chore(deps): bump the minor-patch group across 1 directory with 17 updates by dependabot[bot] · Pull Request #148 · cap-java/cds-ai

dependabot · 2026-10-22T07:34:32Z

Bumps the minor-patch group with 17 updates in the / directory:

Package	From	To
com.sap.cds:cds-services-bom	`5.0.2`	`5.1.1`
com.sap.cds:cds-maven-plugin	`5.0.2`	`5.1.1`
com.sap.cloud.sdk:sdk-bom	`5.33.0`	`5.35.0`
org.mockito:mockito-bom	`5.23.0`	`5.24.0`
com.github.ben-manes.caffeine:caffeine	`3.2.4`	`3.3.1`
com.sap.cds:cds-maven-plugin	`5.0.2`	`5.1.1`
org.apache.maven.plugins:maven-compiler-plugin	`3.15.0`	`3.16.0`
org.apache.maven.plugins:maven-deploy-plugin	`3.1.4`	`3.2.0`
org.apache.maven.plugins:maven-surefire-plugin	`3.5.6`	`3.6.0`
org.apache.maven.plugins:maven-failsafe-plugin	`3.5.6`	`3.6.0`
com.github.spotbugs:spotbugs-maven-plugin	`4.10.3.0`	`4.10.5.0`
com.diffplug.spotless:spotless-maven-plugin	`3.9.0`	`3.10.4`
org.sonatype.central:central-publishing-maven-plugin	`0.11.0`	`0.12.0`
com.sap.ai.sdk:core	`1.22.0`	`1.25.0`
com.sap.ai.sdk.foundationmodels:sap-rpt	`1.22.0`	`1.25.0`
com.sap.ai.sdk.foundationmodels:sap-rpt	`1.22.0`	`1.25.0`
org.springframework.boot:spring-boot-dependencies	`4.1.0`	`4.1.1`
org.springframework.boot:spring-boot-maven-plugin	`4.1.0`	`4.1.1`
org.springframework.boot:spring-boot-maven-plugin	`4.1.0`	`4.1.1`
org.codehaus.mojo:exec-maven-plugin	`3.6.3`	`3.6.4`

Updates com.sap.cds:cds-services-bom from 5.0.2 to 5.1.1

Updates com.sap.cds:cds-maven-plugin from 5.0.2 to 5.1.1

Updates com.sap.cloud.sdk:sdk-bom from 5.33.0 to 5.35.0

Release notes

Sourced from com.sap.cloud.sdk:sdk-bom's releases.

Release 5.35.0

What's Changed

Add disclaimer in the ReadMe for WIP status by @jjtang1985 in SAP/cloud-sdk-java#17

Big Pipeline Update by @MatKuhr in SAP/cloud-sdk-java#18

Improve sanity check pipeline by @MatKuhr in SAP/cloud-sdk-java#23

Add CodeQL security scan by @KevinHudemann in SAP/cloud-sdk-java#24

Update Blackduck Action by @KevinHudemann in SAP/cloud-sdk-java#25

Add step for snapshot deployments by @KevinHudemann in SAP/cloud-sdk-java#26

Read Blackduck excludes from modules-inventory.json by @KevinHudemann in SAP/cloud-sdk-java#27

Test archetypes by @daniel-kurzynski in SAP/cloud-sdk-java#28

Enforce threshold for JaCoCo and improve config by @KevinHudemann in SAP/cloud-sdk-java#29

Notify via slack in case CI workflow on main fails by @daniel-kurzynski in SAP/cloud-sdk-java#31

Add checkstyle by @daniel-kurzynski in SAP/cloud-sdk-java#30

Add checkstyle rule for TODO and FIXME comments by @KevinHudemann in SAP/cloud-sdk-java#40

Remove OpenAPI CLI module by @cschubertcs in SAP/cloud-sdk-java#42

Update Fosstars workflow and trigger scan on every push by @KevinHudemann in SAP/cloud-sdk-java#41

Improve release workflow by @KevinHudemann in SAP/cloud-sdk-java#39

Chore: Adjust Release Audience of scp-cf-spring-jakarta by @Johannes-Schneider in SAP/cloud-sdk-java#45

Add create module inventory script by @KevinHudemann in SAP/cloud-sdk-java#57

Improve perform release by @KevinHudemann in SAP/cloud-sdk-java#53

Fix reading the version from build in deploy-snapshots step by @KevinHudemann in SAP/cloud-sdk-java#59

JavaDoc as HTML and JARs by @KevinHudemann in SAP/cloud-sdk-java#58

Create support issue template by @CharlesDuboisSAP in SAP/cloud-sdk-java#68

Release to Maven Central by @stippi2 in SAP/cloud-sdk-java#78

Fix scheduled sanity pipeline by @daniel-kurzynski in SAP/cloud-sdk-java#82

Fix build pipeline after merging deployment to Maven Central by @stippi2 in SAP/cloud-sdk-java#80

Migrate all main/v5 code to OSS repo by @stippi2 in SAP/cloud-sdk-java#83

322 - remove CURRENT_TENANT_THEN_PROVIDER by @rnewbigging in SAP/cloud-sdk-java#86

Enable ServiceBinding based OnPremise Proxy resolution by @newtork in SAP/cloud-sdk-java#87

Force Java 17 for CodeQL, same as in normal CI workflow by @stippi2 in SAP/cloud-sdk-java#88

HttpClient5 to own module by @rnewbigging in SAP/cloud-sdk-java#90

Remove Frameworks parent module by @rnewbigging in SAP/cloud-sdk-java#92

Deploy snapshots to Maven central by @KevinHudemann in SAP/cloud-sdk-java#94

Fix: Add providerTenantId to MegacliteServiceBinding by @CharlesDuboisSAP in SAP/cloud-sdk-java#98

fix: Update Javadoc Overview Page by @CharlesDuboisSAP in SAP/cloud-sdk-java#100

Update XSUAA Security Library to 2.14.2 by @newtork in SAP/cloud-sdk-java#97

Change ScpCf modules behaviour with DwC bindings by @CharlesDuboisSAP in SAP/cloud-sdk-java#104

Fix DwC-test-app: Made ScpCfDestinationRetrievalStrategy.ofIdentifier() public by @CharlesDuboisSAP in SAP/cloud-sdk-java#105

Used ProxyHandler in MegacliteDestination connectivity test by @CharlesDuboisSAP in SAP/cloud-sdk-java#107

[OpenAPI] Ignore getCustomFieldNames() method from default Jackson serialization by @newtork in SAP/cloud-sdk-java#102

Fix: Silently Ignore Resilience for multiple ResilienceDecorationStrategies - Alternative by @Johannes-Schneider in SAP/cloud-sdk-java#115

Migrate OData header deduplication by @cschubertcs in SAP/cloud-sdk-java#114

Refactor: Remove CloudPlatform classes by @Johannes-Schneider in SAP/cloud-sdk-java#111

feat: Add error handling for incorrect destination configuration in HttpClientWrapper by @CharlesDuboisSAP in SAP/cloud-sdk-java#112

feat: Add new Pull Request template for SAP Cloud SDK Java repository by @CharlesDuboisSAP in SAP/cloud-sdk-java#116

Minor syntax change in OAuth2ServiceBindingDestinationLoader by @newtork in SAP/cloud-sdk-java#96

feature: Introduce OAuth2 caching by @cschubertcs in SAP/cloud-sdk-java#106

Use all runner cores for mvn executions by @stippi2 in SAP/cloud-sdk-java#85

feat: Update PR template to automatically close associated issue by @CharlesDuboisSAP in SAP/cloud-sdk-java#118

Multitenancy Refactor by @rnewbigging in SAP/cloud-sdk-java#101

... (truncated)

Commits

dc8d1cd Update to version 5.35.0
9ea1e6a chore: [DevOps] bump the github-actions group with 2 updates (#1295)
de45ef9 revert: migrate odata v2/v4 to Apache HttpClient 5 and scope CSRF token inter...
44fe831 chore: [DevOps] bump the test group with 4 updates (#1288)
0efc39a chore: [DevOps] bump the production-minor-patch group with 14 updates (#1287)
9a4692a fix: KeyStoreReader fails to decrypt PBES2/PBKDF2-encrypted destinati… (#1282)
d139237 fix: scope CSRF token interceptor to OData clients only (#1281)
03fbc68 chore: [DevOps] bump the production-minor-patch group with 3 updates (#1283)
f105d85 chore: [DevOps] bump the test group with 2 updates (#1285)
8fa1e54 chore: [DevOps] bump the plugins group with 2 updates (#1284)
Additional commits viewable in compare view

Updates org.mockito:mockito-bom from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-bom's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]

Fix Mockito docs for -javaagent flag with Gradle [(#3866)](mockito/mockito#3866)

Kotlin example for adding Mockito as an agent is incorrect [(#3864)](mockito/mockito#3864)

Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 [(#3862)](mockito/mockito#3862)

Bump gradle/actions from 6.2.0 to 6.3.0 [(#3852)](mockito/mockito#3852)

Bump gradle/actions from 5 to 6.2.0 [(#3851)](mockito/mockito#3851)

Preserve method parameters when clearing inline mocks [(#3847)](mockito/mockito#3847)

Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 [(#3845)](mockito/mockito#3845)

Print object fields via reflection when toString() is not implemented [(#3844)](mockito/mockito#3844)

Migrate extensions-tests to JUnit Jupiter [(#3840)](mockito/mockito#3840)

Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 [(#3839)](mockito/mockito#3839)

docs(when-verify): fixes to explanations about redundancy [(#3838)](mockito/mockito#3838)

Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc [(#3837)](mockito/mockito#3837)

Bump actions/checkout from 6 to 7 [(#3836)](mockito/mockito#3836)

Fixes #2740 : Add mockMaker option to @Spy annotation [(#3835)](mockito/mockito#3835)

Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 [(#3834)](mockito/mockito#3834)

Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 [(#3833)](mockito/mockito#3833)

Bump codecov/codecov-action from 6 to 7 [(#3831)](mockito/mockito#3831)

Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 [(#3830)](mockito/mockito#3830)

Fix clearInlineMocks not de-registering singleton mocks [(#3829)](mockito/mockito#3829)

Fix NotAMockException when using mockSingleton with MockitoJUnit [(#3827)](mockito/mockito#3827)

NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit [(#3826)](mockito/mockito#3826)

Improve Gradle agent docs for configuration cache [(#3823)](mockito/mockito#3823)

Gradle documentation for setting up instrumentation with Gradle configuration cache [(#3822)](mockito/mockito#3822)

Fixes #3818 : Fix data race in InvocationContainerImpl.invocationForStubbing [(#3819)](mockito/mockito#3819)

Data race on invocationForPotentialStubbing [(#3818)](mockito/mockito#3818)

Fixes #3814 : implement package-level clinit suppression [(#3815)](mockito/mockito#3815)

Package-level clinit suppression [(#3814)](mockito/mockito#3814)

Upgrade Android Gradle Plugin to 8.13.2 [(#3812)](mockito/mockito#3812)

Replaces raw generic types with type parameters [(#3806)](mockito/mockito#3806)

Fixes #2398 : Implement global suppress static initialization leveraging java agent [(#3801)](mockito/mockito#3801)

Bump codecov/codecov-action from 5 to 6 [(#3800)](mockito/mockito#3800)

Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#3406, #2823) [(#3795)](mockito/mockito#3795)

Fixes #3536 : Implement SpyStatic API [(#3794)](mockito/mockito#3794)

The class's MethodParameters are removed after clearAllCaches is invoked [(#3763)](mockito/mockito#3763)

[FeatureRequest / Idea] Create Mockito.spyStatic [(#3536)](mockito/mockito#3536)

Add option to specify mockmaker for @Spy [(#2740)](mockito/mockito#2740)

How can I suppress static initializer? [(#2398)](mockito/mockito#2398)

Commits

5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
e7fd06d Preserve method parameters when clearing inline mocks (#3847)
5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
Additional commits viewable in compare view

Updates com.github.ben-manes.caffeine:caffeine from 3.2.4 to 3.3.1

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

3.3.1

Added a workaround for ForkJoinPool queue corruption caused by resubmitting a reusable ForkJoinTask (#2021)

Improved JCache read performance when using access expiration

Fixed various minor issues found using AI audits

3.3.0

Improved read performance by avoiding false sharing in the fast-path check

Improved adaptive climber for small caches and shifting workloads

Fixed various minor issues found using AI audits

Fixed over-aggressive refresh discard (#1970)

Commits

aabb242 record the prefix-cache and warm-up findings
0117302 stop JCache access expiry from writing every hit
27fc6b8 skip rewriting an unchanged deadline on a read
7f87a7e restore coverage lost to recent fixes
75e2dc0 minor polish
5155a5a use nullRef() for null futures rejected by NullAway's generic inference (#2023)
998978c Avoid reusing a ForkJoinTask for maintenance (fixes #2021)
6999bfd add the Qwen Bailian prefix-cache traces
76dcbb5 fix canary test races and misc cleanups
7f46a43 pad the eviction sizes off the hit path's lines
Additional commits viewable in compare view

Updates com.sap.cds:cds-maven-plugin from 5.0.2 to 5.1.1

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.16.0

🚀 New features and improvements

Recompile when dependencies change (#1102) @wilx

Fix incremental detection of empty sources, 3.x (#1075) @wilx

🐛 Bug Fixes

[MCOMPILER-578] - Track outputs across compiler executions (#1091) @wilx

Build fails when annotation processor list is empty (but present) (#1077) @wilx

[MCOMPILER-374] - Unable to compile MR-JAR code against older directories when module-info.java is present (#1093) @wilx

Make mcompiler-120 IT locale independent (#1063) @anilvdl

📝 Documentation updates

[MCOMPILER-569] - Document implicitly compiled excluded sources (#1092) @wilx

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

👻 Maintenance

Avoid using deprecated method CompilerConfiguration.setCompilerVersion (#1121) @slawekjaranowski

Replace adopt-openj9 by semeru JDK distribution on GH (#1122) @slawekjaranowski

Port the site documentation from APT to Markdown (#1110) @slachiewicz

Verify against Maven 4.0.0-rc-6 (#1105) @slachiewicz

Fix tests on Jenkins (#1100) @slawekjaranowski

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#1074) @potiuk

Refactor compiler mojo to use dependency injection and improve string… (#1066) @slachiewicz

Fix ITs for Maven 3.10.x (#1061) @slawekjaranowski

Update maven-surefire-plugin version to 3.x in the MCOMPILER-481 IT (#1035) @cdouillard

📦 Dependency updates

Bump plexusCompilerVersion from 2.16.2 to 2.17.0 (#1112) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#1113) @dependabot[bot]

use latest Maven 4 (#1045) @hboutemy

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#1083) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#1082) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#1084) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#1068) @dependabot[bot]

Bump org.apache.maven.plugins:maven-invoker-plugin from 3.9.1 to 3.10.1 (#1047) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#1050) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.16 (#1054) @dependabot[bot]

Bump org.ow2.asm:asm from 9.10 to 9.10.1 (#1059) @dependabot[bot]

Bump org.ow2.asm:asm from 9.9.1 to 9.10 (#1053) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#1041) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#1038) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#1032) @dependabot[bot]

Commits

e7bba6e [maven-release-plugin] prepare release maven-compiler-plugin-3.16.0
c906809 Avoid using deprecated method CompilerConfiguration.setCompilerVersion
ad74fee Replace adopt-openj9 by semeru JDK distribution on GH
beb0eda Recompile when dependencies change (#1102)
a0b689e [MCOMPILER-578] Track outputs across compiler executions (#1091)
2e81228 Fix incremental detection of empty sources, 3.x (#1075)
2132f5b configure ATR project
5992b77 Build fails when annotation processor list is empty (but present) (#1077)
acccef7 Bump plexusCompilerVersion from 2.16.2 to 2.17.0
72bc445 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-deploy-plugin from 3.1.4 to 3.2.0

Release notes

Sourced from org.apache.maven.plugins:maven-deploy-plugin's releases.

3.2.0

🚀 New features and improvements

Cache projectsWithDeployExecution to fix O(N²) reactor scan (#697) @slawekjaranowski

🐛 Bug Fixes

Backport security audit fixes to 3.x (f004-f008, f010, f012) (#701) @gnodet

📝 Documentation updates

Clarify deploy without editing this projects POM (#694) @slawekjaranowski

Restore the plain form of the ASF licence header (#688) @slachiewicz

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#674) @potiuk

👻 Maintenance

Simplify remote repository creation (#696) @slawekjaranowski

Restore the plain form of the ASF licence header (#688) @slachiewicz

enable build with Maven 4 (#655) @hboutemy

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#674) @potiuk

Migration to JUnit 5 - avoid using AbstractMojoTestCase (#643) @slawekjaranowski

Migration to JUnit 5 - avoid using AbstractMojoTestCase in DeployFileMojoTest (#629) @slawekjaranowski

Bump m-invoker-p to 3.9.1 (#627) @slachiewicz

Feature/apt to md 3.x (#620) @kwin

🔧 Build

update deployAtEnd ITs to match latest 4 behaviour (#667) @hboutemy

📦 Dependency updates

Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml from 4 to 5 (#681) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml from 4 to 5 (#679) @dependabot[bot]

Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml from 4 to 5 (#680) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#671) @dependabot[bot]

Bump mavenVersion from 3.9.15 to 3.9.16 (#665) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#662) @dependabot[bot]

Bump mavenVersion from 3.9.14 to 3.9.15 (#657) @dependabot[bot]

Bump mavenVersion from 3.9.13 to 3.9.14 (#654) @dependabot[bot]

Bump mavenVersion from 3.9.12 to 3.9.13 (#648) @dependabot[bot]

Bump resolverVersion from 1.9.26 to 1.9.27 (#646) @dependabot[bot]

Bump resolverVersion from 1.9.25 to 1.9.26 (#642) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.5.0 to 3.5.1 (#640) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 46 to 47 (#639) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#637) @dependabot[bot]

Bump org.apache.maven.plugins:maven-plugins from 45 to 46 (#636) @dependabot[bot]

Bump mavenVersion from 3.9.11 to 3.9.12 (#634) @dependabot[bot]

Bump resolverVersion from 1.9.24 to 1.9.25 (#631) @dependabot[bot]

... (truncated)

Commits

7aab9fb [maven-release-plugin] prepare release maven-deploy-plugin-3.2.0
1f3eef5 Backport security audit fixes to 3.x (f004-f008, f010, f012)
307f328 Simplify remote repository creation
7b1bbc4 Cache projectsWithDeployExecution to fix O(N²) reactor scan
a9177c6 Clarify deploy without editing this projects POM
7c40513 Restore the plain form of the ASF licence header
5969234 Update Release Drafter configuration to use custom tag template and remove un...
df7b3fa Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
b4e8aed work around Maven 4 CLI lack of interpolation
d634bb4 enable build with Maven 4
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (#3447)
b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.6 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

…dates Bumps the minor-patch group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | com.sap.cds:cds-services-bom | `5.0.2` | `5.1.1` | | com.sap.cds:cds-maven-plugin | `5.0.2` | `5.1.1` | | [com.sap.cloud.sdk:sdk-bom](https://github.com/SAP/cloud-sdk-java) | `5.33.0` | `5.35.0` | | [org.mockito:mockito-bom](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` | | [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `3.2.4` | `3.3.1` | | com.sap.cds:cds-maven-plugin | `5.0.2` | `5.1.1` | | [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.15.0` | `3.16.0` | | [org.apache.maven.plugins:maven-deploy-plugin](https://github.com/apache/maven-deploy-plugin) | `3.1.4` | `3.2.0` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.6` | `3.6.0` | | [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin) | `4.10.3.0` | `4.10.5.0` | | [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) | `3.9.0` | `3.10.4` | | [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin) | `0.11.0` | `0.12.0` | | [com.sap.ai.sdk:core](https://github.com/SAP/ai-sdk-java) | `1.22.0` | `1.25.0` | | [com.sap.ai.sdk.foundationmodels:sap-rpt](https://github.com/SAP/ai-sdk-java) | `1.22.0` | `1.25.0` | | [com.sap.ai.sdk.foundationmodels:sap-rpt](https://github.com/SAP/ai-sdk-java) | `1.22.0` | `1.25.0` | | [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` | | [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` | | [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `4.1.0` | `4.1.1` | | [org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin) | `3.6.3` | `3.6.4` | Updates `com.sap.cds:cds-services-bom` from 5.0.2 to 5.1.1 Updates `com.sap.cds:cds-maven-plugin` from 5.0.2 to 5.1.1 Updates `com.sap.cloud.sdk:sdk-bom` from 5.33.0 to 5.35.0 - [Release notes](https://github.com/SAP/cloud-sdk-java/releases) - [Changelog](https://github.com/SAP/cloud-sdk-java/blob/main/release_notes.md) - [Commits](SAP/cloud-sdk-java@rel/5.33.0...rel/5.35.0) Updates `org.mockito:mockito-bom` from 5.23.0 to 5.24.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.23.0...v5.24.0) Updates `com.github.ben-manes.caffeine:caffeine` from 3.2.4 to 3.3.1 - [Release notes](https://github.com/ben-manes/caffeine/releases) - [Commits](ben-manes/caffeine@v3.2.4...v3.3.1) Updates `com.sap.cds:cds-maven-plugin` from 5.0.2 to 5.1.1 Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.15.0 to 3.16.0 - [Release notes](https://github.com/apache/maven-compiler-plugin/releases) - [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.15.0...maven-compiler-plugin-3.16.0) Updates `org.apache.maven.plugins:maven-deploy-plugin` from 3.1.4 to 3.2.0 - [Release notes](https://github.com/apache/maven-deploy-plugin/releases) - [Commits](apache/maven-deploy-plugin@maven-deploy-plugin-3.1.4...maven-deploy-plugin-3.2.0) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.6 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.6...surefire-3.6.0) Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.3.0 to 4.10.5.0 - [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases) - [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.3.0...spotbugs-maven-plugin-4.10.5.0) Updates `com.diffplug.spotless:spotless-maven-plugin` from 3.9.0 to 3.10.4 - [Release notes](https://github.com/diffplug/spotless/releases) - [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md) - [Commits](diffplug/spotless@maven/3.9.0...maven/3.10.4) Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.11.0 to 0.12.0 - [Release notes](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/releases) - [Commits](https://github.com/sonatype-nexus-community/central-publishing-maven-plugin/commits/release-0.12.0) Updates `com.sap.ai.sdk:core` from 1.22.0 to 1.25.0 - [Release notes](https://github.com/SAP/ai-sdk-java/releases) - [Changelog](https://github.com/SAP/ai-sdk-java/blob/main/docs/release_notes.md) - [Commits](SAP/ai-sdk-java@rel/1.22.0...rel/1.25.0) Updates `com.sap.ai.sdk.foundationmodels:sap-rpt` from 1.22.0 to 1.25.0 - [Release notes](https://github.com/SAP/ai-sdk-java/releases) - [Changelog](https://github.com/SAP/ai-sdk-java/blob/main/docs/release_notes.md) - [Commits](SAP/ai-sdk-java@rel/1.22.0...rel/1.25.0) Updates `com.sap.ai.sdk.foundationmodels:sap-rpt` from 1.22.0 to 1.25.0 - [Release notes](https://github.com/SAP/ai-sdk-java/releases) - [Changelog](https://github.com/SAP/ai-sdk-java/blob/main/docs/release_notes.md) - [Commits](SAP/ai-sdk-java@rel/1.22.0...rel/1.25.0) Updates `org.springframework.boot:spring-boot-dependencies` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1) Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1) Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/spring-projects/spring-boot/releases) - [Commits](spring-projects/spring-boot@v4.1.0...v4.1.1) Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.3 to 3.6.4 - [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases) - [Commits](mojohaus/exec-maven-plugin@3.6.3...3.6.4) --- updated-dependencies: - dependency-name: com.sap.cds:cds-services-bom dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.sap.cds:cds-maven-plugin dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.sap.cloud.sdk:sdk-bom dependency-version: 5.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.mockito:mockito-bom dependency-version: 5.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.github.ben-manes.caffeine:caffeine dependency-version: 3.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.sap.cds:cds-maven-plugin dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.apache.maven.plugins:maven-compiler-plugin dependency-version: 3.16.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.apache.maven.plugins:maven-deploy-plugin dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.github.spotbugs:spotbugs-maven-plugin dependency-version: 4.10.5.0 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: com.diffplug.spotless:spotless-maven-plugin dependency-version: 3.10.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.sap.ai.sdk:core dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.sap.ai.sdk.foundationmodels:sap-rpt dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: com.sap.ai.sdk.foundationmodels:sap-rpt dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: org.springframework.boot:spring-boot-dependencies dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: org.springframework.boot:spring-boot-maven-plugin dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: org.springframework.boot:spring-boot-maven-plugin dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: org.codehaus.mojo:exec-maven-plugin dependency-version: 3.6.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from a team as a code owner October 22, 2026 07:34

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 22, 2026

Navigation Menu

Repository navigation

chore(deps): bump the minor-patch group across 1 directory with 17 updates - #148

chore(deps): bump the minor-patch group across 1 directory with 17 updates#148
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/minor-patch-273798e582

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

Release 5.35.0

What's Changed

v5.24.0

5.24.0

3.3.1

3.3.0

3.16.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

3.2.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

3.6.0

🚀 New features and improvements

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants