Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps the dependencies group with 11 updates:

Package From To
io.avaje:avaje-jsonb 3.8 3.9
io.avaje:avaje-json-node 3.8 3.9
io.avaje:avaje-inject 12.0 12.1
io.avaje:avaje-inject-generator 12.0 12.1
io.avaje:avaje-inject-maven-plugin 12.0 12.1
io.avaje:avaje-validator 2.14 2.15
io.avaje:avaje-validator-constraints 2.14 2.15
io.avaje:avaje-validator-generator 2.14 2.15
io.rest-assured:rest-assured 5.5.6 6.0.0
io.avaje:avaje-jsonb-generator 3.8 3.9
ch.qos.logback:logback-classic 1.5.21 1.5.22

Updates io.avaje:avaje-jsonb from 3.8 to 3.9

Release notes

Sourced from io.avaje:avaje-jsonb's releases.

3.9

What's Changed

Dependencies

Full Changelog: avaje/avaje-jsonb@3.8...3.9

Commits

Updates io.avaje:avaje-json-node from 3.8 to 3.9

Updates io.avaje:avaje-inject from 12.0 to 12.1

Release notes

Sourced from io.avaje:avaje-inject's releases.

12.1

What's Changed

Dependencies

New Contributors

Full Changelog: avaje/avaje-inject@12.0...12.1

Commits

Updates io.avaje:avaje-inject-generator from 12.0 to 12.1

Updates io.avaje:avaje-inject-generator from 12.0 to 12.1

Updates io.avaje:avaje-inject-maven-plugin from 12.0 to 12.1

Updates io.avaje:avaje-validator from 2.14 to 2.15

Release notes

Sourced from io.avaje:avaje-validator's releases.

2.15

What's Changed

Full Changelog: avaje/avaje-validator@2.14...2.15

Commits

Updates io.avaje:avaje-validator-constraints from 2.14 to 2.15

Updates io.avaje:avaje-validator-generator from 2.14 to 2.15

Updates io.rest-assured:rest-assured from 5.5.6 to 6.0.0

Changelog

Sourced from io.rest-assured:rest-assured's changelog.

Changelog 6.0.0 (2025-12-12)

  • spring-mock-mvc module now supports Spring 7.x
  • spring-web-test-client now supports Spring 7.x
  • Upgraded commons-lang3 from 3.18.0 to 3.19.0
  • The spring modules now required Spring 5.3+ (previously 5.1 was required)
  • New minimum Java baseline is now 17
  • New minimum Groovy base is now 5.x
  • Support for Jackson 3 object mapping
  • Support for Yasson 3 object mapping
  • Support for jakarta JsonB/Johnzon 3 object mapping
  • Migrate json-path fully to Java, bypass GroovyShell for evaluation (#1844) (thanks to Michael Edgar for PR)
    • This fixed some nasty memory leaks when using JsonPath heavily in long running processes
  • Stop resetting ResponseParserRegistrar during build (#1759, #1505, #1207 & #978) (thanks to Marc Easen for PR)
  • Skip Null filters in FilterContextImpl (#1834) (thanks to Boyarshinov Alexander for PR)
  • Upgraded Kotlin extension module to use Kotlin 2.2.21
Commits
  • 0b3a0d9 [maven-release-plugin] prepare release rest-assured-6.0.0
  • bd55281 [ci skip] Add exclusions for jackson3-example and spring7-mvc-webapp in pom.xml
  • eb141e2 [maven-release-plugin] prepare for next development iteration
  • 4c1a241 [maven-release-plugin] prepare release rest-assured-6.0.0
  • 2f11520 Using newer version of dokka and using stdlib for kotlin instead of jdk8
  • 6d9362c Ability to exclude osgi-tests in release
  • 24380db Revert osgi-tests back to JUnit 4
  • 9c12601 Upgraded Kotlin extension module to use Kotlin 2.2.21
  • 4b1ff78 [ci skip] Prepare and perform release in single step
  • 931f421 [ci skip] Removed explicit javadoc path workaround for JDK 8
  • Additional commits viewable in compare view

Updates io.avaje:avaje-jsonb-generator from 3.8 to 3.9

Updates ch.qos.logback:logback-classic from 1.5.21 to 1.5.22

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • 572379a prepare release 1.5.22
  • 39d17ea fix status printing of variable substitution when the variable name contains ...
  • 75509a9 fix PR 404, LOGBACK-543
  • 8eb9356 remove unused import
  • 6131a3a use a slightly more sophisticated guard for printing status messages
  • 9efca21 add no-args constructor to support various serialization frameworks
  • 1bea580 minor comment edits
  • bd07fdd update angus, greenmail versions
  • aef993c start work on 1.5.22-SNAPSHOT
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 15, 2025
@github-actions github-actions bot enabled auto-merge December 15, 2025 19:02
Bumps the dependencies group with 11 updates:

| Package | From | To |
| --- | --- | --- |
| [io.avaje:avaje-jsonb](https://github.com/avaje/avaje-jsonb) | `3.8` | `3.9` |
| io.avaje:avaje-json-node | `3.8` | `3.9` |
| [io.avaje:avaje-inject](https://github.com/avaje/avaje-inject) | `12.0` | `12.1` |
| io.avaje:avaje-inject-generator | `12.0` | `12.1` |
| io.avaje:avaje-inject-maven-plugin | `12.0` | `12.1` |
| [io.avaje:avaje-validator](https://github.com/avaje/avaje-validator) | `2.14` | `2.15` |
| io.avaje:avaje-validator-constraints | `2.14` | `2.15` |
| io.avaje:avaje-validator-generator | `2.14` | `2.15` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `5.5.6` | `6.0.0` |
| io.avaje:avaje-jsonb-generator | `3.8` | `3.9` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.21` | `1.5.22` |


Updates `io.avaje:avaje-jsonb` from 3.8 to 3.9
- [Release notes](https://github.com/avaje/avaje-jsonb/releases)
- [Commits](avaje/avaje-jsonb@3.8...3.9)

Updates `io.avaje:avaje-json-node` from 3.8 to 3.9

Updates `io.avaje:avaje-inject` from 12.0 to 12.1
- [Release notes](https://github.com/avaje/avaje-inject/releases)
- [Commits](avaje/avaje-inject@12.0...12.1)

Updates `io.avaje:avaje-inject-generator` from 12.0 to 12.1

Updates `io.avaje:avaje-inject-generator` from 12.0 to 12.1

Updates `io.avaje:avaje-inject-maven-plugin` from 12.0 to 12.1

Updates `io.avaje:avaje-validator` from 2.14 to 2.15
- [Release notes](https://github.com/avaje/avaje-validator/releases)
- [Commits](avaje/avaje-validator@2.14...2.15)

Updates `io.avaje:avaje-validator-constraints` from 2.14 to 2.15

Updates `io.avaje:avaje-validator-generator` from 2.14 to 2.15

Updates `io.rest-assured:rest-assured` from 5.5.6 to 6.0.0
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-5.5.6...rest-assured-6.0.0)

Updates `io.avaje:avaje-jsonb-generator` from 3.8 to 3.9

Updates `ch.qos.logback:logback-classic` from 1.5.21 to 1.5.22
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.21...v_1.5.22)

---
updated-dependencies:
- dependency-name: io.avaje:avaje-jsonb
  dependency-version: '3.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-json-node
  dependency-version: '3.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject
  dependency-version: '12.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-version: '12.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-version: '12.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-maven-plugin
  dependency-version: '12.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-validator
  dependency-version: '2.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-validator-constraints
  dependency-version: '2.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-validator-generator
  dependency-version: '2.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-jsonb-generator
  dependency-version: '3.9'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/master/dependencies-72d6ee3e40 branch from 4b2577d to 777547d Compare December 15, 2025 19:44
@github-actions github-actions bot merged commit 937d0b1 into master Dec 16, 2025
6 checks passed
@dependabot dependabot bot deleted the dependabot/maven/master/dependencies-72d6ee3e40 branch December 16, 2025 03:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants