chore(deps): bump the maven-minor-patch group with 8 updates by dependabot[bot] · Pull Request #16 · cyphera-labs/keychain-java

dependabot · 2026-07-15T04:02:31Z

Bumps the maven-minor-patch group with 8 updates:

Package	From	To
software.amazon.awssdk:bom	`2.42.35`	`2.48.0`
com.google.cloud:libraries-bom	`26.80.0`	`26.85.0`
com.fasterxml.jackson.core:jackson-databind	`2.17.0`	`2.22.1`
commons-logging:commons-logging	`1.3.1`	`1.4.0`
com.azure:azure-security-keyvault-keys	`4.10.6`	`4.11.1`
com.azure:azure-identity	`1.18.2`	`1.18.4`
org.apache.maven.plugins:maven-surefire-plugin	`3.2.5`	`3.5.6`
org.sonatype.central:central-publishing-maven-plugin	`0.10.0`	`0.11.0`

Updates software.amazon.awssdk:bom from 2.42.35 to 2.48.0

Updates com.google.cloud:libraries-bom from 26.80.0 to 26.85.0

Release notes

Sourced from com.google.cloud:libraries-bom's releases.

GCP Libraries BOM 26.85.0

Here are the differences from the previous version (26.84.0)

New Addition

com.google.cloud:google-cloud-logging-logback:0.143.0-alpha

com.google.cloud:google-cloud-agentregistry:0.1.0

The group ID of the following artifacts is com.google.cloud.

Notable Changes

Other libraries

auth: Add support for Regional Access Boundaries (#13499) (b721e43)

automate libraries-bom tag and release creation on release publish (#13655) (7a7e2ff)

bigquery-jdbc: add EnableProjectDiscovery connection property for metadata methods (#13344) (ab9669a)

bigquery-jdbc: migrate statement execution thread tracking to connection-scoped executor (#13454) (341e51a)

bigquery-jdbc: respect standard JVM trustStore properties by default (#13435) (7af3224)

bigquery-jdbc: support connection-scoped executor isolation and dynamic queue warnings (#13413) (79e26b8)

bigquery: add internal listProjects API to core client (#13429) (3580407)

bigtable: route point read rows to shim (#13542) (2c7e5f5)

enable self-signed JWTs by default in ServiceOptions (#13338) (110d2b7)

gapic-generator: Add NullMarked annotation to generated classes (#13517) (825dadd)

google/cloud/agentregistry/v1: onboard a new library (#13509) (6728816)

scale up connection worker pool based on latency (#13384) (eb379b3)

spanner: add settings for gRCP keep-alive (#13643) (9d78307)

spanner: auth login support for Spanner Omni endpoints (#13470) (55930b4)

storage: add checksum validation in the json read channel (#13270) (872d7b7)

storage: add checksum validation on json read paths (#13269) (396b042)

storage: add full object checksum validation for bidi flow (#13266) (9113d80)

storage: add full object checksum validation for grpc flow (#13265) (a5ba606)

storage: Adding CumulativeHasher wrapper class for Full object … (#13239) (bd40324)

storage: adding disabling option for bidi reads (#13506) (591cae0)

storage: log additional bytes received from GCS in read path (#13427) (9492aa2)

storage: update compose sample to support deleteSourceObjects option (#13493) (50a8658)

use self-signed JWTs in Spanner MutableCredentials (#13381) (29543a2)

Add logging-logback to gapic-libraries-bom (#13663) (512e370)

auth: Fix UserCredentials serialization clientSecret leak (#13465) (2d9d01c)

auth: handle missing APPDATA on Windows gracefully (#13471) (77e84a9), closes #12565

bigquery-jdbc: add proper version to BigQueryDriver (#13294) (9fd84fc)

bigquery-jdbc: avoid rollback on statement close in manual commit mode (#13503) (79bbee1)

bigquery-jdbc: correct FilterTablesOnDefaultDataset fallback logic (#13625) (f7eb23d)

bigquery-jdbc: ensure largeResults are handled in PreparedStatement (#13496) (d3e7a19)

bigquery-jdbc: ensure test uses unique dataset & cleans up (#13587) (a6bb362)

bigquery-jdbc: explicitly set location when available for temporary dataset (#13508) (40cd0a7)

bigquery-jdbc: propagate connection proxy settings to auth library (#13539) (87dda5d)

bigquery-jdbc: shade org.slf4j (#13547) (7ef1312)

... (truncated)

Commits

See full diff in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.22.1

Commits

See full diff in compare view

Updates commons-logging:commons-logging from 1.3.1 to 1.4.0

Changelog

Sourced from commons-logging:commons-logging's changelog.

Apache Commons Logging 1.4.0 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.4.0.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

Fixed Bugs
          Use the new Apache oak leaf logo. Thanks to Gary Gregory.
          Fix broken URLs in website links. Thanks to Stanimir Stamenkov, Gary Gregory.
          Add support for Jakarta servlets, see org.apache.commons.logging.jakarta.ServletContextCleaner [#419](https://github.com/apache/commons-logging/issues/419). Thanks to Kiril Keranov, Gary Gregory.
Changes
          Bump org.apache.commons:commons-parent from 97 to 102. Thanks to Gary Gregory.
          Bump log4j2.version from 2.25.3 to 2.26.0. Thanks to Gary Gregory, Dependabot.
          Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18. Thanks to Gary Gregory, Dependabot.
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes.html

Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi

For complete information on Apache Commons Logging, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Logging website:

https://commons.apache.org/proper/commons-logging/

Apache Commons Logging 1.3.6 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.6.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

... (truncated)

Commits

ff5ff39 Prepare for the release candidate 1.4.0 RC1
a685f33 Prepare for the next release candidate
a253ab6 Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
d6c9b81 Javadoc
1cf45b2 Update legacy GitHub links in CONTRIBUTING.md
9b48b5b Bump org.apache.commons:commons-parent from 101 to 102.
7a44cb6 Bump GH CI actions/dependency-review-action from 4.9.0 to 5.0.0
e884661 Bump GH CI actions/checkout from 6.0.2 to 6.0.3
f6ad6f9 Bump org.apache.commons:commons-parent from 100 to 101
b468740 Bump github/codeql-action from 4.36.0 to 4.36.2
Additional commits viewable in compare view

Updates com.azure:azure-security-keyvault-keys from 4.10.6 to 4.11.1

Release notes

Sourced from com.azure:azure-security-keyvault-keys's releases.

com.azure+azure-security-keyvault-secrets_4.11.1

4.11.1 (2026-07-01)

Other Changes

Dependency Updates

Upgraded azure-core from 1.58.0 to version 1.58.1.

Upgraded azure-core-http-netty from 1.16.4 to version 1.16.5.

com.azure+azure-security-keyvault-keys_4.11.1

4.11.1 (2026-07-01)

Other Changes

Dependency Updates

Upgraded azure-core from 1.58.0 to version 1.58.1.

Upgraded azure-core-http-netty from 1.16.4 to version 1.16.5.

Commits

267933a [EG] Monthly patch release for May 2022 (#28894)
da7fb2a base
f6442ac Increment version for securityinsights releases (#28887)
6b290cd [Automation] Generate Fluent Lite from securityinsights#package-preview-2022-...
e4274f6 Increment version for recoveryservicesbackup releases (#28883)
76be4e6 mgmt, regen resources/storage/compute (#28846)
98acdf2 [Automation] Generate Fluent Lite from recoveryservicesbackup#package-2022-02...
dae1de7 change the subscribe() for checkpointer to block() in javadoc (#28855)
527a22b udpate reference yaml for 4.1.0 release (#28852)
2230d6e Release (#28879)
Additional commits viewable in compare view

Updates com.azure:azure-identity from 1.18.2 to 1.18.4

Commits

0df233b Updating SDK dependencies for azure-identity-broker
cd57fce Updating the SDK dependencies for azure-identity
e6db36e Reset changes to the patch version.
71680b8 Added auth and CFS step to partner release pipeline (#49452)
df3114f [Automation] Generate SDK based on TypeSpec 0.45.3 (#49467)
c995ad5 Increment package versions for cloudhealth releases (#49462)
4b547c9 Validate iss and aud claims on AAD/B2C OIDC login ID token decoders (#49423)
ff8a3bf eng, remove code generation for swagger/autorest (#49438)
3bc83be Update helper function to print nested exception details. (#49447)
4f8efdd Update the skills in tools repo to match specs repo (#49444)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.6

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.6

🚀 New features and improvements

Introduce reportTestTimestamp option and include timestamp for test sets and test cases (#3261) (#3302) @olamy

🐛 Bug Fixes

Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_socket at address' is not displayed anymore when using maven.surefire.debug (#3353) (#3354) @olamy

Ensure that the statistics filename is calculated only once. (#3326) (#3327) @olamy

Add flakes attribute to use in testsuite report (#3306) (#3308) @olamy

[BACKPORT 3.5.x] [SUREFIRE-2049] - Fix SHUTDOWN type lost during command serialization. (#3270) (#3289) @olamy

fix: null guard for context map (#3269) (#3272) @olamy

👻 Maintenance

3.5.x/bug/cherry pick embedded mode its (#3328) @olamy

Use surefire 3.5.5 by project itself for testing (#3324) @slawekjaranowski

Follow Oracle javadoc guidelines (#3177) @elharo

📦 Dependency updates

Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3 (#3334) @dependabot[bot]

Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#3350) @dependabot[bot]

3.5.5

🚀 New features and improvements

Replace runing external process and parsing output with simple ProcessHandle if available (Java9+) (#3252) @olamy

Pass slf4j context to spawned thread (#3241) @scottrw93

[SUREFIRE-3239] - allow override of statistics file checksum (#3247) @XN137

Reduce log level for skipped tests result to info (#3232) @strangelookingnerd

🐛 Bug Fixes

Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)

Properly work with test failures caused during beforeAll phase (#3194) @Frawless

📝 Documentation updates

Clarify how late placeholder replacement (@{...}) deals with (#3208) @kwin

👻 Maintenance

Fix Jenkin badges in README (#3254) @slawekjaranowski

Use JUnit5 in failsafe ITs (#3251) @slawekjaranowski

Remove long-deprecated unused encoding property from VerifyMojo (#3198) @Tomlincoln

Add IT and deal with corner cases of handling beforeAll failures (#3200) @Frawless

Revert PR #3194 that handle beforeAll failures to follow proper contributing rules (#3211) @Frawless

... (truncated)

Commits

25ea054 [maven-release-plugin] prepare release surefire-3.5.6
e5f374c Bump org.fusesource.jansi:jansi from 2.4.2 to 2.4.3
dadd55b Issue #2613 Debugging failsafe tests: Message 'Listening for transport dt_soc...
39dd250 Bump commons-io:commons-io from 2.21.0 to 2.22.0
2774273 Ensure that the statistics filename is calculated only once. (#3326) (#3327)
0d5df8a 3.5.x/bug/cherry pick embedded mode its (#3328)
04ad9a2 Use surefire 3.5.5 by project itself for testing
37e8f69 Add flakes attribute to use in testsuite report (#3306) (#3308)
a970fef Introduce reportTestTimestamp option and include timestamp for test sets and ...
e838393 deploy 3.5.x branch to nexus
Additional commits viewable in compare view

Updates org.sonatype.central:central-publishing-maven-plugin from 0.10.0 to 0.11.0

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-minor-patch group with 8 updates: | Package | From | To | | --- | --- | --- | | software.amazon.awssdk:bom | `2.42.35` | `2.48.0` | | [com.google.cloud:libraries-bom](https://github.com/googleapis/google-cloud-java) | `26.80.0` | `26.85.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.17.0` | `2.22.1` | | [commons-logging:commons-logging](https://github.com/apache/commons-logging) | `1.3.1` | `1.4.0` | | [com.azure:azure-security-keyvault-keys](https://github.com/Azure/azure-sdk-for-java) | `4.10.6` | `4.11.1` | | [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) | `1.18.2` | `1.18.4` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.2.5` | `3.5.6` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin) | `0.10.0` | `0.11.0` | Updates `software.amazon.awssdk:bom` from 2.42.35 to 2.48.0 Updates `com.google.cloud:libraries-bom` from 26.80.0 to 26.85.0 - [Release notes](https://github.com/googleapis/google-cloud-java/releases) - [Changelog](https://github.com/googleapis/google-cloud-java/blob/main/CHANGELOG.md) - [Commits](https://github.com/googleapis/google-cloud-java/commits/libraries-bom/v26.85.0) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.17.0 to 2.22.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `commons-logging:commons-logging` from 1.3.1 to 1.4.0 - [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-logging@rel/commons-logging-1.3.1...rel/commons-logging-1.4.0) Updates `com.azure:azure-security-keyvault-keys` from 4.10.6 to 4.11.1 - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](Azure/azure-sdk-for-java@com.azure+azure-security-keyvault-keys_4.10.6...azure-messaging-eventgrid_4.11.1) Updates `com.azure:azure-identity` from 1.18.2 to 1.18.4 - [Release notes](https://github.com/Azure/azure-sdk-for-java/releases) - [Commits](Azure/azure-sdk-for-java@com.azure+azure-identity_1.18.2...com.azure+azure-identity_1.18.4) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.5 to 3.5.6 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.2.5...surefire-3.5.6) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.11.0 - [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits) --- updated-dependencies: - dependency-name: software.amazon.awssdk:bom dependency-version: 2.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor-patch - dependency-name: com.google.cloud:libraries-bom dependency-version: 26.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor-patch - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor-patch - dependency-name: commons-logging:commons-logging dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor-patch - dependency-name: com.azure:azure-security-keyvault-keys dependency-version: 4.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor-patch - dependency-name: com.azure:azure-identity dependency-version: 1.18.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor-patch - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-minor-patch - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 15, 2026

dependabot Bot requested a review from lgutschow as a code owner July 15, 2026 04:02

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 15, 2026

dependabot Bot mentioned this pull request Jul 15, 2026

chore(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.17.0 to 2.22.1 #10

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the maven-minor-patch group with 8 updates#16

chore(deps): bump the maven-minor-patch group with 8 updates#16
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-minor-patch-564d214244

dependabot Bot commented on behalf of github Jul 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026

New Addition

Notable Changes

Other libraries

Apache Commons Logging 1.4.0 Release Notes

Changes in this version

Fixed Bugs

Changes

Apache Commons Logging 1.3.6 Release Notes

com.azure+azure-security-keyvault-secrets_4.11.1

4.11.1 (2026-07-01)

Other Changes

Dependency Updates

com.azure+azure-security-keyvault-keys_4.11.1

4.11.1 (2026-07-01)

Other Changes

Dependency Updates

3.5.6

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants