build(deps): bump the all group across 1 directory with 6 updates #352

dependabot · 2025-11-03T11:46:03Z

Bumps the all group with 5 updates in the /tickethub/server/java directory:

Package	From	To
com.fasterxml.jackson.core:jackson-databind	`2.19.1`	`2.20.1`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.19.1`	`2.20.1`
org.openapitools:jackson-databind-nullable	`0.2.6`	`0.2.8`
com.jayway.jsonpath:json-path	`2.9.0`	`2.10.0`
commons-io:commons-io	`2.19.0`	`2.20.0`

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.1 to 2.20.1

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.1 to 2.20.1

Updates com.fasterxml.jackson.datatype:jackson-datatype-jdk8 from 2.19.1 to 2.20.1

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.8

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.8 released

What's Changed

Update to next snapshot version by @wing328 in OpenAPITools/jackson-databind-nullable#67

Skip SNAPSHOT deploy job on forks by @ctrimble in OpenAPITools/jackson-databind-nullable#70

Remove Javadoc argument --ignore-source-errors by @ctrimble in OpenAPITools/jackson-databind-nullable#69

Update to JUnit 5 and fix tests by @Til7701 in OpenAPITools/jackson-databind-nullable#72

Update all dependency and plugin versions by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#75

GitHub actions cleanup by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#76

Add dependabot configuration by @Til7701 in OpenAPITools/jackson-databind-nullable#77

Bump actions/checkout from 3 to 5 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#78

Bump actions/cache from 3 to 4 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#79

Bump actions/setup-java from 3 to 5 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#80

Update GitHub actions to use commit sha instead of tags by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#82

Ignore Hibernate Validator updates until Java 17+ is used for builds by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#83

Streaming methods by @ctrimble in OpenAPITools/jackson-databind-nullable#68

Ignore semver-major Mockito and JUnit updates until Java 17+ is used for builds by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#86

Build as multi release jar by @Til7701 in OpenAPITools/jackson-databind-nullable#62

Bump org.junit:junit-bom from 5.13.4 to 5.14.0 by @dependabot[bot] in OpenAPITools/jackson-databind-nullable#87

Fix typos and linguistic errors in documentation / hacktoberfest by @survivant in OpenAPITools/jackson-databind-nullable#88

Change the maven compile execution for Java 8 to override the default compile by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#89

Update to move away from deprecated methods by @nrayburn-tech in OpenAPITools/jackson-databind-nullable#91

New Contributors

@ctrimble made their first contribution in OpenAPITools/jackson-databind-nullable#70

@nrayburn-tech made their first contribution in OpenAPITools/jackson-databind-nullable#75

@survivant made their first contribution in OpenAPITools/jackson-databind-nullable#88

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.7...v0.2.8

v0.2.7 released

What's Changed

Update parent and dependencies by @Til7701 in OpenAPITools/jackson-databind-nullable#61

0.2.7 release by @wing328 in OpenAPITools/jackson-databind-nullable#63

update pom.xml to use central publishing maven plugin, add workflow by @wing328 in OpenAPITools/jackson-databind-nullable#66

New Contributors

@Til7701 made their first contribution in OpenAPITools/jackson-databind-nullable#61

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits

108f5bd v0.2.8 release (#92)
b2ca809 Update to move away from deprecated methods (#91)
377e8c4 Change the maven compile execution for Java 8 to override the default compile...
5b73076 Fix typos and linguistic errors in documentation (#88)
85e68d4 Bump org.junit:junit-bom from 5.13.4 to 5.14.0 (#87)
9dd4094 Build as multi release jar (#62)
6712288 Ignore semver-major Mockito and JUnit updates until Java 17+ is used for buil...
f377eda adding the following methods to JsonNullable, based on methods (#68)
09ee5fc Ignore Hibernate Validator updates until Java 17+ is used for builds (#83)
338ccf8 Update GitHub actions to use commit sha instead of tags to avoid supply chain...
Additional commits viewable in compare view

Updates com.jayway.jsonpath:json-path from 2.9.0 to 2.10.0

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-2.10.0

What's Changed

Bumps dependency versions by @kallestenflo in json-path/JsonPath#1057

net.minidev:json-smart:2.6.0

org.slf4j:slf4j-api:2.0.17

com.google.code.gson:gson:2.13.2

org.hamcrest:hamcrest:3.0

com.fasterxml.jackson.core:jackson-databind:2.19.2

org.json:json:20250517

org.apache.tapestry:tapestry-json:5.9.0

jakarta.json:jakarta.json-api:2.1.3

jakarta.json.bind:jakarta.json.bind-api:2.0.0

Full Changelog: json-path/JsonPath@json-path-2.9.0...json-path-2.10.0

Commits

a427387 Release 2.10.0 (#1058)
8e3b92f Bumps dependency versions (#1057)
45333e0 [CI] Remove Java 18 from build matrix (#1005)
3732a85 Upgrade net.minidev:json-smart from 2.5.0 to 2.5.1 (#1004)
2d4cc06 Upgrade to gradle 8.5 and add java 21 build (#995)
83ced52 Remove web-test project (#994)
af031cd Upgrade to junit-jupiter (#993)
0ed52b4 Prepare next version
See full diff in compare view

Updates commons-io:commons-io from 2.19.0 to 2.20.0

Changelog

Sourced from commons-io:commons-io's changelog.

Apache Commons IO 2.20.0 Release Notes

The Apache Commons IO team is pleased to announce the release of Apache Commons IO 2.20.0.

Introduction

The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Version 2.19.1: Java 8 or later is required.

New features

o IO-875: Add org.apache.commons.io.file.CountingPathVisitor.accept(Path, BasicFileAttributes) #743. Thanks to Pierre Baumard, Gary Gregory. o Add org.apache.commons.io.Charsets.isAlias(Charset, String). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.isUTF8(Charset). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.toCharsetDefault(String, Charset). Thanks to Gary Gregory. o IO-279: Add Tailer ignoreTouch option #757. Thanks to Joerg Budischewski, Gary Gregory.

Fixed Bugs

o [javadoc] Rename parameter of ProxyOutputStream.write(int) #740. Thanks to Jesse Glick. o IO-875: CopyDirectoryVisitor ignores fileFilter #743. Thanks to Pierre Baumard, Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o FileUtils.readLines(File, Charset) now maps a null Charset to the default Charset #744. Thanks to Ryan Kurtz, Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream, org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 77]Another occurrence at WindowsLineEndingInputStream.java:[line 81] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 112] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 113] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 75] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atEos" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 120] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 124] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 125] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "closed" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.ProxyInputStream] At ProxyInputStream.java:[line 233] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "propagateClose" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.BoundedInputStream] At BoundedInputStream.java:[line 555] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o QueueInputStream reads all but the first byte without waiting. #748. Thanks to maxxedev, Piotr P. Karwasz, Gary Gregory. o Javadoc fixes and improvements. Thanks to Gary Gregory. o Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter.accept(File). Thanks to Gary Gregory. o IO-874: FileUtils.forceDelete can delete a broken symlink again #756. Thanks to Andy Russell, Joerg Budischewski. o Fix infinite loop in AbstractByteArrayOutputStream. #758. Thanks to Alex Benusovich.

... (truncated)

Commits

c224bce Prepare for the release candidate 2.20.0 RC1
8981a5c Remove workaround for
4ef481f Prepare for the next release candidate
d23228f Merge branch 'master' of https://github.com/apache/commons-io.git
5d2737f Add @SuppressWarnings
e5c80d6 Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 #761
2017ac0 Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 (#761)
07ce798 Javadoc
a828efa Add ciManagement element to POM
46bd1c2 Javadoc
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 5 updates in the /tickethub/server/java directory: | Package | From | To | | --- | --- | --- | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.19.1` | `2.20.1` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.1` | `2.20.1` | | [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.8` | | [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.9.0` | `2.10.0` | | [commons-io:commons-io](https://github.com/apache/commons-io) | `2.19.0` | `2.20.0` | Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.1 to 2.20.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.1 to 2.20.1 Updates `com.fasterxml.jackson.datatype:jackson-datatype-jdk8` from 2.19.1 to 2.20.1 Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.8 - [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases) - [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.8) Updates `com.jayway.jsonpath:json-path` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/jayway/JsonPath/releases) - [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md) - [Commits](json-path/JsonPath@json-path-2.9.0...json-path-2.10.0) Updates `commons-io:commons-io` from 2.19.0 to 2.20.0 - [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-io@rel/commons-io-2.19.0...rel/commons-io-2.20.0) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jdk8 dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: org.openapitools:jackson-databind-nullable dependency-version: 0.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: com.jayway.jsonpath:json-path dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: commons-io:commons-io dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 3, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the all group across 1 directory with 6 updates #352

build(deps): bump the all group across 1 directory with 6 updates #352

Uh oh!

dependabot bot commented on behalf of github Nov 3, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps): bump the all group across 1 directory with 6 updates #352

Are you sure you want to change the base?

build(deps): bump the all group across 1 directory with 6 updates #352

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 3, 2025

v0.2.8 released

What's Changed

New Contributors

v0.2.7 released

What's Changed

New Contributors

json-path-2.10.0

What's Changed

Introduction

New features

Fixed Bugs

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant