Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates by dependabot[bot] · Pull Request #3060 · secureCodeBox/secureCodeBox

dependabot · 2025-06-02T10:09:53Z

Bumps the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates:

Package	From	To
org.junit:junit-bom	`5.12.1`	`5.13.0`
org.springframework:spring-web	`6.2.5`	`6.2.7`
com.fasterxml.jackson.core:jackson-core	`2.18.3`	`2.19.0`
com.fasterxml.jackson.core:jackson-annotations	`2.18.3`	`2.19.0`
com.fasterxml.jackson.core:jackson-databind	`2.18.3`	`2.19.0`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.18.3`	`2.19.0`
org.mockito:mockito-core	`5.17.0`	`5.18.0`
org.mockito:mockito-junit-jupiter	`5.17.0`	`5.18.0`
org.sonarqube	`6.1.0.5360`	`6.2.0.5505`

Updates org.junit:junit-bom from 5.12.1 to 5.13.0

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.0 = Platform 1.13.0 + Jupiter 5.13.0 + Vintage 5.13.0

See Release Notes.

New Contributors

@Oyster-zx made their first contribution in junit-team/junit5#4311

@etrandafir93 made their first contribution in junit-team/junit5#4336

@hanszt made their first contribution in junit-team/junit5#3377

@ngocnhan-tran1996 made their first contribution in junit-team/junit5#4545

Full Changelog: junit-team/junit-framework@r5.12.2...r5.13.0

JUnit 5.13.0-RC1 = Platform 1.13.0-RC1 + Jupiter 5.13.0-RC1 + Vintage 5.13.0-RC1

See Release Notes.

New Contributors

@hanszt made their first contribution in junit-team/junit5#3377

Full Changelog: junit-team/junit-framework@r5.13.0-M3...r5.13.0-RC1

JUnit 5.13.0-M3 = Platform 1.13.0-M3 + Jupiter 5.13.0-M3 + Vintage 5.13.0-M3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0-M2...r5.13.0-M3

JUnit 5.13.0-M2 = Platform 1.13.0-M2 + Jupiter 5.13.0-M2 + Vintage 5.13.0-M2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.0-M1...r5.13.0-M2

JUnit 5.13.0-M1 = Platform 1.13.0-M1 + Jupiter 5.13.0-M1 + Vintage 5.13.0-M1

See Release Notes.

New Contributors

@Oyster-zx made their first contribution in junit-team/junit5#4311

@etrandafir93 made their first contribution in junit-team/junit5#4336

Full Changelog: junit-team/junit-framework@r5.12.1...r5.13.0-M1

JUnit 5.12.2 = Platform 1.12.2 + Jupiter 5.12.2 + Vintage 5.12.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.12.1...r5.12.2

Commits

f539f92 Release 5.13.0
a54ad65 Use set/get on AtomicBoolean compatibility with Java 8
9bb6a0f Finalize 5.13.0 release notes
5f0e4e6 Remove short-circuiting to ensure all classes are checked for cycles (#4598)
36bb005 Improve assertion failure message in TestClassPredicatesTests
2c86dfa Avoid publishing Gradle Module Metadata for shadowRuntimeElements
4b27910 Allow publishing files to an existing directory
b819306 Fix console launcher's --uid option (#4589)
df46651 Fix :junit-platform-console:compileModule
182a268 Force Gradle to update snapshots
Additional commits viewable in compare view

Updates org.springframework:spring-web from 6.2.5 to 6.2.7

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.7

⭐ New Features

Forward more methods to underlying InputStream in NonClosingInputStream #34893

Introduce Spring property for the default property placeholder escape character #34865

Close ApplicationContext once AOT processing has completed #34841

Fix AbstractJackson2HttpMessageConverter#getObjectMappersForType nullness #34811

Add option for case-insensitive match to PatternMatchUtils #34801

RestClient @RequestBody parameters lose generic type information when creating HTTP service beans #34793

Adds option to set Principal in MockServerWebExchange #34789

🐞 Bug Fixes

Beans created by FactoryBean are not considered as autowiring candidates if another thread holds a singletonLock #34902

PropertySourcesPlaceholderConfigurer placeholder resolution fails in several scenarios #34861

HttpComponentsClientHttpRequestFactory setConnectionRequestTimeout not working with httpclient 5.3.1 #34851

Fragment.create() requires mutable map - which is unusable when used with Kotlin #34848

Duplicate BeanOverrideHandler discovered in @Nested test case with superclass from different class or in interface implemented multiple times #34844

Accidental ClassLoader defineClass enforcement after #34677 #34824

HttpEntity.EMPTY headers should not be possible to mutate via HttpHeaders constructor #34812

AbstractFileResolvingResource.exists incorrectly reports result for resources inside of spring-boot executable jar #34796

Correctly expand query param with same name from URI variables array #34783

R2DBC NamedParameterUtils only expands reused collection parameter once #34768

PathMatchingResourcePatternResolver wrongly assumes that target/classes always exists #34764

📔 Documentation

Clarify CompositePropertySource behavior for EnumerablePropertySource contract #34886

Javadoc and @Nullable annotation for servletContext parameter of ConfigurableWebEnvironment.initPropertySources are contradictory #34845

Spring MVC: @EnableAsync needs to be redeclared for each ApplicationContext #34843

Provide a working example instead of unclear placeholders #34828

🔨 Dependency Upgrades

Upgrade to Micrometer 1.14.7 #34889

Upgrade to Reactor 2024.0.6 #34898

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Artur-, @blake-bauman, @iifawzi, @kilink, @quaff, @whlit, and @zzoe2346

v6.2.6

⭐ New Features

An option for SimpleAsyncTaskExecutor to throw an exception when limit is reached #34727

Provide first-class support for Bean Overrides with @ContextHierarchy #34723

Micro performance optimizations #34717

Suppress "Unable to rollback against JDBC Connection" in case of timeout (connection closed) #34714

... (truncated)

Commits

ba590ac Release v6.2.7
ee62701 Make use of PatternMatchUtils ignoreCase option
fa168ca Revise FactoryBean locking behavior for strict/lenient consistency
3c228a5 Add missing @since tags in PatternMatchUtils
9bf6b8c Upgrade to Reactor 2024.0.6
37ecdd1 Forward more methods to underlying InputStream in NonClosingInputStream
73f1c5a Polishing
4d296fb Upgrade to Micrometer 1.14.7
6a94444 Clarify CompositePropertySource behavior for EnumerablePropertySource contract
03ae97b Introduce Spring property for default escape character for placeholders
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.18.3 to 2.19.0

Commits

9c99b45 [maven-release-plugin] prepare release jackson-core-2.19.0
1ac378d Prep for 2.19.0
104f6b1 Fixes #1421: make JsonReadContext non-final (#1423)
453696a Merge branch '2.18' into 2.19
ed885e1 CI to latest ubuntu
0617b40 ...
29a731c Start "master"->"3.x" renaming (JSTEP-12)
e1c99c5 Back to snapshot dep
92dcbc2 [maven-release-plugin] prepare for next development iteration
c0d9101 [maven-release-plugin] prepare release jackson-core-2.19.0-rc2
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.18.3 to 2.19.0

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.3 to 2.19.0

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.3 to 2.19.0

Updates org.mockito:mockito-core from 5.17.0 to 5.18.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0

2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]

Make vararg checks Scala friendly (for mockito-scala) [(#3651)](mockito/mockito#3651)

For UnfinishedStubbingException, suggest the possibility of another thread [(#3636)](mockito/mockito#3636)

UnfinishedStubbingException ought to suggest the possibility of another thread [(#3635)](mockito/mockito#3635)

Commits

0673747 Force Jacoco version for Android
65388f0 Update Jacoco version to 0.8.13
60179ca Bump bytebuddy from 1.15.11 to 1.16.1
8f15169 Make vararg checks Scala friendly (#3651)
3a631cb Add hint for multithreading in UnfinishedStubbingException (#3636)
See full diff in compare view

Updates org.mockito:mockito-junit-jupiter from 5.17.0 to 5.18.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.18.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.18.0

2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]

Make vararg checks Scala friendly (for mockito-scala) [(#3651)](mockito/mockito#3651)

For UnfinishedStubbingException, suggest the possibility of another thread [(#3636)](mockito/mockito#3636)

UnfinishedStubbingException ought to suggest the possibility of another thread [(#3635)](mockito/mockito#3635)

Commits

0673747 Force Jacoco version for Android
65388f0 Update Jacoco version to 0.8.13
60179ca Bump bytebuddy from 1.15.11 to 1.16.1
8f15169 Make vararg checks Scala friendly (#3651)
3a631cb Add hint for multithreading in UnfinishedStubbingException (#3636)
See full diff in compare view

Updates org.sonarqube from 6.1.0.5360 to 6.2.0.5505

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

netlify · 2025-06-02T10:09:57Z

✅ Deploy Preview for docs-securecodebox canceled.

Name	Link
🔨 Latest commit	`b9a419a`
🔍 Latest deploy log	https://app.netlify.com/projects/docs-securecodebox/deploys/683df539a85a4100083103a9

github-actions · 2025-06-02T15:05:13Z

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Bumps the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates: | Package | From | To | | --- | --- | --- | | [org.junit:junit-bom](https://github.com/junit-team/junit5) | `5.12.1` | `5.13.0` | | [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.5` | `6.2.7` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.18.3` | `2.19.0` | | [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.18.3` | `2.19.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.3` | `2.19.0` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.18.3` | `2.19.0` | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.17.0` | `5.18.0` | | [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.17.0` | `5.18.0` | | org.sonarqube | `6.1.0.5360` | `6.2.0.5505` | Updates `org.junit:junit-bom` from 5.12.1 to 5.13.0 - [Release notes](https://github.com/junit-team/junit5/releases) - [Commits](junit-team/junit-framework@r5.12.1...r5.13.0) Updates `org.springframework:spring-web` from 6.2.5 to 6.2.7 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.2.5...v6.2.7) Updates `com.fasterxml.jackson.core:jackson-core` from 2.18.3 to 2.19.0 - [Commits](FasterXML/jackson-core@jackson-core-2.18.3...jackson-core-2.19.0) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.18.3 to 2.19.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.3 to 2.19.0 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.3 to 2.19.0 Updates `org.mockito:mockito-core` from 5.17.0 to 5.18.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.17.0...v5.18.0) Updates `org.mockito:mockito-junit-jupiter` from 5.17.0 to 5.18.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.17.0...v5.18.0) Updates `org.sonarqube` from 6.1.0.5360 to 6.2.0.5505 --- updated-dependencies: - dependency-name: org.junit:junit-bom dependency-version: 5.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.springframework:spring-web dependency-version: 6.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.mockito:mockito-core dependency-version: 5.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: org.sonarqube dependency-version: 6.2.0.5505 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

sonarqubecloud · 2025-06-02T19:02:59Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Jun 2, 2025

github-project-automation bot added this to secureCodeBox Jun 2, 2025

github-project-automation bot moved this to Triage in secureCodeBox Jun 2, 2025

Weltraumschaf moved this from Triage to To Review in secureCodeBox Jun 2, 2025

Weltraumschaf approved these changes Jun 2, 2025

View reviewed changes

github-project-automation bot moved this from To Review to Reviewer Approved in secureCodeBox Jun 2, 2025

Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-3dca441edc branch from 135fa4e to d6898ff Compare June 2, 2025 15:02

Weltraumschaf force-pushed the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-3dca441edc branch from d6898ff to b9a419a Compare June 2, 2025 19:02

Weltraumschaf enabled auto-merge (rebase) June 2, 2025 19:02

Weltraumschaf merged commit fc5d9ca into main Jun 2, 2025
51 checks passed

Weltraumschaf deleted the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-3dca441edc branch June 2, 2025 19:19

github-project-automation bot moved this from Reviewer Approved to Done in secureCodeBox Jun 2, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates#3060

Bump the gradle-version-updates group in /hooks/persistence-defectdojo/hook with 9 updates#3060
Weltraumschaf merged 1 commit intomainfrom
dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-3dca441edc

dependabot bot commented on behalf of github Jun 2, 2025

Uh oh!

netlify bot commented Jun 2, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Jun 2, 2025 •

edited

Loading

Uh oh!

sonarqubecloud bot commented Jun 2, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Jun 2, 2025

New Contributors

New Contributors

New Contributors

v6.2.7

⭐ New Features

🐞 Bug Fixes

📔 Documentation

🔨 Dependency Upgrades

❤️ Contributors

v6.2.6

⭐ New Features

v5.18.0

5.18.0

v5.18.0

5.18.0

Uh oh!

netlify bot commented Jun 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for docs-securecodebox canceled.

Uh oh!

github-actions bot commented Jun 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦙 MegaLinter status: ✅ SUCCESS

Uh oh!

sonarqubecloud bot commented Jun 2, 2025

Quality Gate passed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netlify bot commented Jun 2, 2025 •

edited

Loading

github-actions bot commented Jun 2, 2025 •

edited

Loading