From 070b381a60aacfcae08e0d3970cbf6b4425caca5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 17:52:23 +0000
Subject: [PATCH] chore(deps): bump the maven-dependencies group with 11
 updates

Bumps the maven-dependencies group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `38` | `39` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.34` | `1.5.37` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.34` | `1.5.37` |
| org.apache.tomcat.embed:tomcat-embed-core | `9.0.118` | `9.0.119` |
| org.apache.tomcat.embed:tomcat-embed-el | `9.0.118` | `9.0.119` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `9.0.118` | `9.0.119` |
| org.apache.tomcat:tomcat-jaspic-api | `9.0.118` | `9.0.119` |
| org.apache.tomcat:tomcat-catalina | `9.0.118` | `9.0.119` |
| [org.javassist:javassist](https://github.com/jboss-javassist/javassist) | `3.31.0-GA` | `3.32.0-GA` |
| org.apache.tomcat.embed:tomcat-embed-core | `10.1.55` | `10.1.56` |
| org.apache.tomcat.embed:tomcat-embed-el | `10.1.55` | `10.1.56` |
| org.apache.tomcat.embed:tomcat-embed-websocket | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-jaspic-api | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-catalina | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-jasper | `10.1.55` | `10.1.56` |
| org.apache.tomcat:tomcat-jasper-el | `10.1.55` | `10.1.56` |


Updates `org.apache:apache` from 38 to 39
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)

Updates `ch.qos.logback:logback-core` from 1.5.34 to 1.5.37
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.37)

Updates `ch.qos.logback:logback-classic` from 1.5.34 to 1.5.37
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.34...v_1.5.37)

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat.embed:tomcat-embed-el` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat:tomcat-jaspic-api` from 9.0.118 to 9.0.119

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.118 to 9.0.119

Updates `org.javassist:javassist` from 3.31.0-GA to 3.32.0-GA
- [Release notes](https://github.com/jboss-javassist/javassist/releases)
- [Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md)
- [Commits](https://github.com/jboss-javassist/javassist/commits)

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat.embed:tomcat-embed-el` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat.embed:tomcat-embed-websocket` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat:tomcat-jaspic-api` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat:tomcat-catalina` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat:tomcat-jasper` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.55 to 10.1.56

Updates `org.apache.tomcat:tomcat-jasper-el` from 10.1.55 to 10.1.56

---
updated-dependencies:
- dependency-name: org.apache:apache
  dependency-version: '39'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.119
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.javassist:javassist
  dependency-version: 3.32.0-GA
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 10.1.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-el
  dependency-version: 10.1.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat.embed:tomcat-embed-websocket
  dependency-version: 10.1.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jaspic-api
  dependency-version: 10.1.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 10.1.56
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper
  dependency-version: 10.1.56
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
  dependency-version: 10.1.56
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.tomcat:tomcat-jasper-el
  dependency-version: 10.1.56
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 integration-tests/jakarta-ee/pom.xml |  2 +-
 pom.xml                              | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/integration-tests/jakarta-ee/pom.xml b/integration-tests/jakarta-ee/pom.xml
index 635af19342..18b4c4e8de 100644
--- a/integration-tests/jakarta-ee/pom.xml
+++ b/integration-tests/jakarta-ee/pom.xml
@@ -237,7 +237,7 @@
         <dependency>
             <groupId>org.javassist</groupId>
             <artifactId>javassist</artifactId>
-            <version>3.31.0-GA</version>
+            <version>3.32.0-GA</version>
             <scope>test</scope>
         </dependency>
 
diff --git a/pom.xml b/pom.xml
index 779b26e71f..ef8b8b6e95 100644
--- a/pom.xml
+++ b/pom.xml
@@ -25,7 +25,7 @@
     <parent>
         <groupId>org.apache</groupId>
         <artifactId>apache</artifactId>
-        <version>38</version>
+        <version>39</version>
     </parent>
 
     <groupId>org.apache.shiro</groupId>
@@ -108,8 +108,8 @@
         <jcache.api.version>1.1.1</jcache.api.version>
         <jdk.version>11</jdk.version>
         <jetty.version>9.4.58.v20250814</jetty.version>
-        <tomcat.version>9.0.118</tomcat.version>
-        <tomcat10.version>10.1.55</tomcat10.version>
+        <tomcat.version>9.0.119</tomcat.version>
+        <tomcat10.version>10.1.56</tomcat10.version>
         <owasp.java.encoder.version>1.4.0</owasp.java.encoder.version>
         <!-- Don't change this version without also changing the shiro-quartz and shiro-features
              modules' OSGi metadata: -->
@@ -1230,12 +1230,12 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.5.34</version>
+                <version>1.5.37</version>
             </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
-                <version>1.5.34</version>
+                <version>1.5.37</version>
             </dependency>
 
             <dependency>