chore(deps): bump the maven-minor group across 1 directory with 4 updates

[dependabot]

Bumps the maven-minor group with 4 updates in the / directory: org.junit:junit-bom, org.hibernate.validator:hibernate-validator, io.sentry:sentry-log4j2 and org.commonmark:commonmark.

Updates org.junit:junit-bom from 6.1.0 to 6.1.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.1 = Platform 6.1.1 + Jupiter 6.1.1 + Vintage 6.1.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.0...r6.1.1

Commits

• 0d85889 Release 6.1.1
• 0363eee Finalize 6.1.1 release notes
• a6d540a Move entry to 6.1.1 release notes
• 69339d5 Only pass timeout when publishing to avoid failure in nmcp plugin
• dec2eb9 Allow excluding engines from memory cleanup mode (#5786)
• a5f4270 Publish sha256/sha512 checksums again but filter out signature ones (#5796)
• 8213012 Update plugin nmcp-settings to v1.6.0 (#5787)
• d1bf847 Generate Javadoc for aggregator modules
• d721de5 Pass --no-fonts to javadoc convention
• d289ec6 Restore original SetSystemProperty values in a ParameterizedTest (#5720)
• Additional commits viewable in compare view

Updates org.hibernate.validator:hibernate-validator from 9.1.0.Final to 9.1.1.Final

Release notes

Sourced from org.hibernate.validator:hibernate-validator's releases.

Release 9.1.1.Final

Hibernate Validator 9.1.1.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.1.Final.

You can find the full list of 9.1.1.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Getting started
• the Reference Guide
• the API docs

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.validator:hibernate-validator's changelog.

9.1.1.Final (2026-06-22)

https://hibernate.atlassian.net/projects/HV/versions/36015

** Bug * HV-2217 HibernateConstraintValidatorContext::addExpressionVariable throws NPE when given null value * HV-2164 NIP constraint javadoc incorrectly states that it is a 9 digit sequence * HV-1923 CPF constraint accepting incorrect format

** Improvement * HV-2216 Use Maven 3.9.16 as a required minimum version for the build * HV-2214 Enable automatic releases * HV-2212 Bump joda-time to 2.14.2 * HV-2208 Update to OpenJFX to 17.0.19 * HV-2207 Use Maven 3.9.15 as a required minimum version for the build * HV-2197 Update to JBoss logging 3.6.3.Final * HV-2194 Bump joda-time to 2.14.1 * HV-2191 Simplify PlatformResourceBundleLocator#determineAvailabilityOfResourceBundleControl() to drop reflection * HV-2173 Upgrade to JBoss logging 3.6.2.Final * HV-2172 Update to OpenJFX to 17.0.18 * HV-2171 Bump Apache Groovy to 5.0.4 * HV-2170 Pass a ROOT locale to loggers to avoid unnecessary class lookups * HV-2162 Provide the member name in the JavaBeanProperty * HV-2158 Update documentation theme to the current latest 6.1.2.Final * HV-2157 Point to docs.hibernate.org instead of docs.jboss.org/hibernate in various docs * HV-2156 Test against wildfly-preview 38.0.1.Final

** Task * HV-2192 Use Maven 3.9.13 as a required minimum version for the build * HV-2163 Use Maven 3.9.12 as a required minimum version for the build

Commits

• 6ec5cdd [Jenkins release job] Preparing release 9.1.1.Final
• 75045e1 [Jenkins release job] changelog.txt updated by release build 9.1.1.Final
• 2ed963f [Jenkins release job] README.md updated by release build 9.1.1.Final
• 6e019da HV-2217 Allow null-valued expression variable and message parameter
• 921e5eb [9.1] Bump the build-dependencies group with 2 updates
• 133a2c0 [9.1] Bump the build-dependencies group with 4 updates
• b2b9d60 [9.1] Bump org.jboss.arquillian:arquillian-bom
• 4facf3a [9.1] Bump the build-dependencies group across 1 directory with 2 updates
• 8648ebd HV-2216 Use Maven 3.9.16 as a required minimum version for the build
• 22d5213 HV-2214 Enable automatic releases
• Additional commits viewable in compare view

Updates io.sentry:sentry-log4j2 from 8.43.2 to 8.46.0

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.46.0

Behavioral Changes

• Collections returned by scope (e.g. getBreadcrumbs, getTags, getAttachments) are shared state and should not be mutated. (#5541)
  • Previously, when going through CombinedScopeView, we were returning a copy where mutations didn't show up in the underlying scopes.
  • This has now changed in order to reduce SDK overhead.
• Date objects returned by SDK data model getters are shared state and should not be mutated. (#5603)
  • Previously, these getters returned defensive copies for some date fields.
  • This has now changed in order to reduce SDK overhead.

Performance

• Reduce writer buffer size from 8192 to 512 (#5544)
• Remove redundant event map copies (#5536)
• Optimize combined scope by adding an early return if only one scope has data (#5541)
• Reduce model access overhead by avoiding defensive Date copies in SDK data model getters. (#5603)
• Reduce timestamp parsing and formatting overhead with Sentry-specific ISO-8601 handling. (#5602)
• Reduce JSON serialization overhead by creating the reflection serializer only when unknown-object fallback serialization is needed. (#5601)
• Reduce JSON serialization overhead by allocating reflection cycle-tracking state only when reflection serialization is used. (#5600)
• Reduce context serialization overhead by sorting key snapshots with arrays instead of temporary lists. (#5599)
• Reduce breadcrumb allocation overhead by creating the Breadcrumb data map only when data is added. (#5598)
• Reduce JSON serialization overhead by lowering the initial JsonWriter nesting stack size while preserving on-demand growth. (#5591)
• Reduce timestamp helper overhead by replacing unnecessary Calendar usage in DateUtils with direct Date creation. (#5589)
• Reduce Android startup overhead by using the default timezone directly on older devices or when no timezone info is available in the locale. (#5587)

8.45.0

Features

• On Android 15+ (API 35), the standalone app.start transaction now reports why the OS started the process via app.vitals.start.reason trace data (e.g. launcher, broadcast, service, content_provider), derived from ApplicationStartInfo.getReason(). You can search and group by this attribute in the Trace Explorer. (#5552)

Fixes

• Use System.nanoTime() for cron check-in duration measurement to avoid incorrect durations from wall-clock adjustments (#5611)
• Fix crash when getHistoricalProcessStartReasons is called from an isolated or wrong-userId process (#5597)
• Release MediaMuxer when a replay segment has no encodable frames to avoid a resource leak (#5583)

Dependencies

• Bump Native SDK from v0.15.1 to v0.15.2 (#5610)
  • changelog
  • diff

8.44.1

Fixes

• Fix FirstDrawDoneListener leaking an OnGlobalLayoutListener per registration (#5567)

Features

• Add experimental SentrySQLiteDriver to sentry-android-sqlite for instrumenting androidx.sqlite.SQLiteDriver (#5563)

... (truncated)

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.46.0

Fixes

• Session Replay: Fix network detail response body size being unknown for gzip-compressed responses (#5592)

Behavioral Changes

• Collections returned by scope (e.g. getBreadcrumbs, getTags, getAttachments) are shared state and should not be mutated. (#5541)
  • Previously, when going through CombinedScopeView, we were returning a copy where mutations didn't show up in the underlying scopes.
  • This has now changed in order to reduce SDK overhead.
• Date objects returned by SDK data model getters are shared state and should not be mutated. (#5603)
  • Previously, these getters returned defensive copies for some date fields.
  • This has now changed in order to reduce SDK overhead.

Performance

• Reduce writer buffer size from 8192 to 512 (#5544)
• Remove redundant event map copies (#5536)
• Optimize combined scope by adding an early return if only one scope has data (#5541)
• Reduce model access overhead by avoiding defensive Date copies in SDK data model getters. (#5603)
• Reduce timestamp parsing and formatting overhead with Sentry-specific ISO-8601 handling. (#5602)
• Reduce JSON serialization overhead by creating the reflection serializer only when unknown-object fallback serialization is needed. (#5601)
• Reduce JSON serialization overhead by allocating reflection cycle-tracking state only when reflection serialization is used. (#5600)
• Reduce context serialization overhead by sorting key snapshots with arrays instead of temporary lists. (#5599)
• Reduce breadcrumb allocation overhead by creating the Breadcrumb data map only when data is added. (#5598)
• Reduce JSON serialization overhead by lowering the initial JsonWriter nesting stack size while preserving on-demand growth. (#5591)
• Reduce timestamp helper overhead by replacing unnecessary Calendar usage in DateUtils with direct Date creation. (#5589)
• Reduce Android startup overhead by using the default timezone directly on older devices or when no timezone info is available in the locale. (#5587)

8.45.0

Features

• On Android 15+ (API 35), the standalone app.start transaction now reports why the OS started the process via app.vitals.start.reason trace data (e.g. launcher, broadcast, service, content_provider), derived from ApplicationStartInfo.getReason(). You can search and group by this attribute in the Trace Explorer. (#5552)

Fixes

• Use System.nanoTime() for cron check-in duration measurement to avoid incorrect durations from wall-clock adjustments (#5611)
• Fix crash when getHistoricalProcessStartReasons is called from an isolated or wrong-userId process (#5597)
• Release MediaMuxer when a replay segment has no encodable frames to avoid a resource leak (#5583)

Dependencies

• Bump Native SDK from v0.15.1 to v0.15.2 (#5610)
  • changelog
  • diff

8.44.1

... (truncated)

Commits

• 8c43a10 release: 8.46.0
• 2ebf90a perf(core): SDK Overhead Reduction (#5499)
• e0a2a6e build: Remove redundant mavenCentral repository declarations (#5638)
• f082155 build: Remove redundant Java compatibility block from sentry-apollo-4 (#5633)
• fa82550 chore(deps): Bump dependencies associated with SentrySQLiteDriver (#5630)
• 6bbdfbe chore(changelog): Add 8.43.3 hotfix (#5620)
• d735888 chore(android-sqlite): Update SQLite instrumentation documentation after 8.45...
• 6424f21 build: Remove redundant test source set declarations (#5624)
• 2c01eff fix(changelog): Move app start reason to 8.45.0 (#5625)
• 2d654c0 Merge branch 'release/8.45.0'
• Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.28.0 to 0.29.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.29.0

Added

• Support rendering GFM task list items to Markdown (#433)
• Support rendering YAML front matter to Markdown (#434)
• Alerts
  • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
  • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

    var extension = AlertsExtension.builder()
            .setAllowedTypes(Map.ofEntries(
                    Map.entry("IMPORTANT", "Important"),
                    Map.entry("WARNING", "Warning")
                    Map.entry("BUG", "Known Bug")
            ))
            .build();

  • Support rendering alerts to text (#437)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.29.0] - 2026-06-20

Added

• Support rendering GFM task list items to Markdown (#433)
• Support rendering YAML front matter to Markdown (#434)
• Alerts
  • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
  • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

    var extension = AlertsExtension.builder()
            .setAllowedTypes(Map.ofEntries(
                    Map.entry("IMPORTANT", "Important"),
                    Map.entry("WARNING", "Warning")
                    Map.entry("BUG", "Known Bug")
            ))
            .build();

  • Support rendering alerts to text (#437)

Commits

• 57cf9fd [maven-release-plugin] prepare release commonmark-parent-0.29.0
• 4f6b66e Merge pull request #438 from commonmark/release-0.29.0
• b0f4dbc mvn versions:set -DnewVersion=0.29.0-SNAPSHOT
• c5f6bc9 Prepare CHANGELOG for version 0.29.0
• 952ce9d Merge pull request #437 from rdestefa/issue-436-alerts-text-rendering
• efc90bd Update CHANGELOG.md
• 0117b82 Update AlertHtmlNodeRenderer.java
• ffa682e Update AlertTextContentNodeRenderer.java
• 717dedd Add Text Content Rendering Support for Alerts
• b146e55 Merge pull request #435 from rdestefa/issue-431-disallow-github-alert-types
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.