Bump the auto-merge-minor-and-patch group across 1 directory with 12 updates by dependabot[bot] · Pull Request #194 · entur/sobek

dependabot · 2026-09-03T16:25:22Z

Bumps the auto-merge-minor-and-patch group with 12 updates in the / directory:

Package	From	To
org.apache.maven.plugins:maven-compiler-plugin	`3.15.0`	`3.16.0`
org.javassist:javassist	`3.32.0-GA`	`3.33.0-GA`
org.entur.ror.helpers:organisation	`7.2.0`	`7.3.0`
org.entur.ror.helpers:oauth2	`7.2.0`	`7.3.0`
org.entur.ror.helpers:storage-gcp-gcs	`7.2.0`	`7.3.0`
org.entur.ror.helpers:permission-store-proxy	`7.2.0`	`7.3.0`
org.entur.ror.helpers:storage-aws-s3	`7.2.0`	`7.3.0`
org.geotools:gt-referencing	`35.0`	`35.1`
org.geotools:gt-epsg-hsql	`35.0`	`35.1`
org.geotools:gt-geojson	`35.0`	`35.1`
com.google.cloud:spring-cloud-gcp-starter-pubsub	`8.1.0`	`8.1.1`
io.awspring.cloud:spring-cloud-aws-starter-secrets-manager	`4.0.2`	`4.1.1`

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

Updates org.javassist:javassist from 3.32.0-GA to 3.33.0-GA

Release notes

Sourced from org.javassist:javassist's releases.

Javassist-3.33.0-GA

What's Changed

Fix SerialVersionUID for static nested classes by @arimu1 in jboss-javassist/javassist#523

Full Changelog: jboss-javassist/javassist@rel_3_32_0_ga...rel_3_33_0_ga

Changelog

Sourced from org.javassist:javassist's changelog.

Changes

version 3.34

GitHub PR #524 (Issue #443)

version 3.33 on August 23, 2026

API changes suggested by @waydeshi and @lucianjohnhouse

GitHub PR #523

version 3.32 on June 21, 2026

API change suggested by Wayde Shi (GitHub: @waydeshi).

Excludes javassist.tools.{reflect,rmi,web}. They are now included in ./examples/src/main.

Disables javassist.runtime.Desc.useContextClassLoader

version 3.31.0 on April 20, 2026

GitHub PR #480, #484, #486, #491, #492, #495, #506

version 3.30.2 on December 25, 2023

GitHub PR #473, 475, 476

version 3.30.1 on December 17, 2023

GitHub Issue #471

version 3.30 on December 17, 2023

GitHub PR #434, 448, 463 (Issue #462), 466, 467, 468, 469, 470,

version 3.29.2 on September 14, 2022

GitHub Issue #427.

version 3.29.1 on August 11, 2022

GitHub Issue #423.

Readme.html was deleted (GitHub Issue #414).

version 3.29 on May 13, 2022

GitHub Issue #378, PR #278, #299, #382, #383, #390, #391, #395, #399, #409.

... (truncated)

Commits

See full diff in compare view

Updates org.entur.ror.helpers:organisation from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.entur.ror.helpers:oauth2 from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.entur.ror.helpers:storage-gcp-gcs from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.entur.ror.helpers:permission-store-proxy from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.entur.ror.helpers:storage-aws-s3 from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.entur.ror.helpers:oauth2 from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.entur.ror.helpers:storage-gcp-gcs from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates org.geotools:gt-referencing from 35.0 to 35.1

Updates org.geotools:gt-epsg-hsql from 35.0 to 35.1

Updates org.geotools:gt-geojson from 35.0 to 35.1

Updates org.geotools:gt-epsg-hsql from 35.0 to 35.1

Updates org.geotools:gt-geojson from 35.0 to 35.1

Updates com.google.cloud:spring-cloud-gcp-starter-pubsub from 8.1.0 to 8.1.1

Release notes

Sourced from com.google.cloud:spring-cloud-gcp-starter-pubsub's releases.

v8.1.1

8.1.1 (2026-08-27)

Bug Fixes

deps: update dependency org.junit:junit-bom to v6.1.2 (#4570) (b86ca77)

deps: update dependency tools.jackson.core:jackson-core to v3.1.4 [security] (#4588) (cc5ac01)

Dependencies

Bump cloud-sql-socket-factory to v1.29.0 (#4598) (a6306f5)

Documentation

update compatibility matrix to include Spring Boot 4.1.x (#4592) (4875210)

Changelog

Sourced from com.google.cloud:spring-cloud-gcp-starter-pubsub's changelog.

8.1.1 (2026-08-27)

Bug Fixes

deps: update dependency org.junit:junit-bom to v6.1.2 (#4570) (b86ca77)

deps: update dependency tools.jackson.core:jackson-core to v3.1.4 [security] (#4588) (cc5ac01)

Dependencies

Bump cloud-sql-socket-factory to v1.29.0 (#4598) (a6306f5)

Documentation

update compatibility matrix to include Spring Boot 4.1.x (#4592) (4875210)

Commits

6e060bf chore(main): release 8.1.1 (#4580)
04eaf4d test: clean up gRPC channel leaks and fix Java 8 Mockito compatibility (#4602)
a6306f5 deps: Bump cloud-sql-socket-factory to v1.29.0 (#4598)
cc5ac01 fix(deps): update dependency tools.jackson.core:jackson-core to v3.1.4 [secur...
e1ea014 fix(deps): update dependency tools.jackson.core:jackson-databind to v3.1.5 [s...
ecf6015 chore(deps): bump tools.jackson.core:jackson-core from 3.1.1 to 3.1.4 (#4587)
4875210 docs: update compatibility matrix to include Spring Boot 4.1.x (#4592)
524c7bf chore(config): migrate Renovate config (#4579)
b86ca77 fix(deps): update dependency org.junit:junit-bom to v6.1.2 (#4570)
bfd6dfd chore(deps): update maven plugins (#4574)
Additional commits viewable in compare view

Updates org.entur.ror.helpers:permission-store-proxy from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Updates io.awspring.cloud:spring-cloud-aws-starter-secrets-manager from 4.0.2 to 4.1.1

Updates org.entur.ror.helpers:storage-aws-s3 from 7.2.0 to 7.3.0

Commits

02241c2 chore(bump): Bump current version to 7.3.0 [skip ci]
b51acee Release only on demand
502d491 Merge pull request #388 from entur/report-subscriber-and-manual-release
6014b81 Add a manual release trigger, and write the version back
b7c84a5 Report a terminally failed PubSub subscriber
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the auto-merge-minor-and-patch group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` | | [org.javassist:javassist](https://github.com/jboss-javassist/javassist) | `3.32.0-GA` | `3.33.0-GA` | | [org.entur.ror.helpers:organisation](https://github.com/entur/rutebanken-helpers) | `7.2.0` | `7.3.0` | | [org.entur.ror.helpers:oauth2](https://github.com/entur/rutebanken-helpers) | `7.2.0` | `7.3.0` | | [org.entur.ror.helpers:storage-gcp-gcs](https://github.com/entur/rutebanken-helpers) | `7.2.0` | `7.3.0` | | [org.entur.ror.helpers:permission-store-proxy](https://github.com/entur/rutebanken-helpers) | `7.2.0` | `7.3.0` | | [org.entur.ror.helpers:storage-aws-s3](https://github.com/entur/rutebanken-helpers) | `7.2.0` | `7.3.0` | | org.geotools:gt-referencing | `35.0` | `35.1` | | org.geotools:gt-epsg-hsql | `35.0` | `35.1` | | org.geotools:gt-geojson | `35.0` | `35.1` | | [com.google.cloud:spring-cloud-gcp-starter-pubsub](https://github.com/GoogleCloudPlatform/spring-cloud-gcp) | `8.1.0` | `8.1.1` | | io.awspring.cloud:spring-cloud-aws-starter-secrets-manager | `4.0.2` | `4.1.1` | Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) Updates `org.javassist:javassist` from 3.32.0-GA to 3.33.0-GA - [Release notes](https://github.com/jboss-javassist/javassist/releases) - [Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md) - [Commits](https://github.com/jboss-javassist/javassist/commits) Updates `org.entur.ror.helpers:organisation` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.entur.ror.helpers:oauth2` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.entur.ror.helpers:storage-gcp-gcs` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.entur.ror.helpers:permission-store-proxy` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.entur.ror.helpers:storage-aws-s3` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.entur.ror.helpers:oauth2` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.entur.ror.helpers:storage-gcp-gcs` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `org.geotools:gt-referencing` from 35.0 to 35.1 Updates `org.geotools:gt-epsg-hsql` from 35.0 to 35.1 Updates `org.geotools:gt-geojson` from 35.0 to 35.1 Updates `org.geotools:gt-epsg-hsql` from 35.0 to 35.1 Updates `org.geotools:gt-geojson` from 35.0 to 35.1 Updates `com.google.cloud:spring-cloud-gcp-starter-pubsub` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/GoogleCloudPlatform/spring-cloud-gcp/releases) - [Changelog](https://github.com/GoogleCloudPlatform/spring-cloud-gcp/blob/main/CHANGELOG.md) - [Commits](GoogleCloudPlatform/spring-cloud-gcp@v8.1.0...v8.1.1) Updates `org.entur.ror.helpers:permission-store-proxy` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) Updates `io.awspring.cloud:spring-cloud-aws-starter-secrets-manager` from 4.0.2 to 4.1.1 Updates `org.entur.ror.helpers:storage-aws-s3` from 7.2.0 to 7.3.0 - [Commits](entur/rutebanken-helpers@v7.2.0...v7.3.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.javassist:javassist dependency-version: 3.33.0-GA dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:organisation dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:oauth2 dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:storage-gcp-gcs dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:permission-store-proxy dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:storage-aws-s3 dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:oauth2 dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:storage-gcp-gcs dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.geotools:gt-referencing dependency-version: '35.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.geotools:gt-epsg-hsql dependency-version: '35.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.geotools:gt-geojson dependency-version: '35.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.geotools:gt-epsg-hsql dependency-version: '35.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.geotools:gt-geojson dependency-version: '35.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: com.google.cloud:spring-cloud-gcp-starter-pubsub dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:permission-store-proxy dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: io.awspring.cloud:spring-cloud-aws-starter-secrets-manager dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch - dependency-name: org.entur.ror.helpers:storage-aws-s3 dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: auto-merge-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Dependabot PR java Pull requests that update java code labels Sep 3, 2026

Navigation Menu

Uh oh!

Bump the auto-merge-minor-and-patch group across 1 directory with 12 updates - #194

Bump the auto-merge-minor-and-patch group across 1 directory with 12 updates#194
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/auto-merge-minor-and-patch-f02c5019c6

dependabot Bot commented on behalf of github Sep 3, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 3, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Javassist-3.33.0-GA

What's Changed

Changes

version 3.34

version 3.33 on August 23, 2026

version 3.32 on June 21, 2026

version 3.31.0 on April 20, 2026

version 3.30.2 on December 25, 2023

version 3.30.1 on December 17, 2023

version 3.30 on December 17, 2023

version 3.29.2 on September 14, 2022

version 3.29.1 on August 11, 2022

version 3.29 on May 13, 2022

v8.1.1

8.1.1 (2026-08-27)

Bug Fixes

Dependencies

Documentation

8.1.1 (2026-08-27)

Bug Fixes

Dependencies

Documentation

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 3, 2026 •

edited

Loading