deps: bump the patch-updates group with 5 updates #1743

dependabot · 2025-08-18T01:29:30Z

Bumps the patch-updates group with 5 updates:

Package	From	To
org.apache.maven.plugins:maven-javadoc-plugin	`3.11.2`	`3.11.3`
io.quarkus:quarkus-bom	`3.25.2`	`3.25.3`
io.quarkus:quarkus-maven-plugin	`3.25.2`	`3.25.3`
io.quarkus:quarkus-extension-maven-plugin	`3.25.2`	`3.25.3`
io.quarkus:quarkus-extension-processor	`3.25.2`	`3.25.3`

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.11.2 to 3.11.3

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.11.3

🚨 Removed

Remove workaround for long patched CVE in javadoc (#388) @elharo

🚀 New features and improvements

Issue #369 Support --no-fonts option per default for jdk 23+ (#375) @olamy

🐛 Bug Fixes

Make the legacyMode consistent (Filter out all of the module-info.java files in legacy mode, do not use --source-path in legacy mode) (#1217) @fridrich

[MJAVADOC-826] - Don't try to modify project source roots (#358) @oehme

📝 Documentation updates

Correct javadoc-no-fork description on index-page (#368) @Bukama

[MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#360) @Bukama

(doc) Close links tag in links parameter javadoc example (#355) @sixcorners

👻 Maintenance

Be consistent about data encoding when copying files (#1215) @fridrich

Clean up JavadocUtilTest (#1210) @elharo

Use Java 7 relativization instead of hand-rolled code (#385) @elharo

Rephrase source code fix interactive messages for clarity (#390) @elharo

Reduce non-debug logging (#389) @elharo

Delete duplicate @throws clause (#384) @elharo

Use Java 7 relativization instead of our hand-rolled code (#381) @elharo

Clean up comments and argument names (#386) @elharo

Remove workaround for long patched CVE in javadoc (#388) @elharo

Issue #378 Cleanup of code related to old non supported Java version (#382) @olamy

Cure deprecation warning (#383) @elharo

[MJAVADOC-773] - deprecate toRelative (#379) @elharo

Issue #373 Fix JDK 23 build (#374) @olamy

Fix aggregate Javadoc typo (#371) @JackPGreen

Enable GH issues (#365) @Bukama

[MJAVADOC-825] - Prefer NullPointerExceptions for null arguments (#350) @elharo

📦 Dependency updates

Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#1221) @dependabot[bot]

Bump org.apache.commons:commons-text from 1.13.1 to 1.14.0 (#1222) @dependabot[bot]

Bump org.apache.commons:commons-lang3 from 3.6 to 3.18.0 in /src/it/projects/MJAVADOC-787 (#1227) @dependabot[bot]

Maven Archiver 3.6.4 (#1226) @olamy

Bump org.apache.commons:commons-lang3 from 3.6 to 3.18.0 in /src/it/projects/MJAVADOC-575_source8-module-info (#1224) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#1223) @dependabot[bot]

Bump org.apache.commons:commons-lang3 from 3.6 to 3.18.0 in /src/it/projects/MJAVADOC-506_excl-module-info (#1218) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.3.0 to 1.5.0 (#363) @dependabot[bot]

... (truncated)

Commits

8357bc2 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.3
ab6e97e Bump commons-io:commons-io from 2.19.0 to 2.20.0
83788c1 Bump org.apache.commons:commons-text from 1.13.1 to 1.14.0
99ee1fc Bump org.apache.commons:commons-lang3 in /src/it/projects/MJAVADOC-787
18bfeb8 Maven Archiver 3.6.4 (#1226)
63618bb Bump org.apache.commons:commons-lang3 (#1224)
81afff9 Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#1223)
8bcdebf Add Apache 2.0 LICENSE file (#1220)
2299072 Make the legacyMode consistent and actually useful (#1217)
33c9f01 Be consistent about data encoding when copying files (#1215)
Additional commits viewable in compare view

Updates io.quarkus:quarkus-bom from 3.25.2 to 3.25.3

Release notes

Sourced from io.quarkus:quarkus-bom's releases.

3.25.3

Complete changelog

#48503 - Continuous testing fails in multi-module project when using module as a dependency in 3.22 onwards

#48946 - Native image: testGCCArgument produces confusing warnings

#48959 - Avoids some WARNINGs from io.smallrye.common.process.Logging

#49118 - 3.25.0 Docker Being Checked Always even if quarkus.devservices.enabled=false

#49309 - Fix checking for docker enviroment when quarkus.devservices.enabled=false

#49418 - java.lang.NullPointerException: Cannot invoke "String.replaceAll(String, String)" because the return value of "io.quarkus.devui.spi.buildtime.FooterLogBuildItem.getName()" is null

#49419 - Enforce null checks for DiscoveredServiceBuilder

#49422 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 in /devtools/gradle

#49425 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4

#49426 - Add wait_for.logs for Oracle DB Compose Dev Services example

#49441 - Docs: Fix spelling typo in the Deploying to OpenShift guide

#49446 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.4 to 3.5.5

#49452 - Native container build does not redirect output to stdout

#49454 - Log native build output to stdout

#49455 - Fix native image generated static resources index

#49456 - Make the ProcessBuilder calls intents a bit clearer

#49467 - Add quarkus-extension-processor to quarkus-bom

#49472 - Do not try and cache deployment classloaders that don't have the right test dependencies in continuous testing

#49479 - Make ContainerRuntime detection less brittle

#49482 - Do not apply config provider if not set

Commits

df16932 [RELEASE] - Bump version to 3.25.3
a95bead Merge pull request #49490 from gsmet/3.25.3-backports-1
a675f4f Do not apply config provider if not set
1b99fdc Don't sock away a deployment classloader until we know we need it, and don't ...
c198007 Fix native image generated static resources index
6d443d8 Make ContainerRuntime detection less brittle
0f53da7 Add quarkus-extension-processor to quarkus-bom
7727bcb Make the ProcessBuilder calls intents a bit clearer
f89ca6e Log native build output to stdout
0671d8b Fix checking for docker enviroment when quarkus.devservices.enabled=false
Additional commits viewable in compare view

Updates io.quarkus:quarkus-maven-plugin from 3.25.2 to 3.25.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.25.2 to 3.25.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.25.3

Complete changelog

#48503 - Continuous testing fails in multi-module project when using module as a dependency in 3.22 onwards

#48946 - Native image: testGCCArgument produces confusing warnings

#48959 - Avoids some WARNINGs from io.smallrye.common.process.Logging

#49118 - 3.25.0 Docker Being Checked Always even if quarkus.devservices.enabled=false

#49309 - Fix checking for docker enviroment when quarkus.devservices.enabled=false

#49418 - java.lang.NullPointerException: Cannot invoke "String.replaceAll(String, String)" because the return value of "io.quarkus.devui.spi.buildtime.FooterLogBuildItem.getName()" is null

#49419 - Enforce null checks for DiscoveredServiceBuilder

#49422 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 in /devtools/gradle

#49425 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4

#49426 - Add wait_for.logs for Oracle DB Compose Dev Services example

#49441 - Docs: Fix spelling typo in the Deploying to OpenShift guide

#49446 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.4 to 3.5.5

#49452 - Native container build does not redirect output to stdout

#49454 - Log native build output to stdout

#49455 - Fix native image generated static resources index

#49456 - Make the ProcessBuilder calls intents a bit clearer

#49467 - Add quarkus-extension-processor to quarkus-bom

#49472 - Do not try and cache deployment classloaders that don't have the right test dependencies in continuous testing

#49479 - Make ContainerRuntime detection less brittle

#49482 - Do not apply config provider if not set

Commits

df16932 [RELEASE] - Bump version to 3.25.3
a95bead Merge pull request #49490 from gsmet/3.25.3-backports-1
a675f4f Do not apply config provider if not set
1b99fdc Don't sock away a deployment classloader until we know we need it, and don't ...
c198007 Fix native image generated static resources index
6d443d8 Make ContainerRuntime detection less brittle
0f53da7 Add quarkus-extension-processor to quarkus-bom
7727bcb Make the ProcessBuilder calls intents a bit clearer
f89ca6e Log native build output to stdout
0671d8b Fix checking for docker enviroment when quarkus.devservices.enabled=false
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.25.2 to 3.25.3

Updates io.quarkus:quarkus-maven-plugin from 3.25.2 to 3.25.3

Updates io.quarkus:quarkus-extension-maven-plugin from 3.25.2 to 3.25.3

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.25.3

Complete changelog

#48503 - Continuous testing fails in multi-module project when using module as a dependency in 3.22 onwards

#48946 - Native image: testGCCArgument produces confusing warnings

#48959 - Avoids some WARNINGs from io.smallrye.common.process.Logging

#49118 - 3.25.0 Docker Being Checked Always even if quarkus.devservices.enabled=false

#49309 - Fix checking for docker enviroment when quarkus.devservices.enabled=false

#49418 - java.lang.NullPointerException: Cannot invoke "String.replaceAll(String, String)" because the return value of "io.quarkus.devui.spi.buildtime.FooterLogBuildItem.getName()" is null

#49419 - Enforce null checks for DiscoveredServiceBuilder

#49422 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 in /devtools/gradle

#49425 - Bump org.assertj:assertj-core from 3.27.3 to 3.27.4

#49426 - Add wait_for.logs for Oracle DB Compose Dev Services example

#49441 - Docs: Fix spelling typo in the Deploying to OpenShift guide

#49446 - Bump org.mariadb.jdbc:mariadb-java-client from 3.5.4 to 3.5.5

#49452 - Native container build does not redirect output to stdout

#49454 - Log native build output to stdout

#49455 - Fix native image generated static resources index

#49456 - Make the ProcessBuilder calls intents a bit clearer

#49467 - Add quarkus-extension-processor to quarkus-bom

#49472 - Do not try and cache deployment classloaders that don't have the right test dependencies in continuous testing

#49479 - Make ContainerRuntime detection less brittle

#49482 - Do not apply config provider if not set

Commits

df16932 [RELEASE] - Bump version to 3.25.3
a95bead Merge pull request #49490 from gsmet/3.25.3-backports-1
a675f4f Do not apply config provider if not set
1b99fdc Don't sock away a deployment classloader until we know we need it, and don't ...
c198007 Fix native image generated static resources index
6d443d8 Make ContainerRuntime detection less brittle
0f53da7 Add quarkus-extension-processor to quarkus-bom
7727bcb Make the ProcessBuilder calls intents a bit clearer
f89ca6e Log native build output to stdout
0671d8b Fix checking for docker enviroment when quarkus.devservices.enabled=false
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.25.2 to 3.25.3

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the patch-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.2` | `3.11.3` | | [io.quarkus:quarkus-bom](https://github.com/quarkusio/quarkus) | `3.25.2` | `3.25.3` | | io.quarkus:quarkus-maven-plugin | `3.25.2` | `3.25.3` | | [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.25.2` | `3.25.3` | | io.quarkus:quarkus-extension-processor | `3.25.2` | `3.25.3` | Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.2 to 3.11.3 - [Release notes](https://github.com/apache/maven-javadoc-plugin/releases) - [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.2...maven-javadoc-plugin-3.11.3) Updates `io.quarkus:quarkus-bom` from 3.25.2 to 3.25.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.25.2...3.25.3) Updates `io.quarkus:quarkus-maven-plugin` from 3.25.2 to 3.25.3 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.25.2 to 3.25.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.25.2...3.25.3) Updates `io.quarkus:quarkus-extension-processor` from 3.25.2 to 3.25.3 Updates `io.quarkus:quarkus-maven-plugin` from 3.25.2 to 3.25.3 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.25.2 to 3.25.3 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.25.2...3.25.3) Updates `io.quarkus:quarkus-extension-processor` from 3.25.2 to 3.25.3 --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-javadoc-plugin dependency-version: 3.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-bom dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-maven-plugin dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-maven-plugin dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2025-08-18T06:51:31Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added the dependencies Pull requests that update a dependency file; used by Dependabot. label Aug 18, 2025

dependabot bot temporarily deployed to internal August 18, 2025 01:29 Inactive

dependabot bot deployed to documentation (preview) August 18, 2025 01:29 View deployment

triceo approved these changes Aug 18, 2025

View reviewed changes

dependabot bot force-pushed the dependabot/maven/patch-updates-d82b2ccba4 branch from 5512615 to 80018f9 Compare August 18, 2025 05:00

dependabot bot temporarily deployed to internal August 18, 2025 05:00 Inactive

dependabot bot deployed to documentation (preview) August 18, 2025 05:01 View deployment

triceo temporarily deployed to internal August 18, 2025 05:52 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 05:52 — with GitHub Actions View deployment

triceo temporarily deployed to internal August 18, 2025 06:01 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 06:01 — with GitHub Actions View deployment

triceo temporarily deployed to internal August 18, 2025 06:09 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 06:09 — with GitHub Actions View deployment

triceo temporarily deployed to internal August 18, 2025 06:17 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 06:17 — with GitHub Actions View deployment

triceo temporarily deployed to internal August 18, 2025 06:24 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 06:25 — with GitHub Actions View deployment

triceo temporarily deployed to internal August 18, 2025 06:27 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 06:28 — with GitHub Actions View deployment

Restore to original code

874419c

triceo force-pushed the dependabot/maven/patch-updates-d82b2ccba4 branch from 6dff65b to 874419c Compare August 18, 2025 06:33

triceo temporarily deployed to internal August 18, 2025 06:33 — with GitHub Actions Inactive

triceo deployed to documentation (preview) August 18, 2025 06:33 — with GitHub Actions View deployment

triceo merged commit 193001c into main Aug 18, 2025
56 checks passed

triceo deleted the dependabot/maven/patch-updates-d82b2ccba4 branch August 18, 2025 07:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the patch-updates group with 5 updates #1743

deps: bump the patch-updates group with 5 updates #1743

Uh oh!

dependabot bot commented on behalf of github Aug 18, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Aug 18, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

deps: bump the patch-updates group with 5 updates #1743

deps: bump the patch-updates group with 5 updates #1743

Uh oh!

Conversation

dependabot bot commented on behalf of github Aug 18, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.11.3

🚨 Removed

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.25.3

Complete changelog

3.25.3

Complete changelog

3.25.3

Complete changelog

Uh oh!

sonarqubecloud bot commented Aug 18, 2025

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Aug 18, 2025 •

edited

Loading