chore(deps): bump the maven-minor group across 1 directory with 8 updates

[dependabot]

Bumps the maven-minor group with 8 updates in the / directory:

Package	From	To
org.junit:junit-bom	5.13.1	5.13.3
org.mariadb.jdbc:mariadb-java-client	3.5.3	3.5.4
org.flywaydb:flyway-core	11.9.1	11.10.1
org.flywaydb:flyway-mysql	11.9.1	11.10.1
io.sentry:sentry-log4j2	8.13.3	8.16.0
org.jsoup:jsoup	1.20.1	1.21.1
org.commonmark:commonmark	0.24.0	0.25.0
org.apache.maven.plugins:maven-enforcer-plugin	3.5.0	3.6.0

Updates org.junit:junit-bom from 5.13.1 to 5.13.3

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.3 = Platform 1.13.3 + Jupiter 5.13.3 + Vintage 5.13.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.2...r5.13.3

JUnit 5.13.2 = Platform 1.13.2 + Jupiter 5.13.2 + Vintage 5.13.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.1...r5.13.2

Commits

• 9e8abdd Release 5.13.3
• 8a0be13 Improve message of discovery issues for ineffective @Order annotations (#4718)
• 59d562e Fix Javadoc references
• f4c202b Strip reasons when concatenating them in ConditionEvaluationResult
• e5d0e0b Fix multiple issues with ConditionEvaluationResult reason values
• e5c9a56 Improve display names in tests
• cf19095 Polish release notes
• aec59d2 Update dependency com.puppycrawl.tools:checkstyle to v10.26.1
• 7d8fe2a Update dependency com.puppycrawl.tools:checkstyle to v10.26.0
• d1ffa36 Update dependency com.puppycrawl.tools:checkstyle to v10.25.1
• Additional commits viewable in compare view

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.3 to 3.5.4

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.4

3.5.4 (Jun 2025)

Full Changelog

Key Enhancements

• CONJ-1261 - Added caching option for loadCodecs results to improve performance

Issues Resolved

• CONJ-1234 - Fixed incorrect type definitions in DatabaseMetaData.getTypeInfo()
• CONJ-1247 - Resolved potential race condition that could cause NullPointerException
• CONJ-1250 - avoids redundant queries for CallableStatement.getParameterMetaData()
• CONJ-1251 - Fixed SSL configuration issue where zero SSL settings only functioned without explicit SSL configuration
• CONJ-1252 - Resolved GSSAPI authentication error when server exchanges begin with 0x01 byte
• CONJ-1254 - Corrected DatabaseMetadata.getTypeInfo() returning incorrect values for AUTO_INCREMENT, FIXED_PREC_SCALE, and CASE_SENSITIVE fields
• CONJ-1255 - Fixed getString method on BIT(1) fields to properly honor transformedBitIsBoolean configuration
• CONJ-1259 - Enhanced metadata compatibility with MariaDB version 12.0
• CONJ-1260 - Improved performance of DatabaseMetaData.getExportedKeys method
• CONJ-1256 - Fixed issue to ensure correct catalog name is returned

Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.4 (Jun 2025)

Full Changelog

Key Enhancements

• CONJ-1261 - Added caching option for loadCodecs results to improve performance

Issues Resolved

• CONJ-1234 - Fixed incorrect type definitions in DatabaseMetaData.getTypeInfo()
• CONJ-1247 - Resolved potential race condition that could cause NullPointerException
• CONJ-1250 - avoids redundant queries for CallableStatement.getParameterMetaData()
• CONJ-1251 - Fixed SSL configuration issue where zero SSL settings only functioned without explicit SSL configuration
• CONJ-1252 - Resolved GSSAPI authentication error when server exchanges begin with 0x01 byte
• CONJ-1254 - Corrected DatabaseMetadata.getTypeInfo() returning incorrect values for AUTO_INCREMENT, FIXED_PREC_SCALE, and CASE_SENSITIVE fields
• CONJ-1255 - Fixed getString method on BIT(1) fields to properly honor transformedBitIsBoolean configuration
• CONJ-1259 - Enhanced metadata compatibility with MariaDB version 12.0
• CONJ-1260 - Improved performance of DatabaseMetaData.getExportedKeys method
• CONJ-1256 - Fixed issue to ensure correct catalog name is returned

Commits

• 3b9bebd [misc] change maven oss to central since oss is now deprecated
• 81b0dcc [misc] correct test certificate path
• ce280ce [misc] ensure test stability with MySQL
• 2a916ff [misc] ensure pkcs testing
• db2f3f9 bump 3.5.4 version
• bc3bec4 Merge branch 'develop'
• 69114ab [CONJ-1260] DatabaseMetaData.getExportedKeys may be slow
• 413760d [misc] correct schedule on maintenance version
• b58aa84 [CONJ-1261] Provide an option to cache the results of loadCodecs
• ec452a7 [misc] connect to docker if env set
• Additional commits viewable in compare view

Updates org.flywaydb:flyway-core from 11.9.1 to 11.10.1

Release notes

Sourced from org.flywaydb:flyway-core's releases.

Flyway 11.10.1

See release notes here

Flyway 11.10.0

See release notes here

Flyway 11.9.2

See release notes here

Commits

• c84e440 Bump version to flyway-11.10.1
• bff25e0 Bump version to flyway-11.10.0
• ad889ef Merge pull request #4101 from flyway/11.9.2
• bf2c91e Bump version to flyway-11.9.2
• See full diff in compare view

Updates org.flywaydb:flyway-mysql from 11.9.1 to 11.10.1

Updates org.flywaydb:flyway-mysql from 11.9.1 to 11.10.1

Updates io.sentry:sentry-log4j2 from 8.13.3 to 8.16.0

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.16.0

Features

• Send JUL logs to Sentry as logs (#4518)
  • You need to enable the logs feature, either in sentry.properties:

    logs.enabled=true

  • Or, if you manually initialize Sentry, you may also enable logs on Sentry.init:

    Sentry.init(options -> {
      ...
      options.getLogs().setEnabled(true);
    });

  • It is also possible to set the minimumLevel in logging.properties, meaning any log message >= the configured level will be sent to Sentry and show up under Logs:

    io.sentry.jul.SentryHandler.minimumLevel=CONFIG

• Send Log4j2 logs to Sentry as logs (#4517)
  • You need to enable the logs feature either in sentry.properties:

    logs.enabled=true

  • If you manually initialize Sentry, you may also enable logs on Sentry.init:

    Sentry.init(options -> {
      ...
      options.getLogs().setEnabled(true);
    });

  • It is also possible to set the minimumLevel in log4j2.xml, meaning any log message >= the configured level will be sent to Sentry and show up under Logs:

    <Sentry name="Sentry"
        dsn="your DSN"
        minimumBreadcrumbLevel="DEBUG"
        minimumEventLevel="WARN"
        minimumLevel="DEBUG"
    />

8.15.1

Fixes

• Enabling Sentry Logs through Logback in Spring Boot config did not work in 3.15.0 (#4523)

8.15.0

Fixes

• No longer send out empty log envelopes (#4497)

... (truncated)

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.16.0

Features

• Send JUL logs to Sentry as logs (#4518)
  • You need to enable the logs feature, either in sentry.properties:

    logs.enabled=true

  • Or, if you manually initialize Sentry, you may also enable logs on Sentry.init:

    Sentry.init(options -> {
      ...
      options.getLogs().setEnabled(true);
    });

  • It is also possible to set the minimumLevel in logging.properties, meaning any log message >= the configured level will be sent to Sentry and show up under Logs:

    io.sentry.jul.SentryHandler.minimumLevel=CONFIG

• Send Log4j2 logs to Sentry as logs (#4517)
  • You need to enable the logs feature either in sentry.properties:

    logs.enabled=true

  • If you manually initialize Sentry, you may also enable logs on Sentry.init:

    Sentry.init(options -> {
      ...
      options.getLogs().setEnabled(true);
    });

  • It is also possible to set the minimumLevel in log4j2.xml, meaning any log message >= the configured level will be sent to Sentry and show up under Logs:

    <Sentry name="Sentry"
        dsn="your DSN"
        minimumBreadcrumbLevel="DEBUG"
        minimumEventLevel="WARN"
        minimumLevel="DEBUG"
    />

8.15.1

Fixes

• Enabling Sentry Logs through Logback in Spring Boot config did not work in 3.15.0 (#4523)

8.15.0

... (truncated)

Commits

• e687305 release: 8.16.0
• 99d479f Send Log4j2 logs to Sentry as logs (#4517)
• 6796acc Send JUL logs to Sentry as logs (#4518)
• 12f6380 Merge branch 'release/8.15.1'
• 92a7b71 release: 8.15.1
• e044332 Fix Logback with Spring Boot (#4523)
• a2263d2 Merge branch 'release/8.15.0'
• 7ba881e release: 8.15.0
• 8fde83a fix(feedback): Do not redefine system resources (#4519)
• 1528dfb Automatically use SentryOptions.Logs.BeforeSendLogCallback Spring beans (#4...
• Additional commits viewable in compare view

Updates org.jsoup:jsoup from 1.20.1 to 1.21.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.21.1

jsoup 1.21.1 is out now, featuring powerful new node selection capabilities that let you target specific DOM nodes like comments and text nodes using CSS selectors, dynamic tag customization through the new TagSet callback system, and improved defense against mutation XSS attacks with simplified attribute escaping. This release also brings HTTP/2 support by default, numerous API improvements for better developer experience, and fixes for several edge-case parsing issues.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Changes

• Removed previously deprecated methods. #2317
• Deprecated the :matchText pseduo-selector due to its side effects on the DOM; use the new ::textnode selector and the Element#selectNodes(String css, Class<T> type) method instead. #2343
• Deprecated Connection.Response#bufferUp() in lieu of Connection.Response#readFully() which can throw a checked IOException.
• Deprecated internal methods Validate#ensureNotNull(Object) (replaced by typed Validate#expectNotNull(T)); protected HTML appenders from Attribute and Node.
• If you happen to be using any of the deprecated methods, please take the opportunity now to migrate away from them, as they will be removed in a future release.

Improvements

• Enhanced the Selector to support direct matching against nodes such as comments and text nodes. For example, you can now find an element that follows a specific comment: ::comment:contains(prices) + p will select p elements immediately after a <!-- prices: --> comment. Supported types include ::node, ::leafnode, ::comment, ::text, ::data, and ::cdata. Node contextual selectors like ::node:contains(text), :matches(regex), and :blank are also supported. Introduced Element#selectNodes(String css) and Element#selectNodes(String css, Class<T> nodeType) for direct node selection. #2324
• Added TagSet#onNewTag(Consumer<Tag> customizer): register a callback that’s invoked for each new or cloned Tag when it’s inserted into the set. Enables dynamic tweaks of tag options (for example, marking all custom tags as self-closing, or everything in a given namespace as preserving whitespace). #2330
• Made TokenQueue and CharacterReader autocloseable, to ensure that they will release their buffers back to the buffer pool, for later reuse.
• Added Selector#evaluatorOf(String css), as a clearer way to obtain an Evaluator from a CSS query. An alias of QueryParser.parse(String css).
• Custom tags (defined via the TagSet) in a foreign namespace (e.g. SVG) can be configured to parse as data tags.
• Added NodeVisitor#traverse(Node) to simplify node traversal calls (vs. importing NodeTraversor).
• Updated the default user-agent string to improve compatibility. #2341
• The HTML parser now allows the specific text-data type (Data, RcData) to be customized for known tags. (Previously, that was only supported on custom tags.) #2326
• Added Connection.Response#readFully() as a replacement for Connection.Response#bufferUp() with an explicit IOException. Similarly, added Connection.Response#readBody() over Connection.Response#body(). Deprecated Connection.Response#bufferUp(). #2327
• When serializing HTML, the < and > characters are now escaped in attributes. This helps prevent a class of mutation XSS attacks. #2337
• Changed Connection to prefer using the JDK's HttpClient over HttpUrlConnection, if available, to enable HTTP/2 support by default. Users can disable via -Djsoup.useHttpClient=false. #2340

Bug Fixes

• The contents of a script in a svg foreign context should be parsed as script data, not text. #2320
• Tag#isFormSubmittable() was updating the Tag's options. #2323
• The HTML pretty-printer would incorrectly trim whitespace when text followed an inline element in a block element. #2325
• Custom tags with hyphens or other non-letter characters in their names now work correctly as Data or RcData tags. Their closing tags are now tokenized properly. #2332
• When cloning an Element, the clone would retain the source's cached child Element list (if any), which could lead to incorrect results when modifying the clone's child elements. #2334

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.21.1 (2025-Jun-23)

Changes

• Removed previously deprecated methods. #2317
• Deprecated the :matchText pseduo-selector due to its side effects on the DOM; use the new ::textnode selector and the Element#selectNodes(String css, Class type) method instead. #2343
• Deprecated Connection.Response#bufferUp() in lieu of Connection.Response#readFully() which can throw a checked IOException.
• Deprecated internal methods Validate#ensureNotNull (replaced by typed Validate#expectNotNull); protected HTML appenders from Attribute and Node.
• If you happen to be using any of the deprecated methods, please take the opportunity now to migrate away from them, as they will be removed in a future release.

Improvements

• Enhanced the Selector to support direct matching against nodes such as comments and text nodes. For example, you can now find an element that follows a specific comment: ::comment:contains(prices) + p will select p elements immediately after a <!-- prices: --> comment. Supported types include ::node, ::leafnode, ::comment, ::text, ::data, and ::cdata. Node contextual selectors like ::node:contains(text), :matches(regex), and :blank are also supported. Introduced Element#selectNodes(String css) and Element#selectNodes(String css, Class nodeType) for direct node selection. #2324
• Added TagSet#onNewTag(Consumer<Tag> customizer): register a callback that’s invoked for each new or cloned Tag when it’s inserted into the set. Enables dynamic tweaks of tag options (for example, marking all custom tags as self-closing, or everything in a given namespace as preserving whitespace).
• Made TokenQueue and CharacterReader autocloseable, to ensure that they will release their buffers back to the buffer pool, for later reuse.
• Added Selector#evaluatorOf(String css), as a clearer way to obtain an Evaluator from a CSS query. An alias of QueryParser.parse(String css).
• Custom tags (defined via the TagSet) in a foreign namespace (e.g. SVG) can be configured to parse as data tags.
• Added NodeVisitor#traverse(Node) to simplify node traversal calls (vs. importing NodeTraversor).
• Updated the default user-agent string to improve compatibility. #2341
• The HTML parser now allows the specific text-data type (Data, RcData) to be customized for known tags. (Previously, that was only supported on custom tags.) #2326.
• Added Connection#readFully() as a replacement for Connection#bufferUp() with an explicit IOException. Similarly, added Connection#readBody() over Connection#body(). Deprecated Connection#bufferUp(). #2327
• When serializing HTML, the < and > characters are now escaped in attributes. This helps prevent a class of mutation XSS attacks. #2337
• Changed Connection to prefer using the JDK's HttpClient over HttpUrlConnection, if available, to enable HTTP/2 support by default. Users can disable via -Djsoup.useHttpClient=false. #2340

Bug Fixes

• The contents of a script in a svg foreign context should be parsed as script data, not text. #2320
• Tag#isFormSubmittable() was updating the Tag's options. #2323
• The HTML pretty-printer would incorrectly trim whitespace when text followed an inline element in a block element. #2325
• Custom tags with hyphens or other non-letter characters in their names now work correctly as Data or RcData tags. Their closing tags are now tokenized properly. #2332
• When cloning an Element, the clone would retain the source's cached child Element list (if any), which could lead to incorrect results when modifying the clone's child elements. #2334

Commits

• 9a059f4 [maven-release-plugin] prepare release jsoup-1.21.1
• a9f6ad0 Prep 1.21.1 release
• 63ed60b Tidy up exception test
• a4d451f Improved unhandled node type error msg
• cf88221 Added ::cdata node selector
• 893706a Deprecate :matchText selector (#2343)
• 2a73678 Added javadoc note for Connection#timeout
• 3f70665 Fix date format
• 2f48c65 Updated the default UA
• 42dbaa0 Cleanup redundant Syntax parameter
• Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.24.0 to 0.25.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.25.0

Added

• Include OSGi metadata in jars (META-INF/MANIFEST.MF files) (#378)
• More documentation with examples for Node classes (#370)

Changed

• GitHub tables: Tables are now parsed even if there's no blank line before the table heading, matching GitHub's behavior. (#381)

Fixed

• MarkdownRenderer: Fix precedence for nodeRendererFactory: Factories passed to the builder can now override rendering for core node types. (#368)
• MarkdownRenderer: Fix exception with ordered lists with a long first number followed by a shorter one (#382)
• Fix warning in Eclipse about "missing 'requires transitive'" (#358)
• Fix Android incompatibility with requireNonNullElseGet (#369)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.25.0] - 2025-06-20

Added

• Include OSGi metadata in jars (META-INF/MANIFEST.MF files) (#378)
• More documentation with examples for Node classes (#370)

Changed

• GitHub tables: Tables are now parsed even if there's no blank line before the table heading, matching GitHub's behavior. (#381)

Fixed

• MarkdownRenderer: Fix precedence for nodeRendererFactory: Factories passed to the builder can now override rendering for core node types. (#368)
• MarkdownRenderer: Fix exception with ordered lists with a long first number followed by a shorter one (#382)
• Fix warning in Eclipse about "missing 'requires transitive'" (#358)
• Fix Android incompatibility with requireNonNullElseGet (#369)

Commits

• 99e6050 [maven-release-plugin] prepare release commonmark-parent-0.25.0
• 1701991 Merge pull request #385 from commonmark/release-0.25
• 6354f02 Prepare for version 0.25.0
• adcf2f2 Prepare CHANGELOG for release 0.25
• 8cc1fa2 Merge pull request #384 from commonmark/central-publisher-portal
• 5e6b740 Migrate from OSSRH to Central Publisher Portal
• 7616e19 Merge pull request #383 from commonmark/markdown-renderer-ordered-list-fix
• 971aaa9 MarkdownRenderer: Fix ordered list with long start number (fixes #382)
• 32c9290 Merge pull request #381 from commonmark/tables-without-blank-line-before
• bb57a5f Parse tables without blank line before
• Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.5.0 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.6.0

🚀 New features and improvements

• Warning about old enforcer api in rule implementation (#894) @​slawekjaranowski
• Introduce ruleName for rules configuration (#893) @​slawekjaranowski
• Improve performance of BannedPlugins and RequireReleaseDeps (#371) @​harrisric
• Enforce size bounds recursively on directory content (#368) @​zabetak
• Improve the performance of BannedDependencies (#367) @​harrisric
• [MENFORCER-516] - Use rule configuration in POM when executed from CLI (#344) @​bpfoster
• [MENFORCER-508] - Add option to enforce same versions among Maven modules (#328) @​kwin
• [MENFORCER-507] - Add xsltLocation parameter to ExternalRules (#322) @​ppalaga

🐛 Bug Fixes

• RequireSameVersions rule: consider entries in <plugins> when analyzing build- and report-plugins (#892) @​turing85
• [MENFORCER-495] - Remove "JAVA_HOME" from rule violation message (#346) @​elharo

📝 Documentation updates

• Improve example of custom rule (#890) @​slawekjaranowski
• Make documentation explicit about java versions for custom rules (#370) @​harrisric
• [MNGSITE-529] - Rename "Goals" to "Plugin Documentation" (#351) @​Bukama
• [MENFORCER-335] - Update dependencyConvergence.apt.vm (#347) @​elharo
• [MENFORCER-511] - Match start-tag to end-tag (#341) @​elharo
• [MENFORCER-505] - fix documentation for requireMatchingCoordinates (#320) @​kwin

👻 Maintenance

• Update site descriptor to 2.0.0 (#889) @​slawekjaranowski
• Use constant 3.6.3 in prerequisites/maven as minimal Maven version (#887) @​slawekjaranowski
• Enable Github Issues (#363) @​Bukama
• Remove unused collections (#358) @​elharo
• Eliminate some string operations (#357) @​elharo
• Use cached default charset and update URL fragment (#360) @​elharo
• Add GitHub Automation actions (#359) @​slawekjaranowski
• A grabbag of small simplifications found by IntelliJ (#354) @​elharo

🔧 Build

• Enable build by Maven 4 on GitHub (#891) @​slawekjaranowski

📦 Dependency updates

• Bump mavenVersion from 3.6.3 to 3.9.10 (#888) @dependabot[bot]
• Bump org.apache.maven:maven-parent from 44 to 45 (#886) @dependabot[bot]
• Update parent to 44 (#365) @​Bukama
• Bump commons-codec:commons-codec from 1.17.1 to 1.18.0 (#349) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#362) @dependabot[bot]
• Bump org.assertj:assertj-core from 3.26.3 to 3.27.3 (#348) @dependabot[bot]

... (truncated)

Commits

• dc9d2ab [maven-release-plugin] prepare release enforcer-3.6.0
• 9aed56c Warning about old enforcer api in rule implementation (#894)
• 8b8ac7a Improve example of custom rule (#890)
• 1992401 Introduce ruleName for rules configuration
• 5ec0a9f Update site descriptor to 2.0.0
• e8cc57e RequireSameVersions rule: consider entries in \<plugins> when analyzing b...
• 785ab9d Enable build by Maven 4 on GitHub
• 5f664d5 Bump mavenVersion from 3.6.3 to 3.9.10 (#888)
• 30cb548 Bump org.apache.maven:maven-parent from 44 to 45
• 265dc89 Use constant 3.6.3 in prerequisites/maven as minimal Maven version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.