Skip to content

chore(deps): bump the other-dependencies group with 8 updates - #1277

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/other-dependencies-11fcc46f4d
Open

chore(deps): bump the other-dependencies group with 8 updates#1277
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/other-dependencies-11fcc46f4d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the other-dependencies group with 8 updates:

Package From To
org.codehaus.plexus:plexus-utils 4.0.3 4.1.0
org.codehaus.plexus:plexus-xml 4.1.1 4.2.0
io.swagger.parser.v3:swagger-parser 2.1.46 2.1.47
org.codehaus.plexus:plexus-archiver 4.12.0 4.13.0
io.github.openfeign:feign-core 13.13 13.14
io.github.openfeign:feign-jackson 13.13 13.14
io.github.openfeign:feign-slf4j 13.13 13.14
io.github.openfeign:feign-okhttp 13.13 13.14

Updates org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0

Release notes

Sourced from org.codehaus.plexus:plexus-utils's releases.

4.1.0

DirectoryScanner no longer excludes .gitignore and .cvsignore by default. Code that relied on the old defaults has to add the two patterns explicitly. That change is what makes this a minor release rather than 4.0.4.

💥 Breaking changes

  • Do not exclude ".gitignore" and ".cvsignore" by default (#326) @​kwin

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 572ce90 [maven-release-plugin] prepare release plexus-utils-4.1.0
  • 077e801 Bump the plexus dependencies released today
  • 840a1b4 Update parent to plexus 27
  • 9c560fa Drop the Publish Site workflow
  • 5f96b03 Bump org.codehaus.plexus:plexus from 25 to 26
  • 4846c05 Add the Publish Site workflow
  • 4df3a86 Use the shared release-drafter config instead of a local copy
  • 9eb5fc6 Apply spotless formatting to README
  • f2856f9 Rewrite README with usage, status and version guidance
  • 62fe2fa Bump release-drafter/release-drafter from 7.6.0 to 7.7.0
  • Additional commits viewable in compare view

Updates org.codehaus.plexus:plexus-xml from 4.1.1 to 4.2.0

Release notes

Sourced from org.codehaus.plexus:plexus-xml's releases.

4.2.0

The 4.x line no longer builds its DOM through Maven's deprecated XmlNodeBuilder: Xpp3DomBuilder uses a pull builder of its own, so a future Maven can delete that class without breaking this one. The artifact also carries Automatic-Module-Name: org.codehaus.plexus.util.xml, which anyone on the module path sees.

The Maven dependency is split: maven-api-xml at compile, maven-xml at runtime, since XmlService resolves its implementation through ServiceLoader. Consumers keep the API transitively and lose org.apache.maven.internal.* along with woodstox-core and stax2-api.

Requires Java 17 and Maven 4. On Maven 3, use the 3.x line.

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 215f435 [maven-release-plugin] prepare release plexus-xml-4.2.0
  • ce5d062 Update parent to plexus 27
  • 38c200b Depend on maven-api-xml at compile and maven-xml at runtime
  • ae27358 Set the next development version to 4.2.0-SNAPSHOT
  • d1c51ce Establish an automatic module name
  • d0f198b Build the DOM with a local pull builder, not Maven's XmlNodeBuilder
  • 470396a Bump org.codehaus.plexus:plexus from 25 to 26
  • 51d60d5 Rewrite README with usage, status and version guidance
  • e91d180 Bump release-drafter/release-drafter from 7.6.0 to 7.7.0
  • b628bf3 Build against maven-xml 4.0.0-rc-6
  • Additional commits viewable in compare view

Updates io.swagger.parser.v3:swagger-parser from 2.1.46 to 2.1.47

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.47 released!

  • build(deps): bump org.testng:testng from 7.11.0 to 7.12.0 (#2371)
  • build(deps): bump org.slf4j:slf4j-simple from 2.0.9 to 2.0.18 (#2358)
  • build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.6.3 (#2351)
  • Resolve same-named schemas from different files as distinct components (fixes #2333) (#2349)
  • fix: resolve relative refs correctly from spring boot jars (#2080, #2298) (#2320)
Commits
  • 6e50098 prepare release 2.1.47 (#2380)
  • eef1cd2 Resolve same-named schemas from different files as distinct components (fixes...
  • 35ada6a build(deps-dev): bump org.apache.maven.plugins:maven-enforcer-plugin (#2351)
  • 3ee75b3 build(deps): bump org.testng:testng from 7.11.0 to 7.12.0 (#2371)
  • 208ae7a build(deps): bump org.slf4j:slf4j-simple from 2.0.9 to 2.0.18 (#2358)
  • 0827c4a Normalize relative ref paths to avoid duplicating schemas (#2105)
  • 4b6e6b4 fix: support paths from non-default file systems (#2320)
  • 10e5b45 bump snapshot 2.1.47-SNAPSHOT (#2370)
  • See full diff in compare view

Updates org.codehaus.plexus:plexus-archiver from 4.12.0 to 4.13.0

Release notes

Sourced from org.codehaus.plexus:plexus-archiver's releases.

4.13.0

The jar declares Automatic-Module-Name: org.codehaus.plexus.archiver, which is what makes this 4.13.0 rather than a patch. It also picks up plexus-io 3.7.0, whose FileSelector now follows symbolic links to files when isFollowingSymLinks() is set.

slf4j stays on 1.7.36 on this line: the 2.0.18 bump was taken and reverted, since the 4.x line targets consumers that have not moved.

🚀 New features and improvements

📦 Dependency updates

🔧 Build

Commits
  • 8ffe7db [maven-release-plugin] prepare release plexus-archiver-4.13.0
  • 90a7961 Bump plexus-io to 3.7.0
  • d49f8a1 Bump com.github.luben:zstd-jni from 1.5.7-13 to 1.5.7-14
  • 7fbba4c Bump org.eclipse.sisu:org.eclipse.sisu.inject from 1.0.0 to 1.1.0
  • e8bd15f Revert "Bump slf4jVersion from 1.7.36 to 2.0.18"
  • 7e869d4 Bump plexus-utils to 3.6.2
  • 48ab8d8 Bump slf4jVersion from 1.7.36 to 2.0.18
  • 3907c70 Bump com.github.luben:zstd-jni from 1.5.7-9 to 1.5.7-13
  • 2852ce3 Update parent to plexus 27
  • 0b73cb6 Bump org.codehaus.plexus:plexus from 25 to 26
  • Additional commits viewable in compare view

Updates io.github.openfeign:feign-core from 13.13 to 13.14

Release notes

Sourced from io.github.openfeign:feign-core's releases.

OpenFeign 13.14

What's Changed

... (truncated)

Changelog

Sourced from io.github.openfeign:feign-core's changelog.

Version 13.14

  • Add @Experimental MultiEncoder, PredicatedEncoder and EncoderPredicate, letting a single client route each request to the right encoder. Encoders declare what they can handle by implementing PredicatedEncoder; anything else is paired with a predicate via PredicatedEncoder.of(predicate, encoder) or MultiEncoder.builder(). Encoders are consulted in the order given and a request nothing accepts fails with an EncodeException naming what was tried, so a default is an encoder guarded by EncoderPredicate.any() listed last. FormEncoder and SpringFormEncoder gain createPredicatedFormEncoder(), a delegate-free flavour that can take part. The first-party JSON encoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML encoders (JAXB, JAXB Jakarta, SOAP, SOAP Jakarta) now declare themselves, and the metrics modules' MeteredEncoder forwards canEncode to the encoder it wraps. The Encoder interface is unchanged, so existing encoders keep working (#3485).
  • Add @Experimental MultiDecoder, PredicatedDecoder and DecoderPredicate, the decode-side counterpart, letting a single client route each response to the right decoder. Decoders declare what they can handle by implementing PredicatedDecoder; anything else is paired with a predicate via PredicatedDecoder.of(predicate, decoder) or MultiDecoder.builder(). Decoders are consulted in the order given and a response nothing accepts fails with a DecodeException naming what was tried, so a default is a decoder guarded by DecoderPredicate.any() listed last. The first-party JSON decoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML decoders (JAXB, JAXB Jakarta, SAX, SOAP, SOAP Jakarta) now declare themselves, and OptionalDecoder and the metrics modules' MeteredDecoder forward canDecode to the decoder they wrap. The Decoder interface is unchanged, so existing decoders keep working.
  • JAXBContextFactory.withProperty is now applied when creating Unmarshallers, not only Marshallers. Marshaller-only properties are skipped on unmarshal (#3056).
  • Add support for the HTTP QUERY method (RFC 10008) — safe, idempotent, and cacheable with a request body. HttpCacheInterceptor includes QUERY in its default cacheable set and incorporates a body hash into the cache key to reduce cross-body collisions.
  • Flatten feign-bom on install/deploy so importing the BOM does not pull feign-parent dependency management (for example Jackson) into consumer projects such as Spring Boot.

Version 13.12

  • UrlencodedFormContentProcessor now honors CollectionFormat from @RequestLine/RequestTemplate for array and collection values in application/x-www-form-urlencoded bodies.

Version 11.9

  • OkHttpClient now implements AsyncClient

Version 10.9

  • Configurable to disable streaming mode for Default client by verils (#1182)
  • Overriding query parameter name by boggard (#1184)
  • Internal feign metrics by velo:
  • Dropwizard metrics 5 (#1181)
  • Micrometer (#1188)

Version 10.8

... (truncated)

Commits
  • 372ebee prepare release 13.14
  • f9ab405 Merge pull request #3517 from AzazelSensei/fix/skip-synthetic-bridge-methods
  • a2676b8 Merge pull request #3519 from arimu1/fix/3056-jaxb-unmarshaller-properties
  • fcb4a97 Merge pull request #3451 from alhudz/content-length-duplicate
  • 02b8549 Merge pull request #3526 from OpenFeign/fix/3525-multi-root-fields
  • 51d1692 Decode every root field of a GraphQL operation
  • 182624e Merge pull request #3524 from OpenFeign/dependabot/maven/com.google.guava-gua...
  • e114354 build(deps): Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre
  • a06b1a0 Merge pull request #3523 from OpenFeign/dependabot/maven/tools.jackson-jackso...
  • e90bdd5 Merge pull request #3522 from OpenFeign/dependabot/maven/org.json-json-20260814
  • Additional commits viewable in compare view

Updates io.github.openfeign:feign-jackson from 13.13 to 13.14

Release notes

Sourced from io.github.openfeign:feign-jackson's releases.

OpenFeign 13.14

What's Changed

... (truncated)

Changelog

Sourced from io.github.openfeign:feign-jackson's changelog.

Version 13.14

  • Add @Experimental MultiEncoder, PredicatedEncoder and EncoderPredicate, letting a single client route each request to the right encoder. Encoders declare what they can handle by implementing PredicatedEncoder; anything else is paired with a predicate via PredicatedEncoder.of(predicate, encoder) or MultiEncoder.builder(). Encoders are consulted in the order given and a request nothing accepts fails with an EncodeException naming what was tried, so a default is an encoder guarded by EncoderPredicate.any() listed last. FormEncoder and SpringFormEncoder gain createPredicatedFormEncoder(), a delegate-free flavour that can take part. The first-party JSON encoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML encoders (JAXB, JAXB Jakarta, SOAP, SOAP Jakarta) now declare themselves, and the metrics modules' MeteredEncoder forwards canEncode to the encoder it wraps. The Encoder interface is unchanged, so existing encoders keep working (#3485).
  • Add @Experimental MultiDecoder, PredicatedDecoder and DecoderPredicate, the decode-side counterpart, letting a single client route each response to the right decoder. Decoders declare what they can handle by implementing PredicatedDecoder; anything else is paired with a predicate via PredicatedDecoder.of(predicate, decoder) or MultiDecoder.builder(). Decoders are consulted in the order given and a response nothing accepts fails with a DecodeException naming what was tried, so a default is a decoder guarded by DecoderPredicate.any() listed last. The first-party JSON decoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML decoders (JAXB, JAXB Jakarta, SAX, SOAP, SOAP Jakarta) now declare themselves, and OptionalDecoder and the metrics modules' MeteredDecoder forward canDecode to the decoder they wrap. The Decoder interface is unchanged, so existing decoders keep working.
  • JAXBContextFactory.withProperty is now applied when creating Unmarshallers, not only Marshallers. Marshaller-only properties are skipped on unmarshal (#3056).
  • Add support for the HTTP QUERY method (RFC 10008) — safe, idempotent, and cacheable with a request body. HttpCacheInterceptor includes QUERY in its default cacheable set and incorporates a body hash into the cache key to reduce cross-body collisions.
  • Flatten feign-bom on install/deploy so importing the BOM does not pull feign-parent dependency management (for example Jackson) into consumer projects such as Spring Boot.

Version 13.12

  • UrlencodedFormContentProcessor now honors CollectionFormat from @RequestLine/RequestTemplate for array and collection values in application/x-www-form-urlencoded bodies.

Version 11.9

  • OkHttpClient now implements AsyncClient

Version 10.9

  • Configurable to disable streaming mode for Default client by verils (#1182)
  • Overriding query parameter name by boggard (#1184)
  • Internal feign metrics by velo:
  • Dropwizard metrics 5 (#1181)
  • Micrometer (#1188)

Version 10.8

... (truncated)

Commits
  • 372ebee prepare release 13.14
  • f9ab405 Merge pull request #3517 from AzazelSensei/fix/skip-synthetic-bridge-methods
  • a2676b8 Merge pull request #3519 from arimu1/fix/3056-jaxb-unmarshaller-properties
  • fcb4a97 Merge pull request #3451 from alhudz/content-length-duplicate
  • 02b8549 Merge pull request #3526 from OpenFeign/fix/3525-multi-root-fields
  • 51d1692 Decode every root field of a GraphQL operation
  • 182624e Merge pull request #3524 from OpenFeign/dependabot/maven/com.google.guava-gua...
  • e114354 build(deps): Bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre
  • a06b1a0 Merge pull request #3523 from OpenFeign/dependabot/maven/tools.jackson-jackso...
  • e90bdd5 Merge pull request #3522 from OpenFeign/dependabot/maven/org.json-json-20260814
  • Additional commits viewable in compare view

Updates io.github.openfeign:feign-slf4j from 13.13 to 13.14

Release notes

Sourced from io.github.openfeign:feign-slf4j's releases.

OpenFeign 13.14

What's Changed

... (truncated)

Changelog

Sourced from io.github.openfeign:feign-slf4j's changelog.

Version 13.14

  • Add @Experimental MultiEncoder, PredicatedEncoder and EncoderPredicate, letting a single client route each request to the right encoder. Encoders declare what they can handle by implementing PredicatedEncoder; anything else is paired with a predicate via PredicatedEncoder.of(predicate, encoder) or MultiEncoder.builder(). Encoders are consulted in the order given and a request nothing accepts fails with an EncodeException naming what was tried, so a default is an encoder guarded by EncoderPredicate.any() listed last. FormEncoder and SpringFormEncoder gain createPredicatedFormEncoder(), a delegate-free flavour that can take part. The first-party JSON encoders (Gson, Jackson, Jackson 3, Jackson Jr, Jackson JAXB, Moshi, Fastjson2, JSON-java) and XML encoders (JAXB, JAXB Jakarta, SOAP, SOAP Jakarta) now declare themselves, and the metrics modules' MeteredEncoder forwards canEncode to the encoder it wraps. The EncoderDescription has been truncated

@dependabot
chore(deps): bump the other-dependencies group with 8 updates
87a10f9 
Bumps the other-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [org.codehaus.plexus:plexus-utils](https://github.com/codehaus-plexus/plexus-utils) | `4.0.3` | `4.1.0` |
| [org.codehaus.plexus:plexus-xml](https://github.com/codehaus-plexus/plexus-xml) | `4.1.1` | `4.2.0` |
| [io.swagger.parser.v3:swagger-parser](https://github.com/swagger-api/swagger-parser) | `2.1.46` | `2.1.47` |
| [org.codehaus.plexus:plexus-archiver](https://github.com/codehaus-plexus/plexus-archiver) | `4.12.0` | `4.13.0` |
| [io.github.openfeign:feign-core](https://github.com/openfeign/feign) | `13.13` | `13.14` |
| [io.github.openfeign:feign-jackson](https://github.com/openfeign/feign) | `13.13` | `13.14` |
| [io.github.openfeign:feign-slf4j](https://github.com/openfeign/feign) | `13.13` | `13.14` |
| [io.github.openfeign:feign-okhttp](https://github.com/openfeign/feign) | `13.13` | `13.14` |


Updates `org.codehaus.plexus:plexus-utils` from 4.0.3 to 4.1.0
- [Release notes](https://github.com/codehaus-plexus/plexus-utils/releases)
- [Commits](codehaus-plexus/plexus-utils@plexus-utils-4.0.3...plexus-utils-4.1.0)

Updates `org.codehaus.plexus:plexus-xml` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/codehaus-plexus/plexus-xml/releases)
- [Commits](codehaus-plexus/plexus-xml@plexus-xml-4.1.1...plexus-xml-4.2.0)

Updates `io.swagger.parser.v3:swagger-parser` from 2.1.46 to 2.1.47
- [Release notes](https://github.com/swagger-api/swagger-parser/releases)
- [Commits](swagger-api/swagger-parser@v2.1.46...v2.1.47)

Updates `org.codehaus.plexus:plexus-archiver` from 4.12.0 to 4.13.0
- [Release notes](https://github.com/codehaus-plexus/plexus-archiver/releases)
- [Changelog](https://github.com/codehaus-plexus/plexus-archiver/blob/master/ReleaseNotes.md)
- [Commits](codehaus-plexus/plexus-archiver@plexus-archiver-4.12.0...plexus-archiver-4.13.0)

Updates `io.github.openfeign:feign-core` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

Updates `io.github.openfeign:feign-jackson` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

Updates `io.github.openfeign:feign-slf4j` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

Updates `io.github.openfeign:feign-okhttp` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

Updates `io.github.openfeign:feign-jackson` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

Updates `io.github.openfeign:feign-slf4j` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

Updates `io.github.openfeign:feign-okhttp` from 13.13 to 13.14
- [Release notes](https://github.com/openfeign/feign/releases)
- [Changelog](https://github.com/OpenFeign/feign/blob/master/CHANGELOG.md)
- [Commits](OpenFeign/feign@13.13...13.14)

---
updated-dependencies:
- dependency-name: org.codehaus.plexus:plexus-utils
  dependency-version: 4.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.codehaus.plexus:plexus-xml
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.swagger.parser.v3:swagger-parser
  dependency-version: 2.1.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.codehaus.plexus:plexus-archiver
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-core
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-jackson
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-slf4j
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-okhttp
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-jackson
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-slf4j
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.github.openfeign:feign-okhttp
  dependency-version: '13.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 24, 2026
@sonarqubecloud

sonarqubecloud Bot commented Aug 24, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants