter:junit-jupiter-params` from 5.10.3 to 5.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.10.3...r5.12.1)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.10.3 to 5.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.10.3...r5.12.1)

Updates `org.junit.jupiter:junit-jupiter-params` from 5.10.3 to 5.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.10.3...r5.12.1)

Updates `org.junit.jupiter:junit-jupiter-engine` from 5.10.3 to 5.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](junit-team/junit-framework@r5.10.3...r5.12.1)

Updates `org.yaml:snakeyaml` from 2.2 to 2.4
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.4..snakeyaml-2.2)

Updates `org.hamcrest:hamcrest` from 2.2 to 3.0
- [Release notes](https://github.com/hamcrest/JavaHamcrest/releases)
- [Changelog](https://github.com/hamcrest/JavaHamcrest/blob/master/CHANGES.md)
- [Commits](hamcrest/JavaHamcrest@v2.2...v3.0)

Updates `org.mockito:mockito-core` from 5.12.0 to 5.17.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.12.0...v5.17.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.13.0 to 3.14.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.13.0...maven-compiler-plugin-3.14.0)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.7.0 to 3.11.2
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.7.0...maven-javadoc-plugin-3.11.2)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.3.0 to 3.5.3
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.3.0...surefire-3.5.3)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.43.0 to 2.44.4
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/2.43.0...maven/2.44.4)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.3.0...3.5.0)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 3.2.4 to 3.2.7
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](apache/maven-gpg-plugin@maven-gpg-plugin-3.2.4...maven-gpg-plugin-3.2.7)

Updates `org.antlr:antlr4-runtime` from 4.13.1 to 4.13.2
- [Release notes](https://github.com/antlr/antlr4/releases)
- [Changelog](https://github.com/antlr/antlr4/blob/dev/CHANGES.txt)
- [Commits](antlr/antlr4@4.13.1...4.13.2)

Updates `org.antlr:antlr4-maven-plugin` from 4.13.1 to 4.13.2
- [Release notes](https://github.com/antlr/antlr4/releases)
- [Changelog](https://github.com/antlr/antlr4/blob/dev/CHANGES.txt)
- [Commits](antlr/antlr4@4.13.1...4.13.2)

Updates `org.openjdk.nashorn:nashorn-core` from 15.4 to 15.6
- [Changelog](https://github.com/openjdk/nashorn/blob/main/CHANGELOG.md)
- [Commits](openjdk/nashorn@release-15.4...release-15.6)

Updates `org.jacoco:org.jacoco.agent` from 0.8.12 to 0.8.13
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.13)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.13
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.13)

Updates `org.junit.platform:junit-platform-suite` from 1.10.3 to 1.12.1
- [Release notes](https://github.com/junit-team/junit5/releases)
- [Commits](https://github.com/junit-team/junit5/commits)

Updates `commons-io:commons-io` from 2.16.1 to 2.18.0

Updates `org.antlr:antlr4-maven-plugin` from 4.13.1 to 4.13.2
- [Release notes](https://github.com/antlr/antlr4/releases)
- [Changelog](https://github.com/antlr/antlr4/blob/dev/CHANGES.txt)
- [Commits](antlr/antlr4@4.13.1...4.13.2)

Updates `org.apache.felix:maven-bundle-plugin` from 5.1.9 to 6.0.0

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.13
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.13)

Updates `joda-time:joda-time` from 2.12.7 to 2.14.0
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
- [Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](JodaOrg/joda-time@v2.12.7...v2.14.0)

Updates `com.google.guava:guava` from 33.2.1-jre to 33.4.6-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.github.ben-manes.caffeine:caffeine` from 3.1.8 to 3.2.0
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v3.1.8...v3.2.0)

Updates `org.apache.maven:maven-plugin-api` from 3.9.8 to 3.9.9
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.9.8...maven-3.9.9)

Updates `org.apache.maven:maven-core` from 3.9.8 to 3.9.9

Updates `org.apache.maven.plugin-tools:maven-plugin-annotations` from 3.13.1 to 3.15.1
- [Release notes](https://github.com/apache/maven-plugin-tools/releases)
- [Commits](apache/maven-plugin-tools@maven-plugin-tools-3.13.1...maven-plugin-tools-3.15.1)

Updates `org.codehaus.plexus:plexus-utils` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-4.0.1...plexus-utils-4.0.2)

Updates `org.codehaus.plexus:plexus-xml` from 4.0.4 to 4.1.0
- [Release notes](https://github.com/codehaus-plexus/plexus-xml/releases)
- [Commits](codehaus-plexus/plexus-xml@plexus-xml-4.0.4...plexus-xml-4.1.0)

Updates `com.google.javascript:closure-compiler` from v20240317 to v20250402

Updates `org.apache.maven.plugins:maven-plugin-plugin` from 3.13.1 to 3.15.1
- [Release notes](https://github.com/apache/maven-plugin-tools/releases)
- [Commits](apache/maven-plugin-tools@maven-plugin-tools-3.13.1...maven-plugin-tools-3.15.1)

Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.2 to 3.1.4
- [Release notes](https://github.com/apache/maven-deploy-plugin/releases)
- [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.2...maven-deploy-plugin-3.1.4)

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.springframework:spring-webmvc
  dependency-version: 6.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.springframework:spring-test
  dependency-version: 6.2.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.springframework:spring-test
  dependency-version: 6.2.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.18.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-api
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-params
  dependency-version: 5.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-params
  dependency-version: 5.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 5.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.4'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.hamcrest:hamcrest
  dependency-version: '3.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 2.44.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.antlr:antlr4-runtime
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.antlr:antlr4-maven-plugin
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.openjdk.nashorn:nashorn-core
  dependency-version: '15.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.jacoco:org.jacoco.agent
  dependency-version: 0.8.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.junit.platform:junit-platform-suite
  dependency-version: 1.12.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: commons-io:commons-io
  dependency-version: 2.18.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.antlr:antlr4-maven-plugin
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.felix:maven-bundle-plugin
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: joda-time:joda-time
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.4.6-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-plugin-api
  dependency-version: 3.9.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven:maven-core
  dependency-version: 3.9.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugin-tools:maven-plugin-annotations
  dependency-version: 3.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.codehaus.plexus:plexus-xml
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: com.google.javascript:closure-compiler
  dependency-version: v20250402
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-plugin-plugin
  dependency-version: 3.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.apache.maven.plugins:maven-deploy-plugin
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@sumerjabri sumerjabri merged commit 1076f94 into craftercms:master Apr 9, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants