deps(deps): bump the maven-minor-patch group across 1 directory with 3 updates

[dependabot]

Bumps the maven-minor-patch group with 3 updates in the / directory: org.junit:junit-bom, io.github.demchaav:graph-compose and org.apache.maven.plugins:maven-jar-plugin.

Updates org.junit:junit-bom from 6.1.1 to 6.1.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

Commits

• b685426 Release 6.1.2
• ae244a6 Remove blanket outputDirectoryCreator from SuiteEngineTests (#5793)
• 43bd154 Finalize 6.1.2 release notes
• 0cd9510 Fix order of release note sections
• a1507cb Add initial 6.1.2 release notes to release notes index
• 9326641 Fix NoTestsDiscoveredException for suites containing only dynamic tests (#5839)
• 2ef1123 Create initial 6.1.2 release notes from template
• 83fa9ab Back to snapshots for further development
• See full diff in compare view

Updates io.github.demchaav:graph-compose from 2.0.0 to 2.1.0

Release notes

Sourced from io.github.demchaav:graph-compose's releases.

GraphCompose v2.1.0

v2.1.0 — 2026-07-26

Highlights

• The same document now also prints to PowerPoint. graph-compose-render-pptx gains a fixed-layout backend that consumes the same resolved layout graph as the PDF backend, so one page becomes one identically-sized slide and every element keeps its position by construction — as native, editable shapes rather than a picture of a page. Ships as @Beta (Experimental) in its first release.
• A failed render no longer destroys the document it was replacing.
• Headings stay with their content across a page break, in the engine and in the CV and proposal presets.
• CV entry, subtitle and project-card titles accept inline [text](https://github.com/DemchaAV/GraphCompose/blob/HEAD/url) links.

Public API

• Editable PowerPoint output. buildPptx(Path), writePptx(OutputStream) and toPptxBytes() render the current session through the PPTX backend when graph-compose-render-pptx is on the classpath; a missing backend fails with MissingBackendException naming the artifact. DocumentPageSize.SLIDE_16_9 (960 × 540 pt) and SLIDE_4_3 (720 × 540 pt) match the PowerPoint defaults. The PPTX surface — the document.backend.fixed.pptx packages and these convenience methods — carries @Beta, so its shape may still change in a minor release; the geometry relationship with the PDF backend is a design invariant and is not subject to change. See https://github.com/DemchaAV/GraphCompose/blob/HEAD/docs/api-stability.md.
• A failed render no longer truncates the destination. buildPdf(Path), buildPptx(Path) and multi-section buildPdf(Path) render into a scratch file in the destination's own directory and move it onto the destination only after the render returns. Previously the destination was opened — and therefore emptied — before the backend produced a byte, so an oversized node, a missing backend or a full disk left an empty file where a published document used to be. The move is atomic where the filesystem supports it, so a concurrent reader never observes a half-written document; on POSIX the destination keeps the permissions it already had, or gets rw-r--r-- when it is new. Replacing the destination entry replaces a symlink rather than writing through it.
• Keep a heading with its content — SectionBuilder.keepWithNext(). A section marked keep-with-next is never left stranded as the last block on a page apart from the content it introduces: when the section plus the first slice of the following block would overflow the remaining page space but fit on a fresh page, the section relocates. The first slice is a paragraph's first line, a table's repeated header rows plus first body row, or a list's first item, so the rule holds whether the following block is atomic or page-spanning. Distinct from keepTogether(), which relocates a whole block. Inert when nothing follows, best-effort when the heading plus the first slice cannot share a page, and off by default. LineBuilder.keepWithNext() is the line counterpart, so a full-width header rule joins its banner's run and the whole title block moves together.
• Keep-with-next also surfaces on the node model: DocumentNode.keepWithNext() is a new default method (existing implementations keep the false default), and SectionNode and LineNode each gain a trailing keepWithNext record component.

... (truncated)

Changelog

Sourced from io.github.demchaav:graph-compose's changelog.

v2.1.0 — 2026-07-26

Highlights

• The same document now also prints to PowerPoint. graph-compose-render-pptx gains a fixed-layout backend that consumes the same resolved layout graph as the PDF backend, so one page becomes one identically-sized slide and every element keeps its position by construction — as native, editable shapes rather than a picture of a page. Ships as @Beta (Experimental) in its first release.
• A failed render no longer destroys the document it was replacing.
• Headings stay with their content across a page break, in the engine and in the CV and proposal presets.
• CV entry, subtitle and project-card titles accept inline [text](https://github.com/DemchaAV/GraphCompose/blob/main/url) links.

Public API

• Editable PowerPoint output. buildPptx(Path), writePptx(OutputStream) and toPptxBytes() render the current session through the PPTX backend when graph-compose-render-pptx is on the classpath; a missing backend fails with MissingBackendException naming the artifact. DocumentPageSize.SLIDE_16_9 (960 × 540 pt) and SLIDE_4_3 (720 × 540 pt) match the PowerPoint defaults. The PPTX surface — the document.backend.fixed.pptx packages and these convenience methods — carries @Beta, so its shape may still change in a minor release; the geometry relationship with the PDF backend is a design invariant and is not subject to change. See https://github.com/DemchaAV/GraphCompose/blob/main/docs/api-stability.md.
• A failed render no longer truncates the destination. buildPdf(Path), buildPptx(Path) and multi-section buildPdf(Path) render into a scratch file in the destination's own directory and move it onto the destination only after the render returns. Previously the destination was opened — and therefore emptied — before the backend produced a byte, so an oversized node, a missing backend or a full disk left an empty file where a published document used to be. The move is atomic where the filesystem supports it, so a concurrent reader never observes a half-written document; on POSIX the destination keeps the permissions it already had, or gets rw-r--r-- when it is new. Replacing the destination entry replaces a symlink rather than writing through it.
• Keep a heading with its content — SectionBuilder.keepWithNext(). A section marked keep-with-next is never left stranded as the last block on a page apart from the content it introduces: when the section plus the first slice of the following block would overflow the remaining page space but fit on a fresh page, the section relocates. The first slice is a paragraph's first line, a table's repeated header rows plus first body row, or a list's first item, so the rule holds whether the following block is atomic or page-spanning. Distinct from keepTogether(), which relocates a whole block. Inert when nothing follows, best-effort when the heading plus the first slice cannot share a page, and off by default. LineBuilder.keepWithNext() is the line counterpart, so a full-width header rule joins its banner's run and the whole title block moves together.
• Keep-with-next also surfaces on the node model: DocumentNode.keepWithNext() is a new default method (existing implementations keep the false default), and SectionNode and LineNode each gain a trailing keepWithNext record component. Constructor calls are unaffected — both records keep an overload at the previous

... (truncated)

Commits

• 58ad29c docs(readme): show the PPTX backend, fix the architecture diagram, drop the d...
• c1b069c Restore main into develop's lineage
• 7bd63c4 Release v2.1.0
• 953f4fc fix(release-script): install render-pptx before regenerating the showcase (#455)
• 5b92778 chore(release): name the 2.1 line twinned (#453)
• 60c1f62 docs(pptx): surface font substitution and say how to avoid it (#452)
• 83ca902 fix(pptx): take the face from the decoration for standard-14 names (#450)
• 736e599 docs(matrix): separate what DOCX cannot hold from what it does not do (#448)
• 2099476 docs(docx): record what the semantic backend drops (#446)
• 3a67ad6 docs(pptx): say what a partial capability actually costs (#445)
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

• Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
• Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

• Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0 (#538) @dependabot[bot]
• Bump mavenVersion from 3.9.15 to 3.9.16 (#536) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534) @dependabot[bot]
• Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529) @dependabot[bot]
• Bump mavenVersion from 3.9.14 to 3.9.15 (#528) @dependabot[bot]
• Bump mavenVersion from 3.9.12 to 3.9.14 (#526) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#523) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#519) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#516) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#517) @dependabot[bot]
• Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#514) @dependabot[bot]
• Bump org.apache.maven:maven-archiver from 3.6.5 to 3.6.6 (#511) @dependabot[bot]
• Bump mavenVersion from 3.9.11 to 3.9.12 (#509) @dependabot[bot]

Commits

• b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
• 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
• 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
• d5a438b Fix javadoc
• 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
• b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
• 9f2a001 Use plugin version properties (3.x) (#535)
• 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
• e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
• 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, maven. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.