Bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.11

[dependabot]

Bumps net.bytebuddy:byte-buddy from 1.18.10 to 1.18.11.

Release notes

Sourced from net.bytebuddy:byte-buddy's releases.

Byte Buddy 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Changelog

Sourced from net.bytebuddy:byte-buddy's changelog.

2. July 2026: version 1.18.11

• Add SBOM to published artifacts.
• Check for traversable paths injected into class files as a rather hypothetical attack vector.

Commits

• 88dd0a3 [publish] Releasing Byte Buddy 1.18.11
• 46fcade [release] Release new version
• 6a68de6 Prevent path traversal from crafted type names when writing class files to fo...
• 9ba4ab6 Pin ClusterFuzzLite base image and actions by hash.
• dd4f81e Add SBOM to build.
• 7dd9a0d Update internal Byte Buddy and release notes
• d6b3e15 [publish] Start next development iteration 1.18.11-SNAPSHOT
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[gnodet]

Review: Bump net.bytebuddy:byte-buddy from 1.18.10 to 1.18.11 (master)

Clean dependency bump — looks good.

Summary

• Single-line property version bump in root pom.xml (${byteBuddyVersion})
• byte-buddy is a test-infrastructure dependency (transitive via Mockito) — no production impact
• byte-buddy 1.18.11 is a safe patch release: adds SBOM metadata and minor path-traversal hardening; no API or breaking changes
• CI: all 22 checks pass

No issues found.

---

This review does not replace specialized tools such as CodeRabbit, Sourcery, or SonarCloud.

Reviewed with Claude Code on behalf of @gnodet. This review was generated by an AI agent and may contain inaccuracies; please verify all suggestions before applying.