From 137c7dd993b6fefc9896cf6f3d898aeced31da87 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 00:13:13 +0000
Subject: [PATCH] [12.0.x Root pom] Bump the dev-dependencies group across 1
 directory with 21 updates

Bumps the dev-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.38` | `1.6.1` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.0` | `1.22.1` |
| [io.grpc:grpc-core](https://github.com/grpc/grpc-java) | `1.82.2` | `1.83.0` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.82.2` | `1.83.0` |
| [io.smallrye.common:smallrye-common-annotation](https://github.com/smallrye/smallrye-common) | `2.19.0` | `2.20.0` |
| [io.smallrye.common:smallrye-common-cpu](https://github.com/smallrye/smallrye-common) | `2.19.0` | `2.20.0` |
| [org.bouncycastle:bctls-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.bouncycastle:bcutil-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.6.0` | `2.6.1` |
| [org.eclipse.sisu:org.eclipse.sisu.inject](https://github.com/eclipse-sisu/sisu-project) | `1.0.1` | `1.1.0` |
| [org.eclipse.sisu:org.eclipse.sisu.plexus](https://github.com/eclipse-sisu/sisu-project) | `1.0.1` | `1.1.0` |
| org.eclipse.jetty.toolchain:jetty-build-support | `1.5` | `1.6` |
| org.apache.directory.api:api-asn1-api | `2.1.7` | `2.1.8` |
| org.apache.directory.api:api-ldap-model | `2.1.7` | `2.1.8` |
| org.apache.directory.api:api-ldap-schema-data | `2.1.7` | `2.1.8` |
| [org.apache.directory.api:api-util](https://github.com/apache/directory-ldap-api) | `2.1.7` | `2.1.8` |
| [com.google.protobuf:protobuf-java](https://github.com/protocolbuffers/protobuf) | `4.35.0` | `4.35.1` |
| [eu.maveniverse.maven.mimir:extension3](https://github.com/maveniverse/mimir) | `0.11.4` | `0.12.0` |



Updates `ch.qos.logback:logback-core` from 1.5.38 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.1)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.1)

Updates `commons-codec:commons-codec` from 1.22.0 to 1.22.1
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.22.0...rel/commons-codec-1.22.1)

Updates `io.grpc:grpc-core` from 1.82.2 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.82.2...v1.83.0)

Updates `io.grpc:grpc-netty-shaded` from 1.82.2 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.82.2...v1.83.0)

Updates `io.grpc:grpc-netty-shaded` from 1.82.2 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.82.2...v1.83.0)

Updates `io.smallrye.common:smallrye-common-annotation` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.19.0...2.20.0)

Updates `io.smallrye.common:smallrye-common-cpu` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.19.0...2.20.0)

Updates `io.smallrye.common:smallrye-common-cpu` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.19.0...2.20.0)

Updates `org.bouncycastle:bctls-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.conscrypt:conscrypt-openjdk-uber` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/google/conscrypt/releases)
- [Commits](https://github.com/google/conscrypt/compare/2.6.0...2.6.1)

Updates `org.eclipse.sisu:org.eclipse.sisu.inject` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/eclipse-sisu/sisu-project/releases)
- [Changelog](https://github.com/eclipse-sisu/sisu-project/blob/main/RELEASE.md)
- [Commits](https://github.com/eclipse-sisu/sisu-project/compare/releases/1.0.1...releases/1.1.0)

Updates `org.eclipse.sisu:org.eclipse.sisu.plexus` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/eclipse-sisu/sisu-project/releases)
- [Changelog](https://github.com/eclipse-sisu/sisu-project/blob/main/RELEASE.md)
- [Commits](https://github.com/eclipse-sisu/sisu-project/compare/releases/1.0.1...releases/1.1.0)

Updates `org.eclipse.sisu:org.eclipse.sisu.plexus` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/eclipse-sisu/sisu-project/releases)
- [Changelog](https://github.com/eclipse-sisu/sisu-project/blob/main/RELEASE.md)
- [Commits](https://github.com/eclipse-sisu/sisu-project/compare/releases/1.0.1...releases/1.1.0)

Updates `org.eclipse.jetty.toolchain:jetty-build-support` from 1.5 to 1.6

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.apache.directory.api:api-asn1-api` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-model` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-schema-data` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-util` from 2.1.7 to 2.1.8
- [Release notes](https://github.com/apache/directory-ldap-api/releases)
- [Commits](https://github.com/apache/directory-ldap-api/compare/2.1.7...2.1.8)

Updates `org.apache.directory.api:api-ldap-model` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-schema-data` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-util` from 2.1.7 to 2.1.8
- [Release notes](https://github.com/apache/directory-ldap-api/releases)
- [Commits](https://github.com/apache/directory-ldap-api/compare/2.1.7...2.1.8)

Updates `com.google.protobuf:protobuf-java` from 4.35.0 to 4.35.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.38...v_1.6.1)

Updates `eu.maveniverse.maven.mimir:extension3` from 0.11.4 to 0.12.0
- [Release notes](https://github.com/maveniverse/mimir/releases)
- [Commits](https://github.com/maveniverse/mimir/compare/release-0.11.4...release-0.12.0)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-core
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-annotation
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-cpu
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-cpu
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bctls-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.conscrypt:conscrypt-openjdk-uber
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.sisu:org.eclipse.sisu.inject
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.sisu:org.eclipse.sisu.plexus
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.sisu:org.eclipse.sisu.plexus
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.jetty.toolchain:jetty-build-support
  dependency-version: '1.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-asn1-api
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-model
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-schema-data
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-util
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-model
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-schema-data
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-util
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.google.protobuf:protobuf-java
  dependency-version: 4.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eu.maveniverse.maven.mimir:extension3
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .mvn/extensions.xml                     |  2 +-
 jetty-core/jetty-security/pom.xml       |  2 +-
 jetty-integrations/jetty-gcloud/pom.xml |  2 +-
 pom.xml                                 | 16 ++++++++--------
 4 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.mvn/extensions.xml b/.mvn/extensions.xml
index 5a896700f30c..a5c738c690b2 100644
--- a/.mvn/extensions.xml
+++ b/.mvn/extensions.xml
@@ -4,6 +4,6 @@
     <extension>
         <groupId>eu.maveniverse.maven.mimir</groupId>
         <artifactId>extension3</artifactId>
-        <version>0.11.4</version>
+        <version>0.12.0</version>
     </extension>
 </extensions>
diff --git a/jetty-core/jetty-security/pom.xml b/jetty-core/jetty-security/pom.xml
index da88b0c87600..9f6caad1fbc1 100644
--- a/jetty-core/jetty-security/pom.xml
+++ b/jetty-core/jetty-security/pom.xml
@@ -12,7 +12,7 @@
   <description>The common Jetty security implementation</description>
 
   <properties>
-    <apache.directory.api.version>2.1.7</apache.directory.api.version>
+    <apache.directory.api.version>2.1.8</apache.directory.api.version>
     <apacheds.version>2.0.0.AM27</apacheds.version>
     <bundle-symbolic-name>${project.groupId}.security</bundle-symbolic-name>
     <spotbugs.onlyAnalyze>org.eclipse.jetty.security.*</spotbugs.onlyAnalyze>
diff --git a/jetty-integrations/jetty-gcloud/pom.xml b/jetty-integrations/jetty-gcloud/pom.xml
index 626d65a32dd3..270a1fb6d069 100644
--- a/jetty-integrations/jetty-gcloud/pom.xml
+++ b/jetty-integrations/jetty-gcloud/pom.xml
@@ -18,7 +18,7 @@
 
   <properties>
     <gcloud.version>2.40.0</gcloud.version>
-    <protobuf.version>4.35.0</protobuf.version>
+    <protobuf.version>4.35.1</protobuf.version>
   </properties>
 
 </project>
diff --git a/pom.xml b/pom.xml
index 7cf37077b5e1..150cde64193d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -166,20 +166,20 @@
     <asm.version>9.10.1</asm.version>
     <awaitility.version>4.3.0</awaitility.version>
     <bndlib.version>6.4.1</bndlib.version>
-    <bouncycastle.version>1.84</bouncycastle.version>
+    <bouncycastle.version>1.85</bouncycastle.version>
     <build-helper.maven.plugin.version>3.6.1</build-helper.maven.plugin.version>
-    <build-support.version>1.5</build-support.version>
+    <build-support.version>1.6</build-support.version>
     <buildnumber.maven.plugin.version>3.3.0</buildnumber.maven.plugin.version>
     <bundle.debug>false</bundle.debug>
     <checkstyle.version>10.26.1</checkstyle.version>
-    <commons-codec.version>1.22.0</commons-codec.version>
+    <commons-codec.version>1.22.1</commons-codec.version>
     <commons-io.version>2.22.0</commons-io.version>
     <commons-lang3.version>3.20.0</commons-lang3.version>
     <commons.compress.version>1.28.0</commons.compress.version>
     <compiler.release>17</compiler.release>
     <compiler.source>17</compiler.source>
     <compiler.target>17</compiler.target>
-    <conscrypt.version>2.6.0</conscrypt.version>
+    <conscrypt.version>2.6.1</conscrypt.version>
     <cyclonedx.maven.plugin.version>2.9.2</cyclonedx.maven.plugin.version>
     <depends.maven.plugin.version>1.5.0</depends.maven.plugin.version>
     <detectOfflineLinks>false</detectOfflineLinks>
@@ -189,7 +189,7 @@
     <findbugs.jsr305.version>3.0.2</findbugs.jsr305.version>
     <flatten.maven.plugin.version>1.8.0</flatten.maven.plugin.version>
     <groovy.version>4.0.26</groovy.version>
-    <grpc.version>1.82.2</grpc.version>
+    <grpc.version>1.83.0</grpc.version>
     <gson.version>2.14.0</gson.version>
     <guava.version>33.6.0-jre</guava.version>
     <guice.version>7.0.0</guice.version>
@@ -243,7 +243,7 @@
     <license.maven.plugin.version>4.6</license.maven.plugin.version>
     <localRepoPath>${project.build.directory}/local-repo</localRepoPath>
     <log4j2.version>2.26.1</log4j2.version>
-    <logback.version>1.5.38</logback.version>
+    <logback.version>1.6.1</logback.version>
     <lucene.version>9.11.1</lucene.version>
     <mariadb.docker.version>10.3.6</mariadb.docker.version>
     <mariadb.version>3.5.9</mariadb.version>
@@ -311,9 +311,9 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <reactive-streams.version>1.0.4</reactive-streams.version>
     <settingsPath>src/it/settings.xml</settingsPath>
-    <sisu.plexus.version>1.0.1</sisu.plexus.version>
+    <sisu.plexus.version>1.1.0</sisu.plexus.version>
     <slf4j.version>2.0.17</slf4j.version>
-    <smallrye-common.version>2.19.0</smallrye-common.version>
+    <smallrye-common.version>2.20.0</smallrye-common.version>
     <spifly.version>1.3.7</spifly.version>
     <surefire.failIfNoSpecifiedTests>false</surefire.failIfNoSpecifiedTests>
     <surefire.rerunFailingTestsCount>0</surefire.rerunFailingTestsCount>