chore(deps): bump the all-minor-and-patch-updates group across 1 directory with 12 updates

[dependabot]

Bumps the all-minor-and-patch-updates group with 12 updates in the / directory:

Package	From	To
io.netty:netty-bom	4.2.15.Final	4.2.16.Final
io.swagger.core.v3:swagger-core-jakarta	2.2.48	2.2.52
io.swagger.core.v3:swagger-annotations-jakarta	2.2.48	2.2.52
io.swagger.core.v3:swagger-models-jakarta	2.2.48	2.2.52
org.projectlombok:lombok	1.18.44	1.18.46
org.mapstruct:mapstruct	1.5.5.Final	1.6.3
org.mapstruct:mapstruct-processor	1.5.5.Final	1.6.3
com.tngtech.archunit:archunit-junit5	1.3.2	1.4.2
io.swagger.parser.v3:swagger-parser	2.1.40	2.1.45
org.jacoco:jacoco-maven-plugin	0.8.14	0.8.15
org.codehaus.mojo:xml-maven-plugin	1.1.0	1.2.1
com.github.spotbugs:spotbugs-maven-plugin	4.9.8.3	4.10.3.0

Updates io.netty:netty-bom from 4.2.15.Final to 4.2.16.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.16.Final

What's Changed

• Document Java 9 requirement for io_uring by @​jchambers in netty/netty#16904
• Add BlockHound exception for DnsQueryIdSpace by @​violetagg in netty/netty#16896
• Fix incorrect bounds in error message of HpackDecoder.setMaxHeaderListSize by @​skyguard1 in netty/netty#16901
• Add epoch-based chunk cache purge with ring buffer for thread-local reuse by @​franz1981 in netty/netty#16766
• Use Splittable/ThreadLocalRandom to generate bulk data in tests by @​chrisvest in netty/netty#16808
• Auto-port 4.2: SingleThreadEventExecutor: document Throwable safety contract on run() by @​netty-project-bot in netty/netty#16909
• Auto-port 4.2: Make HTTP/2 frame hashCode consistent with equals by @​netty-project-bot in netty/netty#16910
• Auto-port 4.2: MQTT: Make the decodeProperties early-REPLAY check actually fire by @​netty-project-bot in netty/netty#16919
• IoUring: fix io_uring datagram writes with non-zero readerIndex by @​dreamlike-ocean in netty/netty#16905
• Exclude internal events from IoHandler.run() return value in epoll, io_uring and kqueue by @​franz1981 in netty/netty#16848
• IoUring: Pass IORING_ENTER_NO_IOWAIT to report accurate CPU usage by @​wineway in netty/netty#16739
• Avoid logging exceptions that tests ignore by @​chrisvest in netty/netty#16891
• Reject control characters at the boundary of HTTP method names by @​daguimu in netty/netty#16723
• IoUring: fix TCP Fast Open initial writes with readerIndex and composites by @​dreamlike-ocean in netty/netty#16929
• Try to fix/stabilize a number of flaky tests by @​chrisvest in netty/netty#16934
• Fix propagation of startTls for client SslContext handlers by @​skyguard1 in netty/netty#16931
• Update to latest tcnative release by @​normanmaurer in netty/netty#16936
• Move test to shared testsuite by @​normanmaurer in netty/netty#16928
• [Refactor] Useful helper method getOrDefault & cleaner abstraction by @​sanjomo in netty/netty#16927
• Make permessage-deflate server window size and memLevel configurable by @​fru1tworld in netty/netty#16809
• Return early in DnsQueryContext.writeQuery when the query ID space is exhausted by @​HwangRock in netty/netty#16950
• Fix HTTP 2 PUSH_PROMISE stream association validation by @​skyguard1 in netty/netty#16952
• Fix GZIP FEXTRA extra-field handling in JdkZlibDecoder by @​daguimu in netty/netty#16951
• Http3FrameCodec handle fragmented payloads when skipping unknown frames by @​skyguard1 in netty/netty#16960
• Add opt-in validation of mandatory pseudo-header fields for HTTP/2 by @​hyperxpro in netty/netty#16932
• Strictly validate MQTT UTF-8 Encoded String by @​skyguard1 in netty/netty#16939
• Stop DateFormatter trailing token from running past the parse end by @​daguimu in netty/netty#16958
• IpFilter: Deprecate constructor which use accept by default by @​normanmaurer in netty/netty#16961
• Add RFC 10008 QUERY Method support by @​desiderantes in netty/netty#16966
• Correctly release and fail queued traffic-shaping writes on close by @​skyguard1 in netty/netty#16959
• Reject control characters at the boundary of the HTTP version token by @​HwangRock in netty/netty#16971
• FlowControlHandler: respect auto-read when toggled while dequeueing by @​schiemon in netty/netty#16949
• Fix leak in ReferenceCountedOpenSslEngine.addCredential by @​jmcrawford45 in netty/netty#16979
• IdleStateHandler: reset firstWriter/ReaderIdleEvent in resetWriteTimeout/resetReadTimeout by @​husseinvr97 in netty/netty#16982
• Fix typo in AbstractSniHandler Javadoc by @​coderbruis in netty/netty#16988
• Fix client/server inconsistency in SslCredential support matrix by @​jmcrawford45 in netty/netty#16990
• Reconcile AbstractCoalescingBufferQueue readableBytes when it drains, and fail stuck HTTP/2 streams instead of spinning empty DATA frames by @​gavinbunney in netty/netty#16947
• Use Ticker in Http2MaxRstFrameListener for testability by @​skyguard1 in netty/netty#16993
• Reset UTF-8 decode state on CR in StompSubframeDecoder by @​vasiliy-mikhailov in netty/netty#16991
• FastLz: Guard decompression against truncated input by @​yawkat in netty/netty#17000
• Reject non-token characters in HTTP/2 header names by @​daguimu in netty/netty#16762
• Auto-port 4.2: Fix SelfSignCertificate initialization in tests by @​netty-project-bot in netty/netty#17029
• Enable extension of Http3ClientConnectionHandler to support higher-level protocols such as WebTransport. by @​sanjomo in netty/netty#17027
• Implement Adaptive Cumulator by @​shivaspeaks in netty/netty#16731
• Allow WebSocket extension negotiation to be disabled per response by @​mkurz in netty/netty#17030
• Support QPACK sensitivity detector for Never Indexed header fields by @​skyguard1 in netty/netty#17026
• Fix maxAllocation for brotli-encoded content in HttpContentDecompressor by @​skyguard1 in netty/netty#17037
• Pin github actions to reduce risk by @​normanmaurer in netty/netty#17043

... (truncated)

Commits

• 3703d79 [maven-release-plugin] prepare release netty-4.2.16.Final
• 63bbb2c Update rust toolchain - add required parameters
• ac06c1b Update rust toolchain
• 5b68c61 Merge branches from forks (#17063)
• de5d276 Update lz4-java to 1.11.1 (#17061)
• da22048 Pin github actions to reduce risk (#17043)
• 0332676 Fix maxAllocation for brotli-encoded content in HttpContentDecompressor (#17037)
• 7364401 Support QPACK sensitivity detector for Never Indexed header fields (#17026)
• 06faf18 Allow WebSocket extension negotiation to be disabled per response (#17030)
• bc4b983 Implement Adaptive Cumulator (#16731)
• Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-core-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-models-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-annotations-jakarta from 2.2.48 to 2.2.52

Updates io.swagger.core.v3:swagger-models-jakarta from 2.2.48 to 2.2.52

Updates org.projectlombok:lombok from 1.18.44 to 1.18.46

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.46 (April 22nd, 2026)

• PLATFORM: JDK26 support added #4019.
• PLATFORM: Spring Tools Suite 5 supported #3985.
• BUGFIX: @Jacksonized no longer stops generating @JsonProperty once an explicit @JsonIgnore annotations is encountered #4022.
• BUGFIX: In eclipse, mixing @Jacksonized and fluent = true no longer causes the error com.fasterxml.jackson.annotation.JsonProperty is not a repeatable annotation interface. #3934.
• BUGFIX: Some finishing touches for v1.18.44's support of Jackson3 #4004.

Commits

• 936ca59 [build] lombok's launcher is still intended to be 1.4 compatible, or at least...
• fcdab3f [version] pre-release version bump
• 1cb7d49 [changelog]#4004 Mention Jackson3 final touches in changelog.
• 12a15b0 Fix: Bump EA_JDK to 27 (25 and 26 have been released)
• 2be766c Merge branch 'jackson3-final-touches'
• 290fa4c [trivial] constantize the warning we spit out for ambiguous jackson2/3, and m...
• e6567b6 test: Add Jackson 3 test cases and version ambiguity warnings
• 45e72e2 feat: Add Jackson 3 databind/dataformat annotations to HandlerUtil copy lists
• 184d423 feat: Add Jackson 3 support to @​Jacksonized handlers
• e027ad0 refactored to ShadowClassLoader use Collections::enumeration instead of Vector
• Additional commits viewable in compare view

Updates org.mapstruct:mapstruct from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

• Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
• Stackoverflow with Immutables custom builder (#3370)
• Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

• Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

• Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

• Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

• Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
• Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
• Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
• Deep mapping with multiple mappings broken in 1.6.0 (#3667)
• Two different constants are ignored in 1.6.0 (#3673)
• Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
• Fix cross module records with interfaces not recognizing accessors (#3661)
• @AfterMapping methods are called twice when using target with builder (#3678)
• Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits

• b4e25e4 Releasing version 1.6.3
• 772fae4 Prepare release notes for 1.6.3
• efdf435 #3751 Improve readme to include support for Java 16+ records
• c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
• 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
• 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
• 26c5bcd Update readme with 1.6.2
• 4e0d73d Next version 1.7.0-SNAPSHOT
• 212607b Releasing version 1.6.2
• 4fd22d6 Prepare release notes for 1.6.2
• Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

• Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
• Stackoverflow with Immutables custom builder (#3370)
• Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

• Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

• Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

• Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

• Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
• Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
• Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
• Deep mapping with multiple mappings broken in 1.6.0 (#3667)
• Two different constants are ignored in 1.6.0 (#3673)
• Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
• Fix cross module records with interfaces not recognizing accessors (#3661)
• @AfterMapping methods are called twice when using target with builder (#3678)
• Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits

• b4e25e4 Releasing version 1.6.3
• 772fae4 Prepare release notes for 1.6.3
• efdf435 #3751 Improve readme to include support for Java 16+ records
• c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
• 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
• 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
• 26c5bcd Update readme with 1.6.2
• 4e0d73d Next version 1.7.0-SNAPSHOT
• 212607b Releasing version 1.6.2
• 4fd22d6 Prepare release notes for 1.6.2
• Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.5.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

• Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
• Stackoverflow with Immutables custom builder (#3370)
• Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

• Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

• Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

• Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

• Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
• Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
• Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
• Deep mapping with multiple mappings broken in 1.6.0 (#3667)
• Two different constants are ignored in 1.6.0 (#3673)
• Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
• Fix cross module records with interfaces not recognizing accessors (#3661)
• @AfterMapping methods are called twice when using target with builder (#3678)
• Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = "creationDate", ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits

• b4e25e4 Releasing version 1.6.3
• 772fae4 Prepare release notes for 1.6.3
• efdf435 #3751 Improve readme to include support for Java 16+ records
• c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
• 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
• 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
• 26c5bcd Update readme with 1.6.2
• 4e0d73d Next version 1.7.0-SNAPSHOT
• 212607b Releasing version 1.6.2
• 4fd22d6 Prepare release notes for 1.6.2
• Additional commits viewable in compare view

Updates com.tngtech.archunit:archunit-junit5 from 1.3.2 to 1.4.2

Release notes

Sourced from com.tngtech.archunit:archunit-junit5's releases.

ArchUnit 1.4.2

Enhancements

Core

• DescribedPredicate#negate() returns a DescribedPredicate (#1484)
• New JavaCodeUnit.Predicates.anyParameterThat and JavaCodeUnit.Predicates.allParameters (#1498; thanks to @​mkhl 👏)
• Support Java 26 / class file major version 70 (#1544)

ArchUnit 1.4.1

Enhancements

Core

• Support Java 25 / class file major version 69 (#1440)

Library

• Support priorities in SlicesRuleDefinition (#1436; thanks to @​guesshe 👏)
• Ignore synthetic bridge methods in ProxyRules (#1443)

Documentation

• Improve documentation of slices rule (#1454)

Internal improvements

• Reduce memory footprint of ClassFileImporterSlowTest (#1446 / #1440)

ArchUnit 1.4.0

Enhancements

Core

• Support Java 24 / class file major version 68 (#1364)

Lang

• Improve performance for transitive dependency checks (#1381; thanks to @​To6i 👏)

Library

• New GeneralCodingRules.OLD_DATE_AND_TIME_CLASSES_SHOULD_NOT_BE_USED (#1385; thanks to @​Bukama 👏)
• Improve GeneralCodingRules.testClassesShouldResideInTheSamePackageAsImplementation to not fail for classes with no tests in their packages (#1368; thanks to @​krzysztof-owczarek 👏)

JUnit

• Fix failure when junit.testFilter is used (#1361; thanks to @​Sparkymann 👏)
• Enable @AnalyzeClasses annotation to be used as meta annotation (#1300; thanks to @​mathze 👏)

Documentation

• Fix user guide describing wrong default behavior of @AnalyzeClasses (#1406)
• Clarify Slices documentation (#1366; thanks to @​mipo256 👏)

Internal improvements

• Run tests with JUnit Platform to pave the way to migrate to JUnit 5 (#1294)
• Update Gradle Wrapper from 7.6 to 8.12 (#1392)

... (truncated)

Commits

• e45aaa2 prepare release 1.4.2
• c07193c set version to 1.4.2-SNAPSHOT
• ac9b896 migrate from (meanwhile shut down) OSSRH to Central Publisher Portal using th...
• b72fcaf Bump actions/github-script from 8 to 9
• fc1881d Bump addressable from 2.8.7 to 2.9.0 in /docs
• dee39bb Bump activesupport from 7.1.3.4 to 7.2.3.1 in /docs
• b097007 Bump gradle/actions from 5 to 6
• 4d7cfe9 Bump json from 2.18.1 to 2.19.2 in /docs
• 90dc773 Bump nokogiri from 1.18.9 to 1.19.1 in /docs
• 7a88298 Bump faraday from 2.10.1 to 2.14.1 in /docs
• Additional commits viewable in compare view

Updates io.swagger.parser.v3:swagger-parser from 2.1.40 to 2.1.45

Release notes

Sourced from io.swagger.parser.v3:swagger-parser's releases.

Swagger-parser 2.1.45 released!

• bump swagger-core to 2.2.52 (#2359)
• build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
• build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin from 0.7.0 to 0.11.0 (#2354)
• build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
• build(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.21.1 to 2.22.0 (#2352)
• build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin from 3.3.0 to 3.4.0 (#2350)
• chore: fix syntax error in next-snapshot workflow (#2347)
• build(deps): bump org.apache.maven.plugins:maven-jar-plugin from 3.3.0 to 3.5.0 (#2329)
• build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.12.0 (#2328)

Swagger-parser 2.1.44 released!

• fix: Replace the unsafe Yaml instantiation in ReferenceVisitor.getYam… (#2344)

Swagger-parser 2.1.43 released!

• fix: resolve refs within external schemas (#2338)

Swagger-parser 2.1.42 released!

• Update swagger-core to 2.2.50 (#2334)
• fix: use explicit prefix for array items with dotted property names (#2330)
• chore: migrate from tibdex/github-app-token to actions/create-github-app-token (#2324)
• build(deps): bump commons-io:commons-io from 2.20.0 to 2.22.0 (#2319)
• build(deps): bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0 (#2318)
• build(deps): bump org.apache.maven.plugins:maven-surefire-plugin from 3.2.5 to 3.5.5 (#2316)

Swagger-parser 2.1.41 released!

• Bump org.jacoco:jacoco-maven-plugin from 0.8.11 to 0.8.14 (#2317)
• chore: update v2 parser to 1.0.76 (#2314)
• Prevent StackOverflowError in ResolverFully (#2297)
• Fix thread-safety bug in OpenAPIDereferencer31 (#2294)
• fix(converter): keep x-nullable in shared $ref responses (#2276)

Commits

• 05c2b71 prepare release 2.1.45 (#2360)
• ef9f551 bump swagger-core to 2.2.52 (#2359)
• 75c0366 build(deps): bump swagger-core-version from 2.2.50 to 2.2.51 (#2353)
• 3e0726b build(deps-dev): bump org.sonatype.central:central-publishing-maven-plugin (#...
• fa0cc91 build(deps): bump org.yaml:snakeyaml from 2.4 to 2.6 (#2355)
• a901e02 build(deps): bump com.fasterxml.jackson.core:jackson-databind (#2352)
• 3e57896 build(deps-dev): bump org.apache.maven.plugins:maven-source-plugin (#2350)
• 993bef6 build(deps-dev): bump org.apache.maven.plugins:maven-javadoc-plugin (#2328)
• e7dc08c build(deps): bump org.apache.maven.plugins:maven-jar-plugin (#2329)
• 2ce81b1 chore: fix syntax error in next-snapshot workflow (#2347)
• Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.14 to 0.8.15

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.15

New Features

• JaCoCo now officially supports Java 26 (GitHub #2076).
• Experimental support for Java 27 class files (GitHub #2004).
• Compatibility methods generated by Kotlin compiler for functions defined in interfaces are filtered out during generation of report (GitHub #1905).
• Compatibility methods generated by Kotlin compiler for exposed boxed inline value classes (JvmExposeBoxed annotation) are filtered out during generation of report (GitHub #1944).
• Methods generated by the Kotlin compiler for functions with JvmStatic annotation are filtered out during generation of report (GitHub #2097).
• Improved filtering of bytecode generated by Kotlin compiler for when expressions and statements with kotlin.String subject where first branch condition contains string with largest hash (GitHub #2098).
• Part of bytecode that javac versions from 24 to 26 generate for switch statements and expressions with selector expression of type java.lang.String inside lambdas is filtered out during generation of report (GitHub #2023).
• Improved performance of Kotlin files analysis by parsing SMAPs only once per class (GitHub #2114).
• For better performance agent output methods tcpclient and tcpserver use BufferedOutputStream to write execution data to socket. Maven plugin, Ant tasks, CLI, API usage examples, and ExecDumpClient API use BufferedInputStream to read execution data from socket. Third-party integrations should do the same to benefit from this change in agent (GitHub #2089).

Fixed bugs

• Fixed processing of Kotlin SMAP in synthetic classes (GitHub #1985).
• Multiple JaCoCo runtimes within one JVM writing to the same output file should not cause data corruption when running on JDK versions from 6 to 10 affected by JDK-8166253 (GitHub #2065, #2074).
• For better performance agent writes to output file via BufferedOutputStream, this fixes regression introduced in version 0.6.2 (GitHub #2073).
• Fixed NullPointerException when JaCoCo agent is loaded by non system class loader, for example when loaded by JBoss Modules (GitHub #1651).

Non-functional Changes

• JaCoCo now depends on ASM 9.10.1 (GitHub #2134).

Commits

• 6c5260a Prepare release v0.8.15
• 5c05141 Transfer of execution data through socket should use buffered stream (#2089)
• ab5efa9 Remove from Azure Pipelines all builds except with JDK 5 and JDK EA (#2148)
• 5f6ea38 Use Windows 2025 image in GitHub Actions (#2130)
• 35a8af2 Use Renovate instead of Dependabot for updates of ASM (#2137)
• 85b8ddf Upgrade ASM to 9.10.1 (#2134)
• 2988647 AgentModule should use ClassLoader of agent instead of SystemClassLoader (#1651)
• 75a4e31 Add filter for Kotlin @JvmExposeBoxed (#1944)
• 691fa1d Use Renovate instead of Dependabot for updates of GitHub Actions (#2132)
• 3e18f17 Require at least JDK 21 for build (#2128)
• Additional commits viewable in compare view

Updates org.codehaus.mojo:xml-maven-plugin from 1.1.0 to 1.2.1

Release notes

Sourced from org.codehaus.mojo:xml-maven-plugin's releases.

1.2.1

📦 Dependency updates

• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.0 (#165) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0 (#164) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 94 to 95 (#163) @dependabot[bot]
• Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#160) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.5.2 to 3.6.0 (#161) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.3 to 4.10.4 (#162) @dependabot[bot]
• Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (#159) @dependabot[bot]

1.2.0

🚀 New features and improvements

• Use Maven 3.9.11 as dependency, still required 3.6.3 (#154) @​slawekjaranowski
• Add support for classpath lookups. (#115) @​splatch
• Require Maven 3.6.3+ (#101) @​slachiewicz

🔧 Build

• Use default Maven version for build (#102) @​slawekjaranowski

📦 Dependency updates

• Use Maven 3.9.11 as dependency, still required 3.6.3 (#154) @​slawekjaranowski
• Bump org.codehaus.plexus:plexus-archiver from 4.10.2 to 4.10.3 (#152) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.5.1 to 3.5.2 (#153) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 93 to 94 (#151) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.1 to 4.10.2 (#145) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-resources from 1.3.0 to 1.3.1 (#144) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.10.0 to 4.10.1 (#143) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 92 to 93 (#142) @dependabot[bot]
• Bump commons-io:commons-io from 2.19.0 to 2.20.0 (#141) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 91 to 92 (#138) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 87 to 91 (#137) @dependabot[bot]
• Bump commons-io:commons-io from 2.18.0 to 2.19.0 (#133) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 86 to 87 (#132) @dependabot[bot]
• Bump commons-io:commons-io from 2.17.0 to 2.18.0 (#131) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 85 to 86 (#127) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.1 to 4.0.2 (#130) @dependabot[bot]
• Bump commons-io:commons-io from 2.16.1 to 2.17.0 (#129) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.5.0 to 3.5.1 (#126) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 84 to 85 (#125) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-archiver from 4.9.2 to 4.10.0 (#123) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-io from 3.4.2 to 3.5.0 (#124) @dependabot[bot]
• Bump org.codehaus.mojo:mojo-parent from 80 to 84 (#122) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-xml from 3.0.0 to 3.0.1 (#121) @dependabot[bot]
• Bump org.codehaus.plexus:plexus-utils from 4.0.0 to 4.0.1 (#118) @dependabot[bot]

... (truncated)

Commits

• 441049d [maven-release-plugin] prepare release xml-maven-plugin-1.2.1
• 9f7b349 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness
• 1f1a73d Bump org.codehaus.plexus:plexus-archiver from 4.10.4 to 4.11.0
• 46288aa Bump org.codehaus.mojo:mojo-parent from 94 to 95

[github-code-quality]

Code Coverage Overview

Languages: Java

Java / code-coverage/jacoco

The overall coverage in the dependabot-maven-all... branch remains at 89%, unchanged from the main branch.

Show a code coverage summary of the most impacted files.

File	main 5059903	dependabot-maven-all... 0c62374	+/-
com/decathlon/i...ionService.java	99%	99%	0%
com/decathlon/i...ionService.java	96%	96%	0%
com/decathlon/i...ditAdapter.java	100%	100%	0%
com/decathlon/i...cification.java	74%	74%	0%
com/decathlon/i...cification.java	92%	92%	0%
com/decathlon/i...ateBuilder.java	94%	94%	0%
com/decathlon/i...MapperImpl.java	90%	93%	+3%
com/decathlon/i...MapperImpl.java	37%	48%	+11%

---

_{Updated July 17, 2026 09:21 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.}

[etiennej70]

@dependabot recreate

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud