Bump the maven group with 6 updates by dependabot[bot] · Pull Request #359 · belgif/rest-problem-java

dependabot · 2026-08-03T16:44:30Z

Bumps the maven group with 6 updates:

Package	From	To
com.diffplug.spotless:spotless-maven-plugin	`3.8.0`	`3.9.0`
ch.qos.logback:logback-classic	`1.6.0`	`1.6.1`
io.quarkus.platform:quarkus-bom	`3.37.4`	`3.38.0`
io.quarkus:quarkus-extension-processor	`3.37.4`	`3.38.0`
io.quarkus:quarkus-extension-maven-plugin	`3.37.4`	`3.38.0`
io.quarkus.platform:quarkus-maven-plugin	`3.37.4`	`3.38.0`

Updates com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.9.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.9.0

Added

Add support for Java formatting via prince-of-space with the new <princeOfSpace> step. (#2991)

Changes

Replace RDF formatter library de.atextor:turtle-formatter (discontinued) with cool.rdf:cool-rdf-formatter (its new coordinates); the RDF/turtle formatter now requires Java 25+. (#2995)

Bump default greclipse version to latest 4.39 -> 4.40. (#2989)

Bump default tabletest-formatter version 1.1.1 -> 1.1.2.

Commits

ff6ac27 Published maven/3.9.0
cbd01c4 Published gradle/8.9.0
c724e70 Published lib/4.9.0
793638d Replace de.atextor:turtle-formatter with cool.rdf:cool-rdf-formatter (#2995)
3cb7227 Note Java 25+ requirement for RDF formatter; tidy changelogs
fd9eb96 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
d407109 Add support for prince-of-space Java formatter (#2991)
cb64859 Merge remote-tracking branch 'origin/main' into use-cool-rdf-formatter
f88db43 Bump tabletest-formatter to 1.1.2 (#3001)
ec7db39 Bump tabletest-formatter to 1.1.2
Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.6.0 to 1.6.1

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.1

2026-07-28 Release of logback version 1.6.1

• In TimeBasedRollingPolicy, when the file option is set, the intermediate file renamed before asynchronous compression now receives the target archive name without the compression suffix (e.g. .gz, .zip, .xz). Previously it used a nanotime-based .tmp suffix. This makes the file easier to identify if compression fails during rollover. (See also the following paragraph.)

• On GZ, ZIP, or XZ compression failure, the original (uncompressed) log file is no longer deleted. Compression strategies now delete the source file only after successful compression and emit a warning that the original was left intact.

• ConsoleAppender with now probes JLine's org.jline.jansi.AnsiConsole first and falls back to the legacy FuseSource org.fusesource.jansi.AnsiConsole class. This keeps ANSI coloring working after Jansi moved under the JLine project. The optional org.jline:jansi-core artifact is declared as a dependency alongside the existing FuseSource jansi dependency. A preferredJansiClassName property was added for tests. This issue was reported in issues/1043 by seonwoo_jung who also provided the relevant PR.

• LayoutWrappingEncoder now reports an error at start() when no layout is set and guards encode() against a null layout. Previously, a missing layout (for example after an ignored // branch) allowed the encoder to start and then fail with a NullPointerException on every event, resulting in silent log loss. This issue was reported in issues/1046 by seonwoo_jung who also provided the relevant PR.

• FileCollisionAnalyser now detects file collisions involving nested appenders of SiftingAppender. When the nested file or fileNamePattern does not textually reference the discriminator key (e.g. ${userId}), a warning is issued at configuration time naming the appender, the key, and the shared target. This closes a gap where statically declared file appenders were checked but sifted nested appenders were not. This enhancement was contributed in [PR #1041](qos-ch/logback#1041) by seonwoo_jung.

• More defensive handling in SyslogOutputStream and SyslogAppenderBase: the close() method now ensures that resources are closed, writes and flushes check that the underlying resources are in a valid state and fallback to no-op otherwise.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 57759f433000a133088ef0441038963134437fbd associated with the tag v_1.6.1. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

• See https://logback.qos.ch/news.html#1.6.1 for the original text.

Commits

57759f4 prepare release 1.6.1
175f99f fix imports
4b8773e add compressionFailureLeavesOriginalFileIntact test for XZ compression
cafaf11 do not delete original file if compression fails
ee50125 let the temporary file before compression be target file without the .gz or ....
5626acc minor refactoring
d97da4f minor refactoring
159c045 more defensive coding in SyslogOutputStream and in SyslogAppenderBase
9427d6b slight refactoring for clarity
79c4179 slight refactoring
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-bom from 3.37.4 to 3.38.0

Commits

1b2e5cf [maven-release-plugin] prepare release 3.38.0
be439b2 Merge pull request #1982 from lwitkowski/onboard-quarkus-http-problem
2cfd10d Merge pull request #2092 from quarkusio/update-automation/main-langchain4j-1....
31f41bb Include Quarkus HTTP Problem tests in the Platform
65b6d9d Add quarkus-http-problem
9b167b7 Update LangChain4j to 1.12.1
0e6e01b Merge pull request #2084 from beikov/bp-1.6.19
5f088eb Upgrade to Blaze-Persistence 1.6.19
7d3fbdf Merge pull request #2091 from gsmet/aws-resync
b5b477d Resync AWS update
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.37.4 to 3.38.0

Updates io.quarkus:quarkus-extension-maven-plugin from 3.37.4 to 3.38.0

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.38.0

Complete changelog

#55401 - @RegisterForProxy is silently ignored when used more than once on the same type

#55402 - Use getAnnotationsWithRepeatable for handling repeatable annotations in proxy registration logic

#55469 - Updates to Infinispan 16.0.14

#55501 - Gradle: Add Gradle-version dependent warnings

#55536 - Fix scalpel configuration

3.38.0.CR1

Complete changelog

#27362 - Quarkus Lambda IT failing with java.net.SocketTimeoutException: Read timed out

#29141 - Mailer stuck when sending a message from GraphQL endpoint

#36215 - Imperative Mailer not working with smallrye-graphql

#45227 - Generating the OpenShift Route CRD using the quarkus-maven-plugin fails when using TLS b/c is adds a path field

#46899 - Spring Data API Extension Dynamic Projections not working

#49975 - Support Vertx context propagation in Kotlin coroutine gRPC services

#50151 - Make @SpringBootTest annotation work

#50685 - quarkus-rest treats semicolon as a separator in query parameters

#52703 - Opentelemtry VertxGrpcSpanExporter + NoopSpanExporter

#53312 - Testcontainers are not reused between builds and test executions with testcontainers.reuse.enable=true

#53350 - Cross-application AMQP Dev Services sharing broken — ContainerLocator not updated for new discovered() API

#53431 - Panache Next: Switch to JD 1.1 Page and PageRequest

#53943 - Add a property requiring to use client authentication for all OIDC endpoints

#54290 - Document priority of configs in various dev and test profiles as well as overriding possibilities

#54384 - quarkus-hibernate-panache-next: in Kotlin, WithId.AutoUUID fails with Unknown integral data type for ids: UUID

#54402 - Allow trusted proxy CA subject DN to be verified

#54537 - @Transactional does not work in Hibernate Reactive with Panache

#54592 - SPI to have other extensions contribute (static) Hibernate Persistence Unit definitions

#54593 - Use a per-request TaskQueue for blocking GraphQL over WebSockets

#54596 - Migrate from quarkus-local-cache to Caffeine + JCache

#54668 - Hibernate ORM 7.4 temporal entity support testing

#54691 - Quarkus ForwardedParser does not validate proto values from Forwarded and X-Forwarded-Proto headers

#54788 - Native build with future defaults fails when CLDR locale data uses disabled service loader

#54802 - Support stream in maven create project mojo

#54814 - KnownCompatibleBeanArchiveBuildItem: support maven type

#54870 - HttpServerMetricsTagsContributor tags are not applied on the requestReset path, causing inconsistent tag keys for http_server_requests_seconds (quarkus-micrometer-registry-prometheus)

#54965 - quarkus-data-hibernate: PanacheRepository.flush() (no-arg) throws IllegalStateException: Entity 'java.lang.Class' was not found

#54971 - GraphQL blocking resolvers using Hibernate without @Transactional silently break with parallel execution

#55045 - OIDC: Eager startup validation of JWT bearer token file prevents lazy file creation

#55063 - SpringDataRepositoryCreator generates duplicate findAll() method when extending bare Repository marker interface with explicit findAll() declaration

#55131 - quarkus-dev.properties is not loaded in quarkusDev when gradle-worker.no-process=true

#55282 - Support weight-based (memory) eviction for Hibernate 2LC Caffeine cache regions

Commits

0b8f289 [RELEASE] - Bump version to 3.38.0
462bcec Merge pull request #55592 from gsmet/3.38.0-backports-1
cde0276 Set Unix permissions when copying entries into function.zip
9e37685 Fix scalpel configuration
7299dff Make sure MavenProjects available through the API are added to the Quarkus wo...
9aa664a Prevent unboxing of null Character in reflecton-free Jackson serializers
2cee817 Update to Hibernate Validator 9.1.2
584707c Update to Hibernate ORM 7.4.5
3415437 Gradle: Add Gradle-version dependent warnings
1e6d4e4 Implement @JsonAnyGetter on fields in reflection-free Jackson serializers
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.37.4 to 3.38.0

Commits

1b2e5cf [maven-release-plugin] prepare release 3.38.0
be439b2 Merge pull request #1982 from lwitkowski/onboard-quarkus-http-problem
2cfd10d Merge pull request #2092 from quarkusio/update-automation/main-langchain4j-1....
31f41bb Include Quarkus HTTP Problem tests in the Platform
65b6d9d Add quarkus-http-problem
9b167b7 Update LangChain4j to 1.12.1
0e6e01b Merge pull request #2084 from beikov/bp-1.6.19
5f088eb Upgrade to Blaze-Persistence 1.6.19
7d3fbdf Merge pull request #2091 from gsmet/aws-resync
b5b477d Resync AWS update
Additional commits viewable in compare view

Updates io.quarkus:quarkus-extension-processor from 3.37.4 to 3.38.0

Updates io.quarkus:quarkus-extension-maven-plugin from 3.37.4 to 3.38.0

Release notes

Sourced from io.quarkus:quarkus-extension-maven-plugin's releases.

3.38.0

Complete changelog

#55401 - @RegisterForProxy is silently ignored when used more than once on the same type

#55402 - Use getAnnotationsWithRepeatable for handling repeatable annotations in proxy registration logic

#55469 - Updates to Infinispan 16.0.14

#55501 - Gradle: Add Gradle-version dependent warnings

#55536 - Fix scalpel configuration

3.38.0.CR1

Complete changelog

#27362 - Quarkus Lambda IT failing with java.net.SocketTimeoutException: Read timed out

#29141 - Mailer stuck when sending a message from GraphQL endpoint

#36215 - Imperative Mailer not working with smallrye-graphql

#45227 - Generating the OpenShift Route CRD using the quarkus-maven-plugin fails when using TLS b/c is adds a path field

#46899 - Spring Data API Extension Dynamic Projections not working

#49975 - Support Vertx context propagation in Kotlin coroutine gRPC services

#50151 - Make @SpringBootTest annotation work

#50685 - quarkus-rest treats semicolon as a separator in query parameters

#52703 - Opentelemtry VertxGrpcSpanExporter + NoopSpanExporter

#53312 - Testcontainers are not reused between builds and test executions with testcontainers.reuse.enable=true

#53350 - Cross-application AMQP Dev Services sharing broken — ContainerLocator not updated for new discovered() API

#53431 - Panache Next: Switch to JD 1.1 Page and PageRequest

#53943 - Add a property requiring to use client authentication for all OIDC endpoints

#54290 - Document priority of configs in various dev and test profiles as well as overriding possibilities

#54384 - quarkus-hibernate-panache-next: in Kotlin, WithId.AutoUUID fails with Unknown integral data type for ids: UUID

#54402 - Allow trusted proxy CA subject DN to be verified

#54537 - @Transactional does not work in Hibernate Reactive with Panache

#54592 - SPI to have other extensions contribute (static) Hibernate Persistence Unit definitions

#54593 - Use a per-request TaskQueue for blocking GraphQL over WebSockets

#54596 - Migrate from quarkus-local-cache to Caffeine + JCache

#54668 - Hibernate ORM 7.4 temporal entity support testing

#54691 - Quarkus ForwardedParser does not validate proto values from Forwarded and X-Forwarded-Proto headers

#54788 - Native build with future defaults fails when CLDR locale data uses disabled service loader

#54802 - Support stream in maven create project mojo

#54814 - KnownCompatibleBeanArchiveBuildItem: support maven type

#54870 - HttpServerMetricsTagsContributor tags are not applied on the requestReset path, causing inconsistent tag keys for http_server_requests_seconds (quarkus-micrometer-registry-prometheus)

#54965 - quarkus-data-hibernate: PanacheRepository.flush() (no-arg) throws IllegalStateException: Entity 'java.lang.Class' was not found

#54971 - GraphQL blocking resolvers using Hibernate without @Transactional silently break with parallel execution

#55045 - OIDC: Eager startup validation of JWT bearer token file prevents lazy file creation

#55063 - SpringDataRepositoryCreator generates duplicate findAll() method when extending bare Repository marker interface with explicit findAll() declaration

#55131 - quarkus-dev.properties is not loaded in quarkusDev when gradle-worker.no-process=true

#55282 - Support weight-based (memory) eviction for Hibernate 2LC Caffeine cache regions

Commits

0b8f289 [RELEASE] - Bump version to 3.38.0
462bcec Merge pull request #55592 from gsmet/3.38.0-backports-1
cde0276 Set Unix permissions when copying entries into function.zip
9e37685 Fix scalpel configuration
7299dff Make sure MavenProjects available through the API are added to the Quarkus wo...
9aa664a Prevent unboxing of null Character in reflecton-free Jackson serializers
2cee817 Update to Hibernate Validator 9.1.2
584707c Update to Hibernate ORM 7.4.5
3415437 Gradle: Add Gradle-version dependent warnings
1e6d4e4 Implement @JsonAnyGetter on fields in reflection-free Jackson serializers
Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.37.4 to 3.38.0

Commits

1b2e5cf [maven-release-plugin] prepare release 3.38.0
be439b2 Merge pull request #1982 from lwitkowski/onboard-quarkus-http-problem
2cfd10d Merge pull request #2092 from quarkusio/update-automation/main-langchain4j-1....
31f41bb Include Quarkus HTTP Problem tests in the Platform
65b6d9d Add quarkus-http-problem
9b167b7 Update LangChain4j to 1.12.1
0e6e01b Merge pull request #2084 from beikov/bp-1.6.19
5f088eb Upgrade to Blaze-Persistence 1.6.19
7d3fbdf Merge pull request #2091 from gsmet/aws-resync
b5b477d Resync AWS update
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 6 updates: | Package | From | To | | --- | --- | --- | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.8.0` | `3.9.0` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.0` | `1.6.1` | | [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.37.4` | `3.38.0` | | io.quarkus:quarkus-extension-processor | `3.37.4` | `3.38.0` | | [io.quarkus:quarkus-extension-maven-plugin](https://github.com/quarkusio/quarkus) | `3.37.4` | `3.38.0` | | [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.37.4` | `3.38.0` | Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.8.0 to 3.9.0 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@maven/3.8.0...maven/3.9.0) Updates `ch.qos.logback:logback-classic` from 1.6.0 to 1.6.1 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.6.0...v_1.6.1) Updates `io.quarkus.platform:quarkus-bom` from 3.37.4 to 3.38.0 - [Commits](quarkusio/quarkus-platform@3.37.4...3.38.0) Updates `io.quarkus:quarkus-extension-processor` from 3.37.4 to 3.38.0 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.37.4 to 3.38.0 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.37.4...3.38.0) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.37.4 to 3.38.0 - [Commits](quarkusio/quarkus-platform@3.37.4...3.38.0) Updates `io.quarkus:quarkus-extension-processor` from 3.37.4 to 3.38.0 Updates `io.quarkus:quarkus-extension-maven-plugin` from 3.37.4 to 3.38.0 - [Release notes](https://github.com/quarkusio/quarkus/releases) - [Commits](quarkusio/quarkus@3.37.4...3.38.0) Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.37.4 to 3.38.0 - [Commits](quarkusio/quarkus-platform@3.37.4...3.38.0) --- updated-dependencies: - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-bom dependency-version: 3.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-processor dependency-version: 3.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus:quarkus-extension-maven-plugin dependency-version: 3.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven - dependency-name: io.quarkus.platform:quarkus-maven-plugin dependency-version: 3.38.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2026-08-03T16:53:02Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 3, 2026

github-actions Bot approved these changes Aug 3, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) August 3, 2026 16:44

github-actions Bot merged commit 0ce1847 into main Aug 3, 2026
4 checks passed

github-actions Bot deleted the dependabot/maven/maven-fadf4b0060 branch August 3, 2026 16:53

Navigation Menu

Uh oh!

Bump the maven group with 6 updates - #359

Bump the maven group with 6 updates#359
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/maven-fadf4b0060

dependabot Bot commented on behalf of github Aug 3, 2026

Uh oh!

sonarqubecloud Bot commented Aug 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 3, 2026

Maven Plugin v3.9.0

Added

Changes

Logback 1.6.1

3.38.0

Complete changelog

3.38.0.CR1

Complete changelog

3.38.0

Complete changelog

3.38.0.CR1

Complete changelog

Uh oh!

sonarqubecloud Bot commented Aug 3, 2026

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants