Update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
io.mockk:mockk-jvm (source)	1.14.6 → 1.14.11
io.github.oshai:kotlin-logging-jvm	7.0.13 → 7.0.14
com.github.gantsign.maven:ktlint-maven-plugin	3.5.0 → 3.7.1
org.apache.maven.plugins:maven-surefire-plugin (source)	3.5.4 → 3.6.0
org.codehaus.mojo:properties-maven-plugin (source)	1.2.1 → 1.3.1
org.codehaus.mojo:build-helper-maven-plugin (source)	3.6.1 → 3.6.2
org.apache.maven.plugins:maven-enforcer-plugin (source)	3.6.2 → 3.6.3
org.apache.maven.plugins:maven-compiler-plugin (source)	3.14.1 → 3.16.0

---

Release Notes

mockk/mockk (io.mockk:mockk-jvm)

v1.14.11

Compare Source

What's Changed

• fix: added SameInstanceMatcher to handle an issue with equals method when using EqMatcher along with a mock to an object by @​DOssaA in #​1508
• Add scoped confirmVerified overloads for callables (KFunction and KProperty) by @​DOssaA in #​1513
• feat: support MockKAnnotation.useDependencyOrder for JUnit 5 by @​ilia1243 in #​1515
• Allow updating settings from code by @​Yentis in #​1517
• Add currentThread filter and excluded mocks to clearAllStubsFromMemory by @​evgenru in #​1519
• Support new Kotlin annotation defaulting rule for @​InjectMockKs by @​ZzAve in #​1525
• feat(dsl): Add context parameters support module (#​1431) by @​faraz152 in #​1521
• fix: resolve @​InjectMockKs dependency order for interface by @​neungs-2 in #​1526
• fix: resolve @​InjectMockKs dependency order for list injection by @​ilia1243 in #​1527
• fix: extract native lib from APK when not on filesystem (AGP 8.5+) by @​snowykte0426 in #​1529
• fix: support OpenJ9 in JvmAutoHinter by @​hspedro in #​1530

New Contributors

• @​DOssaA made their first contribution in #​1508
• @​ilia1243 made their first contribution in #​1515
• @​Yentis made their first contribution in #​1517
• @​evgenru made their first contribution in #​1519
• @​ZzAve made their first contribution in #​1525
• @​faraz152 made their first contribution in #​1521
• @​hspedro made their first contribution in #​1530

Full Changelog: mockk/mockk@1.14.9...v1.14.11

v1.14.9

Compare Source

What's Changed

• fix: normalize value class arguments in EqMatcher for consistent comparison by @​edwardmp in #​1440
• Add configurable logging to withArg & withNullableArg by @​OsaSoft in #​1441
• docs(readme): document suppressing superclass calls by @​ch200203 in #​1444
• Fix for issue #​1103. by @​sdetilly in #​1449
• Fix configuration option example for restricted classes by @​TWiStErRob in #​1465
• Fix InaccessibleObjectException when spying on JDK interfaces on JDK 16+ by @​Copilot in #​1457
• Fix Java 11 compatibility: replace Random.nextLong(long, long) with Java 8 compatible alternative by @​Copilot in #​1456
• Add optional restricted mock system property by @​nishatoma in #​1454
• Fix StackOverflowError when mocking methods returning ArrayList by @​Copilot in #​1464
• Change JUnit 4/5 dependencies from implementation to compileOnly by @​Copilot in #​1455
• bump dependencies, bump dexter by @​jgrnrt in #​1477
• Fix issue 1475: nullable value class verification by @​sdetilly in #​1480
• Migrate build configuration to version catalog by @​jgrnrt in #​1481
• Clean up CI configuration and build artifacts by @​jgrnrt in #​1482
• Add Spotless formatting plugin by @​jgrnrt in #​1483
• Enable ktlint unused-imports rule and clean up code by @​jgrnrt in #​1489
• chore: enable no-wildcard-imports in ktlint by @​jgrnrt in #​1491
• Add List injection support for @​InjectMockKs (#​1356) by @​h2jinee in #​1492
• Unify settings files by prioritizing mockk.properties in MockKSettings by @​snowykte0426 in #​1474
• Fix type matching for any() when parameter is Any (#​1296) by @​chapakook in #​1494
• Upgrade Dokka to 2.1.0 and Refactor Documentation Setup by @​jgrnrt in #​1499
• chore: bump gradle to 9.3.0, add .gitattributes by @​jgrnrt in #​1502
• Fix #​1342: Handle value classes for type parameters and don't unbox value classes returned as interface/supertype by @​ianbrandt in #​1442
• Introduce clearAllStubsFromMemory by @​nishatoma in #​1503
• Bump dokka to 2.2.0-Beta by @​jgrnrt in #​1505
• fix: resolve @​InjectMockKs initialization order based on dependencies by @​neungs-2 in #​1500

New Contributors

• @​edwardmp made their first contribution in #​1440
• @​OsaSoft made their first contribution in #​1441
• @​sdetilly made their first contribution in #​1449
• @​Copilot made their first contribution in #​1457
• @​nishatoma made their first contribution in #​1454
• @​jgrnrt made their first contribution in #​1477
• @​h2jinee made their first contribution in #​1492
• @​snowykte0426 made their first contribution in #​1474
• @​chapakook made their first contribution in #​1494
• @​ianbrandt made their first contribution in #​1442
• @​neungs-2 made their first contribution in #​1500

Full Changelog: mockk/mockk@1.14.6...1.14.9

v1.14.7

Compare Source

What's Changed

• fix: normalize value class arguments in EqMatcher for consistent comparison by @​edwardmp in #​1440
• Add configurable logging to withArg & withNullableArg by @​OsaSoft in #​1441
• docs(readme): document suppressing superclass calls by @​ch200203 in #​1444
• Fix for issue #​1103. by @​sdetilly in #​1449
• Fix configuration option example for restricted classes by @​TWiStErRob in #​1465
• Fix InaccessibleObjectException when spying on JDK interfaces on JDK 16+ by @​Copilot in #​1457
• Fix Java 11 compatibility: replace Random.nextLong(long, long) with Java 8 compatible alternative by @​Copilot in #​1456
• Add optional restricted mock system property by @​nishatoma in #​1454
• Fix StackOverflowError when mocking methods returning ArrayList by @​Copilot in #​1464
• Change JUnit 4/5 dependencies from implementation to compileOnly by @​Copilot in #​1455

New Contributors

• @​edwardmp made their first contribution in #​1440
• @​OsaSoft made their first contribution in #​1441
• @​sdetilly made their first contribution in #​1449
• @​Copilot made their first contribution in #​1457
• @​nishatoma made their first contribution in #​1454

Full Changelog: mockk/mockk@1.14.6...1.14.7

oshai/kotlin-logging (io.github.oshai:kotlin-logging-jvm)

v7.0.14

Compare Source

What's Changed

• Bump actions/upload-pages-artifact from 3 to 4 by @​dependabot[bot] in #​559
• Bump actions/setup-java from 4 to 5 by @​dependabot[bot] in #​560
• Upgrade Gradle wrapper to 8.14.3 by @​Copilot in #​563
• Bump com.android.library from 8.12.0 to 8.12.1 by @​dependabot[bot] in #​561
• Bump jackson from 2.19.2 to 2.20.0 by @​dependabot[bot] in #​565
• Bump com.android.library from 8.12.2 to 8.13.0 by @​dependabot[bot] in #​564
• Bump org.graalvm.sdk:nativeimage from 24.2.2 to 25.0.0 by @​dependabot[bot] in #​568
• Bump org.mockito:mockito-core from 5.19.0 to 5.20.0 by @​dependabot[bot] in #​567
• Bump log4j from 2.25.1 to 2.25.2 by @​dependabot[bot] in #​572
• Bump actions/cache from 4.2.4 to 4.3.0 by @​dependabot[bot] in #​571
• Bump com.diffplug.spotless from 7.2.1 to 8.0.0 by @​dependabot[bot] in #​570
• Bump gradle/actions from 4 to 5 by @​dependabot[bot] in #​574
• Bump ch.qos.logback:logback-classic from 1.5.18 to 1.5.19 by @​dependabot[bot] in #​573
• Change LogbackLogEvent to implement ILoggingEvent by @​oshai in #​583

New Contributors

• @​Copilot made their first contribution in #​563

Full Changelog: oshai/kotlin-logging@7.0.13...7.0.14

gantsign/ktlint-maven-plugin (com.github.gantsign.maven:ktlint-maven-plugin)

v3.7.1

Compare Source

Changes:

• #​718: Fix deploy timeout

v3.7.0

Compare Source

Enhancement:

• #​717: Update ktlint to 1.8.0 and kotlin to 2.2.21

v3.6.0

Compare Source

Enhancement:

• #​681: Update to ktlint 1.7.1 and kotlin 2.2.0
  • Thanks to @​JonathanLennox for the PR

Other changes:

• #​662: Upgraded commons-codec:commons-codec from 1.17.2 to 1.18.0
• #​671: Updated GitHub Actions runner
• #​663: Upgraded commons-logging:commons-logging from 1.3.4 to 1.3.5
• #​664: Upgraded commons-beanutils:commons-beanutils from 1.10.0 to 1.10.1
• #​685: Fix devcontainer
• #​686: Fix devcontainer
• #​687: Migrate deployment to Sonatype Central Portal
• #​688: Fix Maven deploy
• #​688: Fix formatting (fix-deploy)
• #​666: Bump org.codehaus.plexus:plexus-classworlds from 2.8.0 to 2.9.0
• #​669: Bump org.codehaus.plexus:plexus-interpolation from 1.27 to 1.28
• #​673: Bump commons-beanutils:commons-beanutils from 1.10.1 to 1.11.0
• #​675: Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0
• #​676: Bump commons-io:commons-io from 2.18.0 to 2.20.0
• #​679: Bump actions/setup-java from 4 to 5
• #​680: Bump codecov/codecov-action from 5.3.1 to 5.5.1
• #​682: Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.19.0
• #​683: Bump actions/checkout from 4 to 6
• #​689: Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3
• #​690: Update Dependabot to allow newer Maven versions
• #​693: Bump org.apache.maven:maven-core from 3.5.4 to 3.8.1
• #​691: Bump codecov/codecov-action from 5.5.1 to 6.0.0
• #​694: Bump org.jetbrains.dokka:dokka-maven-plugin from 2.0.0 to 2.2.0
• #​695: Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.24 to 1.27
• #​696: Bump commons-codec:commons-codec from 1.18.0 to 1.21.0
• #​692: Bump maven.version from 3.8.1 to 3.8.9
• #​698: Add org.dom4j:dom4j dependency to dependabot configuration
• #​703: Bump org.dom4j:dom4j from 2.1.4 to 2.1.5
• #​704: Add org.codehaus.plexus:plexus-xml dependency to dependabot configuration
• #​699: Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29
• #​700: Bump commons-logging:commons-logging from 1.3.5 to 1.3.6
• #​701: Bump org.apache.maven.plugin-tools:maven-plugin-annotations
• #​706: Bump commons-io:commons-io from 2.20.0 to 2.21.0
• #​707: Add maven-reporting-impl dependency to dependabot configuration
• #​708: Add plexus-classworlds dependency to dependabot config
• #​710: Add maven-plugin-testing-harness to dependabot config
• #​711: Add Guice to dependabot config
• #​712: Bump com.google.inject:guice from 4.2.2 to 4.2.3
• #​713: Add doxia-sink-api-ktx to dependabot config
• #​714: Bump doxia-sink-api-ktx version to 1.6.1
• #​715: Update build Maven version to 3.9.14
• #​716: Update Maven Central badge to use img.shields.io

mojohaus/build-helper-maven-plugin (org.codehaus.mojo:build-helper-maven-plugin)

v3.6.2

Compare Source

🐛 Bug Fixes

• Replace raw NPEx with customized exception message (#​239) @​pzygielo

👻 Maintenance

• Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#​248) @​slachiewicz

📦 Dependency updates

11 changes

• Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#​248) @​slachiewicz
• Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#​247) @​dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#​244) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 96 to 97 (#​246) @​dependabot[bot]
• Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#​245) @​dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3 (#​241) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 95 to 96 (#​240) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 94 to 95 (#​235) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 93 to 94 (#​233) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#​232) @​dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#​231) @​dependabot[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

This change is 

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
maven/com.github.gantsign.maven:ktlint-maven-plugin	3.7.1	🟢 3.1	Details Check Score Reason Code-Review ⚠️ 0 Found 1/14 approved changesets -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected License 🟢 10 license file detected Packaging ⚠️ -1 packaging workflow not detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/io.github.oshai:kotlin-logging-jvm	7.0.14	Unknown	Unknown
maven/io.mockk:mockk-jvm	1.14.11	🟢 5	Details Check Score Reason Code-Review 🟢 9 Found 13/14 approved changesets -- score normalized to 9 Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 4 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ 2 dependency not pinned by hash detected -- score normalized to 2 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.apache.maven.plugins:maven-compiler-plugin	3.16.0	🟢 5.6	Details Check Score Reason Code-Review 🟢 5 Found 13/23 approved changesets -- score normalized to 5 Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.apache.maven.plugins:maven-enforcer-plugin	3.6.3	🟢 5.5	Details Check Score Reason Maintained 🟢 10 30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 4 Found 9/22 approved changesets -- score normalized to 4 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.apache.maven.plugins:maven-surefire-plugin	3.6.0	🟢 5.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review 🟢 4 Found 9/19 approved changesets -- score normalized to 4 Maintained 🟢 10 30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Security-Policy 🟢 10 security policy file detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.codehaus.mojo:build-helper-maven-plugin	3.6.2	🟢 4.2	Details Check Score Reason Maintained 🟢 7 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 0 Found 1/12 approved changesets -- score normalized to 0 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy ⚠️ 0 security policy file not detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST 🟢 4 SAST tool is not run on all commits -- score normalized to 4
maven/org.codehaus.mojo:properties-maven-plugin	1.3.1	🟢 3.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Code-Review ⚠️ 1 Found 1/10 approved changesets -- score normalized to 1 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 7 9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 9 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy ⚠️ 0 security policy file not detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• pom.xml