From 5979f273af7059f48fdf10328bf8475f50c84966 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 00:15:17 +0000
Subject: [PATCH] [12.1.x Root pom] Bump the dev-dependencies group across 1
 directory with 21 updates

Bumps the dev-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.1.1` | `6.1.2` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.37` | `1.6.1` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.37` | `1.6.1` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.22.0` | `1.22.1` |
| [io.grpc:grpc-core](https://github.com/grpc/grpc-java) | `1.82.1` | `1.83.0` |
| [io.grpc:grpc-netty-shaded](https://github.com/grpc/grpc-java) | `1.82.1` | `1.83.0` |
| [io.smallrye.common:smallrye-common-annotation](https://github.com/smallrye/smallrye-common) | `2.19.0` | `2.20.0` |
| [io.smallrye.common:smallrye-common-cpu](https://github.com/smallrye/smallrye-common) | `2.19.0` | `2.20.0` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.bouncycastle:bctls-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.bouncycastle:bcutil-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| [org.conscrypt:conscrypt-openjdk-uber](https://github.com/google/conscrypt) | `2.6.0` | `2.6.1` |
| [org.hibernate.models:hibernate-models](https://github.com/hibernate/hibernate-models) | `1.2.0` | `1.3.0` |
| org.eclipse.jetty.toolchain:jetty-build-support | `1.5` | `1.6` |
| [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni) | `1.5.7-11` | `1.5.7-12` |
| org.apache.directory.api:api-asn1-api | `2.1.7` | `2.1.8` |
| org.apache.directory.api:api-ldap-model | `2.1.7` | `2.1.8` |
| org.apache.directory.api:api-ldap-schema-data | `2.1.7` | `2.1.8` |
| [org.apache.directory.api:api-util](https://github.com/apache/directory-ldap-api) | `2.1.7` | `2.1.8` |



Updates `org.junit:junit-bom` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)

Updates `ch.qos.logback:logback-core` from 1.5.37 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1)

Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1)

Updates `commons-codec:commons-codec` from 1.22.0 to 1.22.1
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](https://github.com/apache/commons-codec/compare/rel/commons-codec-1.22.0...rel/commons-codec-1.22.1)

Updates `io.grpc:grpc-core` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.82.1...v1.83.0)

Updates `io.grpc:grpc-netty-shaded` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.82.1...v1.83.0)

Updates `io.grpc:grpc-netty-shaded` from 1.82.1 to 1.83.0
- [Release notes](https://github.com/grpc/grpc-java/releases)
- [Commits](https://github.com/grpc/grpc-java/compare/v1.82.1...v1.83.0)

Updates `io.smallrye.common:smallrye-common-annotation` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.19.0...2.20.0)

Updates `io.smallrye.common:smallrye-common-cpu` from 2.19.0 to 2.20.0
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.19.0...2.20.0)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bctls-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcprov-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bctls-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.bouncycastle:bcutil-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `org.conscrypt:conscrypt-openjdk-uber` from 2.6.0 to 2.6.1
- [Release notes](https://github.com/google/conscrypt/releases)
- [Commits](https://github.com/google/conscrypt/compare/2.6.0...2.6.1)

Updates `org.hibernate.models:hibernate-models` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/hibernate/hibernate-models/releases)
- [Commits](https://github.com/hibernate/hibernate-models/compare/1.2.0...1.3.0)

Updates `org.junit.platform:junit-platform-engine` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](https://github.com/junit-team/junit-framework/compare/r6.1.1...r6.1.2)

Updates `org.eclipse.jetty.toolchain:jetty-build-support` from 1.5 to 1.6

Updates `com.github.luben:zstd-jni` from 1.5.7-11 to 1.5.7-12
- [Commits](https://github.com/luben/zstd-jni/commits)

Updates `org.apache.directory.api:api-asn1-api` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-model` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-schema-data` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-util` from 2.1.7 to 2.1.8
- [Release notes](https://github.com/apache/directory-ldap-api/releases)
- [Commits](https://github.com/apache/directory-ldap-api/compare/2.1.7...2.1.8)

Updates `org.apache.directory.api:api-ldap-model` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-ldap-schema-data` from 2.1.7 to 2.1.8

Updates `org.apache.directory.api:api-util` from 2.1.7 to 2.1.8
- [Release notes](https://github.com/apache/directory-ldap-api/releases)
- [Commits](https://github.com/apache/directory-ldap-api/compare/2.1.7...2.1.8)

Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.6.1
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.37...v_1.6.1)

---
updated-dependencies:
- dependency-name: org.junit:junit-bom
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-core
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.grpc:grpc-netty-shaded
  dependency-version: 1.83.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-annotation
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-cpu
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bctls-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bctls-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.bouncycastle:bcutil-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.conscrypt:conscrypt-openjdk-uber
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.hibernate.models:hibernate-models
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.junit.platform:junit-platform-engine
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.eclipse.jetty.toolchain:jetty-build-support
  dependency-version: '1.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: com.github.luben:zstd-jni
  dependency-version: 1.5.7-12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-asn1-api
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-model
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-schema-data
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-util
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-model
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-ldap-schema-data
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-util
  dependency-version: 2.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../jetty-compression-zstandard/pom.xml       |  2 +-
 jetty-core/jetty-security/pom.xml             |  2 +-
 pom.xml                                       | 20 +++++++++----------
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/jetty-core/jetty-compression/jetty-compression-zstandard/pom.xml b/jetty-core/jetty-compression/jetty-compression-zstandard/pom.xml
index c3159213a32..75575d512b7 100644
--- a/jetty-core/jetty-compression/jetty-compression-zstandard/pom.xml
+++ b/jetty-core/jetty-compression/jetty-compression-zstandard/pom.xml
@@ -14,7 +14,7 @@
 
   <properties>
     <bundle-symbolic-name>${project.groupId}.zstandard</bundle-symbolic-name>
-    <zstd-jni.version>1.5.7-11</zstd-jni.version>
+    <zstd-jni.version>1.5.7-12</zstd-jni.version>
   </properties>
 
   <dependencies>
diff --git a/jetty-core/jetty-security/pom.xml b/jetty-core/jetty-security/pom.xml
index 91147b8d073..4a19aab80ba 100644
--- a/jetty-core/jetty-security/pom.xml
+++ b/jetty-core/jetty-security/pom.xml
@@ -12,7 +12,7 @@
   <description>Jetty Server Security Artifact</description>
 
   <properties>
-    <apache.directory.api.version>2.1.7</apache.directory.api.version>
+    <apache.directory.api.version>2.1.8</apache.directory.api.version>
     <apacheds.version>2.0.0.AM27</apacheds.version>
     <bundle-symbolic-name>${project.groupId}.security</bundle-symbolic-name>
     <spotbugs.onlyAnalyze>org.eclipse.jetty.security.*</spotbugs.onlyAnalyze>
diff --git a/pom.xml b/pom.xml
index 6ab885e9350..ce3c7e5318f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -175,14 +175,14 @@
 
     -->
     <bndlib.version>6.4.1</bndlib.version>
-    <bouncycastle.version>1.84</bouncycastle.version>
+    <bouncycastle.version>1.85</bouncycastle.version>
     <brotli4j.version>1.23.0</brotli4j.version>
     <build-helper.maven.plugin.version>3.6.1</build-helper.maven.plugin.version>
-    <build-support.version>1.5</build-support.version>
+    <build-support.version>1.6</build-support.version>
     <buildnumber.maven.plugin.version>3.3.0</buildnumber.maven.plugin.version>
     <built-by>${user.name}</built-by>
     <checkstyle.version>10.26.1</checkstyle.version>
-    <commons-codec.version>1.22.0</commons-codec.version>
+    <commons-codec.version>1.22.1</commons-codec.version>
     <commons-io.version>2.22.0</commons-io.version>
     <commons-lang3.version>3.20.0</commons-lang3.version>
     <commons.compress.version>1.28.0</commons.compress.version>
@@ -190,7 +190,7 @@
     <compiler.release>17</compiler.release>
     <compiler.source>17</compiler.source>
     <compiler.target>17</compiler.target>
-    <conscrypt.version>2.6.0</conscrypt.version>
+    <conscrypt.version>2.6.1</conscrypt.version>
     <cyclonedx.maven.plugin.version>2.9.2</cyclonedx.maven.plugin.version>
     <depends.maven.plugin.version>1.5.0</depends.maven.plugin.version>
     <detectOfflineLinks>false</detectOfflineLinks>
@@ -214,7 +214,7 @@
     <felix.version>7.0.5</felix.version>
     <findbugs.jsr305.version>3.0.2</findbugs.jsr305.version>
     <flatten.maven.plugin.version>1.7.3</flatten.maven.plugin.version>
-    <grpc.version>1.82.1</grpc.version>
+    <grpc.version>1.83.0</grpc.version>
     <gson.version>2.14.0</gson.version>
     <guava.version>33.6.0-jre</guava.version>
     <guice.version>7.0.0</guice.version>
@@ -263,11 +263,11 @@
     <junit.jupiter.execution.parallel.mode.default>same_thread</junit.jupiter.execution.parallel.mode.default>
     <junit.jupiter.extensions.autodetection.enabled>true</junit.jupiter.extensions.autodetection.enabled>
     <junit.platform.version>${junit.version}</junit.platform.version>
-    <junit.version>6.1.1</junit.version>
+    <junit.version>6.1.2</junit.version>
     <kerb-simplekdc.version>2.1.2</kerb-simplekdc.version>
     <localRepoPath>${project.build.directory}/local-repo</localRepoPath>
     <log4j2.version>2.26.1</log4j2.version>
-    <logback.version>1.5.37</logback.version>
+    <logback.version>1.6.1</logback.version>
     <lucene.version>9.12.3</lucene.version>
     <mariadb.docker.version>10.3.6</mariadb.docker.version>
     <mariadb.version>3.5.9</mariadb.version>
@@ -481,12 +481,12 @@
       <dependency>
         <groupId>io.smallrye.common</groupId>
         <artifactId>smallrye-common-annotation</artifactId>
-        <version>2.19.0</version>
+        <version>2.20.0</version>
       </dependency>
       <dependency>
         <groupId>io.smallrye.common</groupId>
         <artifactId>smallrye-common-cpu</artifactId>
-        <version>2.19.0</version>
+        <version>2.20.0</version>
       </dependency>
       <dependency>
         <groupId>net.java.dev.jna</groupId>
@@ -1225,7 +1225,7 @@
       <dependency>
         <groupId>org.hibernate.models</groupId>
         <artifactId>hibernate-models</artifactId>
-        <version>1.2.0</version>
+        <version>1.3.0</version>
       </dependency>
       <dependency>
         <groupId>org.infinispan.protostream</groupId>