Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 14, 2025

Bumps the java group with 14 updates:

Package From To
org.mongodb:bson 5.5.1 5.6.0
org.mongodb:mongodb-driver-sync 5.5.1 5.6.0
org.junit.jupiter:junit-jupiter 5.11.4 5.13.4
org.mockito:mockito-core 5.15.2 5.19.0
org.mockito:mockito-junit-jupiter 5.15.2 5.19.0
org.assertj:assertj-core 3.26.3 3.27.4
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.springframework:spring-web 6.2.10 6.2.11
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.1
org.mariadb.jdbc:mariadb-java-client 3.5.5 3.5.6
org.springframework.ai:spring-ai-bom 1.0.1 1.0.2
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-surefire-report-plugin 3.5.3 3.5.4
com.google.code.gson:gson 2.13.1 2.13.2

Updates org.mongodb:bson from 5.5.1 to 5.6.0

Release notes

Sourced from org.mongodb:bson's releases.

Java Driver 5.6.0 (September 11, 2025)

What's Changed 🚀

Credential Handling

  • Fix OIDC reauthentication when a session is involved #1719
  • Add X509 authentication tests #1771
  • Fix OIDC tests #1753
  • Add CSOT to OIDC #1741

Performance Optimizations

  • Clear CommandCursorResult.results after next()/tryNext() #1780
  • Ignore maxWaitTime when CSOT is enabled #1744
  • Simplify Operations by uniting Sync and Async operations #1776

Resource Management

  • Fix Netty reference leak #1762
  • Properly handle exceptions in threads created by MongoClient #1764
  • Propagate timeout errors to callback #1761
  • Merge changes from tls-channel to prevent accidentally calling SSLEngine #1726

Compatibility and Maintenance

  • Handle dropIndex behavior change #1785
  • Remove Legacy based ClientSideEncryptionTests #1799
  • Remove code that won't execute on supported server releases #1704
  • Simplify tests based on 4.2 minimum server support #1712
  • Update libmongocrypt version to 1.14.1 #1778
  • Deprecate MongoNamespace#COMMAND_COLLECTION_NAME #1786
  • Remove internal use of MongoNamespace.COMMAND_COLLECTION_NAME #1782

Benchmarks and Testing

  • Support text indexes with encryption #1797
  • Ensure encrypted fields data exists fully #1802
  • CSFLE auto encryption tests improvements #1788
  • Normalize async and sync ClientSideOperationTimeoutProseTest #1800
  • Add prose test to verify server monitors do not gossip cluster time #1766
  • Added logging specification tests #1740
  • Include submodules to OIDC testing #1703

Bug Fixes and Stability

  • Fix duplicate field name serialization with @​BsonDiscriminator and getter #1610
  • Fix Scala UnifiedTest import (No PR link)
  • Temporarily limit TypeMqlValuesFunctionalTest.asString server version #1803
  • Fix parameterized test names in CrudProseTest #1775
  • Improve MongoTimeoutException thrown by DefaultConnectionPool #1767
  • Improve error message clarity in MongoCommandException #1789
  • Ensure socks5 proxy option parsing is to specification #1688

Documentation and Quality of Life

  • Update README.md #1716
  • Add JavaDoc to NamespaceType #1754

... (truncated)

Commits

Updates org.mongodb:mongodb-driver-sync from 5.5.1 to 5.6.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.6.0 (September 11, 2025)

What's Changed 🚀

Credential Handling

  • Fix OIDC reauthentication when a session is involved #1719
  • Add X509 authentication tests #1771
  • Fix OIDC tests #1753
  • Add CSOT to OIDC #1741

Performance Optimizations

  • Clear CommandCursorResult.results after next()/tryNext() #1780
  • Ignore maxWaitTime when CSOT is enabled #1744
  • Simplify Operations by uniting Sync and Async operations #1776

Resource Management

  • Fix Netty reference leak #1762
  • Properly handle exceptions in threads created by MongoClient #1764
  • Propagate timeout errors to callback #1761
  • Merge changes from tls-channel to prevent accidentally calling SSLEngine #1726

Compatibility and Maintenance

  • Handle dropIndex behavior change #1785
  • Remove Legacy based ClientSideEncryptionTests #1799
  • Remove code that won't execute on supported server releases #1704
  • Simplify tests based on 4.2 minimum server support #1712
  • Update libmongocrypt version to 1.14.1 #1778
  • Deprecate MongoNamespace#COMMAND_COLLECTION_NAME #1786
  • Remove internal use of MongoNamespace.COMMAND_COLLECTION_NAME #1782

Benchmarks and Testing

  • Support text indexes with encryption #1797
  • Ensure encrypted fields data exists fully #1802
  • CSFLE auto encryption tests improvements #1788
  • Normalize async and sync ClientSideOperationTimeoutProseTest #1800
  • Add prose test to verify server monitors do not gossip cluster time #1766
  • Added logging specification tests #1740
  • Include submodules to OIDC testing #1703

Bug Fixes and Stability

  • Fix duplicate field name serialization with @​BsonDiscriminator and getter #1610
  • Fix Scala UnifiedTest import (No PR link)
  • Temporarily limit TypeMqlValuesFunctionalTest.asString server version #1803
  • Fix parameterized test names in CrudProseTest #1775
  • Improve MongoTimeoutException thrown by DefaultConnectionPool #1767
  • Improve error message clarity in MongoCommandException #1789
  • Ensure socks5 proxy option parsing is to specification #1688

Documentation and Quality of Life

  • Update README.md #1716
  • Add JavaDoc to NamespaceType #1754

... (truncated)

Commits

Updates org.junit.jupiter:junit-jupiter from 5.11.4 to 5.13.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.3...r5.13.4

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.1...r5.13.2

JUnit 5.13.1 = Platform 1.13.1 + Jupiter 5.13.1 + Vintage 5.13.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0...r5.13.1

JUnit 5.13.0 = Platform 1.13.0 + Jupiter 5.13.0 + Vintage 5.13.0

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.12.2...r5.13.0

JUnit 5.13.0-RC1 = Platform 1.13.0-RC1 + Jupiter 5.13.0-RC1 + Vintage 5.13.0-RC1

See Release Notes.

New Contributors

Full Changelog: junit-team/junit-framework@r5.13.0-M3...r5.13.0-RC1

JUnit 5.13.0-M3 = Platform 1.13.0-M3 + Jupiter 5.13.0-M3 + Vintage 5.13.0-M3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0-M2...r5.13.0-M3

... (truncated)

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.15.2 to 5.19.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.19.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.19.0

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0

... (truncated)

Commits
  • 144751b Add support for JDK21 Sequenced Collections. (#3708)
  • b275c7d Bump actions/checkout from 4 to 5 (#3707)
  • ad6ae2f Allow overriding 'Created-By' for reproducible builds (#3704)
  • 096ee9f Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3703)
  • aa7be27 Bump androidx.test:runner from 1.6.2 to 1.7.0 (#3697)
  • c8a698b Remove unused tests
  • ea45979 Bump errorprone from 2.39.0 to 2.41.0
  • 9c8eb23 Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 (#3694)
  • f05e44d Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 (#3693)
  • 9d32dfe Bump junit-jupiter from 5.13.3 to 5.13.4 (#3691)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.15.2 to 5.19.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.19.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.19.0

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0

... (truncated)

Commits
  • 144751b Add support for JDK21 Sequenced Collections. (#3708)
  • b275c7d Bump actions/checkout from 4 to 5 (#3707)
  • ad6ae2f Allow overriding 'Created-By' for reproducible builds (#3704)
  • 096ee9f Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3703)
  • aa7be27 Bump androidx.test:runner from 1.6.2 to 1.7.0 (#3697)
  • c8a698b Remove unused tests
  • ea45979 Bump errorprone from 2.39.0 to 2.41.0
  • 9c8eb23 Bump org.junit.platform:junit-platform-launcher from 1.13.3 to 1.13.4 (#3694)
  • f05e44d Bump com.diffplug.spotless:spotless-plugin-gradle from 7.1.0 to 7.2.1 (#3693)
  • 9d32dfe Bump junit-jupiter from 5.13.3 to 5.13.4 (#3691)
  • Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.26.3 to 3.27.4

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.4

🚫 Deprecated

Core

  • Deprecate org.assertj.core.annotations.Beta in favor of org.assertj.core.annotation.Beta
  • Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of org.assertj.core.annotation.CanIgnoreReturnValue
  • Deprecate org.assertj.core.util.CheckReturnValue in favor of org.assertj.core.annotation.CheckReturnValue

🐛 Bug Fixes

Core

  • Fix thread-safety in AbstractDateAssert #3874

⚡ Improvements

  • Migrate to the Central Publisher Portal, enable snapshot publishing #3881

Core

  • Annotate fail methods with custom @Contract #3882

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​kelunik

v3.27.3

💥 Breaking Changes

Core

  • Revert "Propagate common basetype for the extracting method" #3737

    The enhancement introduced with #3673 breaks existing code on Kotlin 1.9; therefore, it has been reverted.

    As Spring Boot 3.4 currently supports Kotlin 1.9, we want to keep the same compatibility on AssertJ 3.x, while AssertJ 4.x will require Kotlin 2.x.

    Existing code relying on the changes introduced with #3673 will no longer compile and should be refactored.

🐛 Bug Fixes

Core

... (truncated)

Commits
  • 7a64cde [maven-release-plugin] prepare release assertj-build-3.27.4
  • feb5f6f Annotate fail methods with custom @Contract (#3882)
  • 43e8b65 Deprecate org.assertj.core.util.CheckReturnValue in favor of `org.assertj.c...
  • 1bf8cd6 Deprecate org.assertj.core.util.CanIgnoreReturnValue in favor of `org.asser...
  • 72d08b2 Deprecate org.assertj.core.annotations.Beta in favor of `org.assertj.core.a...
  • 475c2eb Polish
  • fdc9bc5 Skip tests during snapshot publishing
  • 8f4a1b5 Migrate to the Central Publisher Portal, enable snapshot publishing (#3881)
  • 7461b68 Fix thread-safety in AbstractDateAssert (#3874)
  • 015f095 Remove EOL Java 23
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.springframework:spring-web from 6.2.10 to 6.2.11

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.11

⭐ New Features

  • Missing @Nullable on JsonPathAssertions.isEqualTo #35445
  • Graceful fallback for non-default NIO.2 FileSystems #35443
  • Avoid thread pinning in SseEmitter, ResponseBodyEmitter #35423
  • Detect Informix error codes as DuplicateKeyException #35400
  • Inconsist...

    Description has been truncated

Bumps the java group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [org.mongodb:bson](https://github.com/mongodb/mongo-java-driver) | `5.5.1` | `5.6.0` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.5.1` | `5.6.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `5.11.4` | `5.13.4` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.15.2` | `5.19.0` |
| [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.15.2` | `5.19.0` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.4` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.10` | `6.2.11` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.1` |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.5` | `3.5.6` |
| [org.springframework.ai:spring-ai-bom](https://github.com/spring-projects/spring-ai) | `1.0.1` | `1.0.2` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-surefire-report-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.1` | `2.13.2` |


Updates `org.mongodb:bson` from 5.5.1 to 5.6.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.0)

Updates `org.mongodb:mongodb-driver-sync` from 5.5.1 to 5.6.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.5.1...r5.6.0)

Updates `org.junit.jupiter:junit-jupiter` from 5.11.4 to 5.13.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.11.4...r5.13.4)

Updates `org.mockito:mockito-core` from 5.15.2 to 5.19.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.15.2...v5.19.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.15.2 to 5.19.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.15.2...v5.19.0)

Updates `org.assertj:assertj-core` from 3.26.3 to 3.27.4
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.26.3...assertj-build-3.27.4)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.springframework:spring-web` from 6.2.10 to 6.2.11
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.10...v6.2.11)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...v3.6.1)

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.5 to 3.5.6
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.5...3.5.6)

Updates `org.springframework.ai:spring-ai-bom` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/spring-projects/spring-ai/releases)
- [Commits](spring-projects/spring-ai@v1.0.1...v1.0.2)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-surefire-report-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `com.google.code.gson:gson` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.1...gson-parent-2.13.2)

---
updated-dependencies:
- dependency-name: org.mongodb:bson
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 5.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: java
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework:spring-web
  dependency-version: 6.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.springframework.ai:spring-ai-bom
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: org.apache.maven.plugins:maven-surefire-report-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 14, 2025
@alegauss alegauss merged commit 095f5d6 into 2025.3 Sep 14, 2025
3 of 4 checks passed
@dependabot dependabot bot deleted the dependabot/maven/2025.3/java-4d1b93dc97 branch September 14, 2025 20:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant