Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the prod-deps group with 10 updates:

Package From To
io.quarkus.platform:quarkus-bom 3.26.2 3.28.1
io.quarkus.platform:quarkus-maven-plugin 3.26.2 3.28.1
org.jetbrains.kotlin:kotlin-stdlib 2.2.10 2.2.20
org.jetbrains.kotlin:kotlin-maven-allopen 2.2.10 2.2.20
org.jetbrains.kotlin:kotlin-maven-plugin 2.2.10 2.2.20
org.apache.commons:commons-lang3 3.18.0 3.19.0
org.assertj:assertj-core 3.27.4 3.27.6
org.apache.maven.plugins:maven-surefire-plugin 3.5.3 3.5.4
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.codehaus.mojo:versions-maven-plugin 2.19.0 2.19.1

Updates io.quarkus.platform:quarkus-bom from 3.26.2 to 3.28.1

Commits
  • dafa184 [maven-release-plugin] prepare release 3.28.1
  • 10f7544 Merge pull request #1617 from gsmet/quarkus-3.28.1
  • a356492 Upgrade to Quarkus 3.28.1
  • f0be442 Merge pull request #1613 from quarkusio/dependabot/maven/quarkus-platform-bom...
  • 9f896dd Merge pull request #1615 from mkouba/mcp-1-6-0
  • ad6313e Quarkus MCP 1.6.0
  • 222b1d0 Merge pull request #1610 from quarkusio/langchain4j-1.2.0.CR3
  • 6f5aee1 Quarkus LangChain4j to 1.2.0
  • fa31975 Merge pull request #1612 from ppalaga/250923-cq-3.27.0-main
  • 3637133 Bump quarkus-platform-bom-generator.version from 0.0.124 to 0.0.125
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.26.2 to 3.28.1

Commits
  • dafa184 [maven-release-plugin] prepare release 3.28.1
  • 10f7544 Merge pull request #1617 from gsmet/quarkus-3.28.1
  • a356492 Upgrade to Quarkus 3.28.1
  • f0be442 Merge pull request #1613 from quarkusio/dependabot/maven/quarkus-platform-bom...
  • 9f896dd Merge pull request #1615 from mkouba/mcp-1-6-0
  • ad6313e Quarkus MCP 1.6.0
  • 222b1d0 Merge pull request #1610 from quarkusio/langchain4j-1.2.0.CR3
  • 6f5aee1 Quarkus LangChain4j to 1.2.0
  • fa31975 Merge pull request #1612 from ppalaga/250923-cq-3.27.0-main
  • 3637133 Bump quarkus-platform-bom-generator.version from 0.0.124 to 0.0.125
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-stdlib from 2.2.10 to 2.2.20

Release notes

Sourced from org.jetbrains.kotlin:kotlin-stdlib's releases.

Kotlin 2.2.20

Changelog

Analysis API

  • KT-78187 Synthetic properties not to be shown as callables
  • KT-72525 K2. red code and KIWA on new-lines in guarded when conditions (with parentheses)
  • KT-74246 KaVisibilityChecker.isVisible is inefficient with multiple calls on the same use-site

Analysis API. Code Compilation

  • KT-78382 K2 IR lowering error when interface extends interface
  • KT-73201 K2 IDE: Error while evaluating expressions with local classes
  • KT-78164 Evaluator: '@JvmName' annotations are not recognized in other modules
  • KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm
  • KT-73084 K2 evaluator cannot resolve local variables standing at the closing brace

Analysis API. FIR

Performance Improvements

  • KT-76490 Do not load ast during the contracts phase if no contracts present
  • KT-78132 Do not check FirElementBuilder#tryGetFirWithoutBodyResolve optimization for already resolved declarations

Fixes

  • KT-72227 SOE from recursive value class
  • KT-68977 K2 IDE: Reference to companion object through typealias in a function call does not work
  • KT-72357 Implement partial body resolution
  • KT-76932 Support context parameters on dangling modifier list
  • KT-72407 FirImplementationByDelegationWithDifferentGenericSignatureChecker: FirLazyExpression should be calculated before accessing
  • KT-77602 K2 / Analysis API: KAEWA “No fir element was found for KtParameter” on incorrect context()-call
  • KT-77629 K2: NPE: "org.jetbrains.kotlin.fir.java.declarations.FirJavaTypeParameter.performFirstRoundOfBoundsResolution"
  • KT-76855 Analysis API: KaType.asPsiType returns null for a local inner class in dependent analysis tests
  • KT-72718 ImplicitReceiverValue.createSnapshot creates invalid FIR if receiver is smart-casted
  • KT-76811 Analysis API: resolveToFirSymbol finds a FirPropertySymbol for a KtScript in dependent analysis
  • KT-73586 [Analysis API] Add lazyResolveToPhase(STATUS) before accessing modifiers of members
  • KT-71135 AA: exception from sealed inheritors checker when analyzeCopy
  • KT-75534 K2 AA: "Containing declaration should present for nested declaration class KtNamedFunction" with dangling annotation on top-level anonymous function
  • KT-75687 K2: local variable doesn't get to the do-while scope
  • KT-56543 LL FIR: rework lazy transformers so transformers modify only declarations they suppose to

Analysis API. Infrastructure

  • KT-76809 Analysis API: Dependent analysis tests frequently work with the original element instead of the copied element

Analysis API. Light Classes

  • KT-78835 Find usages of a light constructor from a class with an empty body finds usages of class as well
  • KT-78878 K2. Method shown as unavailable in Java when @JvmExposeBoxed is applied (redundantly) at both class and method level in Kotlin

... (truncated)

Changelog

Sourced from org.jetbrains.kotlin:kotlin-stdlib's changelog.

2.2.20

Analysis API

  • KT-78187 Synthetic properties not to be shown as callables
  • KT-72525 K2. red code and KIWA on new-lines in guarded when conditions (with parentheses)
  • KT-74246 KaVisibilityChecker.isVisible is inefficient with multiple calls on the same use-site

Analysis API. Code Compilation

  • KT-78382 K2 IR lowering error when interface extends interface
  • KT-73201 K2 IDE: Error while evaluating expressions with local classes
  • KT-78164 Evaluator: '@JvmName' annotations are not recognized in other modules
  • KT-76457 K2 IDE / KMP Debugger: KISEWA “Cannot compile a common source without a JVM counterpart” on evaluating inline fun from common module inside jvm
  • KT-73084 K2 evaluator cannot resolve local variables standing at the closing brace

Analysis API. FIR

Performance Improvements

  • KT-76490 Do not load ast during the contracts phase if no contracts present
  • KT-78132 Do not check FirElementBuilder#tryGetFirWithoutBodyResolve optimization for already resolved declarations

Fixes

  • KT-72227 SOE from recursive value class
  • KT-68977 K2 IDE: Reference to companion object through typealias in a function call does not work
  • KT-72357 Implement partial body resolution
  • KT-76932 Support context parameters on dangling modifier list
  • KT-72407 FirImplementationByDelegationWithDifferentGenericSignatureChecker: FirLazyExpression should be calculated before accessing
  • KT-77602 K2 / Analysis API: KAEWA “No fir element was found for KtParameter” on incorrect context()-call
  • KT-77629 K2: NPE: "org.jetbrains.kotlin.fir.java.declarations.FirJavaTypeParameter.performFirstRoundOfBoundsResolution"
  • KT-76855 Analysis API: KaType.asPsiType returns null for a local inner class in dependent analysis tests
  • KT-72718 ImplicitReceiverValue.createSnapshot creates invalid FIR if receiver is smart-casted
  • KT-76811 Analysis API: resolveToFirSymbol finds a FirPropertySymbol for a KtScript in dependent analysis
  • KT-73586 [Analysis API] Add lazyResolveToPhase(STATUS) before accessing modifiers of members
  • KT-71135 AA: exception from sealed inheritors checker when analyzeCopy
  • KT-75534 K2 AA: "Containing declaration should present for nested declaration class KtNamedFunction" with dangling annotation on top-level anonymous function
  • KT-75687 K2: local variable doesn't get to the do-while scope
  • KT-56543 LL FIR: rework lazy transformers so transformers modify only declarations they suppose to

Analysis API. Infrastructure

  • KT-76809 Analysis API: Dependent analysis tests frequently work with the original element instead of the copied element

Analysis API. Light Classes

  • KT-78835 Find usages of a light constructor from a class with an empty body finds usages of class as well
  • KT-78878 K2. Method shown as unavailable in Java when @JvmExposeBoxed is applied (redundantly) at both class and method level in Kotlin
  • KT-78065 Support "Expose boxed inline value classes" in Light Classes

... (truncated)

Commits
  • 693c44e Add ChangeLog for 2.2.20-RC2
  • 5b7c7af [Gradle] Fail the build if AGP has already configured Kotlin in the project
  • 1756c32 Add permissions for GRADLE_RO_DEP_CACHE to security policy
  • 05dcf52 [Native Macos] update llvm with fixes for xcode26 ^KT-79571 fixed
  • 0b2dd95 [Wasm] Do not backport devServer, because it is mutable collection
  • 6b0a1e4 [IR] Use sanitized names when calculating scopes for lambdas
  • 64daa7e [FIR2IR] Properly handle generics with nullable types in delegate body genera...
  • 9237f28 [Test] Reproduce KT-79816
  • e86b28e [Gradle] Add @​ExperimentalKotlinGradlePluginApi to exportKdoc
  • 0f5c8a7 Add ChangeLog for 2.2.20-RC
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-maven-allopen from 2.2.10 to 2.2.20

Updates org.jetbrains.kotlin:kotlin-maven-plugin from 2.2.10 to 2.2.20

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0

Updates org.assertj:assertj-core from 3.27.4 to 3.27.6

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.6

🐛 Bug Fixes

Core

  • Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

  • ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

🔨 Dependency Upgrades

Core

  • Upgrade to Byte Buddy 1.17.7 #3947
  • Upgrade to JUnit BOM 5.13.4 #3947

Guava

  • Upgrade to Guava 33.4.8-jre #3947
Commits
  • 716b1e0 [maven-release-plugin] prepare release assertj-build-3.27.6
  • e189652 Add missing export for org.assertj.core.annotation (#3951)
  • 0cb489e Update Maven Central URL
  • 7286309 [maven-release-plugin] prepare for next development iteration
  • dd4cc1d [maven-release-plugin] prepare release assertj-build-3.27.5
  • 1d0defc Add missing permission to release workflow
  • 844d5d0 Add missing GitHub Actions pinning to CodeQL workflow
  • bdd7106 Add CodeQL custom workflow
  • a93d7e6 Remove EOL Java 24
  • 26ea866 Update production dependencies (#3947)
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-maven-allopen from 2.2.10 to 2.2.20

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.3 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates io.quarkus.platform:quarkus-maven-plugin from 3.26.2 to 3.28.1

Commits
  • dafa184 [maven-release-plugin] prepare release 3.28.1
  • 10f7544 Merge pull request #1617 from gsmet/quarkus-3.28.1
  • a356492 Upgrade to Quarkus 3.28.1
  • f0be442 Merge pull request #1613 from quarkusio/dependabot/maven/quarkus-platform-bom...
  • 9f896dd Merge pull request #1615 from mkouba/mcp-1-6-0
  • ad6313e Quarkus MCP 1.6.0
  • 222b1d0 Merge pull request #1610 from quarkusio/langchain4j-1.2.0.CR3
  • 6f5aee1 Quarkus LangChain4j to 1.2.0
  • fa31975 Merge pull request #1612 from ppalaga/250923-cq-3.27.0-main
  • 3637133 Bump quarkus-platform-bom-generator.version from 0.0.124 to 0.0.125
  • Additional commits viewable in compare view

Updates org.jetbrains.kotlin:kotlin-maven-plugin from 2.2.10 to 2.2.20

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:versions-maven-plugin from 2.19.0 to 2.19.1

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.19.1

🐛 Bug Fixes

📝 Documentation updates

Commits
  • 804a5ab [maven-release-plugin] prepare release 2.19.1
  • 4affd18 Resolves #1270: Ensuring thread safety when VersionsHelper (#1273)
  • 6bd8d68 Resolves #1266: Applying the include filter while resolving property associat...
  • 60d273c Resolves #1271: Fixed broken Site links (#1275)
  • 4456751 Revert "Bump org.hibernate:hibernate-validator (#1267)"
  • 3eee9f9 Bump org.hibernate:hibernate-validator (#1267)
  • 9c43c1a [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [io.quarkus.platform:quarkus-bom](https://github.com/quarkusio/quarkus-platform) | `3.26.2` | `3.28.1` |
| [io.quarkus.platform:quarkus-maven-plugin](https://github.com/quarkusio/quarkus-platform) | `3.26.2` | `3.28.1` |
| [org.jetbrains.kotlin:kotlin-stdlib](https://github.com/JetBrains/kotlin) | `2.2.10` | `2.2.20` |
| org.jetbrains.kotlin:kotlin-maven-allopen | `2.2.10` | `2.2.20` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.2.10` | `2.2.20` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.19.0` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.4` | `3.27.6` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.3` | `3.5.4` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.19.0` | `2.19.1` |


Updates `io.quarkus.platform:quarkus-bom` from 3.26.2 to 3.28.1
- [Commits](quarkusio/quarkus-platform@3.26.2...3.28.1)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.26.2 to 3.28.1
- [Commits](quarkusio/quarkus-platform@3.26.2...3.28.1)

Updates `org.jetbrains.kotlin:kotlin-stdlib` from 2.2.10 to 2.2.20
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.10...v2.2.20)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.10 to 2.2.20

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.10 to 2.2.20

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.19.0

Updates `org.assertj:assertj-core` from 3.27.4 to 3.27.6
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.27.4...assertj-build-3.27.6)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.10 to 2.2.20

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.3...surefire-3.5.4)

Updates `io.quarkus.platform:quarkus-maven-plugin` from 3.26.2 to 3.28.1
- [Commits](quarkusio/quarkus-platform@3.26.2...3.28.1)

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.10 to 2.2.20

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.19.0 to 2.19.1
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](mojohaus/versions@2.19.0...2.19.1)

---
updated-dependencies:
- dependency-name: io.quarkus.platform:quarkus-bom
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib
  dependency-version: 2.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: io.quarkus.platform:quarkus-maven-plugin
  dependency-version: 3.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.2.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner October 1, 2025 15:07
@sonarqubecloud
Copy link

sonarqubecloud bot commented Oct 1, 2025

@martinvisser martinvisser merged commit 028c827 into main Oct 2, 2025
3 checks passed
@martinvisser martinvisser deleted the dependabot/maven/prod-deps-316cdcd396 branch October 2, 2025 06:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants