build(deps): bump the maven-dependencies group across 1 directory with 12 updates by dependabot[bot] · Pull Request #5001 · kubernetes-client/java

dependabot · 2026-11-12T02:03:20Z

Bumps the maven-dependencies group with 12 updates in the / directory:

Package	From	To
org.apache.commons:commons-lang3	`3.21.0`	`3.22.0`
software.amazon.awssdk:sts	`2.57.10`	`2.57.11`
software.amazon.awssdk:auth	`2.57.10`	`2.57.11`
software.amazon.awssdk:http-auth-aws	`2.57.10`	`2.57.11`
software.amazon.awssdk:http-auth-spi	`2.57.10`	`2.57.11`
software.amazon.awssdk:http-client-spi	`2.57.10`	`2.57.11`
software.amazon.awssdk:utils	`2.57.10`	`2.57.11`
software.amazon.awssdk:auth	`2.57.10`	`2.57.11`
software.amazon.awssdk:http-auth-aws	`2.57.10`	`2.57.11`
software.amazon.awssdk:http-auth-spi	`2.57.10`	`2.57.11`
software.amazon.awssdk:http-client-spi	`2.57.10`	`2.57.11`
software.amazon.awssdk:utils	`2.57.10`	`2.57.11`
com.fasterxml.jackson.core:jackson-databind	`2.22.4`	`2.23.0`
com.fasterxml.jackson.core:jackson-core	`2.22.4`	`2.23.0`
com.fasterxml.jackson.core:jackson-annotations	`2.22`	`2.23`
com.fasterxml.jackson.core:jackson-core	`2.22.4`	`2.23.0`
com.google.auth:google-auth-library-oauth2-http	`1.56.0`	`1.57.0`
org.codehaus.mojo:build-helper-maven-plugin	`3.6.2`	`3.7.0`

Updates org.apache.commons:commons-lang3 from 3.21.0 to 3.22.0

Updates software.amazon.awssdk:sts from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:auth from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:http-auth-aws from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:http-auth-spi from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:http-client-spi from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:utils from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:auth from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:http-auth-aws from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:http-auth-spi from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:http-client-spi from 2.57.10 to 2.57.11

Updates software.amazon.awssdk:utils from 2.57.10 to 2.57.11

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.4 to 2.23.0

Commits

4d6a0a2 [maven-release-plugin] prepare release jackson-databind-2.23.0
9f13359 Prep for 2.23.0 release
cd319b4 Fix #6399: remove @JacksonStdImpl from NullSerializer (#6400)
ff7c1c1 Fix deprecation warnings in tests (#6388)
1a640b1 Fix deprecation warnings in Actions workflows (#6386)
6d0a92a Fix #6210: honor @JsonAlias on Enum values when @JsonValue is present (#6...
071a1e2 Fix #6338: honor Nulls.SKIP for creator properties in readerForUpdating()...
50a52b6 Fix #6339: keep Enum aliases from an appended AnnotationIntrospector (#6347)
425299b Add 2.23.0 release note for #6329
b45bd84 Merge branch '2.22' into 2.x
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.22.4 to 2.23.0

Commits

c2c637f [maven-release-plugin] prepare release jackson-core-2.23.0
a92ca15 Prep for 2.23.0 release
bf74498 Update release notes wrt #1794
12516b6 Merge branch '2.22' into 2.x
6393cd9 Update release notes wrt #1794
54f423d Merge branch '2.21' into 2.22
3ab7ef4 Update release notes wrt #1794
2f9705a Merge branch '2.20' into 2.21
ddaf8b3 Merge branch '2.19' into 2.20
5f519af Merge branch '2.18' into 2.19
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.22 to 2.23

Commits

861bef4 [maven-release-plugin] prepare release jackson-annotations-2.23
1e9aea3 Prep for 2.23 release
cc816df fix typo (#368)
f0c4dbd Use assertNotEquals for hashCode non-zero assertions (#367)
8619aac Replace deprecated Locale constructors in JsonFormatTest (#366)
23831bc Fix deprecation warnings in Actions workflows (#365)
8897c6c Bump actions/setup-java from 6.0.1 to 6.1.0 in the github-actions group (#364)
720da3b Revert "Add @JsonWrapped annotation (#346)" (#362)
29ce4cc Bump actions/setup-java from 6.0.0 to 6.0.1 in the github-actions group (#360)
5b89257 Bump actions/setup-java from 5.7.0 to 6.0.0 in the github-actions group (#359)
Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.22.4 to 2.23.0

Commits

c2c637f [maven-release-plugin] prepare release jackson-core-2.23.0
a92ca15 Prep for 2.23.0 release
bf74498 Update release notes wrt #1794
12516b6 Merge branch '2.22' into 2.x
6393cd9 Update release notes wrt #1794
54f423d Merge branch '2.21' into 2.22
3ab7ef4 Update release notes wrt #1794
2f9705a Merge branch '2.20' into 2.21
ddaf8b3 Merge branch '2.19' into 2.20
5f519af Merge branch '2.18' into 2.19
Additional commits viewable in compare view

Updates com.google.auth:google-auth-library-oauth2-http from 1.56.0 to 1.57.0

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.2 to 3.7.0

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.7.0

Build Helper Maven Plugin 3.7.0 adds system time zone support to timestamp-property, literal replacement support to regex-property and regex-properties, and updates the remove-project-artifact deprecation guidance. It requires Maven 3.9.0 or later and Java 8 or later.

✨ Highlights

System time zone in timestamp-property: Setting <timeZone>system</timeZone> (case-insensitive) formats the timestamp using the JVM's default time zone instead of GMT, working with both current and build time sources (#250).

Literal replacement mode in regex-property and regex-properties: Setting <replacementLiteral>true</replacementLiteral> treats backslashes (\) and dollar signs ($) in <replacement> as literal characters rather than regex group references or escapes — particularly useful when substituting Windows file paths such as ${project.build.directory} (#249).

Updated remove-project-artifact deprecation guidance: The documentation for the deprecated remove-project-artifact goal now points users to Maven Resolver's split local repository feature (-Daether.enhancedLocalRepository.split) as the modern alternative (#268, #270).

🚨 Removed

Require Maven 3.9.0 (#257) @slachiewicz

🚀 New features and improvements

Support the system time zone in timestamp-property (#250) @wilx

Add literal replacement support to regex property goals (#249) @wilx

📝 Documentation updates

Point the remove-project-artifact deprecation at split local repositories (#268, #270) @slachiewicz

Add AGENTS.md (#263) @slachiewicz

👻 Maintenance

Run the surefire IT fixture on JUnit 5 (#269) @slachiewicz

Replace deprecated @Component with JSR 330 injection (#267) @slachiewicz

Check the reserved ports' guarantees, not exact numbers (#265) @slachiewicz

Apply the JUnit 5 best practices to the tests (#261) @slachiewicz

Keep Dependabot on Maven 3.9.x (#259) @slachiewicz

Write the regex and timestamp verify scripts as assertions (#258) @slachiewicz

Port the IT scripts from BeanShell to Groovy (#251) @slachiewicz

🔧 Build

Preload the lifecycle plugins of the Central-backed ITs (#264) @slachiewicz

Use the runners' cached Temurin JDKs in CI (#262) @slachiewicz

Run CI on Maven 4 (#260) @slachiewicz

Assign merged pull requests to the release milestone (#255) @slachiewicz

Point the released-version ITs at the URL the build uses for central (#256) @slachiewicz

Run one integration test per CPU core (#254) @slachiewicz

Check dependencies monthly and group the updates (#253) @slachiewicz

Run fewer JDKs on macOS and Windows and the ITs in parallel (#252) @slachiewicz

Thanks to @slachiewicz and @wilx.

Full changelog

Commits

5eee186 [maven-release-plugin] prepare release 3.7.0
b506bd9 Point the remove-project-artifact deprecation at split local repositories (#268)
acf3610 Support the system time zone in timestamp-property
7690ae3 Add literal replacement support to regex property goals
8dc41fd Run the IT fixtures on JUnit 5
f881bba Replace deprecated @Component with JSR 330 injection
bb5f11c Declare the Maven artifacts the code uses
74eb3f5 Use push for PR Automation
28d7ed1 Check the reserved ports' guarantees, not exact numbers
7459cd8 Build through the MojoHaus workflow
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…h 12 updates Bumps the maven-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | org.apache.commons:commons-lang3 | `3.21.0` | `3.22.0` | | software.amazon.awssdk:sts | `2.57.10` | `2.57.11` | | software.amazon.awssdk:auth | `2.57.10` | `2.57.11` | | software.amazon.awssdk:http-auth-aws | `2.57.10` | `2.57.11` | | software.amazon.awssdk:http-auth-spi | `2.57.10` | `2.57.11` | | software.amazon.awssdk:http-client-spi | `2.57.10` | `2.57.11` | | software.amazon.awssdk:utils | `2.57.10` | `2.57.11` | | software.amazon.awssdk:auth | `2.57.10` | `2.57.11` | | software.amazon.awssdk:http-auth-aws | `2.57.10` | `2.57.11` | | software.amazon.awssdk:http-auth-spi | `2.57.10` | `2.57.11` | | software.amazon.awssdk:http-client-spi | `2.57.10` | `2.57.11` | | software.amazon.awssdk:utils | `2.57.10` | `2.57.11` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.4` | `2.23.0` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.4` | `2.23.0` | | [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson-annotations) | `2.22` | `2.23` | | [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.22.4` | `2.23.0` | | com.google.auth:google-auth-library-oauth2-http | `1.56.0` | `1.57.0` | | [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.2` | `3.7.0` | Updates `org.apache.commons:commons-lang3` from 3.21.0 to 3.22.0 Updates `software.amazon.awssdk:sts` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:auth` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:http-auth-aws` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:http-auth-spi` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:http-client-spi` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:utils` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:auth` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:http-auth-aws` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:http-auth-spi` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:http-client-spi` from 2.57.10 to 2.57.11 Updates `software.amazon.awssdk:utils` from 2.57.10 to 2.57.11 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.4 to 2.23.0 - [Commits](FasterXML/jackson-databind@jackson-databind-2.22.4...jackson-databind-2.23.0) Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.4 to 2.23.0 - [Commits](FasterXML/jackson-core@jackson-core-2.22.4...jackson-core-2.23.0) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.22 to 2.23 - [Commits](FasterXML/jackson-annotations@jackson-annotations-2.22...jackson-annotations-2.23) Updates `com.fasterxml.jackson.core:jackson-core` from 2.22.4 to 2.23.0 - [Commits](FasterXML/jackson-core@jackson-core-2.22.4...jackson-core-2.23.0) Updates `com.google.auth:google-auth-library-oauth2-http` from 1.56.0 to 1.57.0 Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.2 to 3.7.0 - [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases) - [Commits](mojohaus/build-helper-maven-plugin@3.6.2...3.7.0) --- updated-dependencies: - dependency-name: org.apache.commons:commons-lang3 dependency-version: 3.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:sts dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:auth dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-aws dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-spi dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-client-spi dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:utils dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:auth dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-aws dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-auth-spi dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:http-client-spi dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: software.amazon.awssdk:utils dependency-version: 2.57.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-version: '2.23' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: com.google.auth:google-auth-library-oauth2-http dependency-version: 1.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies - dependency-name: org.codehaus.mojo:build-helper-maven-plugin dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

kubernetes-prow · 2026-11-12T02:03:25Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign brendandburns for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 12, 2026

kubernetes-prow Bot requested review from brendandburns and yue9944882 November 12, 2026 02:03

kubernetes-prow Bot added cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Nov 12, 2026

Sync Bazel dependencies for Dependabot update

a53f5cd

kubernetes-prow Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Nov 12, 2026

Navigation Menu

Repository navigation

build(deps): bump the maven-dependencies group across 1 directory with 12 updates - #5001

build(deps): bump the maven-dependencies group across 1 directory with 12 updates#5001
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/maven-dependencies-a4e15de38c

dependabot Bot commented on behalf of github Nov 12, 2026

Uh oh!

kubernetes-prow Bot commented Nov 12, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 12, 2026

3.7.0

✨ Highlights

🚨 Removed

🚀 New features and improvements

📝 Documentation updates

👻 Maintenance

🔧 Build

Uh oh!

kubernetes-prow Bot commented Nov 12, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants