Skip to content

Bump the maven-minor-patch group across 1 directory with 5 updates - #99

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-minor-patch-c58458eb3f
Open

Bump the maven-minor-patch group across 1 directory with 5 updates#99
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/maven-minor-patch-c58458eb3f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-patch group with 5 updates in the / directory:

Package From To
com.squareup.okio:okio 3.17.0 3.18.2
org.slf4j:slf4j-simple 2.0.18 2.0.19
com.auth0:java-jwt 4.5.2 4.6.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.6 3.6.0
org.apache.maven.plugins:maven-compiler-plugin 3.15.0 3.16.0

Updates com.squareup.okio:okio from 3.17.0 to 3.18.2

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.2

2026-09-04

  • Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused base64 strings to be encoded without padding, even though the previous and expected behavior is to encode such strings with padding (= characters). The bug impacts callers who compiled against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

Version 3.18.1

2026-07-28

  • Fix: Restore binary-compatibility with Okio 3.17.x for Kotlin/Native users. When we introduced the new base64() function, we inadvertently changed the binary signature! Ugh! This is now fixed and we've automated binary-compatibility checking for Kotlin/Native going forward.

Version 3.18.0

2026-07-21

  • Fix: Use wide character APIs to better support of non-UTF-8 filesystems on Windows.
  • Fix: Don't crash in AssetFileSystem.exists() when the underlying storage throws a FileNotFoundException.
  • Fix: Load WASI paths relative to their preopen. The platform behavior recently changed in NodeJS, causing our WasiFileSystem to be unable to access files!
  • New: Optionally ignore whitespace when decoding hexadecimal.
  • New: Optionally omit padding when encoding Base64.
  • New: BufferedSource.readUInt(), BufferedSink.writeUInt(), and similar functions for UByte, UShort and ULong. Also add support for unsigned and little-endian.
  • New: BufferedSink.utf8Appendable(). Use this to adapt an Okio sink to an Appendable.
  • New: Source.limit() returns a wrapped source with a strict limit on how many bytes are returned.
  • New: ByteString.equals(other, constantTime) for subtle defense against timing attacks.
Commits
  • 9403a09 Prepare for release 3.18.2.
  • 5a1c153 Fix an unintended behavior change with base64 padding (#1869)
  • 9f564fd Prepare for release 3.18.1.
  • 531cf07 Hide some accidentally public symbols (#1839)
  • e7ef43d Update GitHub Actions for new secrets and branch (#1840)
  • a6730de Start enforcing binary compatibility for Kotlin/Native (#1838)
  • e75a7e9 Update dependency com.android.tools.build:gradle to v9.3.1 (#1836)
  • 9d21d5c Fix interchanged docs links for 1.x and 2.x API (#1835)
  • bff1dff Track new docs locations from Dokka v2 (#1833)
  • 3b16d9b Grant write permission to the publish-website action (#1832)
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-simple from 2.0.18 to 2.0.19

Updates com.auth0:java-jwt from 4.5.2 to 4.6.0

Release notes

Sourced from com.auth0:java-jwt's releases.

4.6.0

Added

Changelog

Sourced from com.auth0:java-jwt's changelog.

4.6.0 (2026-07-13)

Full Changelog

Added

Commits

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 0ff622b [maven-release-plugin] prepare release surefire-3.6.0
  • bb3932a Let's go for 3.6.0 release
  • 3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
  • 61a531d Bump Maven parent version from 47 to 49 (#3449)
  • e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
  • 45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @​Nested classes (#3447)
  • b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
  • c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
  • db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
  • 77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
  • c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
  • ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
  • beb0eda Recompile when dependencies change (#1102)
  • a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
  • 2e81228 Fix incremental detection of empty sources, 3.x (#1075)
  • 2132f5b configure ATR project
  • 5992b77 Build fails when annotation processor list is empty (but present) (#1077)
  • acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
  • 72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the maven-minor-patch group across 1 directory with 5 updates
ed0cc96 
Bumps the maven-minor-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.squareup.okio:okio](https://github.com/lysine-dev/okio) | `3.17.0` | `3.18.2` |
| org.slf4j:slf4j-simple | `2.0.18` | `2.0.19` |
| [com.auth0:java-jwt](https://github.com/auth0/java-jwt) | `4.5.2` | `4.6.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` |



Updates `com.squareup.okio:okio` from 3.17.0 to 3.18.2
- [Changelog](https://github.com/lysine-dev/okio/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okio@parent-3.17.0...parent-3.18.2)

Updates `org.slf4j:slf4j-simple` from 2.0.18 to 2.0.19

Updates `com.auth0:java-jwt` from 4.5.2 to 4.6.0
- [Release notes](https://github.com/auth0/java-jwt/releases)
- [Changelog](https://github.com/auth0/java-jwt/blob/master/CHANGELOG.md)
- [Commits](auth0/java-jwt@4.5.2...4.6.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0)

---
updated-dependencies:
- dependency-name: com.squareup.okio:okio
  dependency-version: 3.18.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: com.auth0:java-jwt
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants