Skip to content

Bump the maven group across 13 directories with 12 updates#209

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/maven-36142f57fc
Open

Bump the maven group across 13 directories with 12 updates#209
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/maven-36142f57fc

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps the maven group with 12 updates in the / directory:

Package From To
org.apache.logging.log4j:log4j-core 2.24.3 2.25.4
org.yaml:snakeyaml 1.33 2.0
org.apache.commons:commons-lang3 3.14.0 3.18.0
org.apache.maven:maven-compat 3.6.3 3.9.14
org.apache.parquet:parquet-avro 1.13.1 1.15.2
org.apache.derby:derby 10.14.2.0 10.17.1.0
org.springframework:spring-expression 5.2.22.RELEASE 5.3.39
org.apache.commons:commons-configuration2 2.8.0 2.10.1
commons-beanutils:commons-beanutils 1.9.4 1.11.0
org.apache.activemq:activemq-client 5.17.6 5.19.4
org.assertj:assertj-core 3.20.2 3.27.7
ch.qos.logback:logback-core 1.4.14 1.5.25

Bumps the maven group with 1 update in the /it/google-cloud-platform directory: org.apache.parquet:parquet-avro.
Bumps the maven group with 1 update in the /plugins/core-plugin directory: org.apache.commons:commons-lang3.
Bumps the maven group with 1 update in the /plugins/templates-maven-plugin directory: org.apache.maven:maven-compat.
Bumps the maven group with 2 updates in the /structured-logging directory: org.apache.logging.log4j:log4j-core and ch.qos.logback:logback-core.
Bumps the maven group with 4 updates in the /v1 directory: org.apache.logging.log4j:log4j-core, org.apache.commons:commons-lang3, org.apache.derby:derby and org.springframework:spring-expression.
Bumps the maven group with 2 updates in the /v2/cdc-parent directory: org.apache.commons:commons-configuration2 and commons-beanutils:commons-beanutils.
Bumps the maven group with 2 updates in the /v2/cdc-parent/cdc-embedded-connector directory: org.apache.commons:commons-configuration2 and commons-beanutils:commons-beanutils.
Bumps the maven group with 1 update in the /v2/googlecloud-to-neo4j directory: org.yaml:snakeyaml.
Bumps the maven group with 1 update in the /v2/jms-to-pubsub directory: org.apache.activemq:activemq-client.
Bumps the maven group with 1 update in the /v2/pubsub-to-jms directory: org.apache.activemq:activemq-client.
Bumps the maven group with 1 update in the /v2/sourcedb-to-spanner directory: org.apache.derby:derby.
Bumps the maven group with 1 update in the /v2/spanner-to-sourcedb directory: org.assertj:assertj-core.

Updates org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.4

Updates org.yaml:snakeyaml from 1.33 to 2.0

Commits
  • c98ffba issue 561: add negative test case
  • e2ca740 Use Maven wrapper on github
  • 49d91a1 Fix target for github
  • 19e331d Disable toolchain for github
  • 42c7812 Cobertura plugin does not work
  • 03c82b5 Rename GlobalTagRejectionTest to be run by Maven
  • 6e8cd89 Remove cobertura
  • d9b0f48 Improve Javadoc
  • 519791a Run install and site goals under docker
  • 82f33d2 Merge branch 'master' into add-module-info
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-lang3 from 3.14.0 to 3.18.0

Updates org.apache.maven:maven-compat from 3.6.3 to 3.9.14

Release notes

Sourced from org.apache.maven:maven-compat's releases.

3.9.14

🐛 Bug Fixes

📦 Dependency updates

3.9.13

🐛 Bug Fixes

  • Bug: SecDispatcher is managed by legacy Plexus DI (#11711) @​cstamas
  • [3.9.x] MavenPluginJavaPrerequisiteChecker: Handle 8/1.8 Java version in ranges as well (#11577) @​cstamas

👻 Maintenance

📦 Dependency updates

3.9.12

🚀 New features and improvements

... (truncated)

Commits
  • 996c630 [maven-release-plugin] prepare release maven-3.9.14
  • 3d3ecce plexus-testing dependencies should be use in test scope
  • 1f24dae Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#11747)
  • 8d1f2c2 Bump actions/download-artifact from 7.0.0 to 8.0.0 (#11748)
  • d48250a [maven-release-plugin] prepare for next development iteration
  • 39d686b [maven-release-plugin] prepare release maven-3.9.13
  • 1779f34 Maven Resolver 1.9.27 (#11732)
  • 18a5264 Bump resolverVersion from 1.9.25 to 1.9.26 (#11725)
  • c081a92 Update Maven plugin versions in default-bindings.xml
  • dea5f14 Bug: SecDispatcher is managed by legacy Plexus DI (#11711)
  • Additional commits viewable in compare view

Updates org.apache.maven:maven-compat from 3.6.3 to 3.9.14

Release notes

Sourced from org.apache.maven:maven-compat's releases.

3.9.14

🐛 Bug Fixes

📦 Dependency updates

3.9.13

🐛 Bug Fixes

  • Bug: SecDispatcher is managed by legacy Plexus DI (#11711) @​cstamas
  • [3.9.x] MavenPluginJavaPrerequisiteChecker: Handle 8/1.8 Java version in ranges as well (#11577) @​cstamas

👻 Maintenance

📦 Dependency updates

3.9.12

🚀 New features and improvements

... (truncated)

Commits
  • 996c630 [maven-release-plugin] prepare release maven-3.9.14
  • 3d3ecce plexus-testing dependencies should be use in test scope
  • 1f24dae Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#11747)
  • 8d1f2c2 Bump actions/download-artifact from 7.0.0 to 8.0.0 (#11748)
  • d48250a [maven-release-plugin] prepare for next development iteration
  • 39d686b [maven-release-plugin] prepare release maven-3.9.13
  • 1779f34 Maven Resolver 1.9.27 (#11732)
  • 18a5264 Bump resolverVersion from 1.9.25 to 1.9.26 (#11725)
  • c081a92 Update Maven plugin versions in default-bindings.xml
  • dea5f14 Bug: SecDispatcher is managed by legacy Plexus DI (#11711)
  • Additional commits viewable in compare view

Updates org.apache.parquet:parquet-avro from 1.13.1 to 1.15.2

Release notes

Sourced from org.apache.parquet:parquet-avro's releases.

Apache Parquet Java 1.15.2

What's Changed

Full Changelog: apache/parquet-java@apache-parquet-1.15.1...apache-parquet-1.15.2-rc0

Apache Parquet Java 1.15.1

What's Changed

Full Changelog: apache/parquet-java@apache-parquet-1.15.0...apache-parquet-1.15.1

Apache Parquet 1.15.0

What's Changed

... (truncated)

Changelog

Sourced from org.apache.parquet:parquet-avro's changelog.

Parquet

From 1.14.2 onwards, the Parquet project has migrated from Jira to GitHub, and the changelogs are now published under Releases.

Version 1.14.1

Release Notes - Parquet - Version 1.14.1

Bug

  • PARQUET-2468 - ParquetMetadata.toPrettyJSON throws exception on file read when LOG.isDebugEnabled()
  • PARQUET-2498 - Hadoop vector IO API doesn't handle empty list of ranges

Version 1.14.0

Release Notes - Parquet - Version 1.14.0

Bug

  • PARQUET-2260 - Bloom filter bytes size shouldn't be larger than maxBytes size in the configuration
  • PARQUET-2266 - Fix support for files without ColumnIndexes
  • PARQUET-2276 - ParquetReader reads do not work with Hadoop version 2.8.5
  • PARQUET-2300 - Update jackson-core 2.13.4 to a version without CVE PRISMA-2023-0067
  • PARQUET-2325 - Fix parquet-cli's dictionary subcommand to work with FIXED_LEN_BYTE_ARRAY
  • PARQUET-2329 - Fix wrong help messages of parquet-cli subcommands
  • PARQUET-2330 - Fix convert-csv to show the correct position of the invalid record
  • PARQUET-2332 - Fix unexpectedly disabled tests to be executed
  • PARQUET-2336 - Add caching key to CodecFactory
  • PARQUET-2342 - Parquet writer produced a corrupted file due to page value count overflow
  • PARQUET-2343 - Fixes NPE when rewriting file with multiple rowgroups
  • PARQUET-2348 - Recompression/Re-encrypt should rewrite bloomfilter

... (truncated)

Commits
  • 859eac1 [maven-release-plugin] prepare release apache-parquet-1.15.2-rc0
  • 2fef79b GH-3198: Allow specifying trusted classes by class name (#3199)
  • aedfbbc Fix snapshot version of parquet-plugins
  • fe532b5 Prepare for next development iteration
  • e7ecd8a [maven-release-plugin] prepare for next development iteration
  • c7257b8 [maven-release-plugin] prepare release apache-parquet-1.15.1-rc0
  • 8e70eea GH-3168: Restrict trusted packages in the parquet-avro module (#3169)
  • 9d6e19f GH-3172: Do not drop blocks with some null values if DictionaryFilter is ap...
  • a19e985 GH-3133: Fix SizeStatistics to handle omitted histogram (#3135)
  • de3c2d0 Prepare for next development iteration
  • Additional commits viewable in compare view

Updates org.apache.derby:derby from 10.14.2.0 to 10.17.1.0

Updates org.springframework:spring-expression from 5.2.22.RELEASE to 5.3.39

Release notes

Sourced from org.springframework:spring-expression's releases.

v5.3.39

⭐ New Features

  • SimpleEvaluationContext should disable array allocation #33386

v5.3.38

⭐ New Features

  • Efficient handling of conditional HTTP requests #33378

🐞 Bug Fixes

  • Fix incorrect weak ETag validation #33377
  • SimpleEvaluationContext does not enforce read-only semantics #33320
  • ConversionService cannot convert primitive array to Object[] #33314
  • SpEL Indexer silently ignores failure to set property as index #33312
  • Mockito mock falsely initialized as CGLIB proxy with AspectJ aspect #33142
  • "file:." cannot be resolved to java.nio.file.Path (and plain "." value resolves to classpath root) #33140

📔 Documentation

  • Typo in Annotation-driven Listener Endpoints section of Spring Framework documentation #33052
  • Container Extension Points section of Spring Framework documentation refers to the wrong property name #33039
  • Incorrect constructor details in the javadoc for ApplicationContextEvent #33034

🔨 Dependency Upgrades

  • Upgrade to Reactor 2020.0.47 #33322

v5.3.37

⭐ New Features

  • AnnotationUtils performance degrades with deep stacks #32923

🐞 Bug Fixes

  • AspectJ CTW aspects executed twice #32974
  • SpEL compilation fails when indexing into a Map with a primitive #32911
  • SpEL compilation fails when indexing into an array or list with an Integer #32909
  • Application not starting with @EnableTransactionManagement(mode = AdviceMode.ASPECTJ) #32885

🔨 Dependency Upgrades

  • Upgrade to Reactor 2020.0.45 #33010

v5.3.36

🐞 Bug Fixes

  • Overridden aspect method runs twice #32868
  • @DateTimeFormat(iso = DateTimeFormat.ISO.DATE\_TIME) cannot convert UTC without milliseconds to java.util.Date #32860

... (truncated)

Commits
  • f1b128b Release v5.3.39
  • 8a44eaa Next development version (v5.3.39-SNAPSHOT)
  • f44d13c Disable array allocation in case of no constructor resolution
  • f00bc7b Remove snapshot repo
  • 582bfcc Efficient ETag parsing
  • 406b33d Upgrade to Netty 4.1.112
  • f9c3d00 Introduce withAssignmentDisabled() option for SimpleEvaluationContext
  • d2715d2 Fix incorrect weak ETag assertion
  • 57b02da Upgrade to Reactor 2020.0.47
  • df33bf2 Sync GHA setup
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-configuration2 from 2.8.0 to 2.10.1

Updates commons-beanutils:commons-beanutils from 1.9.4 to 1.11.0

Updates org.apache.activemq:activemq-client from 5.17.6 to 5.19.4

Release notes

Sourced from org.apache.activemq:activemq-client's releases.

Apache ActiveMQ 5.19.4 release

What's Changed

Full Changelog: apache/activemq@activemq-5.19.3...activemq-5.19.4

Apache ActiveMQ 5.19.3

What's Changed

Full Changelog: apache/activemq@activemq-5.19.2...activemq-5.19.3

Commits

Updates org.assertj:assertj-core from 3.20.2 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

  • Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

  • Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.18.3
  • Upgrade to JUnit BOM 5.14.1

Guava

  • Upgrade to Guava 33.5.0-jre

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

... (truncated)

Commits
  • e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
  • 85ca7eb Deprecate XmlStringPrettyFormatter
  • 77081dc Merge commit from fork
  • b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
  • 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
  • d393ef1 Abort tests when symbolic links cannot be created (#3788)
  • 2212433 Add IntelliJ custom inspection for test class names
  • 5717d02 Update JetBrains icon
  • a8ec20b Add icon for JetBrains products
  • c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-core from 1.4.14 to 1.5.25

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.25

2026-01-17 Release of logback version 1.5.25

• When processing configuration files, logback-core will now only instantiate components compatible with the class expected by the encapsulating class. This fixes an ACE vulnerability recorded as CVE-2026-1225.

• In configuration files, referencing a single undeclared appender would cause all referenced appenders to be skipped. This issue was discovered in issues/997.

• Added VersionUtil class to logback-core. This utility class checks for version compatibility issues and alerts the user if need be.

• Added EpochConverter to output milliseconds/seconds since epoch. This enhancement was requested by Duncan Jauncey in issues/1000 who also provided the relevant implementation PR.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit f426e0002800cfb507f393fcacffe0761a425220 associated with the tag v_1.5.25. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.24

2026-01-06 Release of logback version 1.5.24

• Added ExpressionPropertyCondition a PropertyCondition that can evaluate boolean expressions similar to Java. See the relevant documentation for further details.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 62bc5fc245dd3a52f3dd45e232733f4cefb4806d associated with the tag v_1.5.24. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.21

2025-11-10 Release of logback version 1.5.21

• Invocations of turbo filters in isDebugEnabled, isInfoEnabled()... remain as they were, untouched. However, any installed instances of TurboFilter are now invoked also from within the log(LoggingEvent) method of Logger with the contents of the LoggingEvent, typically via the fluent API. This fixes issues/871.

• Removed reentry-guard in most subclasses of UnsynchronizedAppenderBase where it was not needed.

• Initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• JsonEncoder is now friendlier to derivation by sub-classes as requested in issues/979.

... (truncated)

Commits
  • f426e00 prepare release of 1.5.25
  • d28931f restrict object creation to expected supertype
  • aa264f7 test default variable values in appender-ref ref attribute
  • 8fb403a adjust copyright year
  • b294a12 check optionList in start()
  • b65040a Add EpochConverter for milliseconds/seconds since epoch (related to issue #96...
  • 0690174 cla for Duncan Jauncey
  • 71dc2af Removed email address for Tony.
  • 1f97ae1 check for undeclared by referenced appenders
  • b07355e Move the artifact version checking code to VersionUtil in logback-core.
  • Additional commits viewable in compare view

Updates org.apache.parquet:parquet-avro from 1.13.1 to 1.15.2

Release notes

Sourced from org.apache.parquet:parquet-avro's releases.

Apache Parquet Java 1.15.2

What's Changed

Full Changelog: apache/parquet-java@apache-parquet-1.15.1...apache-parquet-1.15.2-rc0

Apache Parquet Java 1.15.1

What's Changed

Full Changelog: apache/parquet-java@apache-parquet-1.15.0...apache-parquet-1.15.1

Apache Parquet 1.15.0

What's Changed

@dependabot
Bump the maven group across 13 directories with 12 updates
48cac9a 
Bumps the maven group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.apache.logging.log4j:log4j-core | `2.24.3` | `2.25.4` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `1.33` | `2.0` |
| org.apache.commons:commons-lang3 | `3.14.0` | `3.18.0` |
| [org.apache.maven:maven-compat](https://github.com/apache/maven) | `3.6.3` | `3.9.14` |
| [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-mr) | `1.13.1` | `1.15.2` |
| org.apache.derby:derby | `10.14.2.0` | `10.17.1.0` |
| [org.springframework:spring-expression](https://github.com/spring-projects/spring-framework) | `5.2.22.RELEASE` | `5.3.39` |
| org.apache.commons:commons-configuration2 | `2.8.0` | `2.10.1` |
| commons-beanutils:commons-beanutils | `1.9.4` | `1.11.0` |
| [org.apache.activemq:activemq-client](https://github.com/apache/activemq) | `5.17.6` | `5.19.4` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.20.2` | `3.27.7` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.4.14` | `1.5.25` |

Bumps the maven group with 1 update in the /it/google-cloud-platform directory: [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-mr).
Bumps the maven group with 1 update in the /plugins/core-plugin directory: org.apache.commons:commons-lang3.
Bumps the maven group with 1 update in the /plugins/templates-maven-plugin directory: [org.apache.maven:maven-compat](https://github.com/apache/maven).
Bumps the maven group with 2 updates in the /structured-logging directory: org.apache.logging.log4j:log4j-core and [ch.qos.logback:logback-core](https://github.com/qos-ch/logback).
Bumps the maven group with 4 updates in the /v1 directory: org.apache.logging.log4j:log4j-core, org.apache.commons:commons-lang3, org.apache.derby:derby and [org.springframework:spring-expression](https://github.com/spring-projects/spring-framework).
Bumps the maven group with 2 updates in the /v2/cdc-parent directory: org.apache.commons:commons-configuration2 and commons-beanutils:commons-beanutils.
Bumps the maven group with 2 updates in the /v2/cdc-parent/cdc-embedded-connector directory: org.apache.commons:commons-configuration2 and commons-beanutils:commons-beanutils.
Bumps the maven group with 1 update in the /v2/googlecloud-to-neo4j directory: [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml).
Bumps the maven group with 1 update in the /v2/jms-to-pubsub directory: [org.apache.activemq:activemq-client](https://github.com/apache/activemq).
Bumps the maven group with 1 update in the /v2/pubsub-to-jms directory: [org.apache.activemq:activemq-client](https://github.com/apache/activemq).
Bumps the maven group with 1 update in the /v2/sourcedb-to-spanner directory: org.apache.derby:derby.
Bumps the maven group with 1 update in the /v2/spanner-to-sourcedb directory: [org.assertj:assertj-core](https://github.com/assertj/assertj).


Updates `org.apache.logging.log4j:log4j-core` from 2.24.3 to 2.25.4

Updates `org.yaml:snakeyaml` from 1.33 to 2.0
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.0..snakeyaml-1.33)

Updates `org.apache.commons:commons-lang3` from 3.14.0 to 3.18.0

Updates `org.apache.maven:maven-compat` from 3.6.3 to 3.9.14
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.6.3...maven-3.9.14)

Updates `org.apache.maven:maven-compat` from 3.6.3 to 3.9.14
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.6.3...maven-3.9.14)

Updates `org.apache.parquet:parquet-avro` from 1.13.1 to 1.15.2
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.13.1...apache-parquet-1.15.2)

Updates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0

Updates `org.springframework:spring-expression` from 5.2.22.RELEASE to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.2.22.RELEASE...v5.3.39)

Updates `org.apache.commons:commons-configuration2` from 2.8.0 to 2.10.1

Updates `commons-beanutils:commons-beanutils` from 1.9.4 to 1.11.0

Updates `org.apache.activemq:activemq-client` from 5.17.6 to 5.19.4
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-5.17.6...activemq-5.19.4)

Updates `org.assertj:assertj-core` from 3.20.2 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-core-3.20.2...assertj-build-3.27.7)

Updates `ch.qos.logback:logback-core` from 1.4.14 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.4.14...v_1.5.25)

Updates `org.apache.parquet:parquet-avro` from 1.13.1 to 1.15.2
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.13.1...apache-parquet-1.15.2)

Updates `org.apache.commons:commons-lang3` from 3.14.0 to 3.18.0

Updates `org.apache.maven:maven-compat` from 3.6.3 to 3.9.14
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.6.3...maven-3.9.14)

Updates `org.apache.maven:maven-compat` from 3.6.3 to 3.9.14
- [Release notes](https://github.com/apache/maven/releases)
- [Commits](apache/maven@maven-3.6.3...maven-3.9.14)

Updates `org.apache.logging.log4j:log4j-core` from 2.24.3 to 2.25.4

Updates `ch.qos.logback:logback-core` from 1.4.14 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.4.14...v_1.5.25)

Updates `org.apache.logging.log4j:log4j-core` from 2.24.3 to 2.25.4

Updates `org.apache.commons:commons-lang3` from 3.14.0 to 3.18.0

Updates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0

Updates `org.springframework:spring-expression` from 5.2.22.RELEASE to 5.3.39
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v5.2.22.RELEASE...v5.3.39)

Updates `org.apache.commons:commons-configuration2` from 2.8.0 to 2.10.1

Updates `commons-beanutils:commons-beanutils` from 1.9.4 to 1.11.0

Updates `org.apache.commons:commons-configuration2` from 2.8.0 to 2.10.1

Updates `commons-beanutils:commons-beanutils` from 1.9.4 to 1.11.0

Updates `org.yaml:snakeyaml` from 1.33 to 2.0
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.0..snakeyaml-1.33)

Updates `org.apache.activemq:activemq-client` from 5.17.6 to 5.19.4
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-5.17.6...activemq-5.19.4)

Updates `org.apache.activemq:activemq-client` from 5.17.6 to 5.19.4
- [Release notes](https://github.com/apache/activemq/releases)
- [Commits](apache/activemq@activemq-5.17.6...activemq-5.19.4)

Updates `org.apache.derby:derby` from 10.14.2.0 to 10.17.1.0

Updates `org.assertj:assertj-core` from 3.20.2 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-core-3.20.2...assertj-build-3.27.7)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.0'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.9.14
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.9.14
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.15.2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.derby:derby
  dependency-version: 10.17.1.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-expression
  dependency-version: 5.3.39
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.10.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-beanutils:commons-beanutils
  dependency-version: 1.11.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.activemq:activemq-client
  dependency-version: 5.19.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.15.2
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.9.14
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.maven:maven-compat
  dependency-version: 3.9.14
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.derby:derby
  dependency-version: 10.17.1.0
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.springframework:spring-expression
  dependency-version: 5.3.39
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.10.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-beanutils:commons-beanutils
  dependency-version: 1.11.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.10.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: commons-beanutils:commons-beanutils
  dependency-version: 1.11.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.0'
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.activemq:activemq-client
  dependency-version: 5.19.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.activemq:activemq-client
  dependency-version: 5.19.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.derby:derby
  dependency-version: 10.17.1.0
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:development
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 10, 2026
@dependabot dependabot bot mentioned this pull request Apr 10, 2026
Closed
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants