Skip to content

Bump the maven group with 6 updates - #357

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-382beb47c4
Jul 27, 2026
Merged

Bump the maven group with 6 updates#357
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-382beb47c4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven group with 6 updates:

Package From To
org.codehaus.mojo:flatten-maven-plugin 1.7.3 1.8.0
ch.qos.logback:logback-classic 1.5.38 1.6.0
io.quarkus.platform:quarkus-bom 3.37.3 3.37.4
io.quarkus:quarkus-extension-processor 3.37.3 3.37.4
io.quarkus:quarkus-extension-maven-plugin 3.37.3 3.37.4
io.quarkus.platform:quarkus-maven-plugin 3.37.3 3.37.4

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.8.0

🚀 New features and improvements

🐛 Bug Fixes

🔧 Build

📦 Dependency updates

Commits
  • 1b21193 [maven-release-plugin] prepare release 1.8.0
  • f693210 Add PR automation workflow to GitHub Actions
  • cff2c4f Document revisionVariableName parameter with @since 1.8.0 tag
  • f18a67d Fix for #408, ensure nested dependency exclusions aren't overrided (#485)
  • 35396b6 Bump mavenVersion from 3.9.15 to 3.9.16
  • f78e07e Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 25f849e Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5fcc98f Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml
  • 4bd9eda Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 7bacd0e Fix for Maven 3.10.x (#517)
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-bom from 3.37.3 to 3.37.4

Commits
  • a621edf [maven-release-plugin] prepare release 3.37.4
  • b132d00 Merge pull request #2073 from quarkusio/quarkus-3.37.4
  • 1bfeab9 Upgrade to Quarkus 3.37.4
  • a7b142b Merge pull request #2068 from quarkusio/update-automation/3.37-quarkus-flow-0...
  • 0120d0c Update Quarkus Flow to 0.13.0
  • 8f0f6df [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.quarkus:quarkus-extension-processor from 3.37.3 to 3.37.4

Updates io.quarkus:quarkus-extension-maven-plugin from 3.37.3 to 3.37.4

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.37.4

Complete changelog

  • #46633 - AWS Lamdba function.zip permission issue on Windows
  • #55436 - Update to Vert.x 4.5.30 and Netty 4.1.136.Final
  • #55438 - Qute does not apply property-not-found-strategy when chaining template extension methods
  • #55451 - reflection-free serializers ignore @JsonValue declared on a superinterface method
  • #55452 - Skip NOT_FOUND in value resolver to avoid locking in NOT_FOUND strings before calls to.raw
  • #55455 - Embedding cyclone DX SBOM fails with relative parent pom file
  • #55466 - Check @JsonValue declared on a superinterface method in reflection-free Jackson serializers
  • #55470 - Update to Hibernate ORM 7.4.5 / Update to Hibernate Validator 9.1.2
  • #55476 - Make sure MavenProjects available through the API are added to the Quarkus workspace
  • #55487 - quarkus-rest-jackson: reflection-free deserializer NPEs at build time for a polymorphic @JsonCreator parameter
  • #55489 - Fall back to reflection-based deserialization when a @JsonCreator parameter cannot be handled
  • #55497 - quarkus-rest-jackson Reflection-free-serializers with @JsonAnyGetter
  • #55500 - Implement @JsonAnyGetter and @JsonAnySetter on fields in reflection-free Jackson serializers
  • #55513 - Set Unix permissions when copying entries into function.zip
  • #55519 - quarkus-rest-jackson Reflection-free-serializers unboxing Character throws NullPointer
  • #55521 - Prevent unboxing of null Character in reflecton-free Jackson serializers
Commits
  • a26bae9 [RELEASE] - Bump version to 3.37.4
  • 8d3b797 Merge pull request #55591 from gsmet/3.37.4-backports-1
  • 5b57712 Set Unix permissions when copying entries into function.zip
  • 427a56b Make sure MavenProjects available through the API are added to the Quarkus wo...
  • 38453d5 Prevent unboxing of null Character in reflecton-free Jackson serializers
  • 1095486 Update to Hibernate Validator 9.1.2
  • 9df4abf Update to Hibernate ORM 7.4.5
  • ddb5b09 Implement @​JsonAnyGetter on fields in reflection-free Jackson serializers
  • fc9f03b Fall back to reflection-based deserialization when a @​JsonCreator parameter c...
  • 1e0f018 Add header control upon redirection
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.37.3 to 3.37.4

Commits
  • a621edf [maven-release-plugin] prepare release 3.37.4
  • b132d00 Merge pull request #2073 from quarkusio/quarkus-3.37.4
  • 1bfeab9 Upgrade to Quarkus 3.37.4
  • a7b142b Merge pull request #2068 from quarkusio/update-automation/3.37-quarkus-flow-0...
  • 0120d0c Update Quarkus Flow to 0.13.0
  • 8f0f6df [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.quarkus:quarkus-extension-processor from 3.37.3 to 3.37.4

Updates io.quarkus:quarkus-extension-maven-plugin from 3.37.3 to 3.37.4

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.37.4

Complete changelog

  • #46633 - AWS Lamdba function.zip permission issue on Windows
  • #55436 - Update to Vert.x 4.5.30 and Netty 4.1.136.Final
  • #55438 - Qute does not apply property-not-found-strategy when chaining template extension methods
  • #55451 - reflection-free serializers ignore @JsonValue declared on a superinterface method
  • #55452 - Skip NOT_FOUND in value resolver to avoid locking in NOT_FOUND strings before calls to.raw
  • #55455 - Embedding cyclone DX SBOM fails with relative parent pom file
  • #55466 - Check @JsonValue declared on a superinterface method in reflection-free Jackson serializers
  • #55470 - Update to Hibernate ORM 7.4.5 / Update to Hibernate Validator 9.1.2
  • #55476 - Make sure MavenProjects available through the API are added to the Quarkus workspace
  • #55487 - quarkus-rest-jackson: reflection-free deserializer NPEs at build time for a polymorphic @JsonCreator parameter
  • #55489 - Fall back to reflection-based deserialization when a @JsonCreator parameter cannot be handled
  • #55497 - quarkus-rest-jackson Reflection-free-serializers with @JsonAnyGetter
  • #55500 - Implement @JsonAnyGetter and @JsonAnySetter on fields in reflection-free Jackson serializers
  • #55513 - Set Unix permissions when copying entries into function.zip
  • #55519 - quarkus-rest-jackson Reflection-free-serializers unboxing Character throws NullPointer
  • #55521 - Prevent unboxing of null Character in reflecton-free Jackson serializers
Commits
  • a26bae9 [RELEASE] - Bump version to 3.37.4
  • 8d3b797 Merge pull request #55591 from gsmet/3.37.4-backports-1
  • 5b57712 Set Unix permissions when copying entries into function.zip
  • 427a56b Make sure MavenProjects available through the API are added to the Quarkus wo...
  • 38453d5 Prevent unboxing of null Character in reflecton-free Jackson serializers
  • 1095486 Update to Hibernate Validator 9.1.2
  • 9df4abf Update to Hibernate ORM 7.4.5
  • ddb5b09 Implement @​JsonAnyGetter on fields in reflection-free Jackson serializers
  • fc9f03b Fall back to reflection-based deserialization when a @​JsonCreator parameter c...
  • 1e0f018 Add header control upon redirection
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.37.3 to 3.37.4

Commits
  • a621edf [maven-release-plugin] prepare release 3.37.4
  • b132d00 Merge pull request #2073 from quarkusio/quarkus-3.37.4
  • 1bfeab9 Upgrade to Quarkus 3.37.4
  • a7b142b Merge pull request #2068 from quarkusio/update-automation/3.37-quarkus-flow-0...
  • 0120d0c Update Quarkus Flow to 0.13.0
  • 8f0f6df [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) | `1.7.3` | `1.8.0` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.0` |
| [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.37.3` | `3.37.4` |
| io.quarkus:quarkus-extension-processor | `3.37.3` | `3.37.4` |
| [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.37.3` | `3.37.4` |
| [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.37.3` | `3.37.4` |


Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `io.quarkus.platform:quarkus-bom` from 3.37.3 to 3.37.4
- [Commits](quarkusio/quarkus-platform@3.37.3...3.37.4)

Updates `io.quarkus:quarkus-extension-processor` from 3.37.3 to 3.37.4

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.37.3 to 3.37.4
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.37.3...3.37.4)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.37.3 to 3.37.4
- [Commits](quarkusio/quarkus-platform@3.37.3...3.37.4)

Updates `io.quarkus:quarkus-extension-processor` from 3.37.3 to 3.37.4

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.37.3 to 3.37.4
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.37.3...3.37.4)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.37.3 to 3.37.4
- [Commits](quarkusio/quarkus-platform@3.37.3...3.37.4)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: io.quarkus.platform:quarkus-bom
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.37.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.37.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.37.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jul 27, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 27, 2026 16:44
@sonarqubecloud

Copy link
Copy Markdown

@github-actions
github-actions Bot merged commit 66510f1 into main Jul 27, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/maven-382beb47c4 branch July 27, 2026 16:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants