Skip to content

Bump the java-patch-and-minor group across 1 directory with 3 updates - #185

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/java-patch-and-minor-c4014b36e8
Open

Bump the java-patch-and-minor group across 1 directory with 3 updates#185
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/java-patch-and-minor-c4014b36e8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the java-patch-and-minor group with 3 updates in the / directory: org.apache.httpcomponents.client5:httpclient5, org.codehaus.mojo:flatten-maven-plugin and com.github.spotbugs:spotbugs-maven-plugin.

Updates org.apache.httpcomponents.client5:httpclient5 from 5.6.2 to 5.6.3

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.3

This maintenance release fixes a resource management defect in the content decompression protocol handler of the classic transport.

Change Log

  • ContentCompressionExec fails to close the underlying response stream in case of an unexpected runtime or protocol exception. Contributed by Oleg Kalnichevski

  • Do not call the backend when an only-if-cached request cannot be served from cache (RFC 9111 5.2.1.7). Contributed by hunghh.dev <hunghh.dev at gmail.com>

  • Include the request scheme in redirect same-authority check. Contributed by Javid Khan

  • Escape quotes and strip line breaks in RFC 7578 multipart parameters. Contributed by Javid Khan

  • HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content decoder. Contributed by Arturo Bernal

Commits
  • 13408e3 HttpClient 5.6.3 release
  • 58728b1 Updated release notes for HttpClient 5.6.3 release
  • 55733f4 ContentCompressionExec fails to close the underlying response stream in case ...
  • 2485ddf Do not call the backend when an only-if-cached request cannot be served from ...
  • 26ece37 compare scheme in redirect same-authority check
  • 8cdf6fa escape quotes and strip line breaks in rfc7578 multipart parameters
  • ab20c86 HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content de...
  • f092f56 Upgraded HttpClient version to 5.6.3-SNAPSHOT
  • See full diff in compare view

Updates org.codehaus.mojo:flatten-maven-plugin from 1.7.3 to 1.8.0

Release notes

Sourced from org.codehaus.mojo:flatten-maven-plugin's releases.

1.8.0

🚀 New features and improvements

🐛 Bug Fixes

🔧 Build

📦 Dependency updates

Commits
  • 1b21193 [maven-release-plugin] prepare release 1.8.0
  • f693210 Add PR automation workflow to GitHub Actions
  • cff2c4f Document revisionVariableName parameter with @since 1.8.0 tag
  • f18a67d Fix for #408, ensure nested dependency exclusions aren't overrided (#485)
  • 35396b6 Bump mavenVersion from 3.9.15 to 3.9.16
  • f78e07e Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 25f849e Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5fcc98f Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml
  • 4bd9eda Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 7bacd0e Fix for Maven 3.10.x (#517)
  • Additional commits viewable in compare view

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.10.2.0 to 4.10.3.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.10.3.0

Summary

This release delivers improvements to reliability, maintainability, and reproducibility. The SpotBugs execution path has been modernized by replacing the Ant-based launcher with ProcessBuilder, temporary auxiliary classpath handling has been improved, and toolchain detection has been made more robust. Build tooling has also been cleaned up with Maven modernization efforts, improved reproducible artifact generation, and updated documentation. Additional fixes include improved artifact handling, test coverage improvements, and dependency updates.

What's Changed

New Contributors

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0

Commits
  • f0e6f45 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.3.0
  • 86af8d5 Merge pull request #1473 from spotbugs/renovate/spotbugs.version
  • 2fc1232 Update dependency com.github.spotbugs:spotbugs to v4.10.3
  • 8938370 Merge pull request #1472 from hazendaz/antwork
  • 68ee04d Replace 'ant' usage with process builder
  • 4fcdf58 Merge pull request #1471 from hazendaz/master
  • c97f85e [ci] Minor cleanup after toolchain adjustments
  • f7dde3a [nio] Change 'spotbugsAuxClasspath' file to a temp file and remove larger try...
  • ce2addb Merge pull request #1470 from hazendaz/restructure
  • bc53d37 [ci] readme update to reproducible builesd info
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the java-patch-and-minor group with 3 updates in the / directory: [org.apache.httpcomponents.client5:httpclient5](https://github.com/apache/httpcomponents-client), [org.codehaus.mojo:flatten-maven-plugin](https://github.com/mojohaus/flatten-maven-plugin) and [com.github.spotbugs:spotbugs-maven-plugin](https://github.com/spotbugs/spotbugs-maven-plugin).


Updates `org.apache.httpcomponents.client5:httpclient5` from 5.6.2 to 5.6.3
- [Changelog](https://github.com/apache/httpcomponents-client/blob/rel/v5.6.3/RELEASE_NOTES.txt)
- [Commits](apache/httpcomponents-client@rel/v5.6.2...rel/v5.6.3)

Updates `org.codehaus.mojo:flatten-maven-plugin` from 1.7.3 to 1.8.0
- [Release notes](https://github.com/mojohaus/flatten-maven-plugin/releases)
- [Commits](mojohaus/flatten-maven-plugin@1.7.3...1.8.0)

Updates `com.github.spotbugs:spotbugs-maven-plugin` from 4.10.2.0 to 4.10.3.0
- [Release notes](https://github.com/spotbugs/spotbugs-maven-plugin/releases)
- [Commits](spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0)

---
updated-dependencies:
- dependency-name: org.apache.httpcomponents.client5:httpclient5
  dependency-version: 5.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: java-patch-and-minor
- dependency-name: org.codehaus.mojo:flatten-maven-plugin
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: java-patch-and-minor
- dependency-name: com.github.spotbugs:spotbugs-maven-plugin
  dependency-version: 4.10.3.0
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: java-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants