Skip to content

Bump the dependencies group across 1 directory with 4 updates - #2003

Merged
lukasj merged 1 commit into
masterfrom
dependabot/maven/jaxb-ri/dependencies-9bac2ba6c3
Aug 31, 2026
Merged

Bump the dependencies group across 1 directory with 4 updates#2003
lukasj merged 1 commit into
masterfrom
dependabot/maven/jaxb-ri/dependencies-9bac2ba6c3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates in the /jaxb-ri directory: org.junit.jupiter:junit-jupiter-engine, org.owasp:dependency-check-maven, org.xmlunit:xmlunit-jakarta-jaxb-impl and org.xmlunit:xmlunit-assertj3.

Updates org.junit.jupiter:junit-jupiter-engine from 6.1.2 to 6.1.3

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 6.1.3 = Platform 6.1.3 + Jupiter 6.1.3 + Vintage 6.1.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.2...r6.1.3

Commits
  • f59f60d Release 6.1.3
  • cd8ec92 Finalize 6.1.3 release notes
  • c8729f2 Restore compatibility with GraalVM 25 (#5901)
  • ddc9e74 Update graalvm/setup-graalvm action to v1.6.4 (#5959)
  • fe2c52a Update plugin org.graalvm.buildtools.native to v1.1.7 (#5923)
  • 62afc02 Delay GraalVM plugin updates for 3 days
  • 0cc2902 Skip graalVmTest task if GraalVM env vars are not set
  • f6bbfc5 Move GraalVM tests to separate test task (#5903)
  • e87e052 Update plugin org.graalvm.buildtools.native to v1.1.6 (#5899)
  • 1cd56df Update plugin org.graalvm.buildtools.native to v1.1.5 (#5880)
  • Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 12.2.2 to 13.0.0

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 13.0.0

What's Changed

... (truncated)

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Change Log

For versions 13.0.0 and above, please see the the GitHub Releases page for the change log.

Commits
  • 4aacdb1 build: prepare release v13.0.0
  • ea6c70d docs: move changelog to github releases
  • d10333c build(deps): bump logback from 1.5.32 to 1.5.34 (#8698)
  • ef5fba7 build(deps): bump open-vulnerability-clients from 9.0.5 to 9.0.6 (#8697)
  • 1547a6f chore!: drop deprecated configuration, integration options & Nexus V2 Search ...
  • cddad18 build(deps): bump org.apache.groovy:groovy-ant from 5.0.6 to 5.0.8 (#8692)
  • 78dfd95 build(deps): bump org.jsoup:jsoup from 1.22.2 to 1.23.1 (#8693)
  • 2d3be64 build(deps): bump com.fasterxml.jackson:jackson-bom from 2.22.0 to 2.22.1 (#8...
  • 57f6189 build(deps): bump httpcomponents.client.version from 5.6.2 to 5.6.3 (#8695)
  • 30af761 build(deps): bump commons-codec:commons-codec from 1.22.0 to 1.22.1 (#8696)
  • Additional commits viewable in compare view

Updates org.xmlunit:xmlunit-jakarta-jaxb-impl from 2.12.0 to 2.13.0

Release notes

Sourced from org.xmlunit:xmlunit-jakarta-jaxb-impl's releases.

XMLUnit for Java 2.13.0

This release adds new options allowing people to strengthen the security of the XML parser used during validation or XPath evaluation and adds an option to specify the locale used to parse patterns in the isDateTime placeholder.

Full list of changes:

  • added explicit settings to the Validator classes that disable (external) DTD loading during validation. The default remains to allow loading of external content as this is often a requirement during validation.

    PRs #331 and #332 by @​jmestwa-coder

  • added constructor overloads to JAXPXPathEngine to allow specifying the DocumentBuilderFactory used for the Source overloads of the selectNodes and evaluate methods.

    PRs #333 by @​jmestwa-coder

  • IsDateTimePlaceholderHandler now parses the explicit and ISO date formats using Locale.US rather than the JVM default locale so results no longer depend on the host locale. An optional second argument allows specifying a different locale as a BCP 47 language tag.

    PR #335 by @​jmestwa-coder

Changelog

Sourced from org.xmlunit:xmlunit-jakarta-jaxb-impl's changelog.

XMLUnit for Java 2.13.0 - /Released 2026-07-31/

  • added explicit settings to the Validator classes that disable (external) DTD loading during validation. The default remains to allow loading of external content as this is often a requirement during validation.

    PRs #331 and #332 by @​jmestwa-coder

  • added constructor overloads to JAXPXPathEngine to allow specifying the DocumentBuilderFactory used for the Source overloads of the selectNodes and evaluate methods.

    PRs #333 by @​jmestwa-coder

  • IsDateTimePlaceholderHandler now parses the explicit and ISO date formats using Locale.US rather than the JVM default locale so results no longer depend on the host locale. An optional second argument allows specifying a different locale as a BCP 47 language tag.

    PR #335 by @​jmestwa-coder

Commits
  • d7da10c prepare the 2.13.0 release
  • 998399d Merge pull request #336 from xmlunit/jmestwa-coder-isdatetime-locale
  • 084d1a4 add explicit test for empty second argument
  • 323c87f allow specifying locale for isDateTime pattern
  • ed2748b pin locale when parsing dates in IsDateTimePlaceholderHandler
  • f0a6fe6 Merge pull request #334 from xmlunit/add-release-notes
  • 4765a05 add release notes for #331 #332 #333 by @​jmestwa-coder
  • 9e4f6cd Merge pull request #332 from jmestwa-coder/parsing-validator-external-entities
  • 0a1885b Merge pull request #331 from jmestwa-coder/jaxp-validator-external-dtd
  • c3b7c7e Merge pull request #333 from jmestwa-coder/xpath-source-external-entities
  • Additional commits viewable in compare view

Updates org.xmlunit:xmlunit-assertj3 from 2.12.0 to 2.13.0

Release notes

Sourced from org.xmlunit:xmlunit-assertj3's releases.

XMLUnit for Java 2.13.0

This release adds new options allowing people to strengthen the security of the XML parser used during validation or XPath evaluation and adds an option to specify the locale used to parse patterns in the isDateTime placeholder.

Full list of changes:

  • added explicit settings to the Validator classes that disable (external) DTD loading during validation. The default remains to allow loading of external content as this is often a requirement during validation.

    PRs #331 and #332 by @​jmestwa-coder

  • added constructor overloads to JAXPXPathEngine to allow specifying the DocumentBuilderFactory used for the Source overloads of the selectNodes and evaluate methods.

    PRs #333 by @​jmestwa-coder

  • IsDateTimePlaceholderHandler now parses the explicit and ISO date formats using Locale.US rather than the JVM default locale so results no longer depend on the host locale. An optional second argument allows specifying a different locale as a BCP 47 language tag.

    PR #335 by @​jmestwa-coder

Changelog

Sourced from org.xmlunit:xmlunit-assertj3's changelog.

XMLUnit for Java 2.13.0 - /Released 2026-07-31/

  • added explicit settings to the Validator classes that disable (external) DTD loading during validation. The default remains to allow loading of external content as this is often a requirement during validation.

    PRs #331 and #332 by @​jmestwa-coder

  • added constructor overloads to JAXPXPathEngine to allow specifying the DocumentBuilderFactory used for the Source overloads of the selectNodes and evaluate methods.

    PRs #333 by @​jmestwa-coder

  • IsDateTimePlaceholderHandler now parses the explicit and ISO date formats using Locale.US rather than the JVM default locale so results no longer depend on the host locale. An optional second argument allows specifying a different locale as a BCP 47 language tag.

    PR #335 by @​jmestwa-coder

Commits
  • d7da10c prepare the 2.13.0 release
  • 998399d Merge pull request #336 from xmlunit/jmestwa-coder-isdatetime-locale
  • 084d1a4 add explicit test for empty second argument
  • 323c87f allow specifying locale for isDateTime pattern
  • ed2748b pin locale when parsing dates in IsDateTimePlaceholderHandler
  • f0a6fe6 Merge pull request #334 from xmlunit/add-release-notes
  • 4765a05 add release notes for #331 #332 #333 by @​jmestwa-coder
  • 9e4f6cd Merge pull request #332 from jmestwa-coder/parsing-validator-external-entities
  • 0a1885b Merge pull request #331 from jmestwa-coder/jaxp-validator-external-dtd
  • c3b7c7e Merge pull request #333 from jmestwa-coder/xpath-source-external-entities
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file Java labels Aug 11, 2026
@dependabot
Bump the dependencies group across 1 directory with 4 updates
0a0b1e7 
Bumps the dependencies group with 4 updates in the /jaxb-ri directory: [org.junit.jupiter:junit-jupiter-engine](https://github.com/junit-team/junit-framework), [org.owasp:dependency-check-maven](https://github.com/dependency-check/DependencyCheck), [org.xmlunit:xmlunit-jakarta-jaxb-impl](https://github.com/xmlunit/xmlunit) and [org.xmlunit:xmlunit-assertj3](https://github.com/xmlunit/xmlunit).


Updates `org.junit.jupiter:junit-jupiter-engine` from 6.1.2 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.2...r6.1.3)

Updates `org.owasp:dependency-check-maven` from 12.2.2 to 13.0.0
- [Release notes](https://github.com/dependency-check/DependencyCheck/releases)
- [Changelog](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md)
- [Commits](dependency-check/DependencyCheck@v12.2.2...v13.0.0)

Updates `org.xmlunit:xmlunit-jakarta-jaxb-impl` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

Updates `org.xmlunit:xmlunit-assertj3` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/xmlunit/xmlunit/releases)
- [Changelog](https://github.com/xmlunit/xmlunit/blob/main/RELEASE_NOTES.md)
- [Commits](xmlunit/xmlunit@v2.12.0...v2.13.0)

---
updated-dependencies:
- dependency-name: org.junit.jupiter:junit-jupiter-engine
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: org.owasp:dependency-check-maven
  dependency-version: 13.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-assertj3
  dependency-version: 2.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.xmlunit:xmlunit-jakarta-jaxb-impl
  dependency-version: 2.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/jaxb-ri/dependencies-9bac2ba6c3 branch from b79fbe7 to 0a0b1e7 Compare August 31, 2026 04:03
@lukasj
lukasj merged commit a85974e into master Aug 31, 2026
5 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/jaxb-ri/dependencies-9bac2ba6c3 branch August 31, 2026 07:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@lukasj lukasj lukasj approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file Java

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@lukasj