Bump the all group with 4 updates

[dependabot]

Bumps the all group with 4 updates: org.commonmark:commonmark, org.flywaydb:flyway-database-postgresql, org.jsoup:jsoup and io.mockk:mockk.

Updates org.commonmark:commonmark from 0.24.0 to 0.25.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.25.0

Added

• Include OSGi metadata in jars (META-INF/MANIFEST.MF files) (#378)
• More documentation with examples for Node classes (#370)

Changed

• GitHub tables: Tables are now parsed even if there's no blank line before the table heading, matching GitHub's behavior. (#381)

Fixed

• MarkdownRenderer: Fix precedence for nodeRendererFactory: Factories passed to the builder can now override rendering for core node types. (#368)
• MarkdownRenderer: Fix exception with ordered lists with a long first number followed by a shorter one (#382)
• Fix warning in Eclipse about "missing 'requires transitive'" (#358)
• Fix Android incompatibility with requireNonNullElseGet (#369)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.25.0] - 2025-06-20

Added

• Include OSGi metadata in jars (META-INF/MANIFEST.MF files) (#378)
• More documentation with examples for Node classes (#370)

Changed

• GitHub tables: Tables are now parsed even if there's no blank line before the table heading, matching GitHub's behavior. (#381)

Fixed

• MarkdownRenderer: Fix precedence for nodeRendererFactory: Factories passed to the builder can now override rendering for core node types. (#368)
• MarkdownRenderer: Fix exception with ordered lists with a long first number followed by a shorter one (#382)
• Fix warning in Eclipse about "missing 'requires transitive'" (#358)
• Fix Android incompatibility with requireNonNullElseGet (#369)

Commits

• 99e6050 [maven-release-plugin] prepare release commonmark-parent-0.25.0
• 1701991 Merge pull request #385 from commonmark/release-0.25
• 6354f02 Prepare for version 0.25.0
• adcf2f2 Prepare CHANGELOG for release 0.25
• 8cc1fa2 Merge pull request #384 from commonmark/central-publisher-portal
• 5e6b740 Migrate from OSSRH to Central Publisher Portal
• 7616e19 Merge pull request #383 from commonmark/markdown-renderer-ordered-list-fix
• 971aaa9 MarkdownRenderer: Fix ordered list with long start number (fixes #382)
• 32c9290 Merge pull request #381 from commonmark/tables-without-blank-line-before
• bb57a5f Parse tables without blank line before
• Additional commits viewable in compare view

Updates org.flywaydb:flyway-database-postgresql from 11.9.1 to 11.9.2

Updates org.jsoup:jsoup from 1.20.1 to 1.21.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.21.1

jsoup 1.21.1 is out now, featuring powerful new node selection capabilities that let you target specific DOM nodes like comments and text nodes using CSS selectors, dynamic tag customization through the new TagSet callback system, and improved defense against mutation XSS attacks with simplified attribute escaping. This release also brings HTTP/2 support by default, numerous API improvements for better developer experience, and fixes for several edge-case parsing issues.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Changes

• Removed previously deprecated methods. #2317
• Deprecated the :matchText pseduo-selector due to its side effects on the DOM; use the new ::textnode selector and the Element#selectNodes(String css, Class<T> type) method instead. #2343
• Deprecated Connection.Response#bufferUp() in lieu of Connection.Response#readFully() which can throw a checked IOException.
• Deprecated internal methods Validate#ensureNotNull(Object) (replaced by typed Validate#expectNotNull(T)); protected HTML appenders from Attribute and Node.
• If you happen to be using any of the deprecated methods, please take the opportunity now to migrate away from them, as they will be removed in a future release.

Improvements

• Enhanced the Selector to support direct matching against nodes such as comments and text nodes. For example, you can now find an element that follows a specific comment: ::comment:contains(prices) + p will select p elements immediately after a <!-- prices: --> comment. Supported types include ::node, ::leafnode, ::comment, ::text, ::data, and ::cdata. Node contextual selectors like ::node:contains(text), :matches(regex), and :blank are also supported. Introduced Element#selectNodes(String css) and Element#selectNodes(String css, Class<T> nodeType) for direct node selection. #2324
• Added TagSet#onNewTag(Consumer<Tag> customizer): register a callback that’s invoked for each new or cloned Tag when it’s inserted into the set. Enables dynamic tweaks of tag options (for example, marking all custom tags as self-closing, or everything in a given namespace as preserving whitespace). #2330
• Made TokenQueue and CharacterReader autocloseable, to ensure that they will release their buffers back to the buffer pool, for later reuse.
• Added Selector#evaluatorOf(String css), as a clearer way to obtain an Evaluator from a CSS query. An alias of QueryParser.parse(String css).
• Custom tags (defined via the TagSet) in a foreign namespace (e.g. SVG) can be configured to parse as data tags.
• Added NodeVisitor#traverse(Node) to simplify node traversal calls (vs. importing NodeTraversor).
• Updated the default user-agent string to improve compatibility. #2341
• The HTML parser now allows the specific text-data type (Data, RcData) to be customized for known tags. (Previously, that was only supported on custom tags.) #2326
• Added Connection.Response#readFully() as a replacement for Connection.Response#bufferUp() with an explicit IOException. Similarly, added Connection.Response#readBody() over Connection.Response#body(). Deprecated Connection.Response#bufferUp(). #2327
• When serializing HTML, the < and > characters are now escaped in attributes. This helps prevent a class of mutation XSS attacks. #2337
• Changed Connection to prefer using the JDK's HttpClient over HttpUrlConnection, if available, to enable HTTP/2 support by default. Users can disable via -Djsoup.useHttpClient=false. #2340

Bug Fixes

• The contents of a script in a svg foreign context should be parsed as script data, not text. #2320
• Tag#isFormSubmittable() was updating the Tag's options. #2323
• The HTML pretty-printer would incorrectly trim whitespace when text followed an inline element in a block element. #2325
• Custom tags with hyphens or other non-letter characters in their names now work correctly as Data or RcData tags. Their closing tags are now tokenized properly. #2332
• When cloning an Element, the clone would retain the source's cached child Element list (if any), which could lead to incorrect results when modifying the clone's child elements. #2334

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.21.1 (2025-Jun-23)

Changes

• Removed previously deprecated methods. #2317
• Deprecated the :matchText pseduo-selector due to its side effects on the DOM; use the new ::textnode selector and the Element#selectNodes(String css, Class type) method instead. #2343
• Deprecated Connection.Response#bufferUp() in lieu of Connection.Response#readFully() which can throw a checked IOException.
• Deprecated internal methods Validate#ensureNotNull (replaced by typed Validate#expectNotNull); protected HTML appenders from Attribute and Node.
• If you happen to be using any of the deprecated methods, please take the opportunity now to migrate away from them, as they will be removed in a future release.

Improvements

• Enhanced the Selector to support direct matching against nodes such as comments and text nodes. For example, you can now find an element that follows a specific comment: ::comment:contains(prices) + p will select p elements immediately after a <!-- prices: --> comment. Supported types include ::node, ::leafnode, ::comment, ::text, ::data, and ::cdata. Node contextual selectors like ::node:contains(text), :matches(regex), and :blank are also supported. Introduced Element#selectNodes(String css) and Element#selectNodes(String css, Class nodeType) for direct node selection. #2324
• Added TagSet#onNewTag(Consumer<Tag> customizer): register a callback that’s invoked for each new or cloned Tag when it’s inserted into the set. Enables dynamic tweaks of tag options (for example, marking all custom tags as self-closing, or everything in a given namespace as preserving whitespace).
• Made TokenQueue and CharacterReader autocloseable, to ensure that they will release their buffers back to the buffer pool, for later reuse.
• Added Selector#evaluatorOf(String css), as a clearer way to obtain an Evaluator from a CSS query. An alias of QueryParser.parse(String css).
• Custom tags (defined via the TagSet) in a foreign namespace (e.g. SVG) can be configured to parse as data tags.
• Added NodeVisitor#traverse(Node) to simplify node traversal calls (vs. importing NodeTraversor).
• Updated the default user-agent string to improve compatibility. #2341
• The HTML parser now allows the specific text-data type (Data, RcData) to be customized for known tags. (Previously, that was only supported on custom tags.) #2326.
• Added Connection#readFully() as a replacement for Connection#bufferUp() with an explicit IOException. Similarly, added Connection#readBody() over Connection#body(). Deprecated Connection#bufferUp(). #2327
• When serializing HTML, the < and > characters are now escaped in attributes. This helps prevent a class of mutation XSS attacks. #2337
• Changed Connection to prefer using the JDK's HttpClient over HttpUrlConnection, if available, to enable HTTP/2 support by default. Users can disable via -Djsoup.useHttpClient=false. #2340

Bug Fixes

• The contents of a script in a svg foreign context should be parsed as script data, not text. #2320
• Tag#isFormSubmittable() was updating the Tag's options. #2323
• The HTML pretty-printer would incorrectly trim whitespace when text followed an inline element in a block element. #2325
• Custom tags with hyphens or other non-letter characters in their names now work correctly as Data or RcData tags. Their closing tags are now tokenized properly. #2332
• When cloning an Element, the clone would retain the source's cached child Element list (if any), which could lead to incorrect results when modifying the clone's child elements. #2334

Commits

• 9a059f4 [maven-release-plugin] prepare release jsoup-1.21.1
• a9f6ad0 Prep 1.21.1 release
• 63ed60b Tidy up exception test
• a4d451f Improved unhandled node type error msg
• cf88221 Added ::cdata node selector
• 893706a Deprecate :matchText selector (#2343)
• 2a73678 Added javadoc note for Connection#timeout
• 3f70665 Fix date format
• 2f48c65 Updated the default UA
• 42dbaa0 Cleanup redundant Syntax parameter
• Additional commits viewable in compare view

Updates io.mockk:mockk from 1.14.2 to 1.14.4

Release notes

Sourced from io.mockk:mockk's releases.

1.14.4

This release is functionally equivalent to v1.14.3, I just wanted to try out the new publishing process that uses Maven Central instead of OSSRH.

Full Changelog: mockk/mockk@1.14.3...1.14.4

1.14.3

What's Changed

• chore: bump byte buddy version to support java 24 by @​Komdosh in mockk/mockk#1387
• chore: bump gradle version to 8.14 by @​Komdosh in mockk/mockk#1389
• chore: bump dokka, kotlinx.coroutines, slf4j, logback, junit jupiter by @​Komdosh in mockk/mockk#1388
• Add recursive detection of meta-annotations by @​VitalyVPinchuk in mockk/mockk#1393
• chore: bump kotlin to 2.1.20 by @​Komdosh in mockk/mockk#1390
• fix: enable confirmVerified to work with static mocks by @​happysubin in mockk/mockk#1396
• Add logging on failure inside withArg by @​Djaler in mockk/mockk#1395
• Update Android aritfacts to support 16kb page sizes by @​WhosNickDoglio in mockk/mockk#1394
• Use instance factory for value classes with any() matcher by @​esafak in mockk/mockk#1403

New Contributors

• @​Komdosh made their first contribution in mockk/mockk#1387
• @​happysubin made their first contribution in mockk/mockk#1396
• @​Djaler made their first contribution in mockk/mockk#1395
• @​WhosNickDoglio made their first contribution in mockk/mockk#1394
• @​esafak made their first contribution in mockk/mockk#1403

Full Changelog: mockk/mockk@1.14.2...1.14.3

Commits

• 80062c4 New publishing process to maven central
• ff28c49 Fix broken build
• 18a9f51 Version bump
• c3aa4db Merge pull request #1403 from esafak/fix-value-class-instance-factory
• 5e49821 Use instance factory for value classes with any() matcher
• b03c36f Merge pull request #1394 from WhosNickDoglio/ndoglio/agp-upgrade
• f00c780 Add an article to the README
• ef21035 Merge pull request #1395 from Djaler/withArg-logging
• a685387 Update CMakeList.txt file to include change to compile app using 16KB ELF ali...
• 4bf4ec7 Merge pull request #1396 from happysubin/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions