chore(deps): bump the maven-runtime group with 8 updates by dependabot[bot] · Pull Request #9 · doctruthhq/DocTruth

dependabot · 2026-05-16T13:58:42Z

Bumps the maven-runtime group with 8 updates:

Package	From	To
com.fasterxml.jackson.core:jackson-databind	`2.18.2`	`2.21.3`
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	`2.18.2`	`2.21.3`
com.fasterxml.jackson.dataformat:jackson-dataformat-csv	`2.18.2`	`2.21.3`
org.slf4j:slf4j-api	`2.0.16`	`2.0.18`
org.apache.pdfbox:pdfbox	`3.0.3`	`3.0.7`
org.apache.poi:poi-ooxml	`5.4.0`	`5.5.1`
org.apache.commons:commons-text	`1.13.0`	`1.15.0`
org.apache.maven.plugins:maven-failsafe-plugin	`3.5.2`	`3.5.5`

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.2 to 2.21.3

Commits

See full diff in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.2 to 2.21.3

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-csv from 2.18.2 to 2.21.3

Commits

ccfcc95 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.3
5e81617 Prep for 2.21.3 release
52ab617 Merge branch '2.20' into 2.21
84f99f7 Merge branch '2.19' into 2.20
4fe54cb Merge branch '2.18' into 2.19
f18c578 Post-release dep version bump
8db1032 [maven-release-plugin] prepare for next development iteration
7afb263 [maven-release-plugin] prepare release jackson-dataformats-text-2.18.7
ec50f24 Prep for 2.18.7 release
a8bedbd Post-release dep version bump
Additional commits viewable in compare view

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.18.2 to 2.21.3

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-csv from 2.18.2 to 2.21.3

Commits

ccfcc95 [maven-release-plugin] prepare release jackson-dataformats-text-2.21.3
5e81617 Prep for 2.21.3 release
52ab617 Merge branch '2.20' into 2.21
84f99f7 Merge branch '2.19' into 2.20
4fe54cb Merge branch '2.18' into 2.19
f18c578 Post-release dep version bump
8db1032 [maven-release-plugin] prepare for next development iteration
7afb263 [maven-release-plugin] prepare release jackson-dataformats-text-2.18.7
ec50f24 Prep for 2.18.7 release
a8bedbd Post-release dep version bump
Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.16 to 2.0.18

Updates org.apache.pdfbox:pdfbox from 3.0.3 to 3.0.7

Updates org.apache.poi:poi-ooxml from 5.4.0 to 5.5.1

Updates org.apache.commons:commons-text from 1.13.0 to 1.15.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.15.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.15.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.15.0. This is a feature and maintenance release. Java 8 or later is required.

New features

       Add experimental CycloneDX VEX file [#683](https://github.com/apache/commons-text/issues/683). Thanks to Piotr P. Karwasz, Gary Gregory.

TEXT-235: Add Damerau-Levenshtein distance #687. Thanks to LorgeN, Gary Gregory.

       Add unit tests to increase coverage [#719](https://github.com/apache/commons-text/issues/719). Thanks to Michael Hausegger, Gary Gregory.

       Add new test for CharSequenceTranslator#with() [#725](https://github.com/apache/commons-text/issues/725). Thanks to Michael Hausegger, Gary Gregory.

       Add tests and assertions to org.apache.commons.text.similarity to get to 100% code coverage [#727](https://github.com/apache/commons-text/issues/727), [#728](https://github.com/apache/commons-text/issues/728). Thanks to Michael Hausegger.

Fixed Bugs

       Fix exception message typo in XmlStringLookup.XmlStringLookup(Map, Path...). Thanks to Gary Gregory.

TEXT-236: Inserting at the end of a TextStringBuilder throws a StringIndexOutOfBoundsException. Thanks to Pierre Post, Sumit Bera, Alex Herbert, Gary Gregory.

       Fix TextStringBuilderTest.testAppendToCharBuffer() to use proper argument type [#724](https://github.com/apache/commons-text/issues/724). Thanks to Michael Hausegger.

       Fix Apache RAT plugin console warnings. Thanks to Gary Gregory.

       Fix site XML to use version 2.0.0 XML schema. Thanks to Gary Gregory.

       Removed unreachable threshold verification code in src/main/java/org/apache/commons/text/similarity [#730](https://github.com/apache/commons-text/issues/730). Thanks to Michael Hausegger.

       Enable secure processing for the XML parser in XmlStringLookup in case the underlying JAXP implementation doesn't [#729](https://github.com/apache/commons-text/issues/729). Thanks to 김민재 (minjas0507), Gary Gregory, Piotr Karwasz.

Changes

       Bump org.apache.commons:commons-parent from 85 to 93 [#704](https://github.com/apache/commons-text/issues/704), [#723](https://github.com/apache/commons-text/issues/723), [#726](https://github.com/apache/commons-text/issues/726). Thanks to Gary Gregory.

       Bump commons.bytebuddy.version from 1.17.6 to 1.18.2 [#696](https://github.com/apache/commons-text/issues/696), [#722](https://github.com/apache/commons-text/issues/722). Thanks to Gary Gregory.

       Bump graalvm.version from 24.2.2 to 25.0.1 [#703](https://github.com/apache/commons-text/issues/703), [#716](https://github.com/apache/commons-text/issues/716). Thanks to Gary Gregory, Dependabot.

       Bump org.apache.commons:commons-lang3 from 3.18.0 to 3.20.0. Thanks to Gary Gregory.

       Bump commons-io:commons-io from 2.20.0 to 2.21.0. Thanks to Gary Gregory.

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

Download page: https://commons.apache.org/proper/commons-text/download_text.cgi

... (truncated)

Commits

04e9374 Prepare for the release candidate 1.15.0 RC1
502c4c4 Prepare for the next release candidate
c6e17ec Use direct access
58e1e12 Simplify XML FSP (#731)
b5052c9 Bump actions/setup-java from 5.0.0 to 5.1.0
2e2d4bc Revert "Bump actions/setup-java from 5.0.0 to 5.1.0"
b0ddbd1 Bump actions/setup-java from 5.0.0 to 5.1.0
1c2d382 Add tests with external DTD
ed3df4b Internal clean up
bb508f3 Bump actions/checkout from 6.0.0 to 6.0.1
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.5.2 to 3.5.5

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.5.5

🚀 New features and improvements

Replace runing external process and parsing output with simple ProcessHandle if available (Java9+) (#3252) @olamy

Pass slf4j context to spawned thread (#3241) @scottrw93

[SUREFIRE-3239] - allow override of statistics file checksum (#3247) @XN137

Reduce log level for skipped tests result to info (#3232) @strangelookingnerd

🐛 Bug Fixes

Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258) @jbliznak. Please note if you are using Windows with Java 8 and not PowerShell (you have options to: use Java 9+, install PowerShell or stay on Surefire 3.5.4)

Properly work with test failures caused during beforeAll phase (#3194) @Frawless

📝 Documentation updates

Clarify how late placeholder replacement (@{...}) deals with (#3208) @kwin

👻 Maintenance

Fix Jenkin badges in README (#3254) @slawekjaranowski

Use JUnit5 in failsafe ITs (#3251) @slawekjaranowski

Remove long-deprecated unused encoding property from VerifyMojo (#3198) @Tomlincoln

Add IT and deal with corner cases of handling beforeAll failures (#3200) @Frawless

Revert PR #3194 that handle beforeAll failures to follow proper contributing rules (#3211) @Frawless

🔧 Build

Missing many files in the GH Artifacts of CI ex-post. (#3219) @Tibor17

📦 Dependency updates

Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.4.0 to 3.5.1 (#3260) @dependabot[bot]

Bump parent from 44 to 47 (#3253) @slawekjaranowski

Bump org.assertj:assertj-core from 3.16.1 to 3.27.7 in /surefire-its/src/test/resources/surefire-1733-testng (#3246) @dependabot[bot]

Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (#3245) @dependabot[bot]

Bump org.codehaus.mojo:animal-sniffer-maven-plugin from 1.26 to 1.27 (#3243) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.20.0 to 4.21.0 (#3236) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.1 to 1.5.2 (#3235) @dependabot[bot]

Bump org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.3 in /surefire-its/src/test/resources/surefire-1659-stream-corruption (#3234) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.19.0 to 4.20.0 (#3228) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.18.0 to 4.19.0 (#3224) @dependabot[bot]

Bump org.apache.commons:commons-lang3 from 3.19.0 to 3.20.0 (#3223) @dependabot[bot]

Bump org.codehaus.plexus:plexus-interpolation from 1.28 to 1.29 (#3221) @dependabot[bot]

Bump org.codehaus.plexus:plexus-i18n from 1.0.0 to 1.1.0 (#3220) @dependabot[bot]

Bump commons-io:commons-io from 2.20.0 to 2.21.0 (#3217) @dependabot[bot]

Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness from 3.3.0 to 3.4.0 (#3214) @dependabot[bot]

Bump org.codehaus.plexus:plexus-java from 1.5.0 to 1.5.1 (#3218) @dependabot[bot]

Bump org.htmlunit:htmlunit from 4.16.0 to 4.18.0 (#3213) @dependabot[bot]

... (truncated)

Commits

968cb38 [maven-release-plugin] prepare release surefire-3.5.5
8e7dc41 Reapply "Replace runing external process and parsing output with simple Proce...
4ced57c Revert "Replace runing external process and parsing output with simple Proces…"
8496d9a Bump org.xmlunit:xmlunit-core from 2.10.4 to 2.11.0 (#3209)
68265e5 Bump org.apache.maven.plugin-testing:maven-plugin-testing-harness (#3260)
0b19014 Replace runing external process and parsing output with simple ProcessHandle ...
688f8c4 Use PowerShell instead of WMIC for detecting zombie process on Windows (#3258)
e5c01a6 Build only by the latest Maven on Jenkins (#3255)
9c99e97 Fix Jenkin badges in README (#3254)
20930ea Bump parent from 44 to 47 (#3253)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the maven-runtime group with 8 updates: | Package | From | To | | --- | --- | --- | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.18.2` | `2.21.3` | | com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.18.2` | `2.21.3` | | [com.fasterxml.jackson.dataformat:jackson-dataformat-csv](https://github.com/FasterXML/jackson-dataformats-text) | `2.18.2` | `2.21.3` | | org.slf4j:slf4j-api | `2.0.16` | `2.0.18` | | org.apache.pdfbox:pdfbox | `3.0.3` | `3.0.7` | | org.apache.poi:poi-ooxml | `5.4.0` | `5.5.1` | | [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.13.0` | `1.15.0` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.2` | `3.5.5` | Updates `com.fasterxml.jackson.core:jackson-databind` from 2.18.2 to 2.21.3 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.2 to 2.21.3 Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-csv` from 2.18.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.18.2...jackson-dataformats-text-2.21.3) Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.18.2 to 2.21.3 Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-csv` from 2.18.2 to 2.21.3 - [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.18.2...jackson-dataformats-text-2.21.3) Updates `org.slf4j:slf4j-api` from 2.0.16 to 2.0.18 Updates `org.apache.pdfbox:pdfbox` from 3.0.3 to 3.0.7 Updates `org.apache.poi:poi-ooxml` from 5.4.0 to 5.5.1 Updates `org.apache.commons:commons-text` from 1.13.0 to 1.15.0 - [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt) - [Commits](apache/commons-text@rel/commons-text-1.13.0...rel/commons-text-1.15.0) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.2 to 3.5.5 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.5) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-csv dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310 dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-csv dependency-version: 2.21.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-runtime - dependency-name: org.apache.pdfbox:pdfbox dependency-version: 3.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-runtime - dependency-name: org.apache.poi:poi-ooxml dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: org.apache.commons:commons-text dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-runtime - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-runtime ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels May 16, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the maven-runtime group with 8 updates#9

chore(deps): bump the maven-runtime group with 8 updates#9
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-runtime-5184e91bc8

dependabot Bot commented on behalf of github May 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 16, 2026

Apache Commons Text 1.15.0 Release Notes

New features

Fixed Bugs

Changes

3.5.5

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

🔧 Build

📦 Dependency updates

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants