Skip to content

Bump the "all-dependencies" group with 3 updates across multiple ecosystems - #834

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/all_dependencies-f4c51db2fb
Open

Bump the "all-dependencies" group with 3 updates across multiple ecosystems#834
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/all_dependencies-f4c51db2fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the all-dependencies group in /java with 21 updates:

Package From To
org.springframework.boot:spring-boot-dependencies 3.3.13 4.1.0
io.projectreactor:reactor-bom 2024.0.17 2025.0.6
org.junit:junit-bom 5.11.3 6.1.2
com.google.code.gson:gson 2.13.2 2.14.0
org.springframework.cloud:spring-cloud-context 4.1.6 5.0.2
nl.jqno.equalsverifier:equalsverifier 3.17.3 4.5
au.com.dius.pact:consumer 4.6.19 4.7.3
ch.qos.logback:logback-classic 1.5.32 1.5.38
ch.qos.logback:logback-core 1.5.32 1.5.38
com.azure.spring:spring-cloud-azure-autoconfigure 5.18.0 7.3.0
com.azure:azure-spring-data-cosmos 5.18.0 7.3.0
com.puppycrawl.tools:checkstyle 10.20.1 13.8.0
com.github.spotbugs:spotbugs 4.9.8 4.10.3
org.apache.maven.plugins:maven-surefire-report-plugin 3.5.5 3.5.6
org.apache.maven.plugins:maven-surefire-plugin 3.5.5 3.5.6
org.jacoco:jacoco-maven-plugin 0.8.14 0.8.15
com.github.spotbugs:spotbugs-maven-plugin 4.9.8.3 4.10.3.0
org.pitest:pitest-maven 1.23.0 1.25.8
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.15.0
org.springframework.boot:spring-boot-maven-plugin 3.3.13 4.1.0
org.owasp:dependency-check-maven 12.2.0 12.2.2

Updates org.springframework.boot:spring-boot-dependencies from 3.3.13 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates io.projectreactor:reactor-bom from 2024.0.17 to 2025.0.6

Release notes

Sourced from io.projectreactor:reactor-bom's releases.

2025.0.6

2025.0.6 release train is made of:

These artifacts didn't have any changes:

2025.0.5

2025.0.5 release train is made of:

These artifacts didn't have any changes:

  • reactor-addons 3.6.0
  • reactor-kotlin-extensions 1.3.0

2025.0.4

2025.0.4 release train is made of:

These artifacts didn't have any changes:

  • reactor-addons 3.6.0
  • reactor-kotlin-extensions 1.3.0

2025.0.3

2025.0.3 release train is made of:

These artifacts didn't have any changes:

  • reactor-addons 3.6.0
  • reactor-kotlin-extensions 1.3.0

2025.0.2

2025.0.2 release train is made of:

These artifacts didn't have any changes:

  • reactor-addons 3.6.0
  • reactor-kotlin-extensions 1.3.0

... (truncated)

Commits
  • 2764b66 [release] Prepare and release BOM 2025.0.6
  • d7fff6b Merge-ignore release 2024.0.18 into 2025.0.6
  • 52e80b7 [release] Back to snapshots, next BOM will be SR 19
  • 518bad4 [release] Prepare and release BOM 2024.0.18
  • 86280c8 Merge #780 into 2025.0.6
  • 8d7d6f3 Bump actions/checkout from 6.0.2 to 6.0.3 (#780)
  • df88e6b Merge 4dece8e9 into 2025.0.6
  • 4dece8e [build] Use non-capturing groups for all numeric segments in qualifyVersion
  • 2f4cdc8 Merge 17214287 into 2025.0.6
  • 1721428 [build] Enhance version parsing to support 4-part numeric versions
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.11.3 to 6.1.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

JUnit 6.1.0 = Platform 6.1.0 + Jupiter 6.1.0 + Vintage 6.1.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.0.3...r6.1.0

JUnit 6.1.0-RC1 = Platform 6.1.0-RC1 + Jupiter 6.1.0-RC1 + Vintage 6.1.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r6.1.0-M1...r6.1.0-RC1

JUnit 6.1.0-M1 = Platform 6.1.0-M1 + Jupiter 6.1.0-M1 + Vintage 6.1.0-M1

See Release Notes.

New Contributors

... (truncated)

Commits
  • b685426 Release 6.1.2
  • ae244a6 Remove blanket outputDirectoryCreator from SuiteEngineTests (#5793)
  • 43bd154 Finalize 6.1.2 release notes
  • 0cd9510 Fix order of release note sections
  • a1507cb Add initial 6.1.2 release notes to release notes index
  • 9326641 Fix NoTestsDiscoveredException for suites containing only dynamic tests (#5839)
  • 2ef1123 Create initial 6.1.2 release notes from template
  • 83fa9ab Back to snapshots for further development
  • 0d85889 Release 6.1.1
  • 0363eee Finalize 6.1.1 release notes
  • Additional commits viewable in compare view

Updates com.google.code.gson:gson from 2.13.2 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

  • Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

    When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

    With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

  • Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

    This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

  • Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

    Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

  • Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

    This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

  • Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

    The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

  • Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

    This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

  • Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

New Contributors

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Commits
  • 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
  • a3024fd Bump the maven group with 13 updates (#3002)
  • 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
  • 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
  • 53d703e Update outdated comment regarding serializable types (#3012)
  • 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
  • f4d371d Fix duplicate key detection when first value is null (#3006)
  • 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
  • 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
  • b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
  • Additional commits viewable in compare view

Updates org.springframework.cloud:spring-cloud-context from 4.1.6 to 5.0.2

Release notes

Sourced from org.springframework.cloud:spring-cloud-context's releases.

5.0.2

🐞 Bug Fixes

  • ConfigurationProperties initial values not restored on DELETE /actuator/env #1616

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot] and @​ryanjbaxter

What's Changed

New Contributors

Full Changelog: spring-cloud/spring-cloud-commons@v5.0.1...v5.0.2

5.0.1

📔 Documentation

... (truncated)

Commits
  • ad7cc6d Update SNAPSHOT to 5.0.2
  • 3a9d04e Merge pull request #1694 from spring-cloud/dependabot/maven/main/org.springfr...
  • 60f5823 Bump org.springframework.retry:spring-retry from 2.0.12 to 2.0.13
  • be2c7b9 Merge pull request #1691 from spring-cloud/dependabot/npm_and_yarn/docs/main/...
  • 8a6a6b9 Bump @​springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
  • cab9bae Update pom.xml to exclude logback-classic dependency
  • d56924e Bumping versions
  • 8dc4335 Merge branch '4.3.x'
  • e01eae5 Runs test on random port
  • af85f20 Merge pull request #1690 from spring-cloud/dependabot/maven/4.3.x/org.apache....
  • Additional commits viewable in compare view

Updates nl.jqno.equalsverifier:equalsverifier from 3.17.3 to 4.5

Release notes

Sourced from nl.jqno.equalsverifier:equalsverifier's releases.

Release equalsverifier-4.5

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.4.2

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.4.1

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.4

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.3.1

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.3

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.6

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.5

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.4

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.3

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.2

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.1

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.1.1

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.1

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.0.9

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.0.8

For a list of changes in this version, see CHANGELOG.md.

... (truncated)

Changelog

Sourced from nl.jqno.equalsverifier:equalsverifier's changelog.

[4.5] - 2026-04-17

Added

  • EqualsVerifier now detects when java.net.URL fields are used in equals or hashCode, since URL.equals() and URL.hashCode() perform DNS resolution, making them network-dependent and non-deterministic. Consider using URI.create(url.toString()) instead. This check can be suppressed with Warning.URL_EQUALITY. (Issue #1203)

[4.4.2] - 2026-04-07

Changed

  • Multi-line error messages now align better.

Fixed

  • Fixes a bug where a NoSuchElementException was thrown when verifying a Kotlin class that inherits a private val lazy property from a parent class (Issue 1170).
  • Fixes a bug where static fields of certain types (e.g., BigDecimal and boxed Float) were not restored to their original value after EqualsVerifier threw a NullPointerException while null-checking them.
  • Fixes a bug where an Enum<?> field resolved to Enum<Enum<Object>> (because Enum has a self-referential type bound).

[4.4.1] - 2026-02-23

Fixed

  • A regression where floats and doubles are checked (and throw an exception) that are static (Issue 1183), transient (Issue 1184) or ignored with #withIgnoredFields().

[4.4] - 2026-02-21

Added

  • Proper support for JEP 500: "Prepare to Make Final Mean Final", where the JDK emits a warning (or, if so configured, throws an exception) when final fields are mutated.
    • #withFactory() method to provide instances to EqualsVerifier so it doesn't have to mutate final fields;
    • Overloads for #withRedefinedSuperclass() and #withRedefinedSubclass() to do the same;
    • Overloads for #withPrefabValues() and #withPrefabValuesForField() where you explicitly provide a copy of the "red" value, because EqualsVerifier will not be able to make a copy of that value without using final field mutation.
    • .set(Mode.finalMeansFinal() so EqualsVerifier refuses to mutate final fields even when still possible: this is useful when migrating to a newer JDK where this is an issue.
    • Documentation: see the chapter on this subject in the manual.
  • Prefab values for java.lang.Number.

Changed

  • For doubles and floats, EqualsVerifier now uses 0.0 and -0.0 instead of NaN to test edge case handling without triggering precondition exceptions. For boxed Double/Float, it now suggests equals() over Double.compare()/Float.compare() (they behave identically).

[4.3.1] - 2026-01-24

Changed

[4.3] - 2026-01-01

Changed

  • Restored original behaviour for multiple predicate-based ScanOption exceptions. (Issue 1167; thanks Mark!)

... (truncated)

Commits
  • 3f72cbc Bumps version to 4.5
  • abd5aa9 Updates CHANGELOG for release
  • 04f89c1 Merge pull request #1204 from jqno/add-url-fieldcheck
  • ffc7f03 Streamlines UrlTest
  • e9cf3be Adds URL FieldCheck
  • 472e8b1 Update copyright year in README.md
  • 94ebdf6 Merge pull request #1202 from jqno/vendors-signedjar-test
  • 8d6327d Excludes equalsverifier-test-signedjar from PITest coverage
  • 7b828dc All signed-jar tests should run via failsafe so it runs through the actual ja...
  • 377c217 Incorporates SignedJarTest from separate repository
  • Additional commits viewable in compare view

Updates au.com.dius.pact:consumer from 4.6.19 to 4.7.3

Release notes

Sourced from au.com.dius.pact:consumer's releases.

4.7.3

V2 plugin logging improvements

  • 368cc3e1e - chore: Update io.pact.plugin.driver:core to 1.0.0-beta.5
  • ee21d6fd0 - feat(008): Set test run ID before plugin calls for log correlation (#1924)

4.7.2

Maintenance Release

  • 33a4e60f3 - chore: fix jreleaser config for Maven Central deployment
  • ae628629d - chore: fix release script
  • 05df59967 - chore: fix jrelease
  • 07cadd67c - Fix deprecated GitHub Actions versions in compatibility-suite workflow
  • a796b1c64 - fix: update deprecated GitHub Actions versions in gradle.yml
  • a1ebba007 - chore: Remove 4.1.x from the supported versions
  • 2926d7ff1 - chore: add pact-jvm user agent (JP-Ellis)
  • 34848ae9f - fix: include insecureTLS in options map so PactReader honours it when loading pacts (#1917)
  • a5ea6c627 - chore: update Pact plugin driver to version supporting initial V2 plugins
  • f3aec4517 - chore: buffer JSON reader source
  • 373756a30 - chore: optimize JSON parser object key parsing
  • 3021c0e2a - chore: add JMH benchmarks for JSON parser
  • 31d29cd86 - preformance(v2-engine): Make DocPath expr field lazy so it is not calculated in the constructor
  • 127e22d83 - chore(matchers): Add JMH benchmark harness for the V2 matching engine
  • 69148857f - chore: Fix static code violations
  • 42d6d76cf - feat(v2-engine): Add multipart/form-data support to V2 matching engine
  • e2ef70fe0 - fix(v2-engine): Port 4 V2 engine fixes from pact-reference Rust
  • 5a5a4b33e - chore: Port V2 engine changes from Pact Rust
  • 75b6fcc75 - fix(v2-engine): Fix regression where TypeMatcher at root level was incorrectly applied to text body
  • ca2b86ee7 - fix(v2-engine): Fix remaining 7 XML spec test failures in V2 matching engine
  • e1f2dbcab - fix(v2-engine): Fix spec test failures when running with the V2 matching engine
  • 41bfe8350 - chore: Correct the spec tests to use a header that supports CSV form
  • 92e5daa29 - chore: Update the CI pipeline to also run branches
  • 5f9073cc2 - feat: Implement V2 matching engine for responses
  • c94006517 - chore: cleanup imports #1913
  • 19f75f502 - fix: support HttpRequest in no-pacts dummy template (phil.hardwick)
  • 9d59ad591 - chore(v2-engine): Only split headers where it is known that it is safe to do
  • 0f9d53867 - chore(v2-matching-engine): Implement header:normalize-commas to make it consistent with the Rust V2 engine
  • 2e72e5b83 - chore: Correct Gradle plugin jreleaser.yml

4.7.1

Feature release

  • 0cdd0e3b3 - chore: Corrected all the doctests after update to the readmes
  • a34e72a72 - chore: Add TOC to the consumer and provider readmes
  • f695f6d79 - feat: Update readmes with details on using external references
  • 3cb5eb590 - feat: Display references in the verifier output
  • 170b27669 - feat: Add a method to the DSL interaction builders to capture external references
  • b43d22530 - feat: Add a method V4Interaction to capture external references
  • 130aaa28b - chore: Add tests for V4Interaction and child classes
  • 4ee8ddd5d - chore: fix typo breaking internal build (Kevin Rohan Vaz)

... (truncated)

Changelog

Sourced from au.com.dius.pact:consumer's changelog.

4.7.3 - V2 plugin logging improvements

  • 368cc3e1e - chore: Update io.pact.plugin.driver:core to 1.0.0-beta.5 (Ronald Holshausen, Wed Jun 24 13:47:49 2026 +1000)
  • ee21d6fd0 - feat(008): Set test run ID before plugin calls for log correlation (#1924) (Ronald Holshausen, Wed Jun 24 10:56:12 2026 +1000)
  • d1b377d5a - bump version to 4.7.3 (Ronald Holshausen, Fri Jun 19 15:51:45 2026 +1000)

4.7.2 - Maintenance Release

  • 33a4e60f3 - chore: fix jreleaser config for Maven Central deployment (Ronald Holshausen, Fri Jun 19 13:31:02 2026 +1000)
  • ae628629d - chore: fix release script (Ronald Holshausen, Fri Jun 19 12:53:15 2026 +1000)
  • 05df59967 - chore: fix jrelease (Ronald Holshausen, Fri Jun 19 11:57:23 2026 +1000)
  • 07cadd67c - Fix deprecated GitHub Actions versions in compatibility-suite workflow (copilot-swe-agent[bot], Fri Jun 19 00:44:23 2026 +0000)
  • d32ab0b2a - Merge pull request #1920 from pact-foundation/copilot/fix-latest-jdk-failure (Ronald Holshausen, Fri Jun 19 10:35:50 2026 +1000)
  • a796b1c64 - fix: update deprecated GitHub Actions versions in gradle.yml (copilot-swe-agent[bot], Fri Jun 19 00:20:56 2026 +0000)
  • a2bf74ffc - Initial plan (copilot-swe-agent[bot], Fri Jun 19 00:19:24 2026 +0000)
  • a1ebba007 - chore: Remove 4.1.x from the supported versions (Ronald Holshausen, Fri Jun 19 10:08:07 2026 +1000)
  • 2926d7ff1 - chore: add pact-jvm user agent (JP-Ellis, Thu Jun 18 08:53:52 2026 +1000)
  • 34848ae9f - fix: include insecureTLS in options map so PactReader honours it when loading pacts (#1917) (Ronald Holshausen, Fri Jun 12 10:13:44 2026 +1000)
  • a5ea6c627 - chore: update Pact plugin driver to version supporting initial V2 plugins (Ronald Holshausen, Fri May 29 13:33:17 2026 +1000)
  • c7961c712 - Merge pull request #1914 from pact-foundation/v2-engine-perf (Ronald Holshausen, Wed May 20 14:01:55 2026 +1000)
  • f3aec4517 - chore: buffer JSON reader source (Ronald Holshausen, Wed May 20 10:51:22 2026 +1000)
  • 373756a30 - chore: optimize JSON parser object key parsing (Ronald Holshausen, Wed May 20 10:26:55 2026 +1000)
  • 3021c0e2a - chore: add JMH benchmarks for JSON parser (Ronald Holshausen, Wed May 20 10:09:17 2026 +1000)
  • 31d29cd86 - preformance(v2-engine): Make DocPath expr field lazy so it is not calculated in the constructor (Ronald Holshausen, Tue May 19 16:33:45 2026 +1000)
  • 127e22d83 - chore(matchers): Add JMH benchmark harness for the V2 matching engine (Ronald Holshausen, Tue May 19 12:57:01 2026 +1000)
  • 69148857f - chore: Fix static code violations (Ronald Holshausen, Tue May 19 09:17:56 2026 +1000)
  • 42d6d76cf - feat(v2-engine): Add multipart/form-data support to V2 matching engine (Ronald Holshausen, Mon May 18 17:44:59 2026 +1000)
  • e2ef70fe0 - fix(v2-engine): Port 4 V2 engine fixes from pact-reference Rust (Ronald Holshausen, Mon May 18 16:17:16 2026 +1000)
  • 5a5a4b33e - chore: Port V2 engine changes from Pact Rust (Ronald Holshausen, Mon May 18 14:57:53 2026 +1000)
  • 75b6fcc75 - fix(v2-engine): Fix regression where TypeMatcher at root level was incorrectly applied to text body (Ronald Holshausen, Mon May 18 12:56:08 2026 +1000)
  • ca2b86ee7 - fix(v2-engine): Fix remaining 7 XML spec test failures in V2 matching engine (Ronald Holshausen, Mon May 18 12:05:39 2026 +1000)
  • e1f2dbcab - fix(v2-engine): Fix spec test failures when running with the V2 matching engine (Ronald Holshausen, Mon May 18 11:22:18 2026 +1000)
  • 41bfe8350 - chore: Correct the spec tests to use a header that supports CSV form (Ronald Holshausen, Mon May 18 10:00:34 2026 +1000)
  • 92e5daa29 - chore: Update the CI pipeline to also run branches (Ronald Holshausen, Mon May 18 09:26:52 2026 +1000)
  • 5f9073cc2 - feat: Implement V2 matching engine for responses (Ronald Holshausen, Tue Apr 21 15:20:52 2026 +1000)
  • abab9608f - Merge pull request #1913 from PhilHardwick/fix/no-pacts-http-request-resolver (Ronald Holshausen, Mon May 18 09:40:53 2026 +1000)
  • c94006517 - chore: cleanup imports #1913 (Ronald Holshausen, Mon May 18 09:18:12 2026 +1000)
  • 19f75f502 - fix: support HttpRequest in no-pacts dummy template (phil.hardwick, Fri May 15 15:49:59 2026 +0100)
  • 9d59ad591 - chore(v2-engine): Only split headers where it is known that it is safe to do (Ronald Holshausen, Mon May 4 09:34:04 2026 +1000)
  • 0f9d53867 - chore(v2-matching-engine): Implement header:normalize-commas to make it consitent with the Rust V2 engine (Ronald Holshausen, Fri May 1 17:39:52 2026 +1...

    Description has been truncated

@dependabot
chore(deps): bump the all-dependencies group in /java with 21 updates
ddabaed 
Bumps the all-dependencies group in /java with 21 updates:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.3.13` | `4.1.0` |
| [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) | `2024.0.17` | `2025.0.6` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.11.3` | `6.1.2` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.2` | `2.14.0` |
| [org.springframework.cloud:spring-cloud-context](https://github.com/spring-cloud/spring-cloud-commons) | `4.1.6` | `5.0.2` |
| [nl.jqno.equalsverifier:equalsverifier](https://github.com/jqno/equalsverifier) | `3.17.3` | `4.5` |
| [au.com.dius.pact:consumer](https://github.com/pact-foundation/pact-jvm) | `4.6.19` | `4.7.3` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.32` | `1.5.38` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.32` | `1.5.38` |
| [com.azure.spring:spring-cloud-azure-autoconfigure](https://github.com/Azure/azure-sdk-for-java) | `5.18.0` | `7.3.0` |
| [com.azure:azure-spring-data-cosmos](https://github.com/Azure/azure-sdk-for-java) | `5.18.0` | `7.3.0` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.20.1` | `13.8.0` |
| [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) | `4.9.8` | `4.10.3` |
| [org.apache.maven.plugins:maven-surefire-report-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.5` | `3.5.6` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.14` | `0.8.15` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.8.3` | `4.10.3.0` |
| [org.pitest:pitest-maven](https://github.com/hcoles/pitest) | `1.23.0` | `1.25.8` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.1` | `3.15.0` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.3.13` | `4.1.0` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.2.0` | `12.2.2` |


Updates `org.springframework.boot:spring-boot-dependencies` from 3.3.13 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.13...v4.1.0)

Updates `io.projectreactor:reactor-bom` from 2024.0.17 to 2025.0.6
- [Release notes](https://github.com/reactor/reactor/releases)
- [Commits](reactor/reactor@2024.0.17...2025.0.6)

Updates `org.junit:junit-bom` from 5.11.3 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.11.3...r6.1.2)

Updates `com.google.code.gson:gson` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.14.0)

Updates `org.springframework.cloud:spring-cloud-context` from 4.1.6 to 5.0.2
- [Release notes](https://github.com/spring-cloud/spring-cloud-commons/releases)
- [Changelog](https://github.com/spring-cloud/spring-cloud-commons/blob/main/release-train-settings.xml)
- [Commits](spring-cloud/spring-cloud-commons@v4.1.6...v5.0.2)

Updates `nl.jqno.equalsverifier:equalsverifier` from 3.17.3 to 4.5
- [Release notes](https://github.com/jqno/equalsverifier/releases)
- [Changelog](https://github.com/jqno/equalsverifier/blob/main/CHANGELOG.md)
- [Commits](jqno/equalsverifier@equalsverifier-3.17.3...equalsverifier-4.5)

Updates `au.com.dius.pact:consumer` from 4.6.19 to 4.7.3
- [Release notes](https://github.com/pact-foundation/pact-jvm/releases)
- [Changelog](https://github.com/pact-foundation/pact-jvm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pact-foundation/pact-jvm/commits)

Updates `ch.qos.logback:logback-classic` from 1.5.32 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.32...v_1.5.38)

Updates `ch.qos.logback:logback-core` from 1.5.32 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.32...v_1.5.38)

Updates `ch.qos.logback:logback-core` from 1.5.32 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.32...v_1.5.38)

Updates `com.azure.spring:spring-cloud-azure-autoconfigure` from 5.18.0 to 7.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@spring-cloud-azure_5.18.0...spring-cloud-azure_7.3.0)

Updates `com.azure:azure-spring-data-cosmos` from 5.18.0 to 7.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/spring/CHANGELOG.md)
- [Commits](Azure/azure-sdk-for-java@spring-cloud-azure_5.18.0...spring-cloud-azure_7.3.0)

Updates `com.puppycrawl.tools:checkstyle` from 10.20.1 to 13.8.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-10.20.1...checkstyle-13.8.0)

Updates `com.github.spotbugs:spotbugs` from 4.9.8 to 4.10.3
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.9.8...4.10.3)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.14 to 0.8.15
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.14...v0.8.15)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.5...surefire-3.5.6)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.8.3 to 4.10.3.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.8.3...spotbugs-maven-plugin-4.10.3.0)

Updates `org.pitest:pitest-maven` from 1.23.0 to 1.25.8
- [Release notes](https://github.com/hcoles/pitest/releases)
- [Commits](hcoles/pitest@1.23.0...1.25.8)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.3.13 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.13...v4.1.0)

Updates `org.owasp:dependency-check-maven` from 12.2.0 to 12.2.2
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.0...v12.2.2)
chore(deps): bump azul/zulu-openjdk-alpine

Bumps the all-dependencies group in /java with 1 update: azul/zulu-openjdk-alpine.


Updates `azul/zulu-openjdk-alpine` from 17.0.18-jre to 26.0.1-jre
chore(deps): bump the all-dependencies group

Bumps the all-dependencies group in /api-tests with 37 updates:

| Package | From | To |
| --- | --- | --- |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.1.2` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.2` | `2.14.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.38` |
| [net.serenity-bdd:serenity-core](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [net.serenity-bdd:serenity-junit](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [net.serenity-bdd:serenity-rest-assured](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [net.serenity-bdd:serenity-junit5](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [net.serenity-bdd:serenity-screenplay](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [net.serenity-bdd:serenity-screenplay-rest](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [net.serenity-bdd:serenity-cucumber](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [io.cucumber:cucumber-java](https://github.com/cucumber/cucumber-jvm) | `7.27.0` | `7.34.4` |
| [io.cucumber:cucumber-junit-platform-engine](https://github.com/cucumber/cucumber-jvm) | `7.27.0` | `7.34.4` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `5.5.5` | `6.0.1` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.17.6` | `1.18.11` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20240303` | `20260719` |
| com.fasterxml.jackson.core:jackson-databind | `2.21.1` | `2.22` |
| com.fasterxml.jackson.core:jackson-core | `2.21.1` | `2.22` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.21.1` | `2.22` |
| [io.netty:netty-codec-http](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.16.Final` |
| [io.netty:netty-codec-http2](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.16.Final` |
| [io.netty:netty-transport-native-epoll](https://github.com/netty/netty) | `4.2.13.Final` | `4.2.16.Final` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.6.0-jre` |
| [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client) | `5.5` | `5.6.2` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.38` | `1.18.46` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.19.0` | `1.22.0` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.9` | `7.0.8` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.20.2` | `13.8.0` |
| [com.github.spotbugs:spotbugs](https://github.com/spotbugs/spotbugs) | `4.9.4` | `4.10.3` |
| [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck) | `12.1.8` | `12.2.2` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.3` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.6` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.6` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.15.0` |
| [net.serenity-bdd.maven.plugins:serenity-maven-plugin](https://github.com/serenity-bdd/serenity-core) | `4.2.34` | `5.3.11` |
| [au.com.dius.pact.provider:maven](https://github.com/pact-foundation/pact-jvm) | `4.6.17` | `4.7.3` |
| [org.apache.maven.plugins:maven-pmd-plugin](https://github.com/apache/maven-pmd-plugin) | `3.27.0` | `3.28.0` |
| [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.9.3.2` | `4.10.3.0` |


Updates `org.junit:junit-bom` from 5.13.4 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.1.2)

Updates `com.google.code.gson:gson` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.14.0)

Updates `ch.qos.logback:logback-classic` from 1.5.18 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.18...v_1.5.38)

Updates `net.serenity-bdd:serenity-core` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-junit` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-rest-assured` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-junit5` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-screenplay` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-screenplay-rest` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-cucumber` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `io.cucumber:cucumber-java` from 7.27.0 to 7.34.4
- [Release notes](https://github.com/cucumber/cucumber-jvm/releases)
- [Changelog](https://github.com/cucumber/cucumber-jvm/blob/main/CHANGELOG.md)
- [Commits](cucumber/cucumber-jvm@v7.27.0...v7.34.4)

Updates `io.cucumber:cucumber-junit-platform-engine` from 7.27.0 to 7.34.4
- [Release notes](https://github.com/cucumber/cucumber-jvm/releases)
- [Changelog](https://github.com/cucumber/cucumber-jvm/blob/main/CHANGELOG.md)
- [Commits](cucumber/cucumber-jvm@v7.27.0...v7.34.4)

Updates `io.cucumber:cucumber-junit-platform-engine` from 7.27.0 to 7.34.4
- [Release notes](https://github.com/cucumber/cucumber-jvm/releases)
- [Changelog](https://github.com/cucumber/cucumber-jvm/blob/main/CHANGELOG.md)
- [Commits](cucumber/cucumber-jvm@v7.27.0...v7.34.4)

Updates `net.serenity-bdd:serenity-junit` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-rest-assured` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-junit5` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-screenplay` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-screenplay-rest` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `net.serenity-bdd:serenity-cucumber` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `io.rest-assured:rest-assured` from 5.5.5 to 6.0.1
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-5.5.5...rest-assured-6.0.1)

Updates `net.bytebuddy:byte-buddy` from 1.17.6 to 1.18.11
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.17.6...byte-buddy-1.18.11)

Updates `org.json:json` from 20240303 to 20260719
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2024030...2026071)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.1 to 2.22

Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.1 to 2.22

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.21.1 to 2.22
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `io.netty:netty-codec-http` from 4.2.13.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.16.Final)

Updates `io.netty:netty-codec-http2` from 4.2.13.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.16.Final)

Updates `io.netty:netty-transport-native-epoll` from 4.2.13.Final to 4.2.16.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.2.13.Final...netty-4.2.16.Final)

Updates `com.google.guava:guava` from 33.4.8-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.httpcomponents.client5:httpclient5` from 5.5 to 5.6.2
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.2/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.5...rel/v5.6.2)

Updates `org.projectlombok:lombok` from 1.18.38 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.38...v1.18.46)

Updates `commons-codec:commons-codec` from 1.19.0 to 1.22.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.19.0...rel/commons-codec-1.22.0)

Updates `org.springframework:spring-web` from 6.2.9 to 7.0.8
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.9...v7.0.8)

Updates `com.puppycrawl.tools:checkstyle` from 10.20.2 to 13.8.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-10.20.2...checkstyle-13.8.0)

Updates `com.github.spotbugs:spotbugs` from 4.9.4 to 4.10.3
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](spotbugs/spotbugs@4.9.4...4.10.3)

Updates `org.owasp:dependency-check-maven` from 12.1.8 to 12.2.2
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.1.8...v12.2.2)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.1...3.6.3)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.15.0)

Updates `net.serenity-bdd.maven.plugins:serenity-maven-plugin` from 4.2.34 to 5.3.11
- [Release notes](https://github.com/serenity-bdd/serenity-core/releases)
- [Changelog](https://github.com/serenity-bdd/serenity-core/blob/main/CHANGELOG.md)
- [Commits](serenity-bdd/serenity-core@4.2.34...5.3.11)

Updates `au.com.dius.pact.provider:maven` from 4.6.17 to 4.7.3
- [Release notes](https://github.com/pact-foundation/pact-jvm/releases)
- [Changelog](https://github.com/pact-foundation/pact-jvm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pact-foundation/pact-jvm/commits)

Updates `org.apache.maven.plugins:maven-pmd-plugin` from 3.27.0 to 3.28.0
- [Release notes](https://github.com/apache/maven-pmd-plugin/releases)
- [Commits](apache/maven-pmd-plugin@maven-pmd-plugin-3.27.0...maven-pmd-plugin-3.28.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.9.3.2 to 4.10.3.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.9.3.2...spotbugs-maven-plugin-4.10.3.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: io.projectreactor:reactor-bom
  dependency-version: 2025.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.springframework.cloud:spring-cloud-context
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: nl.jqno.equalsverifier:equalsverifier
  dependency-version: '4.5'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: au.com.dius.pact:consumer
  dependency-version: 4.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.azure.spring:spring-cloud-azure-autoconfigure
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.azure:azure-spring-data-cosmos
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.github.spotbugs:spotbugs
  dependency-version: 4.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.pitest:pitest-maven
  dependency-version: 1.25.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: azul/zulu-openjdk-alpine
  dependency-version: 26.0.1-jre
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-core
  dependency-version: 5.3.11
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-junit
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-rest-assured
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-junit5
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-screenplay
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-screenplay-rest
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-cucumber
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: io.cucumber:cucumber-java
  dependency-version: 7.34.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.cucumber:cucumber-junit-platform-engine
  dependency-version: 7.34.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.cucumber:cucumber-junit-platform-engine
  dependency-version: 7.34.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-junit
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-rest-assured
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-junit5
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-screenplay
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-screenplay-rest
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd:serenity-cucumber
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.18.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.json:json
  dependency-version: '20260719'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: io.netty:netty-codec-http
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.netty:netty-codec-http2
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.netty:netty-transport-native-epoll
  dependency-version: 4.2.16.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.springframework:spring-web
  dependency-version: 7.0.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: com.github.spotbugs:spotbugs
  dependency-version: 4.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 12.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: net.serenity-bdd.maven.plugins:serenity-maven-plugin
  dependency-version: 5.3.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: au.com.dius.pact.provider:maven
  dependency-version: 4.7.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.maven.plugins:maven-pmd-plugin
  dependency-version: 3.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants