Skip to content

Bump the maven group across 1 directory with 16 updates - #2

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-1cce7646af
Open

Bump the maven group across 1 directory with 16 updates#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-1cce7646af

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2025

Copy link
Copy Markdown

Bumps the maven group with 15 updates in the / directory:

Package From To
com.google.code.gson:gson 1.7.2 2.8.9
com.google.guava:guava 31.1-jre 32.0.0-jre
com.rabbitmq:amqp-client 5.17.0 5.18.0
com.thoughtworks.xstream:xstream 1.4.20 1.4.21
commons-io:commons-io 2.8.0 2.14.0
commons-net:commons-net 3.7.2 3.9.0
com.mysql:mysql-connector-j 8.0.33 8.2.0
org.apache.commons:commons-lang3 3.11 3.18.0
org.apache.kafka:kafka-clients 2.7.0 3.9.1
org.apache.tomcat.embed:tomcat-embed-core 10.0.22 10.1.42
org.eclipse.jetty:jetty-servlets 9.4.51.v20230217 9.4.54.v20240208
org.owasp.esapi:esapi 2.1.0.1 2.6.0.0
org.springframework:spring-context 5.3.26 6.1.20
org.testng:testng 7.1.0 7.5.1
com.puppycrawl.tools:checkstyle 8.18 11.0.0

Updates com.google.code.gson:gson from 1.7.2 to 2.8.9

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.8.9

  • Make OSGi bundle's dependency on sun.misc optional (#1993).
  • Deprecate Gson.excluder() exposing internal Excluder class (#1986).
  • Prevent Java deserialization of internal classes (#1991).
  • Improve number strategy implementation (#1987).
  • Fix LongSerializationPolicy null handling being inconsistent with Gson (#1990).
  • Support arbitrary Number implementation for Object and Number deserialization (#1290).
  • Bump proguard-maven-plugin from 2.4.0 to 2.5.1 (#1980).
  • Don't exclude static local classes (#1969).
  • Fix RuntimeTypeAdapterFactory depending on internal Streams class (#1959).
  • Improve Maven build (#1964).
  • Make dependency on java.sql optional (#1707).

Gson 2.8.8

  • Fixed issue with recursive types (#1390).
  • Better behaviour with Java 9+ and Unsafe if there is a security manager (#1712).
  • EnumTypeAdapter now works better when ProGuard has obfuscated enum fields (#1495).
Changelog

Sourced from com.google.code.gson:gson's changelog.

Version 2.8.9

Version 2.8.8

  • Fixed issue with recursive types (google/gson#1390).
  • Better behaviour with Java 9+ and Unsafe if there is a security manager (google/gson#1712).
  • EnumTypeAdapter now works better when ProGuard has obfuscated enum fields (google/gson#1495).

Version 2.8.7

Version 2.8.6

2019-10-04 GitHub Diff

  • Added static methods JsonParser.parseString and JsonParser.parseReader and deprecated instance method JsonParser.parse
  • Java 9 module-info support

Version 2.8.5

2018-05-21 GitHub Diff

  • Print Gson version while throwing AssertionError and IllegalArgumentException
  • Moved utils.VersionUtils class to internal.JavaVersion. This is a potential backward incompatible change from 2.8.4
  • Fixed issue google/gson#1310 by supporting Debian Java 9

Version 2.8.4

2018-05-01 GitHub Diff

  • Added a new FieldNamingPolicy, LOWER_CASE_WITH_DOTS that mapps JSON name someFieldName to some.field.name
  • Fixed issue google/gson#1305 by removing compile/runtime dependency on sun.misc.Unsafe

Version 2.8.3

2018-04-27 GitHub Diff

  • Added a new API, GsonBuilder.newBuilder() that clones the current builder
  • Preserving DateFormatter behavior on JDK 9

... (truncated)

Commits
  • 6a368d8 [maven-release-plugin] prepare release gson-parent-2.8.9
  • ba96d53 Fix missing bounds checks for JsonTreeReader.getPath() (#2001)
  • ca1df7f #1981: Optional OSGi bundle's dependency on sun.misc package (#1993)
  • c54caf3 Deprecate Gson.excluder() exposing internal Excluder class (#1986)
  • e6fae59 Prevent Java deserialization of internal classes (#1991)
  • bda2e3d Improve number strategy implementation (#1987)
  • cd748df Fix LongSerializationPolicy null handling being inconsistent with Gson (#1990)
  • fe30b85 Support arbitrary Number implementation for Object and Number deserialization...
  • 1cc1627 Fix incorrect feature request template label (#1982)
  • 7b9a283 Bump bnd-maven-plugin from 5.3.0 to 6.0.0 (#1985)
  • Additional commits viewable in compare view

Updates com.google.guava:guava from 31.1-jre to 32.0.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

32.0.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>32.0.0-jre</version>
  <!-- or, for Android: -->
  <version>32.0.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

Security fixes

While CVE-2020-8908 was officially closed when we deprecated Files.createTempDir in Guava 30.0, we've heard from users that even recent versions of Guava have been listed as vulnerable in other databases of security vulnerabilities. In response, we've reimplemented the method (and the very rarely used FileBackedOutputStream class, which had a similar issue) to eliminate the insecure behavior entirely. This change could technically affect users in a number of different ways (discussed under "Incompatible changes" below), but in practice, the only problem users are likely to encounter is with Windows. If you are using those APIs under Windows, you should skip 32.0.0 and go straight to 32.0.1 which fixes the problem. (Unfortunately, we didn't think of the Windows problem until after the release. And while we warn that common.io in particular may not work under Windows, we didn't intend to regress support.) Sorry for the trouble.

Incompatible changes

Although this release bumps Guava's major version number, it makes no binary-incompatible changes to the guava artifact.

One change could cause issues for Widows users, and a few other changes could cause issues for users in more usual situations:

  • The new implementations of Files.createTempDir and FileBackedOutputStream throw an exception under Windows. This is fixed in 32.0.1. Sorry for the trouble.
  • guava-gwt now requires GWT 2.10.0.
  • This release makes a binary-incompatible change to a @Beta API in the separate artifact guava-testlib. Specifically, we changed the return type of TestingExecutors.sameThreadScheduledExecutor to ListeningScheduledExecutorService. The old return type was a package-private class, which caused the Kotlin compiler to produce warnings. (dafaa3e435)

... (truncated)

Commits

Updates com.rabbitmq:amqp-client from 5.17.0 to 5.18.0

Release notes

Sourced from com.rabbitmq:amqp-client's releases.

v5.18.0

Changes between 5.17.0 and 5.18.0

This is a minor release with usability improvements and dependency upgrades. It is compatible with 5.17.x. All users of the 5.x.x series are encouraged to upgrade.

Inbound message size is now enforced, with default limit being 64 MiB.

Thanks to @​JHahnHRO and Sérgio Faria (@​sergio91pt) for their contribution.

Add ability to specify maximum message size

GitHub issue: #1062

Do not confirmSelect more than once per channel

GitHub PR: #1057

Make RpcClient (Auto)Closeable

GitHub issue: #1032

Bump dependencies

GitHub issue: #999

Dependency

Maven

<dependency>
  <groupId>com.rabbitmq</groupId>
  <artifactId>amqp-client</artifactId>
  <version>5.18.0</version>
</dependency>

Gradle

compile 'com.rabbitmq:amqp-client:5.18.0'

v5.17.1

Changes between 5.17.0 and 5.17.1

This is a minor release with a usability improvement. It is compatible with 5.17.0.

Inbound message size is now enforced, with the default limit being 64 MiB.

... (truncated)

Commits
  • dcc284e [maven-release-plugin] prepare release v5.18.0
  • 75d1d1e Set release version to 5.18.0
  • dc7952e Merge pull request #1064 from rabbitmq/dependabot/maven/5.x.x-stable/org.mock...
  • e2fa38f Bump mockito-core from 5.3.1 to 5.4.0
  • 04f1801 Tweak error message
  • 714aae6 Add max inbound message size to ConnectionFactory
  • 83cf551 Fix flaky test
  • 0dc9ea2 Do not confirmSelect more than once per channel
  • 129dc6a Merge pull request #1060 from rabbitmq/dependabot/maven/5.x.x-stable/io.micro...
  • 671efdc Bump micrometer-core from 1.11.0 to 1.11.1
  • Additional commits viewable in compare view

Updates com.thoughtworks.xstream:xstream from 1.4.20 to 1.4.21

Commits

Updates commons-io:commons-io from 2.8.0 to 2.14.0

Updates commons-net:commons-net from 3.7.2 to 3.9.0

Updates com.mysql:mysql-connector-j from 8.0.33 to 8.2.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 9.4.0

  • Fix for Bug#116120 (Bug#37079448), Inappropriate charset selected for connection when jdk.charsets not included.

  • Fix for Bug#98620 (Bug#31503893), Using DatabaseMetaData.getColumns() gives collation mix error.

  • Fix for Bug#118389 (Bug#38044940), OCI ephemeral keys not working after change in OCI CLI.

  • Fix for Bug#22473405, GETOBJECT(STRING , CLASS) METHOD RETURNS ERROR FOR POOLED CONNECTION.

  • WL#17009, Upgrade 3rd party libraries and tools.

  • Fix for Bug#118201 (Bug#37971552), A potential bug in Mysql Connector/J.

  • Fix for Bug#44791 (Bug#11753361), Setting/getting holdability on connection does not work properly.

  • Fix for Bug#21294134, DBMD.GETPROCEDURECOLUMNS() IS UNABLE TO DEAL WITH PROCEDURE COLUMNS WITH SPACES.

  • Fix for Bug#77658 (Bug#21946136), Incorrect java.sql.Statement.cancel() behavior.

  • Fix for Bug#118100 (Bug#37900711), You have an error in your SQL syntax exception thrown after mysql-connector-j 9.2.0 -> 9.3.0 upgrade.

  • Fix for Bug#118079 (Bug#37888527), An output message error.

  • Fix for Bug#117579 (Bug#37639722), Contribution: Return UUID from ResultSet#getObject(). Thanks to Iwao Abe for his contribution.

  • Fix for Bug#20279578, REGISTEROUTPARAMETER() FAILS WHEN PROCEDURE NAME CONTAINS SOME SPECIAL CHARACTER.

  • Fix for Bug#109339 (Bug#34898663), Failed to insert bignums due to overflow. Thanks to Yohei Ueki for his contribution.

  • Fix for Bug#77766 (Bug#21503942), CallableStatement.getObject have inconsistent behavior.

  • WL#16917, Remove IterateBlock class.

  • Fix for Bug#117873 (Bug#37785888), Time instances created from negative milliseconds are encoded without fractional seconds.

  • Fix for Bug#115845 (Bug#36954268), Contribution: Set correct OTel Span name for transaction commits. Thanks to Willem Fibbe for his contribution.

  • Fix for Bug#75615 (Bug#21181249), Incorrect implementation of Connection.setNetworkTimeout().

  • Fix for Bug#75441 (Bug#20344798), com.mysql.jdbc.CallableStatement.extractProcedureName fragile.

  • Fix for Bug#19948601, UNEXPECTED BEHAVIOUR NOTICED WITH FEW OF THE MYSQL C/JAVA CONNECTION PARAMETERS.

... (truncated)

Commits
  • 06a1f72 Fix for Bug#35811592, Missing implementation for Connection.releaseSavepoint().
  • 9df3820 Update for GPL license book.
  • ff822cf Fix for tests failing due to expecting unsupported TLS versions.
  • 429db00 Fix for test SecureSessionTest.testXdevapiTlsVersionsAndCiphersuites() failur...
  • d52033a Fix for tests failing due to using unsupported cipher suites in MySQL 5.7.
  • e18e626 Fix for tests failing due to using deprecated cipher suites.
  • 4f70ec3 Fix for Bug#91351 (Bug#28225464), MysqlConnectionPoolDataSource - autocommit ...
  • 71e4c6b Fix for property description 'ConnectionProperties.treatMysqlDatetimeAsTimest...
  • bae6356 Fix for property description 'ConnectionProperties.authenticationPlugins'.
  • 5701086 GPL license book update.
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.11 to 3.18.0

Updates org.apache.kafka:kafka-clients from 2.7.0 to 3.9.1

Updates org.apache.tomcat.embed:tomcat-embed-core from 10.0.22 to 10.1.42

Updates org.eclipse.jetty:jetty-servlets from 9.4.51.v20230217 to 9.4.54.v20240208

Updates org.owasp.esapi:esapi from 2.1.0.1 to 2.6.0.0

Release notes

Sourced from org.owasp.esapi:esapi's releases.

2.6.0.0

Full Release Notes

Release notes for ESAPI release 2.6.0.0 are located at:

What's Changed

Full Changelog: ESAPI/esapi-java-legacy@esapi-2.5.5.0...esapi-2.6.0.0

Configuration Jar

Note the associated file "esapi-2.6.0.0-configuration.jar" contains the default ESAPI configuration files under 'configuration/' (ESAPI.properties, validation.properties, etc.) and the file "esapi-2.6.0.0-configuration.jar.asc" is a GPG signature of that jar file made by Kevin W. Wall.

2.5.5.0

Full Release Notes

Release notes for ESAPI release 2.5.5.0 are located at:

What's Changed

New Contributors

Full Changelog: ESAPI/esapi-java-legacy@esapi-2.5.4.0...esapi-2.5.5.0

Configuration Jar

Note the associated file "esapi-2.5.5.0-configuration.jar" contains the default ESAPI configuration files under 'configuration/' (ESAPI.properties, validation.properties, etc.) and the file "esapi-2.5.5.0-configuration.jar.asc" is a GPG signature of that jar file made by Kevin W. Wall.

2.5.4.0

Full release notes

Full release notes for ESAPI release 2.5.4.0 are located at:

It contains important details, which you need to read as you MUST remove (or rename) 'esapi-java-logging.properties' if you are using ESAPI's default logging, which is JUL. Otherwise ESAPI will throw a ConfigurationException (which may appear as a java.lang.ExceptionInInitializerError or as a java.lang.NoClassDefFoundError, depending on circumstances). Please refer to the "Configuring the JavaLogFactory" wiki page for additional details.

YOU HAVE BEEN WARNED!!!

... (truncated)

Commits
  • dcde6c2 A few minor documentation fixes.
  • 5a10f77 Revert "Minor change to release steps document."
  • 8b9f8f1 Minor change to release steps document.
  • 4698c43 Bump release to new official release number.
  • f185e5b Preparation for ESAPI release 2.6.0.0 (#860)
  • 0b0f86c Update SECURITY.md
  • 4879a08 Modifying pom.xml for next planned release.
  • 3f2ff05 Fix release date.
  • 19b739a Merge pull request #856 from kwwall/release-prep-2.5.5.0
  • a160de0 Update section on commit / PR history.
  • Additional commits viewable in compare view

Updates org.springframework:spring-context from 5.3.26 to 6.1.20

Release notes

Sourced from org.springframework:spring-context's releases.

v6.1.20

⭐ New Features

  • Add option for case-insensitive match to PatternMatchUtils #34802

🐞 Bug Fixes

  • HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34854
  • Accidental ClassLoader defineClass enforcement after #34677 #34839

📔 Documentation

  • Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34887

🔨 Dependency Upgrades

  • Upgrade to Reactor 2023.0.18 #34899

v6.1.19

⭐ New Features

  • Suggest compilation with -parameters when AspectJAdviceParameterNameDiscoverer fails against ambiguity #34618

🐞 Bug Fixes

  • PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #34698
  • Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #34694
  • Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #34693
  • IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #34690
  • @Configuration classes can no longer be abstract without @Bean methods #34689
  • Generated-code for LinkedHashMap is missing static keyword #34661
  • AbstractReactiveTransactionManager throws IllegalStateException when rollback fails after commit attempt #34619

📔 Documentation

  • Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #34631
  • Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #34626
  • MvcUriComponentsBuilder javadocs inaccurately reflects usage of forwarded headers #34620

v6.1.18

⭐ New Features

  • Avoid unnecessary CGLIB processing on configuration classes #34487
  • Inconsistent default class loaders in hint classes #34473

🐞 Bug Fixes

  • DefaultManagedTaskExecutor throws java.lang.UnsupportedOperationException: isShutdown when rejecting tasks #34515
  • Endless loop with DataSourceUtils in spring-jdbc #34497
  • MockHttpServletResponse - handle multiple values for Content-Language header #34491

... (truncated)

Commits
  • 1f9c59b Release v6.1.20
  • edfcc6f Make use of PatternMatchUtils ignoreCase option
  • f93132b Add missing @​since tags in PatternMatchUtils
  • 6ab4c84 Upgrade to Reactor 2023.0.18
  • d5fca0d Upgrade to Jetty 12.0.21, Netty 4.1.121, Apache HttpClient 5.4.4, Checkstyle ...
  • cbb9419 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
  • 5b5e2b6 Fix HttpClient 5.3.x request config compatibility
  • a5b0399 Polishing
  • 71f2725 Try loadClass on LinkageError in case of same ClassLoader as well
  • daee9f1 Reinstate the @⁠Inject Technology Compatibility Kit (TCK)
  • Additional commits viewable in compare view

Updates org.springframework:spring-web from 5.3.26 to 6.1.20

Release notes

Sourced from org.springframework:spring-web's releases.

v6.1.20

⭐ New Features

  • Add option for case-insensitive match to PatternMatchUtils #34802

🐞 Bug Fixes

  • HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34854
  • Accidental ClassLoader defineClass enforcement after #34677 #34839

📔 Documentation

  • Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34887

🔨 Dependency Upgrades

  • Upgrade to Reactor 2023.0.18 #34899

v6.1.19

⭐ New Features

  • Suggest compilation with -parameters when AspectJAdviceParameterNameDiscoverer fails against ambiguity #34618

🐞 Bug Fixes

  • PropertyBatchUpdateException: causes of nested PropertyAccessExceptions not shown in output #34698
  • Change in Jar usecache behavior with Spring 6.1.x causing java.lang.IllegalStateException: zip file closed #34694
  • Startup performance regression due to CGLIB class load attempts in Spring 6.1.x #34693
  • IllegalAccessError for package-private member of AzureStorageConfiguration on WebSphere #34690
  • @Configuration classes can no longer be abstract without @Bean methods #34689
  • Generated-code for LinkedHashMap is missing static keyword #34661
  • AbstractReactiveTransactionManager throws IllegalStateException when rollback fails after commit attempt #34619

📔 Documentation

  • Add javadoc notes on potential exception suppression in ListableBeanFactory#getBeansOfType #34631
  • Remove remaining references to Forwarded headers in MvcUriComponentsBuilder #34626
  • MvcUriComponentsBuilder javadocs inaccurately reflects usage of forwarded headers #34620

v6.1.18

⭐ New Features

  • Avoid unnecessary CGLIB processing on configuration classes #34487
  • Inconsistent default class loaders in hint classes #34473

🐞 Bug Fixes

  • DefaultManagedTaskExecutor throws java.lang.UnsupportedOperationException: isShutdown when rejecting tasks #34515
  • Endless loop with DataSourceUtils in spring-jdbc #34497
  • MockHttpServletResponse - handle multiple values for Content-Language header #34491

... (truncated)

Commits
  • 1f9c59b Release v6.1.20
  • edfcc6f Make use of PatternMatchUtils ignoreCase option
  • f93132b Add missing @​since tags in PatternMatchUtils
  • 6ab4c84 Upgrade to Reactor 2023.0.18
  • d5fca0d Upgrade to Jetty 12.0.21, Netty 4.1.121, Apache HttpClient 5.4.4, Checkstyle ...
  • cbb9419 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
  • 5b5e2b6 Fix HttpClient 5.3.x request config compatibility
  • a5b0399 Polishing
  • 71f2725 Try loadClass on LinkageError in case of same ClassLoader as well
  • daee9f1 Reinstate the @⁠Inject Technology Compatibility Kit (TCK)
  • Additional commits viewable in compare view

Updates org.testng:testng from 7.1.0 to 7.5.1

Release notes

Sourced from org.testng:testng's releases.

TestNG v7.5.1

What's Changed

New Contributors

Full Changelog: testng-team/testng@7.5...7.5.1

Changelog

Sourced from org.testng:testng's changelog.

Current (7.12.0) Fixed: GITHUB-3227: assertEqualsNoOrder false positive when collection has same size and actual Collection is subset of expected collection (Krishnan Mahadevan) Fixed: GITHUB-3177: Method org.testng.xml.XmlSuite#toXml do not save new properties like "share-thread-pool-for-data-providers" (Krishnan Mahadevan) Fixed: GITHUB-3179: ClassCastException when use shouldUseGlobalThreadPool(true) property (Krishnan Mahadevan) Fixed: GITHUB-2765: Test timeouts using existing Executor now propagate the stack trace to the ThreadTimeoutException (Charlie Hayes)

7.11.0 Fixed: GITHUB-3180: TestNG testng-failed.xml 'invocation-numbers' values are not calculated correctly with retry and dataproviders (Krishnan Mahadevan) Fixed: GITHUB-3170: Specifying dataProvider and successPercentage causes test to always pass (Krishnan Mahadevan) Fixed: GITHUB-3028: Execution stalls when using "use-global-thread-pool" (Krishnan Mahadevan) Fixed: GITHUB-3122: Update JCommander to 1.83 (Antoine Dessaigne) Fixed: GITHUB-3135: assertEquals on arrays - Failure message is missing information about the array index when an array element is unexpectedly null or non-null (Albert Choi) Fixed: GITHUB-3140: assertEqualsDeep on Sets - Deep comparison was using the wrong expected value Fixed: GITHUB-3189: Incorrect number of ignored tests displayed in the XML results Fixed: GITHUB-3196: support to execlude somes tests in option of command line

7.10.2 Fixed: GITHUB-3117: ListenerComparator doesn't work (Krishnan Mahadevan)

7.10.1 Fixed: GITHUB-3110: Update from testng 7.9.0 to 7.10.0 break maven build with junit5 (Krishnan Mahadevan)

7.10.0 Fixed: GITHUB-3000: Method predecessors lookup and/or method sorting is broken in certain inheritance and naming setups (Krishnan Mahadevan) Fixed: GITHUB-3095: Super class annotated with ITestNGListenerFactory makes derived test class throw TestNGException on execution (Krishnan Mahadevan) Fixed: GITHUB-3081: Discrepancy with combination of (Shared Thread pool and Method Interceptor) (Krishnan Mahadevan) Fixed: GITHUB-2381: Controlling the inclusion of the listener at runtime (Krishnan Mahadevan) Fixed: GITHUB-3082: IInvokedMethodListener Iinvoked method does not return correct instance during @​BeforeMethod, @​AfterMethod and @​AfterClass (Krishnan Mahadevan) Fixed: GITHUB-3084: Document project's PGP artifact signing keys (Krishnan Mahadevan) Fixed: GITHUB-3079: Associate a unique id with every test class object instantiated by TestNG (Krishnan Mahadevan) Fixed: GITHUB-3040: replace the usages of synchronized with ReentrantLock (Krishnan Mahadevan) Fixed: GITHUB-3041: TestNG 7.x DataProvider works in opposite to TestNG 6.x when retrying tests. (Krishnan Mahadevan) Fixed: GITHUB-3066: How to dynamically adjust the number of TestNG threads after IExecutorFactory is deprecated? (Krishnan Mahadevan) New: GITHUB-2874: Allow users to define ordering for TestNG listeners (Krishnan Mahadevan) Fixed: GITHUB-3033: Moved ant support under own repository https://github.com/testng-team/testng-ant (Julien Herr) Fixed: GITHUB-3064: TestResult lost if failure creating RetryAnalyzer (Krishnan Mahadevan) Fixed: GITHUB-3048: ConcurrentModificationException when injecting values (Krishnan Mahadevan) Fixed: GITHUB-3050: Race condition when creating Guice Modules (Krishnan Mahadevan) Fixed: GITHUB-3059: Support the ability to inject custom listener factory (Krishnan Mahadevan) Fixed: GITHUB-3045: IDataProviderListener - beforeDataProviderExecution and afterDataProviderExecution are called twice in special setup (Krishnan Mahadevan) Fixed: GITHUB-3038: java.lang.IllegalStateException: Results per method should NOT have been empty (Krishnan Mahadevan) Fixed: GITHUB-3022: Remove deprecated JUnit related support in TestNG (Krishnan Mahadevan)

7.9.0 Fixed: GITHUB-2019: Total thread count in testng parallel tests with dataproviders (Krishnan Mahadevan) Fixed: GITHUB-3006: ITestResult injected at @​AfterMethod incorrect when a configuration method failed (Krishnan Mahadevan) Fixed: GITHUB-2980: Data Provider Threads configuration in the suite don't match the documentation (Krishnan Mahadevan) Fixed: GITHUB-3003: BeforeClass|AfterClass with inheritedGroups triggers cyclic dependencies (Krishnan Mahadevan) New: Added @​Inherited to the Listeners annotation, allowing it to be used in forming meta-annotations. (Pavlo Glushchenko) Fixed: GITHUB-2991: Suite attributes map should be thread safe (Krishnan Mahadevan)

... (truncated)

Commits

Updates com.puppycrawl.tools:checkstyle from 8.18 to 11.0.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-11.0.0

Checkstyle 11.0.0 - https://checkstyle.org/releasenotes.html#Release_11.0.0

Breaking backward compatibility:

#13209 - Migrate project to JDK 17 #17321 - Use jdk17 as minimial required

New:

#17366 - FinalParameters - missing several tokens to check

Bug fixes:

#17332 - False positive from JavadocType: Unused @param tag #8205 - fix all false-negatives about there is no single space between a type annotation and [] or .... for Google Style #17158 - InvalidJavadocPosition false-positive for record compact constructor with package-private accessibility #14291 - Escape sequences in TextBlock, IllegalTokenText module should violate them for Google style #17193 - Google-style: Improper enforcement of horizontal whitespace for double slash //

... (truncated)

Commits
  • a0745b1 [maven-release-plugin] prepare release checkstyle-11.0.0
  • 7ea982e doc: release notes for 11.0.0
  • bf67bad Issue #17269: Changind Docker Script to latest groovy Image
  • 1931995 Issue #14769: Implemented modifier package structure for IT Regression area
  • cb690d0 Issue #14769: Implemented metrics package structure for IT Regression area
  • 4869fe5 Issue #14769: Implemented javadoc package structure for IT Regression area
  • 77bf83e Issue #14769: Implemented indentation package structure for IT Regression area
  • 0b012ba Issue #14769: Implemented imports package structure for IT Regression area
  • 6b0f638 Revert "minor: trim whitespaces after regression report comment"
  • ed7df15 minor: trim whitespaces after regression report comment
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the maven group across 1 directory with 16 updates
6ee8869 
Bumps the maven group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.google.code.gson:gson](https://github.com/google/gson) | `1.7.2` | `2.8.9` |
| [com.google.guava:guava](https://github.com/google/guava) | `31.1-jre` | `32.0.0-jre` |
| [com.rabbitmq:amqp-client](https://github.com/rabbitmq/rabbitmq-java-client) | `5.17.0` | `5.18.0` |
| [com.thoughtworks.xstream:xstream](https://github.com/x-stream/xstream) | `1.4.20` | `1.4.21` |
| commons-io:commons-io | `2.8.0` | `2.14.0` |
| commons-net:commons-net | `3.7.2` | `3.9.0` |
| [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `8.0.33` | `8.2.0` |
| org.apache.commons:commons-lang3 | `3.11` | `3.18.0` |
| org.apache.kafka:kafka-clients | `2.7.0` | `3.9.1` |
| org.apache.tomcat.embed:tomcat-embed-core | `10.0.22` | `10.1.42` |
| org.eclipse.jetty:jetty-servlets | `9.4.51.v20230217` | `9.4.54.v20240208` |
| [org.owasp.esapi:esapi](https://github.com/ESAPI/esapi-java-legacy) | `2.1.0.1` | `2.6.0.0` |
| [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `5.3.26` | `6.1.20` |
| [org.testng:testng](https://github.com/cbeust/testng) | `7.1.0` | `7.5.1` |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `8.18` | `11.0.0` |



Updates `com.google.code.gson:gson` from 1.7.2 to 2.8.9
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-1.7.2...gson-parent-2.8.9)

Updates `com.google.guava:guava` from 31.1-jre to 32.0.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.rabbitmq:amqp-client` from 5.17.0 to 5.18.0
- [Release notes](https://github.com/rabbitmq/rabbitmq-java-client/releases)
- [Commits](rabbitmq/rabbitmq-java-client@v5.17.0...v5.18.0)

Updates `com.thoughtworks.xstream:xstream` from 1.4.20 to 1.4.21
- [Release notes](https://github.com/x-stream/xstream/releases)
- [Commits](https://github.com/x-stream/xstream/commits)

Updates `commons-io:commons-io` from 2.8.0 to 2.14.0

Updates `commons-net:commons-net` from 3.7.2 to 3.9.0

Updates `com.mysql:mysql-connector-j` from 8.0.33 to 8.2.0
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES)
- [Commits](mysql/mysql-connector-j@8.0.33...8.2.0)

Updates `org.apache.commons:commons-lang3` from 3.11 to 3.18.0

Updates `org.apache.kafka:kafka-clients` from 2.7.0 to 3.9.1

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 10.0.22 to 10.1.42

Updates `org.eclipse.jetty:jetty-servlets` from 9.4.51.v20230217 to 9.4.54.v20240208

Updates `org.owasp.esapi:esapi` from 2.1.0.1 to 2.6.0.0
- [Release notes](https://github.com/ESAPI/esapi-java-legacy/releases)
- [Changelog](https://github.com/ESAPI/esapi-java-legacy/blob/develop/documentation/esapi4java-core-2.0-readme-crypto-changes.html)
- [Commits](ESAPI/esapi-java-legacy@esapi-2.1.0.1...esapi-2.6.0.0)

Updates `org.springframework:spring-context` from 5.3.26 to 6.1.20
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.26...v6.1.20)

Updates `org.springframework:spring-web` from 5.3.26 to 6.1.20
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.3.26...v6.1.20)

Updates `org.testng:testng` from 7.1.0 to 7.5.1
- [Release notes](https://github.com/cbeust/testng/releases)
- [Changelog](https://github.com/testng-team/testng/blob/master/CHANGES.txt)
- [Commits](https://github.com/cbeust/testng/commits/7.5.1)

Updates `com.puppycrawl.tools:checkstyle` from 8.18 to 11.0.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-8.18...checkstyle-11.0.0)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.8.9
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 32.0.0-jre
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.rabbitmq:amqp-client
  dependency-version: 5.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.thoughtworks.xstream:xstream
  dependency-version: 1.4.21
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-io:commons-io
  dependency-version: 2.14.0
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: commons-net:commons-net
  dependency-version: 3.9.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.mysql:mysql-connector-j
  dependency-version: 8.2.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 3.9.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 10.1.42
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.eclipse.jetty:jetty-servlets
  dependency-version: 9.4.54.v20240208
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.owasp.esapi:esapi
  dependency-version: 2.6.0.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-context
  dependency-version: 6.1.20
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-web
  dependency-version: 6.1.20
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.testng:testng
  dependency-version: 7.5.1
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 11.0.0
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants