Bump the maven group with 7 updates by dependabot[bot] · Pull Request #370 · belgif/rest-problem-java

dependabot · 2026-09-28T16:44:21Z

Bumps the maven group with 7 updates:

Package	From	To
org.mockito:mockito-junit-jupiter	`5.23.0`	`5.24.0`
org.slf4j:slf4j-api	`2.0.19`	`2.0.20`
ch.qos.logback:logback-classic	`1.6.3`	`1.6.4`
io.quarkus.platform:quarkus-bom	`3.39.4`	`3.39.5`
io.quarkus:quarkus-extension-processor	`3.39.4`	`3.39.5`
io.quarkus:quarkus-extension-maven-plugin	`3.39.4`	`3.39.5`
io.quarkus.platform:quarkus-maven-plugin	`3.39.4`	`3.39.5`

Updates org.mockito:mockito-junit-jupiter from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]

Fix Mockito docs for -javaagent flag with Gradle [(#3866)](mockito/mockito#3866)

Kotlin example for adding Mockito as an agent is incorrect [(#3864)](mockito/mockito#3864)

Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 [(#3862)](mockito/mockito#3862)

Bump gradle/actions from 6.2.0 to 6.3.0 [(#3852)](mockito/mockito#3852)

Bump gradle/actions from 5 to 6.2.0 [(#3851)](mockito/mockito#3851)

Preserve method parameters when clearing inline mocks [(#3847)](mockito/mockito#3847)

Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 [(#3845)](mockito/mockito#3845)

Print object fields via reflection when toString() is not implemented [(#3844)](mockito/mockito#3844)

Migrate extensions-tests to JUnit Jupiter [(#3840)](mockito/mockito#3840)

Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 [(#3839)](mockito/mockito#3839)

docs(when-verify): fixes to explanations about redundancy [(#3838)](mockito/mockito#3838)

Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc [(#3837)](mockito/mockito#3837)

Bump actions/checkout from 6 to 7 [(#3836)](mockito/mockito#3836)

Fixes #2740 : Add mockMaker option to @Spy annotation [(#3835)](mockito/mockito#3835)

Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 [(#3834)](mockito/mockito#3834)

Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 [(#3833)](mockito/mockito#3833)

Bump codecov/codecov-action from 6 to 7 [(#3831)](mockito/mockito#3831)

Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 [(#3830)](mockito/mockito#3830)

Fix clearInlineMocks not de-registering singleton mocks [(#3829)](mockito/mockito#3829)

Fix NotAMockException when using mockSingleton with MockitoJUnit [(#3827)](mockito/mockito#3827)

NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit [(#3826)](mockito/mockito#3826)

Improve Gradle agent docs for configuration cache [(#3823)](mockito/mockito#3823)

Gradle documentation for setting up instrumentation with Gradle configuration cache [(#3822)](mockito/mockito#3822)

Fixes #3818 : Fix data race in InvocationContainerImpl.invocationForStubbing [(#3819)](mockito/mockito#3819)

Data race on invocationForPotentialStubbing [(#3818)](mockito/mockito#3818)

Fixes #3814 : implement package-level clinit suppression [(#3815)](mockito/mockito#3815)

Package-level clinit suppression [(#3814)](mockito/mockito#3814)

Upgrade Android Gradle Plugin to 8.13.2 [(#3812)](mockito/mockito#3812)

Replaces raw generic types with type parameters [(#3806)](mockito/mockito#3806)

Fixes #2398 : Implement global suppress static initialization leveraging java agent [(#3801)](mockito/mockito#3801)

Bump codecov/codecov-action from 5 to 6 [(#3800)](mockito/mockito#3800)

Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#3406, #2823) [(#3795)](mockito/mockito#3795)

Fixes #3536 : Implement SpyStatic API [(#3794)](mockito/mockito#3794)

The class's MethodParameters are removed after clearAllCaches is invoked [(#3763)](mockito/mockito#3763)

[FeatureRequest / Idea] Create Mockito.spyStatic [(#3536)](mockito/mockito#3536)

Add option to specify mockmaker for @Spy [(#2740)](mockito/mockito#2740)

How can I suppress static initializer? [(#2398)](mockito/mockito#2398)

Commits

5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
e7fd06d Preserve method parameters when clearing inline mocks (#3847)
5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.19 to 2.0.20

Updates ch.qos.logback:logback-classic from 1.6.3 to 1.6.4

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.4

2026-09-24 Release of logback version 1.6.4

• Variable substitution is again applied to the scan attribute of the <configuration> element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of <propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.

• OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.

• Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.

• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.

• TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. See TimeBasedRollingPolicy.

• If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.

• The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Full Changelog: qos-ch/logback@v_1.6.3...v_1.6.4

Commits

07d291c preapre release 1.6.4
9627daf revert to Collections.unmodifiableMap instead of
aa42fb5 disabled RollingCalendarTest#testVaryingNumberOfHalfDailyPeriods to shave off...
ddc7459 Support HALF_DAY periodicity for AM/PM date patterns
42d75d7 disable LoggerContextTest#concurrentGetLoggerKeepsSizeConsistent to shave exe...
bffd55e add warnings about missing jline.jansi classes
8de0b9b Fix data race on LoggerContext.size (#1038)
76c73d1 add MinimalUnmodifiableMap and return it in LogbackMDCAdapter#getPropertyMap
a2c416a Fix formatting of email instruction in README
2c89727 mailing lists have been deactivated
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-bom from 3.39.4 to 3.39.5

Commits

70db89b [maven-release-plugin] prepare release 3.39.5
4053d13 Merge pull request #2201 from quarkusio/quarkus-3.39.5
9b90d22 Upgrade to Quarkus 3.39.5
d22be1f [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates io.quarkus:quarkus-extension-processor from 3.39.4 to 3.39.5

Updates io.quarkus:quarkus-extension-maven-plugin from 3.39.4 to 3.39.5

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.5

Complete changelog

#56037 - Always complete the export when the OTLP sender is shut down

#56255 - Bump org.freemarker:freemarker from 2.3.34 to 2.3.35

#56349 - [3.39] Bump to Vert.x 4.5.33

#56573 - Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup

#56783 - Typo fixes in gRPC guides

#56796 - docs: Fix the dead Jose4J link in the JWT Build guide

#56800 - Add javadoc to AbstractSecurityIdentityAssociation

#56821 - [3.40] SmallRye Fault Tolerance: bump to 6.11.4

#56831 - [3.40] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes

#56837 - Do not stack asciidoc anchors, because it does not work

#56838 - Fix malformed link

#56842 - Fix dead link for Redis sandbox

#56845 - Bump Keycloak version to 26.7.4

#56849 - [3.40] Upgrade RESTEasy to 6.2.19.Final

#56853 - [3.40] Upgrade to Hibernate 7.4.9.Final

#56857 - [3.40] WebSockets Next: add max-pending-messages back-pressure

#56861 - [3.40] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)

#56867 - [3.40] : Bump smallrye-jwt version to 4.6.4

#56884 - Invalid Java interface declaration in SmallRye GraphQL guide

#56885 - Fix interface inheritance in SmallRye GraphQL guide

#56920 - Update Elytron to 2.9.2.SP1

#56925 - aesh 3.18.1

Commits

9b1a924 [RELEASE] - Bump version to 3.39.5
0f99e89 Merge pull request #56930 from gsmet/3.39.5-backports-2
ff7049b aesh 3.18.1
e83bb56 Update Elytron to 2.9.2.SP1
0dc67b3 Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup
070da12 Merge pull request #56907 from gsmet/3.39.5-backports-1
36dd02c EvalTest.testVariantPropagated() - register the eval section manually
dc24719 Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
347368c Upgrade RESTEasy to 6.2.19.Final
43f1add SmallRye Fault Tolerance: bump to 6.11.4
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.39.4 to 3.39.5

Commits

70db89b [maven-release-plugin] prepare release 3.39.5
4053d13 Merge pull request #2201 from quarkusio/quarkus-3.39.5
9b90d22 Upgrade to Quarkus 3.39.5
d22be1f [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates io.quarkus:quarkus-extension-processor from 3.39.4 to 3.39.5

Updates io.quarkus:quarkus-extension-maven-plugin from 3.39.4 to 3.39.5

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.39.5

Complete changelog

#56037 - Always complete the export when the OTLP sender is shut down

#56255 - Bump org.freemarker:freemarker from 2.3.34 to 2.3.35

#56349 - [3.39] Bump to Vert.x 4.5.33

#56573 - Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup

#56783 - Typo fixes in gRPC guides

#56796 - docs: Fix the dead Jose4J link in the JWT Build guide

#56800 - Add javadoc to AbstractSecurityIdentityAssociation

#56821 - [3.40] SmallRye Fault Tolerance: bump to 6.11.4

#56831 - [3.40] Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes

#56837 - Do not stack asciidoc anchors, because it does not work

#56838 - Fix malformed link

#56842 - Fix dead link for Redis sandbox

#56845 - Bump Keycloak version to 26.7.4

#56849 - [3.40] Upgrade RESTEasy to 6.2.19.Final

#56853 - [3.40] Upgrade to Hibernate 7.4.9.Final

#56857 - [3.40] WebSockets Next: add max-pending-messages back-pressure

#56861 - [3.40] Fix path normalization bypass on wildcard routes (matrix-param + dot-segment)

#56867 - [3.40] : Bump smallrye-jwt version to 4.6.4

#56884 - Invalid Java interface declaration in SmallRye GraphQL guide

#56885 - Fix interface inheritance in SmallRye GraphQL guide

#56920 - Update Elytron to 2.9.2.SP1

#56925 - aesh 3.18.1

Commits

9b1a924 [RELEASE] - Bump version to 3.39.5
0f99e89 Merge pull request #56930 from gsmet/3.39.5-backports-2
ff7049b aesh 3.18.1
e83bb56 Update Elytron to 2.9.2.SP1
0dc67b3 Bump aesh 3.18.0, add pipeline stage results, lazy runtime startup
070da12 Merge pull request #56907 from gsmet/3.39.5-backports-1
36dd02c EvalTest.testVariantPropagated() - register the eval section manually
dc24719 Qute: EvalSectionHelper and StrEvalNamespaceResolver fixes
347368c Upgrade RESTEasy to 6.2.19.Final
43f1add SmallRye Fault Tolerance: bump to 6.11.4
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.39.4 to 3.39.5

Commits

70db89b [maven-release-plugin] prepare release 3.39.5
4053d13 Merge pull request #2201 from quarkusio/quarkus-3.39.5
9b90d22 Upgrade to Quarkus 3.39.5
d22be1f [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 7 updates: | Package | From | To | | --- | --- | --- | | [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` | | org.slf4j:slf4j-api | `2.0.19` | `2.0.20` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.3` | `1.6.4` | | [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.39.4` | `3.39.5` | | io.quarkus:quarkus-extension-processor | `3.39.4` | `3.39.5` | | [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.39.4` | `3.39.5` | | [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.39.4` | `3.39.5` | Updates `org.mockito:mockito-junit-jupiter` from 5.23.0 to 5.24.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.23.0...v5.24.0) Updates `org.slf4j:slf4j-api` from 2.0.19 to 2.0.20 Updates `ch.qos.logback:logback-classic` from 1.6.3 to 1.6.4 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.6.3...v_1.6.4) Updates `io.quarkus.platform:quarkus-bom` from 3.39.4 to 3.39.5 - [Commits](quarkusio/quarkus-platform@3.39.4...3.39.5) Updates `io.quarkus:quarkus-extension-processor` from 3.39.4 to 3.39.5 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.39.4 to 3.39.5 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.39.4...3.39.5) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.39.4 to 3.39.5 - [Commits](quarkusio/quarkus-platform@3.39.4...3.39.5) Updates `io.quarkus:quarkus-extension-processor` from 3.39.4 to 3.39.5 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.39.4 to 3.39.5 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.39.4...3.39.5) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.39.4 to 3.39.5 - [Commits](quarkusio/quarkus-platform@3.39.4...3.39.5) --- updated-dependencies: - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.6.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-bom dependency-version: 3.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.39.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.39.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-09-28T16:53:52Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 28, 2026

github-actions Bot approved these changes Sep 28, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) September 28, 2026 16:44

github-actions Bot merged commit 8f69f21 into main Sep 28, 2026
4 checks passed

github-actions Bot deleted the dependabot/maven/maven-408d9a068d branch September 28, 2026 16:54

Navigation Menu

Repository navigation

Bump the maven group with 7 updates - #370

Bump the maven group with 7 updates#370
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-408d9a068d

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

sonarqubecloud Bot commented Sep 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026

v5.24.0

5.24.0

Logback 1.6.4

3.39.5

Complete changelog

3.39.5

Complete changelog

Uh oh!

sonarqubecloud Bot commented Sep 28, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants