Bump the maven-minor-updates group with 47 updates

[dependabot]

Bumps the maven-minor-updates group with 47 updates:

Package	From	To
org.apache.commons:commons-compress	1.27.1	1.28.0
org.apache.commons:commons-csv	1.14.0	1.14.1
commons-logging:commons-logging	1.3.5	1.4.0
com.fasterxml.jackson:jackson-bom	2.19.2	2.22.1
org.jctools:jctools-core	4.0.5	4.0.6
org.slf4j:slf4j-api	2.0.17	2.0.18
org.junit:junit-bom	5.13.4	5.14.4
org.junit.jupiter:junit-jupiter-engine	5.13.4	5.14.4
org.apache.activemq:activemq-broker	6.2.6	6.2.7
org.eclipse.angus:angus-activation	2.0.2	2.0.3
org.assertj:assertj-core	3.27.3	3.27.7
com.code-intelligence:jazzer	0.24.0	0.30.0
com.code-intelligence:jazzer-api	0.24.0	0.30.0
commons-codec:commons-codec	1.18.0	1.22.0
org.apache.commons:commons-dbcp2	2.13.0	2.14.0
commons-io:commons-io	2.19.0	2.22.0
org.apache.commons:commons-lang3	3.18.0	3.20.0
org.apache.commons:commons-pool2	2.12.1	2.13.1
com.google.guava:guava	33.4.8-jre	33.6.0-jre
com.google.guava:guava-testlib	33.4.8-jre	33.6.0-jre
jakarta.activation:jakarta.activation-api	2.1.3	2.1.4
org.eclipse.angus:jakarta.mail	2.0.3	2.0.5
jakarta.mail:jakarta.mail-api	2.1.3	2.1.5
com.google.code.java-allocation-instrumenter:java-allocation-instrumenter	3.3.4	3.3.5
org.jmdns:jmdns	3.6.1	3.6.3
net.java.dev.jna:jna	5.17.0	5.19.1
co.elastic.logging:log4j2-ecs-layout	1.7.0	1.8.0
org.apache.maven:maven-core	3.9.10	3.9.16
org.apache.maven:maven-model	3.9.10	3.9.16
org.openjdk.nashorn:nashorn-core	15.6	15.7
org.eclipse.platform:org.eclipse.osgi	3.23.100	3.24.200
org.codehaus.woodstox:stax2-api	4.2.2	4.3.0
org.xmlunit:xmlunit-core	2.10.3	2.12.0
org.xmlunit:xmlunit-matchers	2.10.3	2.12.0
org.tukaani:xz	1.10	1.12
biz.aQute.bnd:biz.aQute.bnd.annotation	7.1.0	7.3.0
com.google.errorprone:error_prone_annotations	2.38.0	2.50.0
io.fabric8:docker-maven-plugin	0.46.0	0.48.1
org.gradlex:gradle-module-metadata-maven-plugin	1.1	1.2
com.github.jnr:jnr-ffi	2.2.18	2.3.0
org.bouncycastle:bcpkix-jdk18on	1.83	1.85
co.elastic.clients:elasticsearch-java	9.2.0	9.4.3
org.elasticsearch.client:elasticsearch-rest-client	9.2.0	9.4.3
org.mongodb:bson	5.6.1	5.9.0
org.mongodb:mongodb-driver-core	5.6.1	5.9.0
org.mongodb:mongodb-driver-sync	5.6.1	5.9.0
org.slf4j:slf4j-nop	2.0.17	2.0.18

Updates org.apache.commons:commons-compress from 1.27.1 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

•        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 
  

•        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 
  

•        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 
  

•        Add GzipParameters.toString(). Thanks to Gary Gregory. 
  

• COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.

•        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 
  

•        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 
  

•        Add ZipFile.stream(). Thanks to Gary Gregory. 
  

•        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
  

•        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 
  

•        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 
  

•        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 
  

•        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
  

•        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 
  

•        Add PMD check to default Maven goal. Thanks to Gary Gregory. 
  

•        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 
  

•        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory. 
  

• COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.

•        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory. 
  

• COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.

•        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory. 
  

• COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.

•        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 
  

•        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
  

•        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 
  

... (truncated)

Commits

• 852d9c2 Prepare for the release candidate 1.28.0 RC1
• f5eb9e2 Prepare for the next release candidate
• 36f204c Camel case parameter name
• 4c04e4a Use final
• 6cb7da1 Javadoc
• 563c9d2 Javadoc
• ce73bd8 Javadoc
• a464ae9 Better parameter names
• c0b2b84 Add TODO for next major version
• c76bc97 Use OpenVEX to document that we are not affected by CVE-2025-48924 in
• Additional commits viewable in compare view

Updates org.apache.commons:commons-csv from 1.14.0 to 1.14.1

Changelog

Sourced from org.apache.commons:commons-csv's changelog.

Apache Commons CSV 1.14.1 Release Notes

The Apache Commons CSV team is pleased to announce the release of Apache Commons CSV 1.14.1.

This document contains the release notes for the 1.14.1 version of Apache Commons CSV. Commons CSV reads and writes files in Comma Separated Value (CSV) format variations.

Commons CSV requires at least Java 8.

The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version include:

Fixed Bugs

• CSV-318: CSVPrinter.printRecord(Stream) hangs if given a parallel stream. Thanks to Joseph Shraibman, Gary Gregory.
• CSV-318: CSVPrinter now uses an internal lock instead of synchronized methods. Thanks to Joseph Shraibman, Gary Gregory.

•       org.apache.commons.csv.CSVPrinter.printRecords(ResultSet) now writes one record at a time using a lock. Thanks to Gary Gregory.
  

Changes

•       Bump org.apache.commons:commons-parent from 81 to 85 [#542](https://github.com/apache/commons-csv/issues/542). Thanks to Gary Gregory, Dependabot.
  

•       Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.
  

•       Bump com.opencsv:opencsv from 5.10 to 5.11.2 [#545](https://github.com/apache/commons-csv/issues/545), [#551](https://github.com/apache/commons-csv/issues/551), [#553](https://github.com/apache/commons-csv/issues/553). Thanks to Gary Gregory, Dependabot.
  

•       Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#556](https://github.com/apache/commons-csv/issues/556). Thanks to Gary Gregory, Dependabot.
  

•       Bump commons-codec:commons-codec from 1.18.0 to 1.19.0. Thanks to Gary Gregory.
  

Historical list of changes: https://commons.apache.org/proper/commons-csv/changes.html

For complete information on Apache Commons CSV, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons CSV website:

https://commons.apache.org/proper/commons-csv/

Download page: https://commons.apache.org/proper/commons-csv/download_csv.cgi

Have fun! -Apache Commons CSV team

---

Commits

• e14ef86 Ignore macOS file
• d8724bf Prepare for the release candidate 1.14.1 RC1
• b76971c Prepare for the next release candidate
• b66814e Merge pull request #557 from apache/dependabot/github_actions/github/codeql-a...
• 9c95e92 Bump github/codeql-action from 3.29.2 to 3.29.4
• 1fb3716 Bump commons-codec:commons-codec from 1.18.0 to 1.19.0
• 7b72c50 Merge some string literals
• 9658373 Update the GitHub pull request template for AI
• 67192a9 Bump commons-io:commons-io from 2.19.0 to 2.20.0
• 59164c8 Bump com.opencsv:opencsv from 5.11.1 to 5.11.2 #553
• Additional commits viewable in compare view

Updates commons-logging:commons-logging from 1.3.5 to 1.4.0

Changelog

Sourced from commons-logging:commons-logging's changelog.

Apache Commons Logging 1.4.0 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.4.0.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

Fixed Bugs

•           Use the new Apache oak leaf logo. Thanks to Gary Gregory.
  

•           Fix broken URLs in website links. Thanks to Stanimir Stamenkov, Gary Gregory.
  

•           Add support for Jakarta servlets, see org.apache.commons.logging.jakarta.ServletContextCleaner [#419](https://github.com/apache/commons-logging/issues/419). Thanks to Kiril Keranov, Gary Gregory.
  

Changes

•           Bump org.apache.commons:commons-parent from 97 to 102. Thanks to Gary Gregory.
  

•           Bump log4j2.version from 2.25.3 to 2.26.0. Thanks to Gary Gregory, Dependabot.
  

•           Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18. Thanks to Gary Gregory, Dependabot.
  

Historical list of changes: https://commons.apache.org/proper/commons-logging/changes.html

Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi

For complete information on Apache Commons Logging, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Logging website:

https://commons.apache.org/proper/commons-logging/

---

Apache Commons Logging 1.3.6 Release Notes

The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.6.

Apache Commons Logging is a thin adapter allowing configurable bridging to other, well-known logging systems.

This is a feature and maintenance release. Java 8 or later is required.

Changes in this version

... (truncated)

Commits

• ff5ff39 Prepare for the release candidate 1.4.0 RC1
• a685f33 Prepare for the next release candidate
• a253ab6 Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18.
• d6c9b81 Javadoc
• 1cf45b2 Update legacy GitHub links in CONTRIBUTING.md
• 9b48b5b Bump org.apache.commons:commons-parent from 101 to 102.
• 7a44cb6 Bump GH CI actions/dependency-review-action from 4.9.0 to 5.0.0
• e884661 Bump GH CI actions/checkout from 6.0.2 to 6.0.3
• f6ad6f9 Bump org.apache.commons:commons-parent from 100 to 101
• b468740 Bump github/codeql-action from 4.36.0 to 4.36.2
• Additional commits viewable in compare view

Updates com.fasterxml.jackson:jackson-bom from 2.19.2 to 2.22.1

Commits

• b749a0c [maven-release-plugin] prepare release jackson-bom-2.22.1
• 569073f Prep for 2.22.1 release
• 87627b1 Merge branch '2.21' into 2.22
• da540ae Post-release dep version bump
• 5f0462e [maven-release-plugin] prepare for next development iteration
• 252ea90 [maven-release-plugin] prepare release jackson-bom-2.21.5
• 0bbea7f Prep for 2.21.5 release
• f6c940d Post-release dep version bump
• 31cfc40 [maven-release-plugin] prepare for next development iteration
• 112e859 [maven-release-plugin] prepare release jackson-bom-2.22.0
• Additional commits viewable in compare view

Updates org.jctools:jctools-core from 4.0.5 to 4.0.6

Release notes

Sourced from org.jctools:jctools-core's releases.

Add VarHandle queues and other minor fixups

NOTE: This will be the last release with JDK6 bytecode for jctools-core. The next release will be 5.0.0 and will compile with the 1.8 target, allowing for method handles.

This release has 2 artifacts. The old jctools-core with the following changes:

• Where plain access to field is used by queues, the field is not volatile and volatile access is done using Unsafe.
• Use a generated ConcurrentCircularXXXQueue instead of hand rolled base classes in generated code.
• Padding blocks formatting is improved in generated code.

The release introduces a new artifact, jctools-core-jdk11 which included generated VarHandle queues (padded and unpadded). These queues do not rely on Unsafe, and offer better performance than the AtomicFieldUpdater generated code. We expect many users will prefer these variants going forward to break their reliance on Unsafe.

The majority of the VarHandle work is a great contribution from @​amarziali , thanks!!! We also thank @​franz1981 for his help reviewing and profiling the code.

Commits

• 81fc9f7 Add VH package info
• b43fb9a Remove la optimization from VH queues in the absence of evidence it improve...
• b8b6eb5 Improve baseline
• e06b852 Generate atomic queues after builder changes
• 97aa7b4 Prep atomic generator for generating base classes
• e17024a Generate VH LinkedArray queues
• 85f8938 Regenerate queues with padding block
• 845e8ff Fix up volatile/plain fields access and prep for LinkedArray queues
• dc94426 Nicer formatting for padding blocks
• 7c77981 Fix test timeout due to slow clear on linked queues
• Additional commits viewable in compare view

Updates org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Updates org.junit:junit-bom from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

• @​uglide made their first contribution in junit-team/junit-framework#5245

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits

• 096fd69 Release 5.14.4
• 11fd02b Remove JDK 24 (EOL)
• 5b7f023 Fix integration tests on JDK 27
• 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
• a5bf336 Polish 5.14.4 release notes
• 7667c14 Fix race condition in NodeTestTask (#5427)
• ac01f2d Include full display name in legacy XML reports (#5524)
• fbd4a8e Include class template invocation index in legacy reporting names
• 7d6f0c0 Only check PDF for GA releases
• 14f534d Test 5.14.x against JDK 25 ga (#5623)
• Additional commits viewable in compare view

Updates org.junit.jupiter:junit-jupiter-engine from 5.13.4 to 5.14.4

Release notes

Sourced from org.junit.jupiter:junit-jupiter-engine's releases.

JUnit 5.14.4 = Platform 1.14.4 + Jupiter 5.14.4 + Vintage 5.14.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.3...r5.14.4

JUnit 5.14.3 = Platform 1.14.3 + Jupiter 5.14.3 + Vintage 5.14.3

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.2...r5.14.3

JUnit 5.14.2 = Platform 1.14.2 + Jupiter 5.14.2 + Vintage 5.14.2

See Release Notes.

New Contributors

• @​uglide made their first contribution in junit-team/junit-framework#5245

Full Changelog: junit-team/junit-framework@r5.14.1...r5.14.2

JUnit 5.14.1 = Platform 1.14.1 + Jupiter 5.14.1 + Vintage 5.14.1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.14.0...r5.14.1

JUnit 5.14.0 = Platform 1.14.0 + Jupiter 5.14.0 + Vintage 5.14.0

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0

JUnit 5.14.0-RC1 = Platform 1.14.0-RC1 + Jupiter 5.14.0-RC1 + Vintage 5.14.0-RC1

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.4...r5.14.0-RC1

Commits

• 096fd69 Release 5.14.4
• 11fd02b Remove JDK 24 (EOL)
• 5b7f023 Fix integration tests on JDK 27
• 18f842a Test against JDK 26 (GA) and JDK 27 (EA)
• a5bf336 Polish 5.14.4 release notes
• 7667c14 Fix race condition in NodeTestTask (#5427)
• ac01f2d Include full display name in legacy XML reports (#5524)
• fbd4a8e Include class template invocation index in legacy reporting names
• 7d6f0c0 Only check PDF for GA releases
• 14f534d Test 5.14.x against JDK 25 ga (#5623)
• Additional commits viewable in compare view

Updates org.apache.activemq:activemq-broker from 6.2.6 to 6.2.7

Release notes

Sourced from org.apache.activemq:activemq-broker's releases.

Apache ActiveMQ 6.2.7

What's Changed

• Bump to 6.2.7-SNAPSHOT by @​jbonofre in apache/activemq#2060
• [6.2.x] Update SECURITY.md and default configs for advisory topics by @​cshannon in apache/activemq#2057
• [6.2.x] Update Stomp transports with improved validation (#2064) by @​cshannon in apache/activemq#2065
• [6.2.x] Send advisory messages using Broker connection context (#2071) by @​cshannon in apache/activemq#2075
• [6.2.x] Add https to BrokerView restricted list (#2073) by @​cshannon in apache/activemq#2078
• [6.2.x] Add validation for WireFormatInfo (#2080) by @​cshannon in apache/activemq#2081
• [6.2.x] Ensure at most one BrokerInfo command is received (#2083) by @​cshannon in apache/activemq#2086
• [6.2.x] Restrict full web console URI to admins role (#2074) by @​cshannon in apache/activemq#2090
• [6.2.x] Adding missing jsp escapes (#2089) by @​cshannon in apache/activemq#2092
• [6.2.x] Limit WireFormatInfo platform details to a reasonable length (#2088) by @​cshannon in apache/activemq#2094
• [6.2.x] Add validation for LDAP network connector URIs (#2077) by @​cshannon in apache/activemq#2098
• [6.2.x] Add back missing closing tag (#2100) by @​cshannon in apache/activemq#2105
• [6.2.x] Validate Stomp headers against max frame size (#2104) by @​cshannon in apache/activemq#2110
• [6.2.x] Remove extra buffer copy in StompNIOSSLTransport (#2107) by @​cshannon in apache/activemq#2111
• [6.2.x] Replace active temp dests map with set (#2113) by @​cshannon in apache/activemq#2114
• [6.2.x] Refactor network connections to process after ConnectionInfo (#2112) by @​cshannon in apache/activemq#2116
• [6.2.x] Provide a flexible filter style input stream that limits read amounts (#2118) by @​cshannon in apache/activemq#2120
• [6.2.x] Add flag to optionally enable temp destination stealing (#2122) by @​cshannon in apache/activemq#2125
• [6.2.x] Improve the broker's handling of message corruption (#2136) by @​cshannon in apache/activemq#2143
• [6.2.x] Add support for maxInflateDataSize to limit uncompressed buffers (#2139) by @​cshannon in apache/activemq#2147
• [6.2.x] Fix test by enabling allowTempDestinationStealing (#2146) by @​cshannon in apache/activemq#2150
• [6.2.x] #2137 Fix maxUncommittedCount usage across a network of brokers by @​mattrpav in apache/activemq#2153
• Fix #2153 - remove test annotation from 6.2.x by @​cshannon in apache/activemq#2157
• [6.2.x] Improve handling of partial reads and EOF in Frame size limited filter (#2154) by @​cshannon in apache/activemq#2155
• [6.2.x] Preserve ${...} placeholders when removing/modifying networkConnectors in RuntimeConfigurationPlugin (#2123) by @​jbonofre in apache/activemq#2134

Full Changelog: apache/activemq@activemq-6.2.6...activemq-6.2.7

Commits

• f3e6191 [maven-release-plugin] prepare release activemq-6.2.7
• 250d092 Preserve property placeholders when removing/modifying networkConnectors (#2134)
• 3511f63 Improve handling of partial reads and EOF in Frame size limited filter (#2154...
• 92bcf5e Fix #2153 - remove test annotation from 6.2.x (#2157)
• e052743 #2137 Fix maxUncommittedCount usage across a network of brokers
• de041ee Fix test by enabling allowTempDestinationStealing (#2146) (#2150)
• afd714e Add support for maxInflateDataSize to limit uncompressed buffers (#2139) (#2147)
• ecfd133 Improve the broker's handling of message corruption (#2136) (#2143)
• 225dcb6 Add flag to optionally enable temp destination stealing (#2122) (#2125)
• 562fa8d Provide a flexible filter style input stream that limits read amounts (#2118)...
• Additional commits viewable in compare view

Updates org.eclipse.angus:angus-activation from 2.0.2 to 2.0.3

Commits

• 6eff4c5 Prepare release org.eclipse.angus:angus-activation-project:2.0.3
• bcb3375 jaf api 2.1.4 (#55)
• 84e5a0d Rename resources so javax and jakarta can live in same classpath #174
• c3c4d67 Merge pull request #46 from eclipse-ee4j/2.0.2-RELEASE
• 354de40 Update README.md
• c62baf3 Update TCK-Results.md
• 6cda1e7 Prepare next development cycle for 2.1.0-SNAPSHOT
• See full diff in compare view

Updates org.assertj:assertj-core from 3.27.3 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

• Fix XXE vulnerability in isXmlEqualTo assertion (CVE-2026-24400)
  • See GHSA-rqfh-9r24-8c9r for details; many thanks to @​wxt201 and @​Song-Li for responsibly reporting it!

🚫 Deprecated

Core

• Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

• Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

• Upgrade to Byte Buddy 1.18.3
• Upgrade to JUnit BOM 5.14.1

Guava

• Upgrade to Guava 33.5.0-jre

v3.27.6

🐛 Bug Fixes

Core

• Add missing export for org.assertj.core.annotation #3951

❤️ Contributors

Thanks to all the contributors who worked on this release:

@​duponter

v3.27.5

⚡ Improvements

Core

• ByteBuddy in AssertJ 3.27.4 not compatible with Java 25 #3946

... (truncated)

Commits

• e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
• 85ca7eb Deprecate XmlStringPrettyFormatter
• 77081dc Merge commit from fork
• b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
• 0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
• d393ef1 Abort tests when symbolic links cannot be created (#3788)
• 2212433 Add IntelliJ custom inspection for test class names
• 5717d02 Update JetBrains icon
• a8ec20b Add icon for JetBrains products
• c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
• Additional commits viewable in compare view

Updates com.code-intelligence:jazzer from 0.24.0 to 0.30.0

Release notes

Sourced from com.code-intelligence:jazzer's releases.

v0.30.0

What's Changed

• fix: Use getCanonicalName() for array codegen in autofuzz reproducers by @​kyakdan in CodeIntelligenceTesting/jazzer#1043
• feat: add exploreState(byte) overload with auto-generated call-site id by @​kyakdan in CodeIntelligenceTesting/jazzer#1032
• feat: Maximize API by @​kyakdan in CodeIntelligenceTesting/jazzer#1036
• feat: Add minimize API by @​kyakdan in CodeIntelligenceTesting/jazzer#1038
• feat: Enable exploreState without value profile by @​kyakdan in CodeIntelligenceTesting/jazzer#1037
• feat: add hooks for Set.contains & Set.remove by @​onionpsy in CodeIntelligenceTesting/jazzer#1030
• feat: add hook for Enum.valueOf by @​onionpsy in CodeIntelligenceTesting/jazzer#1031
• feat: add float/double comparison tracking to instrumentor by @​kyakdan in CodeIntelligenceTesting/jazzer#1045
• feat: add @​ElementOf annotation by @​simonresch in CodeIntelligenceTesting/jazzer#1028
• feat: extend ValuePool by new fields : files, and maxMutations by @​oetr in CodeIntelligenceTesting/jazzer#1033
• feat: ValuePool can now reference suppliers in any class by @​oetr in CodeIntelligenceTesting/jazzer#1046
• chore: update internal jacoco version to 0.8.14 by @​simonresch in CodeIntelligenceTesting/jazzer#1047
• chore: disable FilePathTraversal in an autofuzz test by @​oetr in CodeIntelligenceTesting/jazzer#1042
• chore: increase test timeout for the selffuzz test by @​oetr in CodeIntelligenceTesting/jazzer#1040
• chore: update bazel dependencies by @​simonresch in CodeIntelligenceTesting/jazzer#1041
• chore(deps): update maven deps by @​simonresch in CodeIntelligenceTesting/jazzer#1039

Full Changelog: CodeIntelligenceTesting/jazzer@v0.29.1...v0.30.0

v0.29.1

What's Changed

• fix: use user-friendly type names in exception messages by @​Marcono1234 in CodeIntelligenceTesting/jazzer#1024
• fix: support lists of arbitrary types by @​oetr in CodeIntelligenceTesting/jazzer#1020
• Add missing space to annotation error message by @​fmeum in CodeIntelligenceTesting/jazzer#1023
• feat: add char and Character mutator by @​oetr in CodeIntelligenceTesting/jazzer#1019
• feat: SSRF env var to allow all connections before it's configured by @​oetr in CodeIntelligenceTesting/jazzer#1018
• feat: sometimes interpret char[] mutations as single bytes by @​florianGla in CodeIntelligenceTesting/jazzer#1013
• chore: fix maven publishing script by @​simonresch in CodeIntelligenceTesting/jazzer#1029
• chore(deps): update bazel dependencies by @​simonresch in CodeIntelligenceTesting/jazzer#1015
• chore: reduce number of executions in selffuzz test by @​simonresch in CodeIntelligenceTesting/jazzer#1025
• docs: add trophies for lz4-java and aircompressor findings by @​simonresch in CodeIntelligenceTesting/jazzer#1027
• trophies: add entry for lz4-java by @​Marcono1234 in CodeIntelligenceTesting/jazzer#1021

Full Changelog: CodeIntelligenceTesting/jazzer@v0.28.0...v0.29.1

Note: There is no release for v0.29.0 due to a bug in the release pipeline.

v0.28.0

What's Changed

• feat: add @ValuePool to propagate values to types by @​oetr in CodeIntelligenceTesting/jazzer#975
• feat: add mutator support for generic classes by @​simonresch in CodeIntelligenceTesting/jazzer#1008
• fix: handle null values in Arrays.equal/compare hooks by @​simonresch in CodeIntelligenceTesting/jazzer#1017
• chore: almost automatic release to Maven Central by @​oetr in CodeIntelligenceTesting/jazzer#1016

Full Changelog: CodeIntelligenceTesting/jazzer@v0.27.0...v0.28.0

v0.27.0

... (truncated)

Commits

• dd9416b refactor: use CountersTracker instead of value profiling in exploreState
• 204e400 docs: improve ValuePool documentation
• 0745dac feat: ValuePool can now reference suppliers in any class
• 2421680 feat: add fuzz test example for minimize
• c61a728 feat: add minimize API
• 305c6e2 feat: add float/double comparison tracking to instrumentor
• 41ae169 chore: update internal jacoco version to 0.8.14
• 1c0deb4 feat: add maximize() hill-climbing API to Jazzer
• 2b9e788 feat: add JazzerApiException for API error handling
• f932854 feat: add ExtraCountersTracker for generic coverage counter management
• Additional commits viewable in