Review Bump the dependencies group across 1 directory with 20 updates (#2440)

Logback 1.6.4

2026-09-24 Release of logback version 1.6.4

• Variable substitution is again applied to the scan attribute of the <configuration> element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of <propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.

• OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.

• Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.

• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.

• TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. See TimeBasedRollingPolicy.

• If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.

• The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Full Changelog: https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.4

Commits

07d291c preapre release 1.6.4

9627daf revert to Collections.unmodifiableMap instead of

aa42fb5 disabled RollingCalendarTest#testVaryingNumberOfHalfDailyPeriods to shave off...

ddc7459 Support HALF_DAY periodicity for AM/PM date patterns

42d75d7 disable LoggerContextTest#concurrentGetLoggerKeepsSizeConsistent to shave exe...

bffd55e add warnings about missing jline.jansi classes

8de0b9b Fix data race on LoggerContext.size (#1038)

76c73d1 add MinimalUnmodifiableMap and return it in LogbackMDCAdapter#getPropertyMap

a2c416a Fix formatting of email instruction in README

2c89727 mailing lists have been deactivated

Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.22.2 to 2.22.3

Commits

eee4b9e [maven-release-plugin] prepare release jackson-core-2.22.3

31ee7eb Prep for 2.22.3 release

9fef13f Merge branch '2.21' into 2.22

9160f40 Post-release dep version bump

1169cb6 [maven-release-plugin] prepare for next development iteration

b33f455 [maven-release-plugin] prepare release jackson-core-2.21.7

ce8b7dc Prep for 2.21.7 release

b69555e Merge branch '2.21' into 2.22

53df608 Merge branch '2.20' into 2.21

892f757 Merge branch '2.19' into 2.20

Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.22.2 to 2.22.3

Commits

6a183d0 [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.3

45290b7 Prep for 2.22.3 release

0e9bd25 Merge branch '2.21' into 2.22

4dc38df Post-release dep version bump

bac5610 [maven-release-plugin] prepare for next development iteration

a7cfc97 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.7

bf55a64 Prep for 2.21.7 release

d515706 Merge branch '2.21' into 2.22

7a536e5 Merge branch '2.20' into 2.21

79037dd Merge branch '2.19' into 2.20

Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3

Commits

4385c5f [maven-release-plugin] prepare release jackson-databind-2.22.3

ccb4fd0 Prep for 2.22.3 release

2958412 Merge branch '2.21' into 2.22

1215b94 Post-release dep version bump

1f0df62 [maven-release-plugin] prepare for next development iteration

13a9ff4 [maven-release-plugin] prepare release jackson-databind-2.21.7

d168f96 Prep for 2.21.7 release

eaf5c76 Merge branch '2.21' into 2.22

e05ef4c Merge branch '2.20' into 2.21

f6d4000 Merge branch '2.19' into 2.20

Additional commits viewable in compare view

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.22.2 to 2.22.3

Commits

6a183d0 [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.3

45290b7 Prep for 2.22.3 release

0e9bd25 Merge branch '2.21' into 2.22

4dc38df Post-release dep version bump

bac5610 [maven-release-plugin] prepare for next development iteration

a7cfc97 [maven-release-plugin] prepare release jackson-dataformat-xml-2.21.7

bf55a64 Prep for 2.21.7 release

d515706 Merge branch '2.21' into 2.22

7a536e5 Merge branch '2.20' into 2.21

79037dd Merge branch '2.19' into 2.20

Additional commits viewable in compare view

Updates io.prometheus:prometheus-metrics-bom from 1.8.0 to 1.9.0

Release notes

Sourced from io.prometheus:prometheus-metrics-bom's releases.

v1.9.0

1.9.0 (2026-09-16)

Features

support metric name filtering in OpenTelemetry exporter (#2344) (9b0ede8)

Bug Fixes

avoid protobuf debug reflection in native images (#2251) (7f899e7)

bound HTTPServer request resources (#2333) (33ec556)

bound observation buffering during collection (#2336) (43788f5)

bound scrape query parameters (#2334) (27e1912)

ci: skip benchmark report for skipped runs (#2422) (40eddb0)

clarify benchmark regression report verdicts (#2394) (e5fa067)

deps: update dependency com.google.guava:guava to v33.7.0-jre (#2387) (bf0db49)

deps: update dependency io.dropwizard.metrics:metrics-core to v4.2.40 (#2432) (dd88326)

deps: update dependency io.dropwizard.metrics5:metrics-core to v5.0.8 (#2433) (42f3c8a)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.29.0-alpha (#2235) (cf9f702)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2328) (1ca2716)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2330) (07623c1)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2401) (6c26619)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2402) (ac0d68a)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2409) (5eea652)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2410) (0bcef89)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.23 (#2241) (a017f80)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.24 (#2294) (63967bd)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.25 (#2389) (92f8344)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.26 (#2477) (05146c0)

deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 (#2399) (a0b0880)

deps: update jetty monorepo to v12.1.11 (#2279) (4dc54da)

deps: update jetty monorepo to v12.1.12 (#2371) (08967e0)

deps: update jetty monorepo to v12.1.13 (#2459) (b217f05)

deps: update junit-framework monorepo to v6.1.2 (#2300) (5966d1d)

deps: update junit-framework monorepo to v6.1.3 (#2374) (d1ade52)

deps: update otel.instrumentation.version (#2236) (158230d)

deps: update protobuf (#2400) (e2db1ed)

deps: update protobuf (#2438) (8ad6fa8)

deps: update protobuf to v4.35.1 (#2221) (cf17073)

disable micrometer compat build cache (#2457) (6a40eda)

drop +Inf bound from OpenTelemetry classic histogram boundaries (#2458) (a3bce9a)

exposition: export internal package for OSGi resolution (#2415) (28b503d)

httpserver: make scrape error responses secure and configurable (f6d9df5)

include counter names in negative value errors (#2315) (ea8f935)

include license files in release source jars (#2250) (08cf925), closes #2216

keep late observations out of subsequent collection buffers (#2471) (d78b149)

keep PR title check required after rebases (#2414) (e3d4c3b)

prevent buffer stripe index overflow (#2331) (b6cd000)

... (truncated)

Changelog

Sourced from io.prometheus:prometheus-metrics-bom's changelog.

1.9.0 (2026-09-16)

Features

support metric name filtering in OpenTelemetry exporter (#2344) (9b0ede8)

Bug Fixes

avoid protobuf debug reflection in native images (#2251) (7f899e7)

bound HTTPServer request resources (#2333) (33ec556)

bound observation buffering during collection (#2336) (43788f5)

bound scrape query parameters (#2334) (27e1912)

ci: skip benchmark report for skipped runs (#2422) (40eddb0)

clarify benchmark regression report verdicts (#2394) (e5fa067)

deps: update dependency com.google.guava:guava to v33.7.0-jre (#2387) (bf0db49)

deps: update dependency io.dropwizard.metrics:metrics-core to v4.2.40 (#2432) (dd88326)

deps: update dependency io.dropwizard.metrics5:metrics-core to v5.0.8 (#2433) (42f3c8a)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.29.0-alpha (#2235) (cf9f702)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2328) (1ca2716)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2330) (07623c1)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2401) (6c26619)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2402) (ac0d68a)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2409) (5eea652)

deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2410) (0bcef89)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.23 (#2241) (a017f80)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.24 (#2294) (63967bd)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.25 (#2389) (92f8344)

deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.26 (#2477) (05146c0)

deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 (#2399) (a0b0880)

deps: update jetty monorepo to v12.1.11 (#2279) (4dc54da)

deps: update jetty monorepo to v12.1.12 (#2371) (08967e0)

deps: update jetty monorepo to v12.1.13 (#2459) (b217f05)

deps: update junit-framework monorepo to v6.1.2 (#2300) (5966d1d)

deps: update junit-framework monorepo to v6.1.3 (#2374) (d1ade52)

deps: update otel.instrumentation.version (#2236) (158230d)

deps: update protobuf (#2400) (e2db1ed)

deps: update protobuf (#2438) (8ad6fa8)

deps: update protobuf to v4.35.1 (#2221) (cf17073)

disable micrometer compat build cache (#2457) (6a40eda)

drop +Inf bound from OpenTelemetry classic histogram boundaries (#2458) (a3bce9a)

exposition: export internal package for OSGi resolution (#2415) (28b503d)

httpserver: make scrape error responses secure and configurable (f6d9df5)

include counter names in negative value errors (#2315) (ea8f935)

include license files in release source jars (#2250) (08cf925), closes #2216

keep late observations out of subsequent collection buffers (#2471) (d78b149)

keep PR title check required after rebases (#2414) (e3d4c3b)

prevent buffer stripe index overflow (#2331) (b6cd000)

redact invalid configuration values (#2335) (7e7e533)

... (truncated)

Commits

71e821c chore(main): release 1.9.0 (#2237)

d78b149 fix: keep late observations out of subsequent collection buffers (#2471)

085263b perf: avoid allocating a mapping lambda on every labelValues() call (#2442)

9ec38b7 chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.161...

05146c0 fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-core to v11...

59ca1f0 test: focus PR benchmarks on client_java and measure label lookups (#2468)

398d087 fix: show uncertainty in benchmark comparisons (#2476)

8722230 perf: skip snapshot rebuild in mergeDuplicates when names are unique (#2441)

ea8f935 fix: include counter names in negative value errors (#2315)

fba2007 test: verify buffer recovery after snapshot failures (#2446)

Additional commits viewable in compare view

Updates org.eclipse.jetty.ee10:jetty-ee10-servlet from 12.1.12 to 12.1.13

Updates org.jooq:jooq from 3.21.7 to 3.21.8

Updates org.jooq:jooq-codegen from 3.21.7 to 3.21.8

Updates org.jooq:jooq-meta from 3.21.7 to 3.21.8

Updates org.jooq:jooq-codegen from 3.21.7 to 3.21.8

Updates org.jooq:jooq-meta from 3.21.7 to 3.21.8

Updates org.slf4j:jul-to-slf4j from 2.0.18 to 2.0.20

Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.20

Updates io.github.git-commit-id:git-commit-id-maven-plugin from 10.0.0 to 10.0.1

Release notes

Sourced from io.github.git-commit-id:git-commit-id-maven-plugin's releases.

Version 10.0.1 is finally there and includes various bug-fixes and improvements :-)

What's Changed

Dependencies used by the plugin

git-commit-id/git-commit-id-maven-plugin#915: bump commons-io:commons-io from 2.21.0 to 2.22.0

git-commit-id/git-commit-id-maven-plugin#933: bump org.jspecify:jspecify from 1.0.0 to 1.0.1

git-commit-id/git-commit-id-maven-plugin#919: bump org.slf4j:slf4j-simple from 2.0.17 to 2.0.18 (test)

bump git-commit-id-plugin-core from 6.2.0 to 6.2.1 (refs https://github.com/git-commit-id/git-commit-id-plugin-core/releases/tag/v6.2.1, fix CVE-2026-59638 by making use of org.bouncycastle:bcpkix-jdk18on 1.85)

Github Action

git-commit-id/git-commit-id-maven-plugin#924: bump actions/cache from 5 to 6

git-commit-id/git-commit-id-maven-plugin#923: bump actions/checkout from 6 to 7

git-commit-id/git-commit-id-maven-plugin#935: bump actions/setup-java from 5 to 6

Maven Plugins used by the plugin

git-commit-id/git-commit-id-maven-plugin#921: bump org.apache.maven.plugins:maven-site-plugin from 3.21.0 to 3.22.0

git-commit-id/git-commit-id-maven-plugin#918: bump org.apache.maven.plugins:maven-enforcer-plugin from 3.6.2 to 3.6.3

git-commit-id/git-commit-id-maven-plugin#925: bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.5 to 3.5.6

git-commit-id/git-commit-id-maven-plugin#927: bump org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15

git-commit-id/git-commit-id-maven-plugin#928: bump org.apache.maven.plugins:maven-dependency-plugin from 3.10.0 to 3.11.0

git-commit-id/git-commit-id-maven-plugin#930: bump org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0

git-commit-id/git-commit-id-maven-plugin#934: bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:
<dependency>

    <groupId>io.github.git-commit-id</groupId>

    <artifactId>git-commit-id-maven-plugin</artifactId>

    <version>10.0.1</version>

</dependency>
Getting the latest snapshot (build automatically)

If you can't wait for the next release, you can also get the latest snapshot version from sonatype, that is being deployed automatically by github actions:
<pluginRepositories>

    <pluginRepository>

        <id>sonatype-snapshots</id>

        <name>Sonatype Snapshots</name>

         <url>https://s01.oss.sonatype.org/content/repositories/snapshots/&lt;/url>

    </pluginRepository>

</pluginRepositories>
Even though the github actions will only deploy a new snapshot once all tests have finished, it is recommended to rely on the released and more stable version.

Known Issues / Limitations:

This plugin is unfortunately not working with Heroku which is due to the fact how Heroku works. In summary Heroku does not copy over the .git-repository but in order to determine the git properties this plugin relies on the fact that it has access to the git-repository. A somewhat workaround to get some information is outlined in ktoso/maven-git-commit-id-plugin#279

Using maven's plugin prefix resolution (e.g. mvn com.test.plugins:myPlugin:myMojo) might result in unresolved properties even with <injectAllReactorProjects>true</injectAllReactorProjects>. Please refer to git-commit-id/maven-git-commit-id-plugin#287 or git-commit-id/maven-git-commit-id-plugin#413 for details and potential workarounds

... (truncated)

Commits

73542f2 Bump version: 10.0.0 → 10.0.1

7e95a7e Revert "add tests for java 27"

dae217c add tests for java 27

dc5b90b run tests with the latest maven versions 3.9.9 -> 3.9.16; 4.0.0-rc-5 -> 4.0.0...

28f14aa bump git-commit-id-plugin-core from 6.2.0 to 6.2.1 (refs https://github.com/g...

dcf31ab Merge pull request #934 from git-commit-id/dependabot/maven/org.apache.maven....

e4e48ba Merge pull request #933 from git-commit-id/dependabot/maven/org.jspecify-jspe...

ef3c336 Merge pull request #935 from git-commit-id/dependabot/github_actions/actions/...

eacd498 Merge pull request #930 from git-commit-id/dependabot/maven/org.sonatype.cent...

d892203 build(deps): bump actions/setup-java from 5 to 6

Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0


🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0

c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion

ad74fee Replace adopt-openj9 by semeru JDK distribution on GH

beb0eda Recompile when dependencies change (#1102)

a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)

2e81228 Fix incremental detection of empty sources, 3.x (#1075)

2132f5b configure ATR project

5992b77 Build fails when annotation processor list is empty (but present) (#1077)

acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0

72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0

Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.6.2


🐛 Bug Fixes

Replace raw NPEx with customized exception message (#239) @pzygielo

👻 Maintenance

Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#248) @slachiewicz

📦 Dependency updates



Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#248) @slachiewicz

Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0 (#247) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#244) @dependabot[bot]

Bump org.codehaus.mojo:mojo-parent from 96 to 97 (#246) @<a href="http...

Description has been truncated

2 total changed files

Loading changes...

You've made it to the end of the scroll.

No more diffs beyond this point

Bump the dependencies group across 1 directory with 20 updates #2440

dependabot-bot's Description of Work

Logback 1.6.4

v1.9.0

1.9.0 (2026-09-16)

Features

Bug Fixes

1.9.0 (2026-09-16)

Features

Bug Fixes

What's Changed

Dependencies used by the plugin

Github Action

Maven Plugins used by the plugin

Getting the latest release

Getting the latest snapshot (build automatically)

Known Issues / Limitations:

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.6.2

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates