Skip to content

Bump the production-dependencies group across 1 directory with 9 updates #1350

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the production-dependencies group across 1 directory with 9 updates #1350

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
com.puppycrawl.tools:checkstyle 10.23.0 13.1.0
org.apache.maven.plugins:maven-compiler-plugin 3.13.0 3.14.1
org.apache.maven.plugins:maven-jar-plugin 3.4.2 3.5.0
org.yaml:snakeyaml 2.4 2.5
me.clip:placeholderapi 2.11.6 2.11.7
com.lenis0012.bukkit:loginsecurity 3.3.0 3.3.1
com.github.zigazajc007:Passky v3.0.0 v3.3.0
org.apache.maven.plugins:maven-shade-plugin 3.6.0 3.6.1
org.mariadb.jdbc:mariadb-java-client 3.5.3 3.5.7

Updates com.puppycrawl.tools:checkstyle from 10.23.0 to 13.1.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-13.1.0

Checkstyle 13.1.0 - https://checkstyle.org/releasenotes.html#Release_13.1.0

Breaking backward compatibility:

#12556 - Remove deprecated method CheckstyleAntTask:createClasspath()

New:

#18329 - ImportControl: add module attribute to allow/disallow module imports #18368 - New check: MissingOverrideOnRecordAccessor to require Override on record component accessor methods

Bug fixes:

#16087 - false positive invalid tag JavadocType #18790 - IllegalTokenText reports false positives for Unicode whitespace characters without escape sequences #18118 - Inconsistent behaviour of Indentation check #13038 - VariableDeclarationUsageDistanceCheck doesn't handle method definition properly #11103 - Indentation: Lambda in Enum causes error loop #18644 - False-negative: SummaryJavadoc:forbiddenSummaryFragments for tab-formatted code #6807 - False-positive RightCurly in google_checks since 8.20 #17561 - Google style: Override is required on explicitly declared accessor method for a record #18559 - Add missing checks to sun_checks.xml: DeclarationOrder, FallThrough, OneStatementPerLine

... (truncated)

Commits

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.13.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

3.14.0

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

... (truncated)

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.4.2 to 3.5.0

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.0

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

🔧 Build

📦 Dependency updates

Commits
  • 68d00f1 [maven-release-plugin] prepare release maven-jar-plugin-3.5.0
  • 357b9bf Update site descriptor to 2.0.0
  • 340249c Fix detecting java version for toolchains and JDK 1.8
  • 06a6245 chore: remove junit3 references
  • d302b2c Bump commons-io:commons-io from 2.20.0 to 2.21.0
  • 6081bdb Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4
  • ef8ed4c Migrate component injection to JSR-330
  • 704a35c Ignore stderr when parsing javac version from toolchain (#471)
  • 0beb969 Use maven-plugin-testing-harness version 3.4.0
  • c2624c8 Bump org.apache.maven.plugin-tools:maven-plugin-annotations (#488)
  • Additional commits viewable in compare view

Updates org.yaml:snakeyaml from 2.4 to 2.5

Commits
  • 015ab57 [maven-release-plugin] prepare for next development iteration
  • 4795519 Update info
  • 9c36c69 Introduce devcontainer
  • 0c5b3e5 fix: add debug level to internal logger
  • a65b131 Merge branch 'master' into devcontainers
  • 788a98b Update changes
  • 556b4bf Add info for devcontainer
  • 0828c39 ops: migrate deployment from OSSRH to Central Portal
  • 30d6a3a Add a test for issue 1108
  • 2da4c6d Remove unrelated code
  • Additional commits viewable in compare view

Updates me.clip:placeholderapi from 2.11.6 to 2.11.7

Updates com.lenis0012.bukkit:loginsecurity from 3.3.0 to 3.3.1

Updates com.github.zigazajc007:Passky from v3.0.0 to v3.3.0

Release notes

Sourced from com.github.zigazajc007:Passky's releases.

v3.3.0

Updated:

  • Eject unlogged players from vehicles to prevent movement.

v3.2.0

Removed:

  • Aliases /r, /l, /cp, /fcp, /fp, /fr and /fl

v3.1.0

Added:

  • Option to persist session data to a file between restarts (Thanks for @​MRRollMan)
  • Prevent monsters / entities to target you while not being logged in (Thanks to @​MRRollMan)
Commits
  • 8d76cda Eject unlogged players from vehicles to prevent movement.
  • a024b7c Remove /cp, /fcp, /fp, /fr and /fl aliases
  • 2f9e169 Remove /r and /l aliases
  • ef5b473 Bump version
  • 5ce777a Merge pull request #14 from MRRollMan/master
  • 2674f31 Merge pull request #16 from MRRollMan/fix-entity-target
  • f2a45c2 Add EntityTargetListener to handle entity targeting events
  • 6ceac20 Add option to persist session data to file between restarts
  • See full diff in compare view

Updates org.apache.maven.plugins:maven-shade-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-shade-plugin's releases.

3.6.1

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Commits
  • 06902bd [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 29e9a9d add .git
  • 844e61a use github
  • 43101f9 [maven-release-plugin] prepare release maven-shade-plugin-3.6.1
  • 2ffb28d use release drafter v4 and dependabot to updade gha as well (#750)
  • f5b590e Bump org.codehaus.mojo:mrm-maven-plugin from 1.6.0 to 1.7.0
  • eee0319 Bump org.hamcrest:hamcrest-core from 2.2 to 3.0
  • 0d5a7a4 fix upgrade, remove those useless final
  • 6e5f0f3 Bump org.apache.maven.plugins:maven-plugins from 42 to 45
  • 35febed Bump org.apache.commons:commons-compress from 1.26.2 to 1.28.0
  • Additional commits viewable in compare view

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.3 to 3.5.7

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.7

3.5.7 (Dec 2025)

Full Changelog

Key Enhancements

  • CONJ-1282 - Added TLS SNI (Server Name Indication) support
  • CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

  • CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
  • CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
  • CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
  • CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
  • CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
  • CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+

MariaDB Connector/Java 3.5.6

3.5.6 (Sep 2025)

Full Changelog

Key Enhancements

  • CONJ-1238 - rewriteBatchStatements implementation
  • CONJ-1274 - server prepared statement client failover to client prepared statement

Issues Resolved

  • CONJ-1278 - prepared statement caching enablement correction, same than 2.x
  • CONJ-1279 - metadata table name addition for 12.1 after MDEV-28933
  • CONJ-1280 - permit having multiple command with initSql option
  • CONJ-1276 - Connection#isValid(int timeout) does not obey the passed in timeout if the network is down.

MariaDB Connector/Java 3.5.5

3.5.5 (Aug 2025)

Full Changelog

Issues Resolved

  • CONJ-1265 - ensure rollback and release savepoint operation to be sent to server, even when there is no transaction in progress
  • CONJ-1270 - forceConnectionTimeZoneToSession doesn't always set the timezone to server

MariaDB Connector/Java 3.5.4

3.5.4 (Jun 2025)

Full Changelog

Key Enhancements

  • CONJ-1261 - Added caching option for loadCodecs results to improve performance

... (truncated)

Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.7 (Dec 2025)

Full Changelog

Key Enhancements

  • CONJ-1282 - Added TLS SNI (Server Name Indication) support
  • CONJ-1271 - Added MariaDbDataTruncation exception that includes MariaDB error code and error message

Issues Resolved

  • CONJ-1291 - Fixed ConnectionPoolDataSource incompatibility and connection leaks due to internal ConnectionEventListener in MariaDB Connector/J 3.5.x
  • CONJ-1286 - Fixed MariaDbPoolPinnedConnection thread-safety issue
  • CONJ-1283 - Fixed rewriteBatchedStatements introduced in 3.5.6 bug when having parentesis after VALUES parts
  • CONJ-1287 - Fixed authentication plugin multi-exchange prefix (0x01) handling introduced in MDEV-37554
  • CONJ-1290 - Fixed NullPointerException in MultiPrimaryReplicaClient
  • CONJ-1295 - Fixed MariaDbClob compilation with JDK 26+

3.5.6 (Sep 2025)

Full Changelog

Key Enhancements

  • CONJ-1238 - rewriteBatchStatements implementation
  • CONJ-1274 - server prepared statement client failover to client prepared statement

Issues Resolved

  • CONJ-1278 - prepared statement caching enablement correction, same than 2.x
  • CONJ-1279 - metadata table name addition for 12.1 after MDEV-28933
  • CONJ-1280 - permit having multiple command with initSql option
  • CONJ-1276 - Connection#isValid(int timeout) does not obey the passed in timeout if the network is down.

3.5.5 (Aug 2025)

Full Changelog

Issues Resolved

  • CONJ-1265 - ensure rollback and release savepoint operation to be sent to server, even when there is no transaction in progress
  • CONJ-1270 - forceConnectionTimeZoneToSession doesn't always set the timezone to server

3.5.4 (Jun 2025)

Full Changelog

Key Enhancements

  • CONJ-1261 - Added caching option for loadCodecs results to improve performance

... (truncated)

Commits
  • 46c3a4d [CONJ-1296] ResultSetMetaData.getSchemas() column labels might be returned in...
  • 6d9179b bump 3.5.7 version
  • 5c9b41c [CONJ-1271] Add MariaDbDataTruncation class to properly handle data truncati...
  • 1b48cd0 [CONJ-1283] fix INSERT rewrite detection when VALUES clause has trailing pare...
  • 6c0fb70 Merge branch 'fork/necposs/fix/conj-1286' into develop
  • efd77b1 [CONJ-1290] fix syncNewState to use previous client state when switching betw...
  • 0559d02 [CONJ-1291] PooledConnection behavior clarification.
  • 995eecd [CONJ-1293] add unit test
  • 52e5e20 [misc] micro optimization
  • ae3704d [misc] code style correction: fix IPUtility
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 9 updates
400d29f 
Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `10.23.0` | `13.1.0` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.13.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) | `3.4.2` | `3.5.0` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.4` | `2.5` |
| me.clip:placeholderapi | `2.11.6` | `2.11.7` |
| com.lenis0012.bukkit:loginsecurity | `3.3.0` | `3.3.1` |
| [com.github.zigazajc007:Passky](https://github.com/zigazajc007/Passky) | `v3.0.0` | `v3.3.0` |
| [org.apache.maven.plugins:maven-shade-plugin](https://github.com/apache/maven-shade-plugin) | `3.6.0` | `3.6.1` |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.3` | `3.5.7` |



Updates `com.puppycrawl.tools:checkstyle` from 10.23.0 to 13.1.0
- [Release notes](https://github.com/checkstyle/checkstyle/releases)
- [Commits](checkstyle/checkstyle@checkstyle-10.23.0...checkstyle-13.1.0)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.13.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.13.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.4.2 to 3.5.0
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.4.2...maven-jar-plugin-3.5.0)

Updates `org.yaml:snakeyaml` from 2.4 to 2.5
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.5..snakeyaml-2.4)

Updates `me.clip:placeholderapi` from 2.11.6 to 2.11.7

Updates `com.lenis0012.bukkit:loginsecurity` from 3.3.0 to 3.3.1

Updates `com.github.zigazajc007:Passky` from v3.0.0 to v3.3.0
- [Release notes](https://github.com/zigazajc007/Passky/releases)
- [Commits](zigazajc007/Passky@v3.0.0...v3.3.0)

Updates `org.apache.maven.plugins:maven-shade-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-shade-plugin/releases)
- [Commits](apache/maven-shade-plugin@maven-shade-plugin-3.6.0...maven-shade-plugin-3.6.1)

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.3 to 3.5.7
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.3...3.5.7)

---
updated-dependencies:
- dependency-name: com.puppycrawl.tools:checkstyle
  dependency-version: 13.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: me.clip:placeholderapi
  dependency-version: 2.11.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: com.lenis0012.bukkit:loginsecurity
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: com.github.zigazajc007:Passky
  dependency-version: v3.3.0
  dependency-type: direct:production
  dependency-group: production-dependencies
- dependency-name: org.apache.maven.plugins:maven-shade-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants