Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 4, 2026

Bumps the prod-deps group with 6 updates in the / directory:

Package From To
org.apache.logging.log4j:log4j-bom 2.25.2 2.25.3
io.vertx:vertx-stack-depchain 5.0.5 5.0.6
org.aspectj:aspectjrt 1.9.25 1.9.25.1
org.aspectj:aspectjtools 1.9.25 1.9.25.1
com.puppycrawl.tools:checkstyle 12.3.0 12.3.1
org.codehaus.mojo:exec-maven-plugin 3.6.2 3.6.3

Updates org.apache.logging.log4j:log4j-bom from 2.25.2 to 2.25.3

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.25.3

This patch release addresses issues detailed in the changelog below. In particular, it includes an important fix for the host name verification in SSL/TLS configuration. This is used by Socket Appender.

Changed

  • Optimize DefaultThreadContextMap.getCopy() performance by avoiding megamorphic calls in HashMap constructor (#3935, #3939)

Fixed

  • Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996)
  • Fix failures caused by null SslConfiguration (#3947, #3953)
  • Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)

Removed

  • Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)
Commits
  • 028e9fa Update the project.build.outputTimestamp property
  • 5350d10 Fix host name verification in SSLSocketManager (#4002)
  • e2898a0 Fix @Version annotations
  • 041435d Get ready for the 2.25.3 release
  • 73db4fb Fix log message in ApiLogger::setUseParentHandlers (#3943)
  • 6076b16 Fix nullability issues in SslConfiguration (#3953)
  • 8d43a99 Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)
  • 78dc01d Use binary names in GraalVmProcessor (#3996)
  • c09b012 Optimize DefaultThreadContextMap.getCopy() performance (#3939)
  • See full diff in compare view

Updates io.vertx:vertx-stack-depchain from 5.0.5 to 5.0.6

Updates org.aspectj:aspectjrt from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjrt's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

Updates org.aspectj:aspectjtools from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

Updates org.aspectj:aspectjtools from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

Updates com.puppycrawl.tools:checkstyle from 12.3.0 to 12.3.1

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-12.3.1

Checkstyle 12.3.1 - https://checkstyle.org/releasenotes.html#Release_12.3.1

Bug fixes:

#17265 - Duplicate violations in WhitespaceAfter and WhitespaceAround in google config #17778 - Add support to properly follow Rule 7.1.1 General Form in Google Style Guide Implementation #18381 - NullPointerException in TextBlockGoogleStyleFormatting with text blocks in annotations #17727 - Need default config in google_checks.xml to forbid lowercase Javadoc beginnings

Commits
  • b1e9d8e [maven-release-plugin] prepare release checkstyle-12.3.1
  • ba4a81f doc: release notes for 12.3.1
  • 9550a20 Issue #17449: Add XDocs example for FinalLocalVariableCheck validateUnnamedVa...
  • 0dd8729 dependency: bump nl.jqno.equalsverifier:equalsverifier
  • e861655 dependency: bump pmd.version from 7.19.0 to 7.20.0
  • 26139c0 Issue #18023: Resolve Pitest Sup - filters - SupressionCommentFilter
  • cf7bd8a Issue #18028: Resolve Pitest Supressions - api - abstractcheck
  • 7476d1c Issue #17746: Made implementation for finding end of description not depend o...
  • bfa6fd2 Issue #17265: Remove duplicate violations in WhitespaceAfter and WhitespaceAr...
  • b2263ef Issue #18028: Resolve Pitest Supressions - api - abstractfileset
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:exec-maven-plugin from 3.6.2 to 3.6.3

Release notes

Sourced from org.codehaus.mojo:exec-maven-plugin's releases.

3.6.3

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • fe1fa8c [maven-release-plugin] prepare release 3.6.3
  • 5b3feca Bump asm.version from 9.9 to 9.9.1
  • efc7faa Bump org.apache.commons:commons-exec from 1.5.0 to 1.6.0
  • cdaf267 JUnit 5 best practices (#505)
  • f3f5997 Move ExecJavaMojoTest, ExecMojoTest to JUnit 5
  • 03b87b5 Document thread group isolation limitation in java goal (#503)
  • 7a66c3e Add support for JEP 512 for for package-private static main methods with and ...
  • a6d01ef Move to JUnit 5
  • 88d5961 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.25.2` | `2.25.3` |
| io.vertx:vertx-stack-depchain | `5.0.5` | `5.0.6` |
| [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` |
| [org.aspectj:aspectjtools](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `12.3.0` | `12.3.1` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.2` | `3.6.3` |



Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.25.3
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.25.2...rel/2.25.3)

Updates `io.vertx:vertx-stack-depchain` from 5.0.5 to 5.0.6

Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)

Updates `com.puppycrawl.tools:checkstyle` from 12.3.0 to 12.3.1
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-12.3.0...checkstyle-12.3.1)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.6.2...3.6.3)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: io.vertx:vertx-stack-depchain
  dependency-version: 5.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.aspectj:aspectjrt
  dependency-version: 1.9.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.aspectj:aspectjtools
  dependency-version: 1.9.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.aspectj:aspectjtools
  dependency-version: 1.9.25.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 12.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 4, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 4, 2026 01:02
@dependabot dependabot bot added the java Pull requests that update java code label Jan 4, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 4, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants