Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the maven-dependencies group with 7 updates:

Package From To
io.quarkus.platform:quarkus-bom 3.25.1 3.30.5
io.quarkus.platform:quarkus-maven-plugin 3.25.1 3.30.5
io.smallrye:jandex-maven-plugin 3.4.0 3.5.3
com.diffplug.spotless:spotless-maven-plugin 2.46.1 3.1.0
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-failsafe-plugin 3.5.3 3.5.4

Updates io.quarkus.platform:quarkus-bom from 3.25.1 to 3.30.5

Commits
  • a00dec5 [maven-release-plugin] prepare release 3.30.5
  • 519dd46 Merge pull request #1688 from gsmet/quarkus-3.30.5
  • 1279e69 Upgrade to Quarkus 3.30.5
  • be476d9 [maven-release-plugin] prepare for next development iteration
  • 4cd017e [maven-release-plugin] prepare release 3.30.4
  • 0179c1d Merge pull request #1687 from gsmet/quarkus-3.30.4
  • 68899f3 Upgrade to Quarkus 3.30.4
  • 4dd368b [maven-release-plugin] prepare for next development iteration
  • 5b2a86b [maven-release-plugin] prepare release 3.30.3
  • b590444 Merge pull request #1681 from gsmet/quarkus-3.30.3
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.25.1 to 3.30.5

Commits
  • a00dec5 [maven-release-plugin] prepare release 3.30.5
  • 519dd46 Merge pull request #1688 from gsmet/quarkus-3.30.5
  • 1279e69 Upgrade to Quarkus 3.30.5
  • be476d9 [maven-release-plugin] prepare for next development iteration
  • 4cd017e [maven-release-plugin] prepare release 3.30.4
  • 0179c1d Merge pull request #1687 from gsmet/quarkus-3.30.4
  • 68899f3 Upgrade to Quarkus 3.30.4
  • 4dd368b [maven-release-plugin] prepare for next development iteration
  • 5b2a86b [maven-release-plugin] prepare release 3.30.3
  • b590444 Merge pull request #1681 from gsmet/quarkus-3.30.3
  • Additional commits viewable in compare view

Updates io.smallrye:jandex-maven-plugin from 3.4.0 to 3.5.3

Release notes

Sourced from io.smallrye:jandex-maven-plugin's releases.

3.5.3

What's Changed

New Contributors

Full Changelog: smallrye/jandex@3.5.2...3.5.3

3.5.2

What's Changed

Full Changelog: smallrye/jandex@3.5.1...3.5.2

3.5.1

What's Changed

Full Changelog: smallrye/jandex@3.5.0...3.5.1

3.5.0

  • #575 Jandex2Gizmo#classDescOf() should use the ClassDesc cache
  • #574 Annotations in Method hashCode?
  • #568 Reproducible Jandex indexes

... (truncated)

Commits
  • 0a673d8 [maven-release-plugin] prepare release 3.5.3
  • 8bab182 Amendments before release
  • 72932d1 release 3.5.3
  • f8ad283 Bump net.bytebuddy:byte-buddy from 1.18.1 to 1.18.2
  • 740fd67 add ClassEquivalenceKey caching
  • 6629ad0 improve EquivalenceKey equals() and hashCode()
  • 62bf278 improve the AnnotationOverlayBenchmark
  • 70b4d63 move back to modulo-by-bit-masking in ClassTypeEquivalenceKey
  • f4823e8 improve PrimitiveTypeEquivalenceKey lookup
  • 69a6f5b improve ClassTypeEquivalenceKey caching
  • Additional commits viewable in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 2.46.1 to 3.1.0

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Lib v3.1.0

Added

  • Support forclang-format on maven-plugin (#2406)
  • Allow overriding classLoader for all JarStates to enable spotless-cli (#2427)

Maven Plugin v3.1.0

Changes

  • Bump default ktfmt version to latest 0.58 -> 0.59. (#2681
  • Bump default jackson version to latest 2.20.0 -> 2.20.1. (#2730)
  • Bump default cleanthat version to latest 2.23 -> 2.24. (#2620)
  • POTENTIALLY BREAKING Removed support for ktlint versions below 1.0. (#2711)

Fixed

  • Use absolute path in the git pre push hook
  • palantirJavaFormat is no longer arbitrarily set to outdated versions on Java 17, latest available version is always used (#2686 fixes #2685)

Added

  • <forbidModuleImports> API for java (#2679)

Lib v3.0.2

Fixed

  • Node.JS-based tasks now work with the configuration cache (#2372)
  • Eclipse-based tasks can now handle parallel configuration (#2389)

Lib v3.0.1

Fixed

  • Deployment was missing part of the CDT formatter, now fixed. (#2384)

Lib v3.0.0

Headline changes

  • All steps now support roundtrip serialization (end of #987).
  • Spotless now supports linting in addition to formatting.

Changed

  • Allow setting Eclipse config from a string, not only from files (#2337)
  • Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
  • Add Sort Members feature based on Eclipse JDT implementation. (#2312)
  • Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
  • Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
  • Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
  • Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
  • Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

  • You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
  • The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

Maven Plugin v3.0.0

Changes

  • BREAKING Bump the required Java to 17. (#2375, #2540)
  • BREAKING Renamed removeWildcardImports to forbidWildcardImports. (#2633)
  • BREAKING spotless:install-git-pre-push-hook task is now always installed in the root .git/hooks directory by resolving the top-level project base directory. (#2570)
  • Bump JGit from 6.10.1 to 7.3.0 (#2257)

... (truncated)

Changelog

Sourced from com.diffplug.spotless:spotless-maven-plugin's changelog.

[3.1.0] - 2025-02-20

Added

  • Support forclang-format on maven-plugin (#2406)
  • Allow overriding classLoader for all JarStates to enable spotless-cli (#2427)

[3.0.2] - 2025-01-14

Fixed

  • Node.JS-based tasks now work with the configuration cache (#2372)
  • Eclipse-based tasks can now handle parallel configuration (#2389)

[3.0.1] - 2025-01-07

Fixed

  • Deployment was missing part of the CDT formatter, now fixed. (#2384)

[3.0.0] - 2025-01-06

Headline changes

  • All steps now support roundtrip serialization (end of #987).
  • Spotless now supports linting in addition to formatting.

Changed

  • Allow setting Eclipse config from a string, not only from files (#2337)
  • Bump default ktlint version to latest 1.3.0 -> 1.4.0. (#2314)
  • Add Sort Members feature based on Eclipse JDT implementation. (#2312)
  • Bump default jackson version to latest 2.18.0 -> 2.18.1. (#2319)
  • Bump default ktfmt version to latest 0.52 -> 0.53. (#2320)
  • Bump default ktlint version to latest 1.4.0 -> 1.5.0. (#2354)
  • Bump minimum eclipse-cdt version to 11.0 (removed support for 10.7). (#2373)
  • Bump default eclipse version to latest 4.32 -> 4.34. (#2381)

Fixed

  • You can now use removeUnusedImports and googleJavaFormat at the same time again. (fixes #2159)
  • The default list of type annotations used by formatAnnotations now includes Jakarta Validation's Valid and constraints validations (fixes #2334)

[3.0.0.BETA4] - 2024-10-24

Added

  • APIs to support linting. (implemented in #2148, #2149, #2307)
    • Spotless is still primarily a formatter, not a linter. But when formatting fails, it's more flexible to model those failures as lints so that the formatting can continue and ideally we can also capture the line numbers causing the failure.
    • Lint models a single change. A FormatterStep can create a lint by:
      • throwing an exception during formatting, ideally throw Lint.atLine(127, "code", "Well what happened was...")
      • or by implementing the List<Lint> lint(String content, File file) method to create multiple of them
  • Support for line ending policy PRESERVE which just takes the first line ending of every given file as setting (no matter if \n, \r\n or \r) (#2304)

Changed

  • BREAKING Moved PaddedCell.DirtyState to its own top-level class with new methods. (#2148)
    • BREAKING Removed isClean, applyTo, and applyToAndReturnResultIfDirty from Formatter because users should instead use DirtyState.
  • FenceStep now uses ConfigurationCacheHack. (#2378 fixes #2317)

Fixed

  • ktlint steps now read from the string instead of the file so they don't clobber earlier steps. (fixes #1599)

[3.0.0.BETA3] - 2024-10-15

Added

... (truncated)

Commits
  • 62eff17 Published lib/3.1.0
  • d88a76e feat: allow overriding JarSate classloader (to enable cli) (#2427)
  • 06c6ca8 chore: insert created PR#
  • 8ee1dfe chore: provide test to make sure overriding classloader works
  • 88d3c31 chore: update changelog for reflecting overridable classLoader in JarState
  • f519ed3 feat: allow overriding classLoader for jarstate
  • a410e9f adopt maven plugin development from gradle x (#2423 closes #2395)
  • fd5970c chore(deps): update plugin com.gradle.develocity to v3.19.2 (#2425)
  • cdb609e added changelog info in the right place
  • d6154e3 added changelog info
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.25.1 to 3.30.5

Commits
  • a00dec5 [maven-release-plugin] prepare release 3.30.5
  • 519dd46 Merge pull request #1688 from gsmet/quarkus-3.30.5
  • 1279e69 Upgrade to Quarkus 3.30.5
  • be476d9 [maven-release-plugin] prepare for next development iteration
  • 4cd017e [maven-release-plugin] prepare release 3.30.4
  • 0179c1d Merge pull request #1687 from gsmet/quarkus-3.30.4
  • 68899f3 Upgrade to Quarkus 3.30.4
  • 4dd368b [maven-release-plugin] prepare for next development iteration
  • 5b2a86b [maven-release-plugin] prepare release 3.30.3
  • b590444 Merge pull request #1681 from gsmet/quarkus-3.30.3
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.25.1` | `3.30.5` |
| [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.25.1` | `3.30.5` |
| [io.smallrye:jandex-maven-plugin](https://github.com/smallrye/jandex) | `3.4.0` | `3.5.3` |
| [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `2.46.1` | `3.1.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |


Updates `io.quarkus.platform:quarkus-bom` from 3.25.1 to 3.30.5
- [Commits](quarkusio/quarkus-platform@3.25.1...3.30.5)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.25.1 to 3.30.5
- [Commits](quarkusio/quarkus-platform@3.25.1...3.30.5)

Updates `io.smallrye:jandex-maven-plugin` from 3.4.0 to 3.5.3
- [Release notes](https://github.com/smallrye/jandex/releases)
- [Changelog](https://github.com/smallrye/jandex/blob/main/RELEASE_PROCEDURE.md)
- [Commits](smallrye/jandex@3.4.0...3.5.3)

Updates `com.diffplug.spotless:spotless-maven-plugin` from 2.46.1 to 3.1.0
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.46.1...lib/3.1.0)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.25.1 to 3.30.5
- [Commits](quarkusio/quarkus-platform@3.25.1...3.30.5)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

---
updated-dependencies:
- dependency-name: io.quarkus.platform:quarkus-bom
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.smallrye:jandex-maven-plugin
  dependency-version: 3.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 1, 2026
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jan 1, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant