From 970bfed7cca5a38cbdced2475f16b03aaed73fd0 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 18 May 2026 12:56:55 +0000
Subject: [PATCH 1/4] Update Maven dependencies

---
 check-list/pom.xml        |  4 ++--
 its/plugin/tests/pom.xml  |  2 +-
 its/vibebot/pom.xml       |  4 ++--
 java-frontend/pom.xml     |  8 ++++----
 pom.xml                   | 16 ++++++++--------
 sonar-java-plugin/pom.xml |  4 ++--
 6 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/check-list/pom.xml b/check-list/pom.xml
index 91647bee3bb..c5044c2f8b3 100644
--- a/check-list/pom.xml
+++ b/check-list/pom.xml
@@ -59,7 +59,7 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>exec-maven-plugin</artifactId>
-        <version>3.2.0</version>
+        <version>3.6.3</version>
         <executions>
             <execution>
                 <phase>process-classes</phase>
@@ -76,7 +76,7 @@
       <plugin>
         <groupId>org.codehaus.mojo</groupId>
         <artifactId>build-helper-maven-plugin</artifactId>
-        <version>3.5.0</version>
+        <version>3.6.1</version>
         <executions>
           <execution>
             <phase>process-classes</phase>
diff --git a/its/plugin/tests/pom.xml b/its/plugin/tests/pom.xml
index 2ae5b88377f..7746fa75d69 100644
--- a/its/plugin/tests/pom.xml
+++ b/its/plugin/tests/pom.xml
@@ -113,7 +113,7 @@
         <plugin>
           <groupId>com.googlecode.maven-download-plugin</groupId>
           <artifactId>download-maven-plugin</artifactId>
-          <version>1.6.3</version>
+          <version>1.13.0</version>
         </plugin>
       </plugins>
     </pluginManagement>
diff --git a/its/vibebot/pom.xml b/its/vibebot/pom.xml
index 223ad0b2896..7c6ebc76666 100644
--- a/its/vibebot/pom.xml
+++ b/its/vibebot/pom.xml
@@ -16,7 +16,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-api</artifactId>
-      <version>1.7.30</version>
+      <version>1.7.36</version>
     </dependency>
   </dependencies>
   <build>
@@ -25,7 +25,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-compiler-plugin</artifactId>
-          <version>3.13.0</version>
+          <version>3.15.0</version>
           <configuration>
             <source>21</source>
             <target>21</target>
diff --git a/java-frontend/pom.xml b/java-frontend/pom.xml
index 220e8ac343f..55eea9ec2ee 100644
--- a/java-frontend/pom.xml
+++ b/java-frontend/pom.xml
@@ -132,28 +132,28 @@
                 <artifactItem>
                   <groupId>commons-collections</groupId>
                   <artifactId>commons-collections</artifactId>
-                  <version>3.2.1</version>
+                  <version>3.2.2</version>
                   <classifier>sources</classifier>
                   <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/src</outputDirectory>
                 </artifactItem>
                 <artifactItem>
                   <groupId>commons-collections</groupId>
                   <artifactId>commons-collections</artifactId>
-                  <version>3.2.1</version>
+                  <version>3.2.2</version>
                   <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/bin</outputDirectory>
                 </artifactItem>
                 <!-- struts-core -->
                 <artifactItem>
                   <groupId>org.apache.struts</groupId>
                   <artifactId>struts-core</artifactId>
-                  <version>1.3.9</version>
+                  <version>1.3.10</version>
                   <classifier>sources</classifier>
                   <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/src</outputDirectory>
                 </artifactItem>
                 <artifactItem>
                   <groupId>org.apache.struts</groupId>
                   <artifactId>struts-core</artifactId>
-                  <version>1.3.9</version>
+                  <version>1.3.10</version>
                   <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/bin</outputDirectory>
                 </artifactItem>
               </artifactItems>
diff --git a/pom.xml b/pom.xml
index 5c9b5c8a2eb..90a732414d9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -107,14 +107,14 @@
     <artifactsToPublish>${project.groupId}:sonar-java-plugin:jar</artifactsToPublish>
 
     <!-- Overrides parent pom to use a more recent version of jacoco -->
-    <version.jacoco.plugin>0.8.13</version.jacoco.plugin>
+    <version.jacoco.plugin>0.8.14</version.jacoco.plugin>
 
-    <mockito-core.version>5.18.0</mockito-core.version>
+    <mockito-core.version>5.23.0</mockito-core.version>
     <test-java-agent-directory>${project.build.directory}/test-java-agent-libs</test-java-agent-directory>
     <jacoco-agent-jar>org.jacoco.agent-${version.jacoco.plugin}-runtime.jar</jacoco-agent-jar>
     <mockito-agent-jar>mockito-core-${mockito-core.version}.jar</mockito-agent-jar>
 
-    <slf4j.version>1.7.30</slf4j.version>
+    <slf4j.version>1.7.36</slf4j.version>
   </properties>
 
   <distributionManagement>
@@ -208,7 +208,7 @@
       <dependency>
         <groupId>com.google.guava</groupId>
         <artifactId>guava</artifactId>
-        <version>33.4.8-jre</version>
+        <version>33.6.0-jre</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.findbugs</groupId>
@@ -236,7 +236,7 @@
       <dependency>
         <groupId>org.junit</groupId>
         <artifactId>junit-bom</artifactId>
-        <version>5.11.2</version>
+        <version>5.14.4</version>
         <type>pom</type>
         <scope>import</scope>
       </dependency>
@@ -290,17 +290,17 @@
       <dependency>
         <groupId>org.springframework</groupId>
         <artifactId>spring-expression</artifactId>
-        <version>6.2.11</version>
+        <version>6.2.18</version>
       </dependency>
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
-        <version>2.19.0</version>
+        <version>2.22.0</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.gson</groupId>
         <artifactId>gson</artifactId>
-        <version>2.13.1</version>
+        <version>2.14.0</version>
         <scope>compile</scope>
       </dependency>
       <!-- staxmate is used by java-surefire -->
diff --git a/sonar-java-plugin/pom.xml b/sonar-java-plugin/pom.xml
index 1aa2358f3b5..85b64b5fe0d 100644
--- a/sonar-java-plugin/pom.xml
+++ b/sonar-java-plugin/pom.xml
@@ -191,7 +191,7 @@
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-shade-plugin</artifactId>
-        <version>3.5.1</version>
+        <version>3.6.2</version>
         <executions>
           <execution>
             <phase>package</phase>
@@ -350,7 +350,7 @@
 
        <plugin>
           <artifactId>maven-resources-plugin</artifactId>
-          <version>3.4.0</version>
+          <version>3.5.0</version>
           <executions>
             <execution>
               <id>copy-main-license</id>

From a3a3d98a30e39931f3c870f4b5c9f56aaa8c5140 Mon Sep 17 00:00:00 2001
From: Tomasz Tylenda <tomasz.tylenda@sonarsource.com>
Date: Mon, 18 May 2026 16:02:29 +0200
Subject: [PATCH 2/4] Undo struts-core

---
 java-frontend/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/java-frontend/pom.xml b/java-frontend/pom.xml
index 55eea9ec2ee..ce381f56c28 100644
--- a/java-frontend/pom.xml
+++ b/java-frontend/pom.xml
@@ -146,14 +146,14 @@
                 <artifactItem>
                   <groupId>org.apache.struts</groupId>
                   <artifactId>struts-core</artifactId>
-                  <version>1.3.10</version>
+                  <version>1.3.9</version>
                   <classifier>sources</classifier>
                   <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/src</outputDirectory>
                 </artifactItem>
                 <artifactItem>
                   <groupId>org.apache.struts</groupId>
                   <artifactId>struts-core</artifactId>
-                  <version>1.3.10</version>
+                  <version>1.3.9</version>
                   <outputDirectory>${project.build.directory}/test-projects/struts-core-1.3.9/bin</outputDirectory>
                 </artifactItem>
               </artifactItems>

From 5681f3519f8c1dedef240c9043da05cd539451c5 Mon Sep 17 00:00:00 2001
From: Tomasz Tylenda <tomasz.tylenda@sonarsource.com>
Date: Mon, 18 May 2026 16:03:18 +0200
Subject: [PATCH 3/4] Undo slf4j

---
 its/vibebot/pom.xml | 2 +-
 pom.xml             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/its/vibebot/pom.xml b/its/vibebot/pom.xml
index 7c6ebc76666..40e7b8f8604 100644
--- a/its/vibebot/pom.xml
+++ b/its/vibebot/pom.xml
@@ -16,7 +16,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-api</artifactId>
-      <version>1.7.36</version>
+      <version>${slf4j.version}</version>
     </dependency>
   </dependencies>
   <build>
diff --git a/pom.xml b/pom.xml
index 90a732414d9..0d14f365ebf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -114,7 +114,7 @@
     <jacoco-agent-jar>org.jacoco.agent-${version.jacoco.plugin}-runtime.jar</jacoco-agent-jar>
     <mockito-agent-jar>mockito-core-${mockito-core.version}.jar</mockito-agent-jar>
 
-    <slf4j.version>1.7.36</slf4j.version>
+    <slf4j.version>1.7.30</slf4j.version>
   </properties>
 
   <distributionManagement>

From b643dcb751f0459d04eef108c278013d3aedd310 Mon Sep 17 00:00:00 2001
From: Tomasz Tylenda <tomasz.tylenda@sonarsource.com>
Date: Mon, 18 May 2026 16:21:26 +0200
Subject: [PATCH 4/4] Undo commons-collections

---
 java-frontend/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/java-frontend/pom.xml b/java-frontend/pom.xml
index ce381f56c28..220e8ac343f 100644
--- a/java-frontend/pom.xml
+++ b/java-frontend/pom.xml
@@ -132,14 +132,14 @@
                 <artifactItem>
                   <groupId>commons-collections</groupId>
                   <artifactId>commons-collections</artifactId>
-                  <version>3.2.2</version>
+                  <version>3.2.1</version>
                   <classifier>sources</classifier>
                   <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/src</outputDirectory>
                 </artifactItem>
                 <artifactItem>
                   <groupId>commons-collections</groupId>
                   <artifactId>commons-collections</artifactId>
-                  <version>3.2.2</version>
+                  <version>3.2.1</version>
                   <outputDirectory>${project.build.directory}/test-projects/commons-collections-3.2.1/bin</outputDirectory>
                 </artifactItem>
                 <!-- struts-core -->