Skip to content

Bump the maven group with 6 updates - #368

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-b7238b1a50
Sep 21, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-b7238b1a50

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven group with 6 updates:

Package From To
org.codehaus.mojo:build-helper-maven-plugin 3.6.1 3.6.2
org.codehaus.mojo:exec-maven-plugin 3.6.3 3.6.4
io.quarkus.platform:quarkus-bom 3.39.3 3.39.4
io.quarkus:quarkus-extension-processor 3.39.3 3.39.4
io.quarkus:quarkus-extension-maven-plugin 3.39.3 3.39.4
io.quarkus.platform:quarkus-maven-plugin 3.39.3 3.39.4

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.6.2

🐛 Bug Fixes

👻 Maintenance

  • Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#248) @​slachiewicz

📦 Dependency updates

Commits
  • 813bc7d [maven-release-plugin] prepare release 3.6.2
  • 07d9109 Remove redundant maven-resolver-api and ignore Resolver/SLF4J 2.x in Dependabot
  • 9abd552 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • 3c15526 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 3b1f104 Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 1749855 Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5230041 Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3
  • c0e9375 Delete .github/release-drafter.yml
  • 84a839e Bump org.codehaus.mojo:mojo-parent from 95 to 96
  • a85c668 Replace raw NPEx with customized exception message
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.6.3 to 3.6.4

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.4

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 56083f0 [maven-release-plugin] prepare release 3.6.4
  • 57c594b Ignore Maven Resolver >= 2.0 and SLF4J >= 2.0 in Dependabot
  • c2f5d4e Update required module name in jigsaw IT to org.codehaus.plexus.util
  • d227ee6 Bump org.codehaus.plexus:plexus-utils in /src/it/projects/jigsaw
  • 388fd99 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • 30106e8 Stop dependabot from updating test fixtures
  • b6d5eab Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • aa98aba Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 79cfdcd Bump org.apache.maven.plugins:maven-toolchains-plugin
  • 8c58ad6 Fix typo in docs (#531)
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-bom from 3.39.3 to 3.39.4

Commits
  • dea037c [maven-release-plugin] prepare release 3.39.4
  • b15a725 Merge pull request #2183 from quarkusio/quarkus-3.39.4
  • 177fb0c Upgrade to Quarkus 3.39.4
  • ae64691 Merge pull request #2182 from gsmet/3.39.4-backports
  • 49b8523 Update AmazonServices to 3.22.1
  • ca386e8 Update AmazonServices to 3.22.0
  • 2920c5f Bump quarkus-platform-bom-generator.version from 0.0.134 to 0.0.135
  • 9ff04fa Merge pull request #2181 from quarkusio/update-automation/3.39-quarkus-flow-1...
  • 27d6198 Merge pull request #2179 from quarkusio/update-automation/3.39-langchain4j-1....
  • 54faaf3 Update Quarkus Flow to 1.1.1
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.39.3 to 3.39.4

Updates io.quarkus:quarkus-extension-maven-plugin from 3.39.3 to 3.39.4

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.4

Complete changelog

  • #35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension
  • #37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide
  • #41734 - Probable bug in CognitoPrincipal lines 62 70
  • #53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32
  • #54925 - Formatting fails with a NullPointerException and the log record is dropped
  • #54926 - Fix JSON logging with null formatter keys
  • #55111 - [quarkus-info] Allow hiding the quarkus version
  • #55763 - Make the OIDC token JWE decryption algorithm configurable
  • #55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal
  • #55916 - DPoPNonceProvider should accept DPoP proof jti
  • #56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang
  • #56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions
  • #56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti
  • #56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • #56514 - Restore the third callout entry in the Hibernate ORM interceptor example
  • #56515 - Add the missing callout entry in the Infinispan client Greeting example
  • #56517 - Keep the Keycloak Dev Services resource-mapping callout list together
  • #56518 - Use a callout list for the generated resources extension example
  • #56519 - Add the two missing callout entries in the Vert.x OIDC migration guide
  • #56523 - Bootstrap Maven command from Getting started guide fails
  • #56527 - Fix reproducibility issue in Avro
  • #56529 - Strip quotes from extension names in Maven create command
  • #56537 - Bump GraalVM SDK version to 25.0.4.1
  • #56540 - NPE in getEffectiveMapper when response entity is an anonymous class (e.g. Stream)
  • #56541 - Fix NPE in getEffectiveMapper when response entity is an anonymous class
  • #56552 - the --debug-port or -DdebugPort parameter doesn't seem to work properly, always binding to port 5005
  • #56556 - Upgrade Apache HttpClient5 to 5.6.4
  • #56559 - Fix custom debug port being ignored in dev mode
  • #56560 - [3.39] Bump to Vert.x 4.5.34
  • #56561 - Remove empty RemoveableLateBoundSpanProcessor and LateBoundSpanProcessor files
  • #56562 - Customize OIDC token decryption algorithm
  • #56563 - [Keycloak dev service] - Make dev service access token lifespan configurable
  • #56583 - Avoid an internal error when a bean parameter field is not a class type
  • #56584 - docs: remove duplicate 'the' in OpenTelemetry logging guide
  • #56585 - docs: remove duplicate 'the' in Dev UI Patterns note
  • #56586 - Fix 'allows to' grammar in Config programmatic access docs
  • #56587 - Fix 'allows to storage' grammar in MongoDB guide
  • #56590 - Skip configuration directories that cannot be read when looking for unknown config files
  • #56593 - docs: remove duplicate 'the' in OIDC application-type note
  • #56604 - Keycloak Dev Service: make default realm's token lifespan configurable
  • #56613 - Compare Cognito claim names with strings instead of Claims enum constants
  • #56617 - Run the effective command of quarkus:update, with the local repository property
  • #56623 - Pass the add-opens requirements to JBang
  • #56626 - Fix the imports of the resource examples in the OAuth2 guide
  • #56627 - Mention the reactive extension in the Jakarta Persistence security guide
  • #56628 - Cache generated Jackson deserializers

... (truncated)

Commits
  • d274425 [RELEASE] - Bump version to 3.39.4
  • e452c5c Merge pull request #56770 from gsmet/3.39.4-backports-1
  • facd3c1 Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • 002b354 Fix flaky test DevMojoIT.testResourcesFromClasspath on Windows
  • 6931f5e Bump the default GraphQL query depth limit to 20
  • 44af7a1 Drop testEmbeddedSbomUncompressed as quarkus.cyclonedx.embedded.compress was ...
  • c87c0b4 Prevent leakage between tests
  • 9a70fa4 Explain OIDC filter annotation levels more clearly
  • ab5ea8a Clarify OIDC REST client method annotation behavior
  • c4fd37a Document method-level OIDC REST client annotations
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.39.3 to 3.39.4

Commits
  • dea037c [maven-release-plugin] prepare release 3.39.4
  • b15a725 Merge pull request #2183 from quarkusio/quarkus-3.39.4
  • 177fb0c Upgrade to Quarkus 3.39.4
  • ae64691 Merge pull request #2182 from gsmet/3.39.4-backports
  • 49b8523 Update AmazonServices to 3.22.1
  • ca386e8 Update AmazonServices to 3.22.0
  • 2920c5f Bump quarkus-platform-bom-generator.version from 0.0.134 to 0.0.135
  • 9ff04fa Merge pull request #2181 from quarkusio/update-automation/3.39-quarkus-flow-1...
  • 27d6198 Merge pull request #2179 from quarkusio/update-automation/3.39-langchain4j-1....
  • 54faaf3 Update Quarkus Flow to 1.1.1
  • Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.39.3 to 3.39.4

Updates io.quarkus:quarkus-extension-maven-plugin from 3.39.3 to 3.39.4

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.4

Complete changelog

  • #35814 - Quarkus Security with Jakarta Persistence guide doesn't mention security-jpa-reactive extension
  • #37745 - Docs: security-oauth2 and security-oauth2-quickstart Guide
  • #41734 - Probable bug in CognitoPrincipal lines 62 70
  • #53739 - ConfigDiagnostic.configFiles() crashes with AccessDeniedException on Windows when CWD is system32
  • #54925 - Formatting fails with a NullPointerException and the log record is dropped
  • #54926 - Fix JSON logging with null formatter keys
  • #55111 - [quarkus-info] Allow hiding the quarkus version
  • #55763 - Make the OIDC token JWE decryption algorithm configurable
  • #55910 - Remove unreachable duplicate Claims.groups branch in CognitoPrincipal
  • #55916 - DPoPNonceProvider should accept DPoP proof jti
  • #56160 - JBang integration fails on Java 24+ with IllegalAccessError: module java.base does not open java.lang
  • #56287 - Add forgotten extension-status includes – and remove extension status from guides for stable extensions
  • #56303 - OIDC: make DPoPNonceProvider accept DPoP proof jti
  • #56453 - Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • #56514 - Restore the third callout entry in the Hibernate ORM interceptor example
  • #56515 - Add the missing callout entry in the Infinispan client Greeting example
  • #56517 - Keep the Keycloak Dev Services resource-mapping callout list together
  • #56518 - Use a callout list for the generated resources extension example
  • #56519 - Add the two missing callout entries in the Vert.x OIDC migration guide
  • #56523 - Bootstrap Maven command from Getting started guide fails
  • #56527 - Fix reproducibility issue in Avro
  • #56529 - Strip quotes from extension names in Maven create command
  • #56537 - Bump GraalVM SDK version to 25.0.4.1
  • #56540 - NPE in getEffectiveMapper when response entity is an anonymous class (e.g. Stream)
  • #56541 - Fix NPE in getEffectiveMapper when response entity is an anonymous class
  • #56552 - the --debug-port or -DdebugPort parameter doesn't seem to work properly, always binding to port 5005
  • #56556 - Upgrade Apache HttpClient5 to 5.6.4
  • #56559 - Fix custom debug port being ignored in dev mode
  • #56560 - [3.39] Bump to Vert.x 4.5.34
  • #56561 - Remove empty RemoveableLateBoundSpanProcessor and LateBoundSpanProcessor files
  • #56562 - Customize OIDC token decryption algorithm
  • #56563 - [Keycloak dev service] - Make dev service access token lifespan configurable
  • #56583 - Avoid an internal error when a bean parameter field is not a class type
  • #56584 - docs: remove duplicate 'the' in OpenTelemetry logging guide
  • #56585 - docs: remove duplicate 'the' in Dev UI Patterns note
  • #56586 - Fix 'allows to' grammar in Config programmatic access docs
  • #56587 - Fix 'allows to storage' grammar in MongoDB guide
  • #56590 - Skip configuration directories that cannot be read when looking for unknown config files
  • #56593 - docs: remove duplicate 'the' in OIDC application-type note
  • #56604 - Keycloak Dev Service: make default realm's token lifespan configurable
  • #56613 - Compare Cognito claim names with strings instead of Claims enum constants
  • #56617 - Run the effective command of quarkus:update, with the local repository property
  • #56623 - Pass the add-opens requirements to JBang
  • #56626 - Fix the imports of the resource examples in the OAuth2 guide
  • #56627 - Mention the reactive extension in the Jakarta Persistence security guide
  • #56628 - Cache generated Jackson deserializers

... (truncated)

Commits
  • d274425 [RELEASE] - Bump version to 3.39.4
  • e452c5c Merge pull request #56770 from gsmet/3.39.4-backports-1
  • facd3c1 Allow TEST_TO_MAIN_MAPPINGS to be set as a system property
  • 002b354 Fix flaky test DevMojoIT.testResourcesFromClasspath on Windows
  • 6931f5e Bump the default GraphQL query depth limit to 20
  • 44af7a1 Drop testEmbeddedSbomUncompressed as quarkus.cyclonedx.embedded.compress was ...
  • c87c0b4 Prevent leakage between tests
  • 9a70fa4 Explain OIDC filter annotation levels more clearly
  • ab5ea8a Clarify OIDC REST client method annotation behavior
  • c4fd37a Document method-level OIDC REST client annotations
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.39.3 to 3.39.4

Commits
  • dea037c [maven-release-plugin] prepare release 3.39.4
  • b15a725 Merge pull request #2183 from quarkusio/quarkus-3.39.4
  • 177fb0c Upgrade to Quarkus 3.39.4
  • ae64691 Merge pull request #2182 from gsmet/3.39.4-backports
  • 49b8523 Update AmazonServices to 3.22.1
  • ca386e8 Update AmazonServices to 3.22.0
  • 2920c5f Bump quarkus-platform-bom-generator.version from 0.0.134 to 0.0.135
  • 9ff04fa Merge pull request #2181 from quarkusio/update-automation/3.39-quarkus-flow-1...
  • 27d6198 Merge pull request #2179 from quarkusio/update-automation/3.39-langchain4j-1....
  • 54faaf3 Update Quarkus Flow to 1.1.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.1` | `3.6.2` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.3` | `3.6.4` |
| [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.39.3` | `3.39.4` |
| io.quarkus:quarkus-extension-processor | `3.39.3` | `3.39.4` |
| [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.39.3` | `3.39.4` |
| [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.39.3` | `3.39.4` |


Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.6.1...3.6.2)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.3 to 3.6.4
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.3...3.6.4)

Updates `io.quarkus.platform:quarkus-bom` from 3.39.3 to 3.39.4
- [Commits](quarkusio/quarkus-platform@3.39.3...3.39.4)

Updates `io.quarkus:quarkus-extension-processor` from 3.39.3 to 3.39.4

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.39.3 to 3.39.4
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.39.3...3.39.4)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.39.3 to 3.39.4
- [Commits](quarkusio/quarkus-platform@3.39.3...3.39.4)

Updates `io.quarkus:quarkus-extension-processor` from 3.39.3 to 3.39.4

Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.39.3 to 3.39.4
- [Release notes](https://github.com/quarkusio/quarkus/releases)
- [Commits](quarkusio/quarkus@3.39.3...3.39.4)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.39.3 to 3.39.4
- [Commits](quarkusio/quarkus-platform@3.39.3...3.39.4)

---
updated-dependencies:
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus.platform:quarkus-bom
  dependency-version: 3.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.39.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-processor
  dependency-version: 3.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus:quarkus-extension-maven-plugin
  dependency-version: 3.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.39.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 21, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) September 21, 2026 16:45
@sonarqubecloud

Copy link
Copy Markdown

@github-actions
github-actions Bot merged commit 4895cb9 into main Sep 21, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/maven-b7238b1a50 branch September 21, 2026 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants