Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 11, 2025

Bumps the build-dependencies group with 4 updates: org.asciidoctor:asciidoctorj, org.sonarsource.scanner.maven:sonar-maven-plugin, org.junit:junit-bom and com.gradle:common-custom-user-data-maven-extension.

Updates org.asciidoctor:asciidoctorj from 3.0.0 to 3.0.1

Release notes

Sourced from org.asciidoctor:asciidoctorj's releases.

v3.0.1

Documentation

  • cli.adoc - describe how to run AsciidoctorJ using JBang

Improvements

  • Upgrade to asciidoctorj-pdf 2.3.26 (#1316)
  • Upgrade to asciidoctorj-epub 2.2.0 (#1300)
  • Upgrade to asciidoctorj-diagram 3.0.1 (#1316)
  • Upgrade to asciidoctorj-revealjs 5.2.0 (#1300)
  • Upgrade to JRuby 9.4.14.0 (#1313)

Bug Fixes

Build Improvement

  • Move to new plugin suite org.ysb33r.jruby for installing ruby gems (#1293)
  • Upgrade build to Gradle 8.12 (#1293)
  • Upgrade gh action upload-artifact to v4 (#1294)

New Contributors

Full Changelog: asciidoctor/asciidoctorj@v3.0.0...v3.0.1

Changelog

Sourced from org.asciidoctor:asciidoctorj's changelog.

== 3.0.1 (2025-11-06)

Documentation::

  • cli.adoc - describe how to run AsciidoctorJ using JBang

Improvements::

  • Upgrade to asciidoctorj-pdf 2.3.26 (#1316)
  • Upgrade to asciidoctorj-epub 2.2.0 (#1300)
  • Upgrade to asciidoctorj-diagram 3.0.1 (#1316)
  • Upgrade to asciidoctorj-revealjs 5.2.0 (#1300)
  • Upgrade to JRuby 9.4.14.0 (#1313)

Bug Fixes::

Build Improvement::

  • Move to new plugin suite org.ysb33r.jruby for installing ruby gems (#1293)
  • Upgrade build to Gradle 8.12 (#1293)
  • Upgrade gh action upload-artifact to v4 (#1294)
Commits

Updates org.sonarsource.scanner.maven:sonar-maven-plugin from 5.2.0.4988 to 5.3.0.6276

Release notes

Sourced from org.sonarsource.scanner.maven:sonar-maven-plugin's releases.

5.3.0.6276

Release notes - Sonar Scanner for Maven - 5.3

Bug

SCANMAVEN-283 Mvn 4.0.0-rc-3 breaks scanner because change of API

SCANMAVEN-308 Toolchains are not properly discovered by the scanner with Maven 4

Task

SCANMAVEN-297 Update README.md with copy from Product Marketing

SCANMAVEN-301 PrepareNextIteration.yml: add recent improvements

SCANMAVEN-302 Update GH release and releasability actions

SCANMAVEN-303 Delete mend_scan_task

SCANMAVEN-305 Migrate Cirrus build to Github actions

SCANMAVEN-307 Migrate QA from Cirrus to Github action

SCANMAVEN-309 Prevent injection in PrepareNextIteration GHA

SCANMAVEN-310 Exclude test projects from SCA

SCANMAVEN-311 Upgrade dependencies

SCANMAVEN-314 Fix ProxyTest on GitHub actions

SCANMAVEN-315 Rework QA: split invoker-based ITs and Orchestrator-based e2e

SCANMAVEN-325 Update license header from SonarSource SA to SonarSource Sàrl

SCANMAVEN-326 Delete Cirrus CI config

SCANMAVEN-327 Use explicit build number

Commits
  • 4fcd9b1 SCANMAVEN-326 Delete Cirrus CI config (#345)
  • b38cf6e SCANMAVEN-327 Use explicit build number (#346)
  • 3cc18b9 SCANMAVEN-325 Update license header from SonarSource SA to SonarSource Sàrl
  • 472f0c3 SCANMAVEN-310 Exclude E2E test projects from sca analysis after move
  • 4a248b4 SCANMAVEN-314 Fix ProxyTest on GitHub Actions
  • c4a3521 SCANMAVEN-315 Split invoker-based ITs and Orchestrator-based e2e
  • 1d568c1 SCANMAVEN-308 Fix toolchains support in Maven 4
  • 7c181df SCANMAVEN-283 Code refactoring, to avoid using mutable lists
  • 44e3b0c SCANMAVEN-311 Upgrade orchestrator to version 5.6.2.2625
  • 479c11d SCANMAVEN-311 Upgrade jsonassert to version 1.5.3
  • Additional commits viewable in compare view

Updates org.junit:junit-bom from 6.0.0 to 6.0.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.1 = Platform 6.0.1 + Jupiter 6.0.1 + Vintage 6.0.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.0...r6.0.1

Commits

Updates com.gradle:common-custom-user-data-maven-extension from 2.0.6 to 2.0.7

Release notes

Sourced from com.gradle:common-custom-user-data-maven-extension's releases.

2.0.7

  • [FIX] Added a null-safety check to handle cases where the Maven session may be null
Commits
  • 683a966 [maven-release-plugin] prepare release v2.0.7
  • 13455be Update changes.md
  • 4f371c8 Merge pull request #327 from gradle/dependabot/maven/com.gradle-develocity-ma...
  • 6992f86 Merge pull request #328 from gradle/dependabot/maven/org.apache.maven.plugins...
  • d05b17b Bump org.apache.maven.plugins:maven-release-plugin from 3.1.1 to 3.2.0
  • 838e1ae Merge pull request #315 from gradle/iv/check_mavenSession_null
  • 383a2bc Bump com.gradle:develocity-maven-extension from 2.2 to 2.2.1
  • 06e4cff Merge pull request #326 from gradle/dependabot/maven/org.junit.jupiter-junit-...
  • a550fbf Bump org.junit.jupiter:junit-jupiter from 5.13.4 to 6.0.1
  • d68dbcc Merge pull request #325 from gradle/dependabot/github_actions/actions/upload-...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the build-dependencies group with 4 updates: [org.asciidoctor:asciidoctorj](https://github.com/asciidoctor/asciidoctorj), [org.sonarsource.scanner.maven:sonar-maven-plugin](https://github.com/SonarSource/sonar-scanner-maven), [org.junit:junit-bom](https://github.com/junit-team/junit-framework) and [com.gradle:common-custom-user-data-maven-extension](https://github.com/gradle/common-custom-user-data-maven-extension).


Updates `org.asciidoctor:asciidoctorj` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/asciidoctor/asciidoctorj/releases)
- [Changelog](https://github.com/asciidoctor/asciidoctorj/blob/main/CHANGELOG.adoc)
- [Commits](asciidoctor/asciidoctorj@v3.0.0...v3.0.1)

Updates `org.sonarsource.scanner.maven:sonar-maven-plugin` from 5.2.0.4988 to 5.3.0.6276
- [Release notes](https://github.com/SonarSource/sonar-scanner-maven/releases)
- [Commits](SonarSource/sonar-scanner-maven@5.2.0.4988...5.3.0.6276)

Updates `org.junit:junit-bom` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.0.1)

Updates `com.gradle:common-custom-user-data-maven-extension` from 2.0.6 to 2.0.7
- [Release notes](https://github.com/gradle/common-custom-user-data-maven-extension/releases)
- [Commits](gradle/common-custom-user-data-maven-extension@v2.0.6...v2.0.7)

---
updated-dependencies:
- dependency-name: org.asciidoctor:asciidoctorj
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: org.sonarsource.scanner.maven:sonar-maven-plugin
  dependency-version: 5.3.0.6276
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: build-dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
- dependency-name: com.gradle:common-custom-user-data-maven-extension
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: build-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 11, 2025
@marko-bekhta marko-bekhta merged commit 02ad020 into main Nov 11, 2025
7 checks passed
@dependabot dependabot bot deleted the dependabot/maven/build-dependencies-c84ce46d42 branch November 11, 2025 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants