Skip to content

build(deps): bump the maven-plugins group across 1 directory with 3 updates - #166

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-plugins-ad0f9763ec
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-plugins-ad0f9763ec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the maven-plugins group with 3 updates in the / directory: dev.sigstore:sigstore-maven-plugin, org.apache.maven.plugins:maven-surefire-plugin and org.graalvm.buildtools:native-maven-plugin.

Updates dev.sigstore:sigstore-maven-plugin from 2.3.0 to 2.4.0

Release notes

Sourced from dev.sigstore:sigstore-maven-plugin's releases.

v2.4.0

See CHANGELOG.md for more details.

What's Changed

New Contributors

Full Changelog: sigstore/sigstore-java@v2.3.0...v2.4.0

Changelog

Sourced from dev.sigstore:sigstore-maven-plugin's changelog.

[2.4.0] - 2026-10-21

Fixed

Commits
  • bc2d1f2 Merge pull request #1321 from sigstore/maven-executor
  • 1a96d6e Move from maven-verifier to maven-executor
  • a3bd29c Merge pull request #1319 from renovate-bot/renovate/gradle-9.x
  • 2bce28f Merge pull request #1320 from renovate-bot/renovate/gradle-actions-6.x
  • ccd834e Update gradle/actions action to v6
  • 7911b8d Update Gradle to v9.8.2
  • 5af9512 Merge pull request #1299 from sigstore/log-set
  • 00cf2eb Merge pull request #1316 from renovate-bot/renovate/major-no.nav.security
  • 8292f1d Merge pull request #1302 from renovate-bot/renovate/actions-upload-artifact-7.x
  • 3e6f24a Merge pull request #1314 from renovate-bot/renovate/actions-setup-java-6.x
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.6.0 to 3.6.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.6.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

  • Clean up deprecated parameters and fix TestNG parallel modes (#3452) (#3519) @​olamy
  • Merge the two timeout extension pages into one. The guide and the example page covered the same things twice. (#3520) @​olamy
  • Drop the Source Xref menu items (#3479) @​slachiewicz

👻 Maintenance

🔧 Build

... (truncated)

Commits
  • 5bf0dcf [maven-release-plugin] prepare release surefire-3.6.1
  • 7f73580 Bump doxiaVersion from 2.1.0 to 2.2.0 (#3542)
  • ab7ce2f Bump org.testng:testng (#3539)
  • ff3b768 Group module path heuristics in ModulePathJpmsArguments (#3541)
  • a343e4d Fix IllegalAccessError when the main module requires JUnit (#3532) (#3538)
  • 907a2e2 Fix groups and excludedGroups being ignored when TestNG is on the classpath (...
  • cc69b3c Use push for PR Automation
  • b119019 Install the JUnit Platform provider for the ITs (#3535)
  • 2cdec2e Don't let runOrder replace JUnit orderers set elsewhere (#3529) (#3530)
  • 1e4f6b9 Use workflow_run for PR check (#3531)
  • Additional commits viewable in compare view

Updates org.graalvm.buildtools:native-maven-plugin from 1.1.14 to 1.1.16

Release notes

Sourced from org.graalvm.buildtools:native-maven-plugin's releases.

1.1.16

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.15...1.1.16

1.1.15

What's Changed

Full Changelog: graalvm/native-build-tools@1.1.14...1.1.15

Commits
  • cb154dd Release 1.1.16
  • 60fac8c Merge pull request #1055 from graalvm/update-metadata-to-1.0.19
  • 59fd7b6 Update reachability metadata to 1.0.19
  • 3159e41 Merge pull request #1054 from graalvm/bump-version-to-1.1.16-SNAPSHOT
  • 5ecfa04 Bump version to 1.1.16-SNAPSHOT
  • 816ee8f Merge pull request #1053 from graalvm/release/1.1.15
  • bfaae38 Release 1.1.15
  • 95f3276 Merge pull request #1052 from graalvm/update-metadata-to-1.0.18
  • 419d2be Update reachability metadata to 1.0.18
  • 23e5c5f Merge pull request #1051 from graalvm/bump-version-to-1.1.15-SNAPSHOT
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates

Bumps the maven-plugins group with 3 updates in the / directory: [dev.sigstore:sigstore-maven-plugin](https://github.com/sigstore/sigstore-java), [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) and [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools).


Updates `dev.sigstore:sigstore-maven-plugin` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/sigstore/sigstore-java/releases)
- [Changelog](https://github.com/sigstore/sigstore-java/blob/main/CHANGELOG.md)
- [Commits](sigstore/sigstore-java@v2.3.0...v2.4.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.6.0 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.6.0...surefire-3.6.1)

Updates `org.graalvm.buildtools:native-maven-plugin` from 1.1.14 to 1.1.16
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](graalvm/native-build-tools@1.1.14...1.1.16)

---
updated-dependencies:
- dependency-name: dev.sigstore:sigstore-maven-plugin
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-plugins
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-plugins
- dependency-name: org.graalvm.buildtools:native-maven-plugin
  dependency-version: 1.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-plugins
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies This issue or pull request is about third-party dependencies label Oct 30, 2026
@sonarqubecloud

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Nov 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 3, 2026
@dependabot
dependabot Bot deleted the dependabot/maven/maven-plugins-ad0f9763ec branch November 3, 2026 10:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies This issue or pull request is about third-party dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants