chore(deps): bump the low-risk group with 6 updates#341
Merged
RichardSlater merged 1 commit intomainfrom Jan 19, 2026
Merged
Conversation
Bumps the low-risk group with 6 updates: | Package | From | To | | --- | --- | --- | | [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.24` | `1.5.25` | | [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.5.24` | `1.5.25` | | [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.20.1` | `2.21.0` | | [io.projectreactor:reactor-bom](https://github.com/reactor/reactor) | `2025.0.1` | `2025.0.2` | | [io.projectreactor.netty:reactor-netty-core](https://github.com/reactor/reactor-netty) | `1.3.1` | `1.3.2` | | [com.puppycrawl.tools:checkstyle](https://github.com/checkstyle/checkstyle) | `12.3.0` | `12.3.1` | Updates `ch.qos.logback:logback-core` from 1.5.24 to 1.5.25 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.24...v_1.5.25) Updates `ch.qos.logback:logback-classic` from 1.5.24 to 1.5.25 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.24...v_1.5.25) Updates `ch.qos.logback:logback-classic` from 1.5.24 to 1.5.25 - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.24...v_1.5.25) Updates `com.fasterxml.jackson:jackson-bom` from 2.20.1 to 2.21.0 - [Commits](FasterXML/jackson-bom@jackson-bom-2.20.1...jackson-bom-2.21.0) Updates `io.projectreactor:reactor-bom` from 2025.0.1 to 2025.0.2 - [Release notes](https://github.com/reactor/reactor/releases) - [Commits](reactor/reactor@2025.0.1...2025.0.2) Updates `io.projectreactor.netty:reactor-netty-core` from 1.3.1 to 1.3.2 - [Release notes](https://github.com/reactor/reactor-netty/releases) - [Commits](reactor/reactor-netty@v1.3.1...v1.3.2) Updates `com.puppycrawl.tools:checkstyle` from 12.3.0 to 12.3.1 - [Release notes](https://github.com/checkstyle/checkstyle/releases) - [Commits](checkstyle/checkstyle@checkstyle-12.3.0...checkstyle-12.3.1) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: low-risk - dependency-name: io.projectreactor:reactor-bom dependency-version: 2025.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: io.projectreactor.netty:reactor-netty-core dependency-version: 1.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk - dependency-name: com.puppycrawl.tools:checkstyle dependency-version: 12.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: low-risk ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Contributor
|
/azp run |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
RichardSlater
approved these changes
Jan 19, 2026
Contributor
RichardSlater
left a comment
RichardSlater
left a comment
There was a problem hiding this comment.
Minor and patch bumps, standard pre-approved change.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the low-risk group with 6 updates:
1.5.241.5.251.5.241.5.252.20.12.21.02025.0.12025.0.21.3.11.3.212.3.012.3.1Updates
ch.qos.logback:logback-corefrom 1.5.24 to 1.5.25Commits
f426e00prepare release of 1.5.25d28931frestrict object creation to expected supertypeaa264f7test default variable values in appender-ref ref attribute8fb403aadjust copyright yearb294a12check optionList in start()b65040aAdd EpochConverter for milliseconds/seconds since epoch (related to issue #96...0690174cla for Duncan Jauncey71dc2afRemoved email address for Tony.1f97ae1check for undeclared by referenced appendersb07355eMove the artifact version checking code to VersionUtil in logback-core.Updates
ch.qos.logback:logback-classicfrom 1.5.24 to 1.5.25Commits
f426e00prepare release of 1.5.25d28931frestrict object creation to expected supertypeaa264f7test default variable values in appender-ref ref attribute8fb403aadjust copyright yearb294a12check optionList in start()b65040aAdd EpochConverter for milliseconds/seconds since epoch (related to issue #96...0690174cla for Duncan Jauncey71dc2afRemoved email address for Tony.1f97ae1check for undeclared by referenced appendersb07355eMove the artifact version checking code to VersionUtil in logback-core.Updates
ch.qos.logback:logback-classicfrom 1.5.24 to 1.5.25Commits
f426e00prepare release of 1.5.25d28931frestrict object creation to expected supertypeaa264f7test default variable values in appender-ref ref attribute8fb403aadjust copyright yearb294a12check optionList in start()b65040aAdd EpochConverter for milliseconds/seconds since epoch (related to issue #96...0690174cla for Duncan Jauncey71dc2afRemoved email address for Tony.1f97ae1check for undeclared by referenced appendersb07355eMove the artifact version checking code to VersionUtil in logback-core.Updates
com.fasterxml.jackson:jackson-bomfrom 2.20.1 to 2.21.0Commits
901b398[maven-release-plugin] prepare release jackson-bom-2.21.086a4b9f...6b5de3aPrep for 2.21 release3001d78Merge pull request #116 from FasterXML/tatu/2.21/115-fix-cyclonedx-backport-i...9370292makeAggregateBom -> makeBom3e4db58Backport #115 in 2.x for 2.210ce4467Merge branch '2.20' into 2.x0dc79f5...6a3d76bMerge branch '2.20' into 2.x1d52817Post-release dep version bumpUpdates
io.projectreactor:reactor-bomfrom 2025.0.1 to 2025.0.2Release notes
Sourced from io.projectreactor:reactor-bom's releases.
Commits
e2629fa[release] Prepare and release BOM 2025.0.2d69ee21Merge-ignore release 2024.0.14 into 2025.0.2bf896a2[release] Back to snapshots, next BOM will be SR 152c9fb2b[release] Prepare and release BOM 2024.0.14e167849[release] Back to snapshots, next BOM will be SR 2Updates
io.projectreactor.netty:reactor-netty-corefrom 1.3.1 to 1.3.2Release notes
Sourced from io.projectreactor.netty:reactor-netty-core's releases.
Commits
afef745[release] Prepare and release 1.3.29d5a53cRevert "[release] Prepare and release 1.3.2"958d476[release] Prepare and release 1.3.25d0f318Merge-ignore release 1.2.14 into 1.3.2f620e48[release] Back to snapshots, next is 1.2.15-SNAPSHOTf95f565[release] Prepare and release 1.2.14ec80736Merge #4058 into 1.3.22dabb52Bump io.projectreactor.tools:blockhound from 1.0.15.RELEASE to 1.0.16.RELEASE...33945c8Merge #4057 into 1.3.29555f1fBump net.ltgt.errorprone from 4.3.0 to 4.4.0 (#4057)Updates
com.puppycrawl.tools:checkstylefrom 12.3.0 to 12.3.1Release notes
Sourced from com.puppycrawl.tools:checkstyle's releases.
Commits
b1e9d8e[maven-release-plugin] prepare release checkstyle-12.3.1ba4a81fdoc: release notes for 12.3.19550a20Issue #17449: Add XDocs example for FinalLocalVariableCheck validateUnnamedVa...0dd8729dependency: bump nl.jqno.equalsverifier:equalsverifiere861655dependency: bump pmd.version from 7.19.0 to 7.20.026139c0Issue #18023: Resolve Pitest Sup - filters - SupressionCommentFiltercf7bd8aIssue #18028: Resolve Pitest Supressions - api - abstractcheck7476d1cIssue #17746: Made implementation for finding end of description not depend o...bfa6fd2Issue #17265: Remove duplicate violations in WhitespaceAfter and WhitespaceAr...b2263efIssue #18028: Resolve Pitest Supressions - api - abstractfilesetMost Recent Ignore Conditions Applied to This Pull Request
You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions