Skip to content

Bump the dependencies group across 1 directory with 23 updates - #827

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/master/dependencies-01b01484b1
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/master/dependencies-01b01484b1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 23 updates in the / directory:

Package From To
com.fasterxml.jackson.core:jackson-databind 2.22.2 2.22.4
io.avaje:avaje-json-node 3.15 3.16
io.avaje:avaje-inject 12.6 12.7
io.avaje:avaje-inject-generator 12.6 12.7
io.avaje:avaje-inject-maven-plugin 12.6 12.7
io.avaje:avaje-inject-generator 12.6 12.7
io.avaje:avaje-inject-maven-plugin 12.6 12.7
io.opentelemetry:opentelemetry-api 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk-testing 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk 1.66.0 1.67.0
io.opentelemetry:opentelemetry-sdk-testing 1.66.0 1.67.0
org.hibernate.validator:hibernate-validator 9.1.3.Final 9.1.5.Final
io.avaje:avaje-validator 2.17 2.18
io.avaje:avaje-validator-constraints 2.17 2.18
io.avaje:avaje-validator-generator 2.17 2.18
io.rest-assured:rest-assured 6.0.1 6.2.0
io.repaint.maven:tiles-maven-plugin 2.45.1 2.47.0
io.helidon.webserver:helidon-webserver 4.5.4 27.0.0
io.helidon.webserver:helidon-webserver-security 4.5.4 27.0.0
io.helidon.http.media:helidon-http-media-jsonb 4.5.4 27.0.0
io.helidon.webserver:helidon-webserver-security 4.5.4 27.0.0
io.helidon.http.media:helidon-http-media-jsonb 4.5.4 27.0.0
io.avaje:avaje-nima 1.12 1.14
io.avaje:avaje-nima-test 1.12 1.14
io.vertx:vertx-web 5.1.8 5.2.1
org.slf4j:slf4j-jdk-platform-logging 2.0.19 2.0.20
ch.qos.logback:logback-classic 1.6.3 1.6.5
io.avaje:avaje-json-core 3.15 3.16

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.4

Commits
  • a56a810 [maven-release-plugin] prepare release jackson-databind-2.22.4
  • c172c5d Prep for 2.22.4 release
  • 1e761c0 Merge branch '2.21' into 2.22
  • fe3780f Post-release dep version bump
  • a0e1fad [maven-release-plugin] prepare for next development iteration
  • c92512e [maven-release-plugin] prepare release jackson-databind-2.21.8
  • 0a41b7c Prep for 2.21.8 release
  • ab63665 Remove stale empty 2.23.0 section from 2.22 release notes
  • 2b5a04b Merge branch '2.21' into 2.22
  • 3402e80 Merge branch '2.20' into 2.21
  • Additional commits viewable in compare view

Updates io.avaje:avaje-json-node from 3.15 to 3.16

Updates io.avaje:avaje-inject from 12.6 to 12.7

Release notes

Sourced from io.avaje:avaje-inject's releases.

12.7

What's Changed

Dependencies

Full Changelog: avaje/avaje-inject@12.6...12.7

Commits
  • 0d45ab0 Update how-to-release.md docs
  • fee50c9 Version 12.7 - gradle plugin
  • 8101799 Version 12.7
  • 4fe8c88 #1075 - Fix child scope external bean failure (#1077)
  • ebe75b9 #1075 - Add non failing tests for nested static components (#1076)
  • 4ba9525 Merge pull request #1074 from avaje/dependabot/maven/master/dependencies-64e7...
  • 82474ba Bump the dependencies group with 2 updates
  • d5f3479 Update shade plugin with @MainClass instead of adding useless jar plugin (#...
  • b2fe325 Merge pull request #1071 from avaje/dependabot/maven/master/dependencies-1e2b...
  • 5ead4a4 Bump the dependencies group with 3 updates
  • Additional commits viewable in compare view

Updates io.avaje:avaje-inject-generator from 12.6 to 12.7

Updates io.avaje:avaje-inject-maven-plugin from 12.6 to 12.7

Updates io.avaje:avaje-inject-generator from 12.6 to 12.7

Updates io.avaje:avaje-inject-maven-plugin from 12.6 to 12.7

Updates io.opentelemetry:opentelemetry-api from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk-testing from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk-testing's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk-testing's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

Logs

  • Return noop loggers from SdkLoggerProvider.get() when no log record processors are configured (#8838)
  • Catch Throwable in SimpleLogRecordProcessor and MultiLogRecordExporter (#8848)

Profiles

  • Fix KeyValueAndUnitData.create() to return the public KeyValueAndUnitData interface (#8875)

Exporters

  • OTLP: Fix missing request size limits, defaulting to 64 MiB, configurable through setMaxRequestBodySize(long) and setMaxRequestMessageSize(long) and through declarative config OtlpGrpcExporter, OtlpHttpExporter (see full schema docs here) (#8446)
  • OTLP: Reduce failure logs to FINE after shutdown (#8819)
  • OTLP: retry gRPC based on response status codes in trailer headers (#8854)
  • Prometheus: Avoid regex backtracking when removing unit annotations (#8910)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-sdk's changelog.

Version 1.67.0 (2026-10-09)

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Fix GHSA-ccrj-gw8r-854m: Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (#8848)
  • Use {span} units for span processor self-observability metrics (#8873)

Metrics

  • Stabilize PeriodicMetricReaderBuilder.setMaxExportBatchSize(int) (#8829)
  • Delete experimental metric attribute / baggage processing (#8818)
  • Fix: Reset exemplar span context when a reservoir cell is overwritten outside a span (#8871)

... (truncated)

Commits
  • b4b3a1b [release/v1.67.x] Prepare release 1.67.0 (#8924)
  • 66ff8f3 Prepare for 1.67.0 release (#8918)
  • 49dd9f3 fix: retry OTLP gRPC responses with trailer status (#8854)
  • 6e4eb27 Add experimental SDK entity support and OTLP export (#8464)
  • 0d0b0ca Avoid shared internal ConfigUtil (#6970) (#8855)
  • 766eb4d Match array attributes element-wise in declarative config rule_based sampler ...
  • aa88015 Update dependency org.jetbrains.kotlin:kotlin-gradle-plugin to v2.4.21 (#8776)
  • f235b4d Update all patch and minor versions (#8908)
  • c99cb41 Add type introspection to DeclarativeConfigProperties (#8883)
  • cc4f5f2 Avoid regex backtracking when parsing tracestate (#8914)
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-sdk-testing from 1.66.0 to 1.67.0

Release notes

Sourced from io.opentelemetry:opentelemetry-sdk-testing's releases.

Version 1.67.0

API

  • Deprecate TextMapGetter.keys() and make TextMapGetter a functional interface (#8531)
  • Add null guards and API usage logging for tracing, baggage, attributes, logging, and metrics (#8803, #8863, #8864)
  • Bound allocations and avoid regex backtracking when parsing W3C tracestate (#8817, #8914)

Incubating

  • Add type introspection methods to DeclarativeConfigProperties (#8883)

Extensions

  • Trace propagators: Bound allocations when parsing Jaeger baggage and B3 single-header propagation (#8817)

SDK

  • Run CompletableResultCode completion actions outside internal locks to avoid deadlocks (#8773)
  • Do not count attribute overwrites as dropped attributes (#8833)
  • Avoid regex backtracking in glob matching (#8909)
  • Add experimental resource entity support, OTLP export, and configuration through otel.entities and declarative resource detectors (#8464)

Traces

  • Return noop tracers when no span processors are configured (#8815)
  • Catch Throwable in SimpleSpanProcessor and MultiSpanExporter (

Bumps the dependencies group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.2` | `2.22.4` |
| io.avaje:avaje-json-node | `3.15` | `3.16` |
| [io.avaje:avaje-inject](https://github.com/avaje/avaje-inject) | `12.6` | `12.7` |
| io.avaje:avaje-inject-generator | `12.6` | `12.7` |
| io.avaje:avaje-inject-maven-plugin | `12.6` | `12.7` |
| io.avaje:avaje-inject-generator | `12.6` | `12.7` |
| io.avaje:avaje-inject-maven-plugin | `12.6` | `12.7` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk-testing](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [io.opentelemetry:opentelemetry-sdk-testing](https://github.com/open-telemetry/opentelemetry-java) | `1.66.0` | `1.67.0` |
| [org.hibernate.validator:hibernate-validator](https://github.com/hibernate/hibernate-validator) | `9.1.3.Final` | `9.1.5.Final` |
| [io.avaje:avaje-validator](https://github.com/avaje/avaje-validator) | `2.17` | `2.18` |
| io.avaje:avaje-validator-constraints | `2.17` | `2.18` |
| io.avaje:avaje-validator-generator | `2.17` | `2.18` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `6.0.1` | `6.2.0` |
| [io.repaint.maven:tiles-maven-plugin](https://github.com/repaint-io/maven-tiles) | `2.45.1` | `2.47.0` |
| io.helidon.webserver:helidon-webserver | `4.5.4` | `27.0.0` |
| io.helidon.webserver:helidon-webserver-security | `4.5.4` | `27.0.0` |
| io.helidon.http.media:helidon-http-media-jsonb | `4.5.4` | `27.0.0` |
| io.helidon.webserver:helidon-webserver-security | `4.5.4` | `27.0.0` |
| io.helidon.http.media:helidon-http-media-jsonb | `4.5.4` | `27.0.0` |
| io.avaje:avaje-nima | `1.12` | `1.14` |
| io.avaje:avaje-nima-test | `1.12` | `1.14` |
| [io.vertx:vertx-web](https://github.com/vert-x3/vertx-web) | `5.1.8` | `5.2.1` |
| org.slf4j:slf4j-jdk-platform-logging | `2.0.19` | `2.0.20` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.3` | `1.6.5` |
| io.avaje:avaje-json-core | `3.15` | `3.16` |



Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.2 to 2.22.4
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.2...jackson-databind-2.22.4)

Updates `io.avaje:avaje-json-node` from 3.15 to 3.16

Updates `io.avaje:avaje-inject` from 12.6 to 12.7
- [Release notes](https://github.com/avaje/avaje-inject/releases)
- [Commits](avaje/avaje-inject@12.6...12.7)

Updates `io.avaje:avaje-inject-generator` from 12.6 to 12.7

Updates `io.avaje:avaje-inject-maven-plugin` from 12.6 to 12.7

Updates `io.avaje:avaje-inject-generator` from 12.6 to 12.7

Updates `io.avaje:avaje-inject-maven-plugin` from 12.6 to 12.7

Updates `io.opentelemetry:opentelemetry-api` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `io.opentelemetry:opentelemetry-sdk-testing` from 1.66.0 to 1.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.66.0...v1.67.0)

Updates `org.hibernate.validator:hibernate-validator` from 9.1.3.Final to 9.1.5.Final
- [Release notes](https://github.com/hibernate/hibernate-validator/releases)
- [Changelog](https://github.com/hibernate/hibernate-validator/blob/9.1.5.Final/changelog.md)
- [Commits](hibernate/hibernate-validator@9.1.3.Final...9.1.5.Final)

Updates `io.avaje:avaje-validator` from 2.17 to 2.18
- [Release notes](https://github.com/avaje/avaje-validator/releases)
- [Commits](avaje/avaje-validator@2.17...2.18)

Updates `io.avaje:avaje-validator-constraints` from 2.17 to 2.18

Updates `io.avaje:avaje-validator-generator` from 2.17 to 2.18

Updates `io.rest-assured:rest-assured` from 6.0.1 to 6.2.0
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-6.0.1...rest-assured-6.2.0)

Updates `io.repaint.maven:tiles-maven-plugin` from 2.45.1 to 2.47.0
- [Release notes](https://github.com/repaint-io/maven-tiles/releases)
- [Changelog](https://github.com/repaint-io/maven-tiles/blob/master/CHANGELOG.adoc)
- [Commits](repaint-io/maven-tiles@v2.45.1...v2.47.0)

Updates `io.helidon.webserver:helidon-webserver` from 4.5.4 to 27.0.0

Updates `io.helidon.webserver:helidon-webserver-security` from 4.5.4 to 27.0.0

Updates `io.helidon.http.media:helidon-http-media-jsonb` from 4.5.4 to 27.0.0

Updates `io.helidon.webserver:helidon-webserver-security` from 4.5.4 to 27.0.0

Updates `io.helidon.http.media:helidon-http-media-jsonb` from 4.5.4 to 27.0.0

Updates `io.avaje:avaje-nima` from 1.12 to 1.14

Updates `io.avaje:avaje-nima-test` from 1.12 to 1.14

Updates `io.vertx:vertx-web` from 5.1.8 to 5.2.1
- [Commits](vert-x3/vertx-web@5.1.8...5.2.1)

Updates `org.slf4j:slf4j-jdk-platform-logging` from 2.0.19 to 2.0.20

Updates `ch.qos.logback:logback-classic` from 1.6.3 to 1.6.5
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.6.3...v_1.6.5)

Updates `io.avaje:avaje-json-core` from 3.15 to 3.16

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-json-node
  dependency-version: '3.16'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject
  dependency-version: '12.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-version: '12.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-maven-plugin
  dependency-version: '12.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-generator
  dependency-version: '12.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-inject-maven-plugin
  dependency-version: '12.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-testing
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.opentelemetry:opentelemetry-sdk-testing
  dependency-version: 1.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.hibernate.validator:hibernate-validator
  dependency-version: 9.1.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-validator
  dependency-version: '2.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-validator-constraints
  dependency-version: '2.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-validator-generator
  dependency-version: '2.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.repaint.maven:tiles-maven-plugin
  dependency-version: 2.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.helidon.webserver:helidon-webserver
  dependency-version: 27.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.helidon.webserver:helidon-webserver-security
  dependency-version: 27.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.helidon.http.media:helidon-http-media-jsonb
  dependency-version: 27.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.helidon.webserver:helidon-webserver-security
  dependency-version: 27.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.helidon.http.media:helidon-http-media-jsonb
  dependency-version: 27.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-nima
  dependency-version: '1.14'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-nima-test
  dependency-version: '1.14'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: io.vertx:vertx-web
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.slf4j:slf4j-jdk-platform-logging
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: io.avaje:avaje-json-core
  dependency-version: '3.16'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 21, 2026
@github-actions
github-actions Bot enabled auto-merge October 21, 2026 19:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants