[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.fasterxml.woodstox:woodstox-core	7.2.2 → 7.3.0
org.sonarsource.sonarlint.core:sonarlint-rpc-java-client (source)	12.0.0.87449 → 12.0.2.87499
org.sonarsource.sonarlint.core:sonarlint-rpc-impl (source)	12.0.0.87449 → 12.0.2.87499
org.sonarsource.sonarlint.core:sonarlint-core (source)	12.0.0.87449 → 12.0.2.87499
org.mockito:mockito-core	5.23.0 → 5.24.0
ch.qos.logback:logback-classic (source, changelog)	1.6.3 → 1.6.4

---

Release Notes

mockito/mockito (org.mockito:mockito-core)

v5.24.0

Compare Source

^{Changelog generated by Shipkit Changelog Gradle Plugin}

5.24.0

• 2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]
• Fix Mockito docs for -javaagent flag with Gradle (#​3866)
• Kotlin example for adding Mockito as an agent is incorrect (#​3864)
• Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#​3862)
• Bump gradle/actions from 6.2.0 to 6.3.0 (#​3852)
• Bump gradle/actions from 5 to 6.2.0 (#​3851)
• Preserve method parameters when clearing inline mocks (#​3847)
• Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#​3845)
• Print object fields via reflection when toString() is not implemented (#​3844)
• Migrate extensions-tests to JUnit Jupiter (#​3840)
• Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#​3839)
• docs(when-verify): fixes to explanations about redundancy (#​3838)
• Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc (#​3837)
• Bump actions/checkout from 6 to 7 (#​3836)
• Fixes #​2740 : Add mockMaker option to @Spy annotation (#​3835)
• Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 (#​3834)
• Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 (#​3833)
• Bump codecov/codecov-action from 6 to 7 (#​3831)
• Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 (#​3830)
• Fix clearInlineMocks not de-registering singleton mocks (#​3829)
• Fix NotAMockException when using mockSingleton with MockitoJUnit (#​3827)
• NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit (#​3826)
• Improve Gradle agent docs for configuration cache (#​3823)
• Gradle documentation for setting up instrumentation with Gradle configuration cache (#​3822)
• Fixes #​3818 : Fix data race in InvocationContainerImpl.invocationForStubbing (#​3819)
• Data race on invocationForPotentialStubbing (#​3818)
• Fixes #​3814 : implement package-level clinit suppression (#​3815)
• Package-level clinit suppression (#​3814)
• Upgrade Android Gradle Plugin to 8.13.2 (#​3812)
• Replaces raw generic types with type parameters (#​3806)
• Fixes #​2398 : Implement global suppress static initialization leveraging java agent (#​3801)
• Bump codecov/codecov-action from 5 to 6 (#​3800)
• Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#​3406, #​2823) (#​3795)
• Fixes #​3536 : Implement SpyStatic API (#​3794)
• The class's MethodParameters are removed after clearAllCaches is invoked (#​3763)
• [FeatureRequest / Idea] Create Mockito.spyStatic (#​3536)
• Add option to specify mockmaker for @Spy (#​2740)
• How can I suppress static initializer? (#​2398)

---

Configuration

📅 Schedule: (in timezone CET)

• Branch creation
  • "before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties

FAILURE: Build failed with an exception.

* Where:
Settings file '/tmp/renovate/repos/github/SonarSource/sonar-php/settings.gradle.kts' line: 21

* What went wrong:
Error resolving plugin [id: 'org.sonarsource.cloud-native.common-settings']
> A problem occurred configuring project ':common'.
   > Could not resolve all artifacts for configuration 'classpath'.
      > Could not resolve org.sonarsource.scanner.lib:sonar-scanner-java-library:4.1.1.1633.
        Required by:
            buildscript of project ':common' > org.sonarqube:org.sonarqube.gradle.plugin:7.3.1.8318 > org.sonarsource.scanner.gradle:sonarqube-gradle-plugin:7.3.1.8318
         > Could not resolve org.sonarsource.scanner.lib:sonar-scanner-java-library:4.1.1.1633.
            > Could not get resource 'https://repo.maven.apache.org/maven2/org/sonarsource/scanner/lib/sonar-scanner-java-library/4.1.1.1633/sonar-scanner-java-library-4.1.1.1633.pom'.
               > Could not GET 'https://repo.maven.apache.org/maven2/org/sonarsource/scanner/lib/sonar-scanner-java-library/4.1.1.1633/sonar-scanner-java-library-4.1.1.1633.pom'. Received status code 403 from server: Forbidden
         > Could not resolve org.sonarsource.scanner.lib:sonar-scanner-java-library:4.1.1.1633.
            > Could not get resource 'https://plugins.gradle.org/m2/org/sonarsource/scanner/lib/sonar-scanner-java-library/4.1.1.1633/sonar-scanner-java-library-4.1.1.1633.pom'.
               > Could not GET 'https://repo.maven.apache.org/maven2/org/sonarsource/scanner/lib/sonar-scanner-java-library/4.1.1.1633/sonar-scanner-java-library-4.1.1.1633.pom'. Received status code 403 from server: Forbidden

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.

BUILD FAILED in 37s

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: SONARPHP-1954

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[ZiadMarey]

LGTM!