Skip to content

Bump the maven group across 1 directory with 4 updates#183

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/maven-7b0e2f7fa9
Open

Bump the maven group across 1 directory with 4 updates#183
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/maven-7b0e2f7fa9

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps the maven group with 4 updates in the / directory: net.lingala.zip4j:zip4j, org.xerial:sqlite-jdbc, org.tukaani:xz and org.apache.maven.plugins:maven-compiler-plugin.

Updates net.lingala.zip4j:zip4j from 2.11.5 to 2.11.6

Release notes

Sourced from net.lingala.zip4j:zip4j's releases.

v2.11.6

New features:

  • #497 Create split zip file from stream

Improvements:

  • Bump assertj version
  • Bump min jdk versions to 8
Commits

Updates org.xerial:sqlite-jdbc from 3.51.1.0 to 3.51.2.0

Release notes

Sourced from org.xerial:sqlite-jdbc's releases.

Release 3.51.2.0

Changelog

🚀 Features

sqlite

  • upgrade to sqlite 3.51.2 (63a45e7)

🛠 Build

  • update location for 2026 (1a7c2a0)

Contributors

We'd like to thank the following people for their contributions: Gauthier Roebroeck

Release 3.51.1.1

Changelog

🚀 Features

sqlite

🛠 Build

deps

  • bump org.graalvm.sdk:nativeimage from 25.0.1 to 25.0.2 (e5e8aca)
  • bump org.graalvm.buildtools:native-maven-plugin (92e995c)
  • bump org.jreleaser:jreleaser-maven-plugin (1ba2ff1)
  • bump actions/upload-artifact from 5 to 6 (77e1e27)
  • bump actions/download-artifact from 6 to 7 (1f35b97)
  • bump org.apache.maven.plugins:maven-source-plugin (8384f5b)

deps-dev

  • bump org.apache.maven.plugins:maven-compiler-plugin (0d07829)
  • bump org.codehaus.mojo:versions-maven-plugin (2a61f25)
  • bump org.mockito:mockito-core from 5.20.0 to 5.21.0 (f8de260)

Contributors

We'd like to thank the following people for their contributions: Gauthier, Gauthier Roebroeck

Commits
  • 1bda411 chore(release): 3.51.2.0 [skip ci]
  • 9a84abd chore: update native libraries
  • 1a7c2a0 build: update location for 2026
  • 63a45e7 feat(sqlite): upgrade to sqlite 3.51.2
  • 92e40c1 chore(release): prepare next snapshot [skip ci]
  • 5e1a6a4 chore(release): 3.51.1.1 [skip ci]
  • 0d07829 build(deps-dev): bump org.apache.maven.plugins:maven-compiler-plugin
  • e5e8aca build(deps): bump org.graalvm.sdk:nativeimage from 25.0.1 to 25.0.2
  • 92e995c build(deps): bump org.graalvm.buildtools:native-maven-plugin
  • 2a61f25 build(deps-dev): bump org.codehaus.mojo:versions-maven-plugin
  • Additional commits viewable in compare view

Updates org.tukaani:xz from 1.11 to 1.12

Changelog

Sourced from org.tukaani:xz's changelog.

1.12 (2026-03-01)

  • Fix ArrayIndexOutOfBoundsException in the LZMA/LZMA2 encoder on x86-64 and ARM64 when running on Java 9 or newer. The affected code isn't used on Java 8. The bug is present in versions 1.10 and 1.11. If one cannot upgrade, one should set the property org.tukaani.xz.MatchLengthFinder=Basic to disable the affected code path.

  • Fix ArrayCache usage in LZMAInputStream. If ArrayCache was enabled, decompression was likely to fail quickly when the cache returns a cached array. ArrayCache is disabled by default.

  • The binaries of 1.12 in the Maven Central require Java 8 and contain optimized classes for Java >= 9 as multi-release JAR. They were built with OpenJDK 21.0.10 on GNU/Linux and can be reproduced using the following command:

    SOURCE_DATE_EPOCH=1772370000 TZ=UTC0 ant maven
    
Commits
  • 107a519 Bump the version number to 1.12
  • 3061152 Update NEWS.md for 1.12
  • 0ecee25 Refactor EXTRA_SIZE to getExtraSize()
  • ac1aeb1 Fix ArrayIndexOutOfBoundsException in the LZMA/LZMA2 encoder
  • 12c75fd Fix ArrayCache usage with LZMAInputStream
  • e52d9ad SHA256SUMS: Add 1.11 files
  • 9a755ec CI: Add missing SPDX tags
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.15.0

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 9290cb3 [maven-release-plugin] prepare release maven-compiler-plugin-3.15.0
  • 3657d40 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
  • 7bbf805 Bump plexusCompilerVersion from 2.16.1 to 2.16.2
  • 57fa938 Bump org.apache.maven.plugins:maven-plugins from 46 to 47
  • 385e3f2 Fix Java 25 compatibility during integration tests (#1020)
  • 6b34423 Bump org.apache.maven.plugins:maven-plugins from 45 to 46
  • aaeb9c6 [MCOMPILER-540] useIncrementalCompilation=false may add generated sources to ...
  • 6e3db9d Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2
  • 0fe9b84 Remove declaration of "plexus-snapshots" repository (#1010)
  • 35f6800 Bump org.ow2.asm:asm from 9.9 to 9.9.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven group with 4 updates in the / directory: [net.lingala.zip4j:zip4j](https://github.com/srikanth-lingala/zip4j), [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc), [org.tukaani:xz](https://github.com/tukaani-project/xz-java) and [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin).


Updates `net.lingala.zip4j:zip4j` from 2.11.5 to 2.11.6
- [Release notes](https://github.com/srikanth-lingala/zip4j/releases)
- [Commits](srikanth-lingala/zip4j@v2.11.5...v2.11.6)

Updates `org.xerial:sqlite-jdbc` from 3.51.1.0 to 3.51.2.0
- [Release notes](https://github.com/xerial/sqlite-jdbc/releases)
- [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG)
- [Commits](xerial/sqlite-jdbc@3.51.1.0...3.51.2.0)

Updates `org.tukaani:xz` from 1.11 to 1.12
- [Release notes](https://github.com/tukaani-project/xz-java/releases)
- [Changelog](https://github.com/tukaani-project/xz-java/blob/master/NEWS.md)
- [Commits](tukaani-project/xz-java@v1.11...v1.12)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

---
updated-dependencies:
- dependency-name: net.lingala.zip4j:zip4j
  dependency-version: 2.11.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.xerial:sqlite-jdbc
  dependency-version: 3.51.2.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven
- dependency-name: org.tukaani:xz
  dependency-version: '1.12'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code size/XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants