Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 22, 2025

Bumps org.assertj:assertj-core from 3.27.4 to 3.27.5.

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.17.7 #3947
  • Upgrade to JUnit BOM 5.13.4 #3947

Guava

  • Upgrade to Guava 33.4.8-jre #3947
Commits
  • dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
  • 1d0defc Add missing permission to release workflow
  • 844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
  • bdd7106 Add CodeQL custom workflow
  • a93d7e6 Remove EOL Java 24
  • 26ea866 Update production dependencies (#3947)
  • c294435 Pin GitHub Actions dependencies, switch to weekly update schedule (#3932)
  • 1b4ac27 [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5.
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.5)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 22, 2025
@mergify
Copy link
Contributor

mergify bot commented Sep 22, 2025

🧪 CI Insights

Here's what we observed from your CI run for 18930f4.

🟢 All jobs passed!

But CI Insights is watching 👀

@mergify mergify bot merged commit cf32a96 into main Sep 24, 2025
11 checks passed
mergify bot added a commit that referenced this pull request Sep 24, 2025
… 3.14.0 to 3.14.1 [skip ci]

Bumps [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.14.0 to 3.14.1.
Release notes

*Sourced from [org.apache.maven.plugins:maven-compiler-plugin's releases](https://github.com/apache/maven-compiler-plugin/releases).*

> 3.14.1
> ------
>
> 🚀 New features and improvements
> -------------------------------
>
> * Improve DeltaList behavior for large projects ([#335](https://redirect.github.com/apache/maven-compiler-plugin/pull/335)) [`@​gsmet`](https://github.com/gsmet)
> * Allow to not use --module-version for the Java compiler ([#331](https://redirect.github.com/apache/maven-compiler-plugin/pull/331)) [`@​pzygielo`](https://github.com/pzygielo)
>
> 🐛 Bug Fixes
> -----------
>
> * Add generatedSourcesPath back to the maven project ([#312](https://redirect.github.com/apache/maven-compiler-plugin/pull/312)) [`@​mensinda`](https://github.com/mensinda)
> * [[MCOMPILER-538]](https://issues.apache.org/jira/browse/MCOMPILER-538) - Do not add target/generated-sources/annotations to the source roots ([#191](https://redirect.github.com/apache/maven-compiler-plugin/pull/191)) [`@​mensinda`](https://github.com/mensinda)
>
> 📦 Dependency updates
> --------------------
>
> * Enforce asm version used here, to not depend on brittle transitive ([#964](https://redirect.github.com/apache/maven-compiler-plugin/pull/964)) [`@​olamy`](https://github.com/olamy)
> * Bump mavenVersion from 3.9.10 to 3.9.11 ([#952](https://redirect.github.com/apache/maven-compiler-plugin/pull/952)) @[dependabot[bot]](https://github.com/apps/dependabot)
> * Bump org.apache.maven.plugins:maven-plugins from 44 to 45 ([#935](https://redirect.github.com/apache/maven-compiler-plugin/pull/935)) @[dependabot[bot]](https://github.com/apps/dependabot)
> * Bump mavenVersion from 3.9.9 to 3.9.10 ([#336](https://redirect.github.com/apache/maven-compiler-plugin/pull/336)) @[dependabot[bot]](https://github.com/apps/dependabot)
> * Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0 ([#324](https://redirect.github.com/apache/maven-compiler-plugin/pull/324)) @[dependabot[bot]](https://github.com/apps/dependabot)
> * Bump org.apache.maven.plugins:maven-plugins from 43 to 44 ([#316](https://redirect.github.com/apache/maven-compiler-plugin/pull/316)) @[dependabot[bot]](https://github.com/apps/dependabot)


Commits

* [`0df6940`](apache/maven-compiler-plugin@0df6940) [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
* [`1bf9e5a`](apache/maven-compiler-plugin@1bf9e5a) Enforce asm version used here, to not depend on brittle transitive ([#964](https://redirect.github.com/apache/maven-compiler-plugin/issues/964))
* [`f5161c4`](apache/maven-compiler-plugin@f5161c4) Bump mavenVersion from 3.9.10 to 3.9.11 ([#952](https://redirect.github.com/apache/maven-compiler-plugin/issues/952))
* [`63846f1`](apache/maven-compiler-plugin@63846f1) Improve DeltaList behavior for large projects ([#335](https://redirect.github.com/apache/maven-compiler-plugin/issues/335))
* [`ab3f845`](apache/maven-compiler-plugin@ab3f845) Bump org.apache.maven.plugins:maven-plugins from 44 to 45
* [`164bad4`](apache/maven-compiler-plugin@164bad4) Allow to not use --module-version for the Java compiler
* [`0b76ccd`](apache/maven-compiler-plugin@0b76ccd) Bump mavenVersion from 3.9.9 to 3.9.10
* [`5dbc9c3`](apache/maven-compiler-plugin@5dbc9c3) Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
* [`17949d1`](apache/maven-compiler-plugin@17949d1) Bump org.apache.maven.plugins:maven-plugins from 43 to 44 ([#316](https://redirect.github.com/apache/maven-compiler-plugin/issues/316))
* [`d44d1be`](apache/maven-compiler-plugin@d44d1be) Add generatedSourcesPath back to the maven project
* Additional commits viewable in [compare view](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=org.apache.maven.plugins:maven-compiler-plugin&package-manager=maven&previous-version=3.14.0&new-version=3.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot dependabot bot deleted the dependabot/maven/org.assertj-assertj-core-3.27.5 branch September 24, 2025 06:23
mergify bot added a commit that referenced this pull request Nov 24, 2025
… 2.21.0 to 2.22.0 [skip ci]

Bumps [org.openrewrite.recipe:rewrite-static-analysis](https://github.com/openrewrite/rewrite-static-analysis) from 2.21.0 to 2.22.0.
Release notes

*Sourced from [org.openrewrite.recipe:rewrite-static-analysis's releases](https://github.com/openrewrite/rewrite-static-analysis/releases).*

> 2.22.0
> ------
>
> What's Changed
> --------------
>
> * Prevent `AnnotateNullableMethods` from failing on TypeScript sources by [`@​greg-at-moderne`](https://github.com/greg-at-moderne) in [openrewrite/rewrite-static-analysis#773](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/773)
> * Fix CombineSemanticallyEqualCatchBlocks for inner exception types by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#772](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/772)
> * Handle single quotes in ReplaceStringBuilderWithString by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#775](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/775)
> * Prevent `ReplaceLambdaWithMethodReference` in nested generic/overloaded contexts by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#776](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/776)
> * Fix ReplaceLambdaWithMethodReference for local records and classes by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#777](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/777)
> * Move nullable annotations to array types by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#778](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/778)
> * Annotate nullable array type parameters by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#779](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/779)
> * Annotate required parameters with `@NonNull` and remove throws by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#782](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/782)
> * Skip UnnecessaryCatch after any missing types via a precondition by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#784](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/784)
> * Run `UnnecessaryCatch` after `UnnecessaryThrows` to remove unused catch clauses by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#785](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/785)
> * Add JavascriptFileChecker to selectively skip JavaScript files by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#787](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/787)
> * Fix `RemoveUnusedLocalVariables` to preserve assignments with side effects by [`@​timtebeek`](https://github.com/timtebeek) in [openrewrite/rewrite-static-analysis#741](https://redirect.github.com/openrewrite/rewrite-static-analysis/pull/741)
>
> **Full Changelog**: <openrewrite/rewrite-static-analysis@v2.21.0...v2.22.0>


Commits

* [`4d6fd83`](openrewrite/rewrite-static-analysis@4d6fd83) Fix `RemoveUnusedLocalVariables` to preserve assignments with side effects (#...
* [`16dc1da`](openrewrite/rewrite-static-analysis@16dc1da) Add JavascriptFileChecker to selectively skip JavaScript files ([#787](https://redirect.github.com/openrewrite/rewrite-static-analysis/issues/787))
* [`c1712c2`](openrewrite/rewrite-static-analysis@c1712c2) Update documentation examples
* [`af53ce1`](openrewrite/rewrite-static-analysis@af53ce1) Run `UnnecessaryCatch` after `UnnecessaryThrows` to remove unused catch claus...
* [`b670b5a`](openrewrite/rewrite-static-analysis@b670b5a) Skip UnnecessaryCatch after any missing types via a precondition ([#784](https://redirect.github.com/openrewrite/rewrite-static-analysis/issues/784))
* [`0f1d5db`](openrewrite/rewrite-static-analysis@0f1d5db) Annotate required parameters with `@NonNull` and remove throws ([#782](https://redirect.github.com/openrewrite/rewrite-static-analysis/issues/782))
* [`02e09d0`](openrewrite/rewrite-static-analysis@02e09d0) Annotate nullable array type parameters ([#779](https://redirect.github.com/openrewrite/rewrite-static-analysis/issues/779))
* [`0f25051`](openrewrite/rewrite-static-analysis@0f25051) Move nullable annotations to array types ([#778](https://redirect.github.com/openrewrite/rewrite-static-analysis/issues/778))
* [`995c2d3`](openrewrite/rewrite-static-analysis@995c2d3) Fix `ReplaceLambdaWithMethodReference` for local records and classes ([#336](https://redirect.github.com/openrewrite/rewrite-static-analysis/issues/336)) (...
* [`0ea5975`](openrewrite/rewrite-static-analysis@0ea5975) Prevent `ReplaceLambdaWithMethodReference` in nested generic/overloaded conte...
* Additional commits viewable in [compare view](openrewrite/rewrite-static-analysis@v2.21.0...v2.22.0)
  
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility\_score?dependency-name=org.openrewrite.recipe:rewrite-static-analysis&package-manager=maven&previous-version=2.21.0&new-version=2.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
  
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show  ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file dependency_approved java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants