Skip to content

Bump the maven group with 16 updates#2914

Merged
eamonnmcmanus merged 4 commits into
mainfrom
dependabot/maven/maven-4e6db7dc39
Oct 6, 2025
Merged

Bump the maven group with 16 updates#2914
eamonnmcmanus merged 4 commits into
mainfrom
dependabot/maven/maven-4e6db7dc39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2025

Copy link
Copy Markdown
Contributor

Bumps the maven group with 16 updates:

Package From To
com.google.truth:truth 1.4.4 1.4.5
com.google.errorprone:error_prone_core 2.41.0 2.42.0
com.diffplug.spotless:spotless-maven-plugin 2.46.1 3.0.0
org.sonatype.central:central-publishing-maven-plugin 0.8.0 0.9.0
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-javadoc-plugin 3.11.3 3.12.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4
com.google.errorprone:error_prone_annotations 2.41.0 2.42.0
com.google.guava:guava-testlib 33.4.8-jre 33.5.0-jre
com.google.guava:guava 33.4.8-jre 33.5.0-jre
org.junit:junit-bom 5.13.4 6.0.0
org.graalvm.buildtools:native-maven-plugin 0.11.0 0.11.1
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.1
org.codehaus.mojo:exec-maven-plugin 3.5.1 3.6.0
com.google.protobuf:protobuf-java 4.32.0 4.32.1

Updates com.google.truth:truth from 1.4.4 to 1.4.5

Release notes

Sourced from com.google.truth:truth's releases.

1.4.5

  • Changed assertions like assertThat(nullMap).isEmpty() to fail with a useful failure message instead of throwing NullPointerException (and similarly for other "bogus" values, such as negative sizes). (da5d6e96f)
  • Made Kotlin's isInstanceOf(Int::class.java) (and Java's isInstanceOf(int.class)) a valid way to check for Int/Integer instances. (974ef195b)
  • Improved isWithin to pretty-print numbers in its failure messages. (de785536d, 07318c23e)
  • Improved some assertions that print class names to print simpler names (e.g., Integer instead of java.lang.Integer). (0ba72d60fdb384aa97da03e2403a6757f63bf129)
  • Changed ExpectFailure to never generate "value of" lines based on bytecode. This slightly simplifies writing new tests with ExpectFailure and prevents future behavior changes in some ExpectFailure tests that already exist. However, it may also require changes to other existing ExpectFailure tests to remove or change any assertions about the "value of" line. (3caa0e845)
  • Our Android minSdkVersion is now 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (c85c75cf4)
  • Changed our GWT/J2CL artifact to omit usages of @NullMarked. This was making all our types non-null in those environments, since we don't yet use @Nullable in the GWT/J2CL artifact. (6392d37e7)
Commits
  • 0c43ea0 Set version number for truth-parent to 1.4.5.
  • 24b5a31 Fix TODO style.
  • 7261f72 Make ActualValueInference see through casts and also recognize some of Kotl...
  • 3caa0e8 In ExpectFailure, never generate "value of" lines based on bytecode.
  • a29e1b2 Attempt to fix Javadoc snapshots:
  • 3a0cf9a Bump the github-actions group with 2 updates
  • 3053945 Use the standard parameter name ("expected") in MultimapSubject.isEqualTo.
  • 079b919 Add a TODO to containsNoDuplicates.
  • b515e71 Show only the duplicate keys in the exception message, not all keys.
  • 534518e Don't bother to explicitly set [publishingServerId](https://central.sonatyp...
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_core from 2.41.0 to 2.42.0

Release notes

Sourced from com.google.errorprone:error_prone_core's releases.

Error Prone 2.42.0

New checks:

Changes:

  • The return type of ASTHelpers.asFlagSet has changed. The previous type was EnumSet<Flags.Flag>, where Flags.Flag is an enum in the javac class Flags. A recent JDK change has replaced that enum with a new top-level enum called FlagsEnum. It is not possible to change ASTHelpers.asFlagSet in a way that would be type-safe and compatible with the enums from JDKs both before and after the change. Instead, the method now returns ImmutableSet<String>, where the strings come from the toString() of the enum constants. That means they are "native", "abstract", etc.
  • Flag IO.print[ln]() in SystemOut.

Full changelog: google/error-prone@v2.41.0...v2.42.0

Commits
  • 52b6180 Release Error Prone 2.42.0
  • 691c64a Flag IO.print[ln]() in SystemOut.
  • 0b751cd ExpicitArrayForVarargs: flag unnecessary explicit construction of an array to...
  • 982fe20 Tweak links to point to newer versions.
  • a2df97f [StatementSwitchToExpressionSwitch] fix bug where case null can sometimes b...
  • e691be5 Fix (behind a flag) a silly bug in RedundantSetterCall.
  • ce1a422 Add Durations.wait() to WaitMatchers.waitMethodWithTimeout (and make them...
  • da03fea Update MethodCanBeStatic to be able to detect and trigger on Guice @​Provides ...
  • 83e6582 RedundantSetterCall: note that setFooValue and setFooBytes can be aliases for...
  • db62c8c Automated rollback of commit e1b16e24461d90f2b11f8213a68bfccc0426d4f3.
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.46.1 to 3.0.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Lib v3.0.0

Headline changes

  • All steps now support roundtrip serialization (end of #987).
  • Spotless now supports linting in addition to formatting.

Changed

  • Allow setting Eclipse config from a string, not only from files (#2337)
  • Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
  • Add Sort Members feature based on Eclipse JDT implementation. (#2312)
  • Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
  • Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
  • Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
  • Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
  • Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

  • You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
  • The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

Maven Plugin v3.0.0

Changes

  • BREAKING Bump the required Java to 17. (#2375, #2540)
  • BREAKING Renamed removeWildcardImports to forbidWildcardImports. (#2633)
  • BREAKING spotless:install-git-pre-push-hook task is now always installed in the root .git/hooks directory by resolving the top-level project base directory. (#2570)
  • Bump JGit from 6.10.1 to 7.3.0 (#2257)
    • Adds support for worktrees (fixes #1765)
  • Bump default google-java-format version to latest 1.24.0 -> 1.28.0. (#2345)
  • Bump default gson version to latest 2.13.1 -> 2.13.2. (#2615)
  • Bump default jackson version to latest 2.19.2 -> 2.20.0. (#2606)
  • Bump default ktfmt version to latest 0.53 -> 0.58 (#2613)
    • BREAKING use TrailingCommaManagementStrategy enum instead of manageTrailingCommas boolean configuration option
  • Bump default ktlint version to latest 1.5.0 -> 1.7.1. (#2555)
  • Bump default palantir-java-format version to latest 2.57.0 -> 2.71.0.

Fixed

  • Fix spaceBeforeSeparator in Jackson formatter. (#2103)

Added

  • <lintSupressions> API (#2309)
  • There is now a forbidRegex(String name, String searchRegex, String lintDetail) which throws a lint anytime the regex matches. (#2633)

Lib v3.0.0.BETA4

Added

  • APIs to support linting. (implemented in #2148, #2149, #2307)
    • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
    • Lint models a single change. A FormatterStep can create a lint by:
      • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
      • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
  • Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changes

  • BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
    • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.

Fixed

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

[3.0.0] - 2025-01-06

Headline changes

  • All steps now support roundtrip serialization (end of #987).
  • Spotless now supports linting in addition to formatting.

Changed

  • Allow setting Eclipse config from a string, not only from files (#2337)
  • Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
  • Add Sort Members feature based on Eclipse JDT implementation. (#2312)
  • Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
  • Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
  • Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
  • Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
  • Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

  • You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
  • The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

[3.0.0.BETA4] - 2024-10-24

Added

  • APIs to support linting. (implemented in #2148, #2149, #2307)
    • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
    • Lint models a single change. A FormatterStep can create a lint by:
      • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
      • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
  • Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changed

  • BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
    • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.
  • FenceStep now uses ConfigurationCacheHack. (#2378 fixes #2317)

Fixed

  • ktlint steps now read from the string instead of the file so they don't clobber earlier steps. (fixes #1599)

[3.0.0.BETA3] - 2024-10-15

Added

  • Support for rdf (#2261)
  • Support for buf on maven plugin (#2291)
  • ConfigurationCacheHack so we can support Gradle's configuration cache and remote build cache at the same time. (#2298 fixes #2168)

Changed

  • Support configuring the Equo P2 cache. (#2238)
  • Add explicit support for JSONC / CSS via biome, via the file extensions .css and .jsonc. (#2259)
  • Bump default buf version to latest 1.24.0 -> 1.44.0. (#2291)
  • Bump default google-java-format version to latest 1.23.0 -> 1.24.0. (#2294)
  • Bump default jackson version to latest 2.17.2 -> 2.18.0. (#2279)
  • Bump default cleanthat version to latest 2.21 -> 2.22. (#2296)

Fixed

  • Java import order, ignore duplicate group entries. (#2293)

... (truncated)

Commits
  • 1c2435b Published lib/3.0.0
  • 771b628 Update changelogs.
  • 719f9a4 update default versions for Eclipse Java and Groovy formatters (#2381)
  • 83bc8f3 Update changelogs.
  • 1b8dd4e Revert the Greclipse version bump.
  • 9507db3 Merge branch 'main' into update-greclipse
  • bd03fa0 Prepare to publish non-beta. Huzzah!
  • ea71030 fix gradle custom step with closure and configuration cache (#2376 fixes #2...
  • 7a985fb Add an explanatory comment on why we are zeroing out the global .gitconfig.
  • 922c7ea Update changelog.
  • Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.8.0 to 0.9.0

Commits

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0

Release notes

Sourced from org.apache.maven.plugins:maven-javadoc-plugin's releases.

3.12.0

💥 Breaking changes

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 2a06bed [maven-release-plugin] prepare release maven-javadoc-plugin-3.12.0
  • a71ecf9 bump version 3.12.0-SNAPSHOT
  • 88f2b71 [maven-release-plugin] prepare for next development iteration
  • 7e18956 [maven-release-plugin] prepare release maven-javadoc-plugin-3.11.4
  • c11b76c In legacyMode, don't use -sourcepath, unless excludePackageNames is not empty...
  • bc9904b remove fix mojo (#1263)
  • f310135 Fix package {...} does not exist in legacyMode (#1243)
  • c8270f9 detectOfflineLinks is now false per default for all jar mojo issue #1258 ...
  • 953e609 Delete flaky test (#1260)
  • 2bba7a4 Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates com.google.errorprone:error_prone_annotations from 2.41.0 to 2.42.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.42.0

New checks:

Changes:

  • The return type of ASTHelpers.asFlagSet has changed. The previous type was EnumSet<Flags.Flag>, where Flags.Flag is an enum in the javac class Flags. A recent JDK change has replaced that enum with a new top-level enum called FlagsEnum. It is not possible to change ASTHelpers.asFlagSet in a way that would be type-safe and compatible with the enums from JDKs both before and after the change. Instead, the method now returns ImmutableSet<String>, where the strings come from the toString() of the enum constants. That means they are "native", "abstract", etc.
  • Flag IO.print[ln]() in SystemOut.

Full changelog: google/error-prone@v2.41.0...v2.42.0

Commits
  • 52b6180 Release Error Prone 2.42.0
  • 691c64a Flag IO.print[ln]() in SystemOut.
  • 0b751cd ExpicitArrayForVarargs: flag unnecessary explicit construction of an array to...
  • 982fe20 Tweak links to point to newer versions.
  • a2df97f [StatementSwitchToExpressionSwitch] fix bug where case null can sometimes b...
  • e691be5 Fix (behind a flag) a silly bug in RedundantSetterCall.
  • ce1a422 Add Durations.wait() to WaitMatchers.waitMethodWithTimeout (and make them...
  • da03fea Update MethodCanBeStatic to be able to detect and trigger on Guice @​Provides ...
  • 83e6582 RedundantSetterCall: note that setFooValue and setFooBytes can be aliases for...
  • db62c8c Automated rollback of commit e1b16e24461d90f2b11f8213a68bfccc0426d4f3.
  • Additional commits viewable in compare view

Updates com.google.guava:guava-testlib from 33.4.8-jre to 33.5.0-jre

Release notes

Sourced from com.google.guava:guava-testlib's releases.

33.5.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.5.0-jre</version>
  <!-- or, for Android: -->
  <version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) (087f2c4a80)
  • collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. (4dc93be9a8)
  • math: Added saturatedAbs methods to IntMath and LongMath. (ed0e518f20)
  • net: Added image/avif to MediaType. (53344caba6)
  • testing: Made CollectorTester available to Android users. (294c251079)
  • util.concurrent: Added Striped.custom. (1586eb271d)
Commits

Updates com.google.guava:guava from 33.4.8-jre to 33.5.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.5.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.5.0-jre</version>
  <!-- or, for Android: -->
  <version>33.5.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Restored the Automatic-Module-Name to guava-android. (It, unlike, guava-jre, is not a proper module.) (7a04a8a955)
  • For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue.
  • Increased our Android minSdkVersion to 23 (Marshmallow). This follows the minimum of Google's foundational Android libraries, and we expect it to have no practical impact on users. (5c23347cc1)
  • Listed the JSpecify annotations as an optional dependency in our OSGi metadata. (2dfd572981)
  • cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using

Bumps the maven group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [com.google.truth:truth](https://github.com/google/truth) | `1.4.4` | `1.4.5` |
| [com.google.errorprone:error_prone_core](https://github.com/google/error-prone) | `2.41.0` | `2.42.0` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.46.1` | `3.0.0` |
| [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.8.0` | `0.9.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) | `3.11.3` | `3.12.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.41.0` | `2.42.0` |
| [com.google.guava:guava-testlib](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.4.8-jre` | `33.5.0-jre` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.4` | `6.0.0` |
| [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | `0.11.0` | `0.11.1` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.1` |
| [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.5.1` | `3.6.0` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.32.0` | `4.32.1` |


Updates `com.google.truth:truth` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/google/truth/releases)
- [Commits](google/truth@v1.4.4...v1.4.5)

Updates `com.google.errorprone:error_prone_core` from 2.41.0 to 2.42.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.41.0...v2.42.0)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.46.1 to 3.0.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.46.1...lib/3.0.0)

Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.8.0 to 0.9.0
- [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-javadoc-plugin` from 3.11.3 to 3.12.0
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.3...maven-javadoc-plugin-3.12.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `com.google.errorprone:error_prone_annotations` from 2.41.0 to 2.42.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.41.0...v2.42.0)

Updates `com.google.guava:guava-testlib` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `com.google.guava:guava` from 33.4.8-jre to 33.5.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.junit:junit-bom` from 5.13.4 to 6.0.0
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.4...r6.0.0)

Updates `org.graalvm.buildtools:native-maven-plugin` from 0.11.0 to 0.11.1
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](graalvm/native-build-tools@0.11.0...0.11.1)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...maven-shade-plugin-3.6.1)

Updates `org.codehaus.mojo:exec-maven-plugin` from 3.5.1 to 3.6.0
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
- [Commits](mojohaus/exec-maven-plugin@3.5.1...3.6.0)

Updates `com.google.protobuf:protobuf-java` from 4.32.0 to 4.32.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: com.google.truth:truth
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.google.errorprone:error_prone_core
  dependency-version: 2.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven
- dependency-name: org.sonatype.central:central-publishing-maven-plugin
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.guava:guava-testlib
  dependency-version: 33.5.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.guava:guava
  dependency-version: 33.5.0-jre
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven
- dependency-name: org.graalvm.buildtools:native-maven-plugin
  dependency-version: 0.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.codehaus.mojo:exec-maven-plugin
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 1, 2025
@Marcono1234

Marcono1234 commented Oct 3, 2025

Copy link
Copy Markdown
Contributor

spotless-maven-plugin requires Java 17 now (see release notes above). Maybe we could change the build requirements of Gson (README, and Maven Enforcer Plugin configuration in pom.xml) to require JDK >= 17 for building.
But for now still keep using JDK 11 in the CI workflow (but skipping Spotless and disabling the Maven Enforcer Plugin check) to check how Gson behaves for a Java version without Record classes.

What do you think?

An alternative is to skip the Spotless plugin update for now. The current version seems to work fine so we might not have to update to a newer version at the moment.


The JUnit update (from 5 to 6) for the Native Image test is also failing because it requires Java 17 now.


The shrinker tests are failing because they cannot fetch the R8 jar anymore. This is probably caused by an intentional change in the exec-maven-plugin. So we probably need to switch from using <pluginRepositories> to <repositories> for declaring the Google Maven repository containing R8.

Edit: Seems like the exec-maven-plugin maintainers will revert the change again, see mojohaus/exec-maven-plugin#496. So would be best to just ignore this exec-maven-plugin version.

@Marcono1234

Marcono1234 commented Oct 3, 2025

Copy link
Copy Markdown
Contributor

I don't think we ever had so many independent build failures due to version updates at once 😅

@Marcono1234

Copy link
Copy Markdown
Contributor

You have to bump exec-maven-plugin to 3.6.1 where that behavior change was reverted again. Then the build should succeed I think.

@eamonnmcmanus
eamonnmcmanus merged commit 5945989 into main Oct 6, 2025
13 checks passed
@eamonnmcmanus
eamonnmcmanus deleted the dependabot/maven/maven-4e6db7dc39 branch October 6, 2025 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants