chore(deps): bump the maven-minor group across 1 directory with 6 updates

[dependabot]

Bumps the maven-minor group with 6 updates in the / directory:

Package	From	To
org.junit:junit-bom	6.1.1	6.1.2
org.primefaces:primefaces	15.0.16	15.0.17
io.sentry:sentry-log4j2	8.47.0	8.48.0
org.eclipse.jetty.ee11:jetty-ee11-cdi	12.1.10	12.1.11
org.eclipse.jetty.ee11:jetty-ee11-maven-plugin	12.1.10	12.1.11
com.github.spotbugs:spotbugs-maven-plugin	4.10.2.0	4.10.3.0

Updates org.junit:junit-bom from 6.1.1 to 6.1.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.1.2 = Platform 6.1.2 + Jupiter 6.1.2 + Vintage 6.1.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.1.1...r6.1.2

Commits

• b685426 Release 6.1.2
• ae244a6 Remove blanket outputDirectoryCreator from SuiteEngineTests (#5793)
• 43bd154 Finalize 6.1.2 release notes
• 0cd9510 Fix order of release note sections
• a1507cb Add initial 6.1.2 release notes to release notes index
• 9326641 Fix NoTestsDiscoveredException for suites containing only dynamic tests (#5839)
• 2ef1123 Create initial 6.1.2 release notes from template
• 83fa9ab Back to snapshots for further development
• See full diff in compare view

Updates org.primefaces:primefaces from 15.0.16 to 15.0.17

Release notes

Sourced from org.primefaces:primefaces's releases.

15.0.17

What's Changed

• Fix #14970: 15.0.17 Use PrimeFaces.utils.nextStickyZindex in DataTable resize handler by @​melloware in primefaces/primefaces#14977
• OutputLabel: Add aria-hidden="true" to required indicator for screen reader accessibility (WCAG/BITV) by @​AndreasIgel in primefaces/primefaces#15001
• Fix #15008: DatePicker respect disabled flag in showOverlay by @​melloware in primefaces/primefaces#15010
• fix #15021: 15.X properly hide and remove closed sidebar from a11y tree by @​melloware in primefaces/primefaces#15023

New Contributors

• @​AndreasIgel made their first contribution in primefaces/primefaces#15001

Full Changelog: primefaces/primefaces@v15.0.16...v15.0.17

Commits

• eb0f453 Release version 15.0.17
• 1d419ae fix #15021: 15.X properly hide and remove closed sidebar from a11y tree (#150...
• 3fd3873 cleanup jobs
• 2235a95 remove support
• eb57d74 Fix #15008: DatePicker respect disabled flag in showOverlay (#15010)
• 9f087a1 OutputLabel: Add aria-hidden="true" to required indicator for screen reader a...
• adf638b Fix #14970: 15.0.17 Use PrimeFaces.utils.nextStickyZindex in DataTable resize...
• 90c3c29 XSS issue
• f587a47 Prepare for next development version
• See full diff in compare view

Updates io.sentry:sentry-log4j2 from 8.47.0 to 8.48.0

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.48.0

Features

• Add Sentry.extendAppStart(), Sentry.finishExtendedAppStart(), and Sentry.getExtendedAppStartSpan() to extend the app start measurement past the first frame for extra launch-time work on Android (#5604)

  • Requires standalone app start tracing (options.isEnableStandaloneAppStartTracing). Call extendAppStart() in Application.onCreate after SDK init and finishExtendedAppStart() when done:

  Sentry.extendAppStart()
  // Optionally, retrieve the extended app start span to attach your own child spans
  val child = Sentry.getExtendedAppStartSpan()?.startChild("preload", "Preload resources")
  // ... extra launch-time work ...
  child?.finish()
  Sentry.finishExtendedAppStart()

• Add trace_metric_byte data category and record byte-level client reports when trace metrics are discarded (#5626)

• Support the io.sentry.tombstone.report-historical manifest option to enable historical tombstone reporting via AndroidManifest.xml <meta-data> (#5683)

Fixes

• Fix NoSuchMethodError from using Math.floorDiv/Math.floorMod overloads that are unavailable on Java 8 (#5743)
• Fix main thread identification parsing for ApplicationExitInfo ANRs (#5733)
• Do not send threads without stacktraces for ApplicationExitInfo ANRs (#5733)
• Record byte-level client reports when event processors discard logs or trace metrics (#5718)
• Name the device-info caching thread SentryDeviceInfoCache so all threads spawned by the SDK are identifiable (#5684)
• Apply byte-category rate limits to log and trace metric envelope items (#5716)

Performance

• Skip Hint allocation in Scope.addBreadcrumb when no beforeBreadcrumb callback is set (#5689)
• Speed up scope persistence by detecting the Sentry executor thread via a marker instead of a Thread.getName() name scan on every scope mutation (#5691)
• Remove executor prewarm during SDK init (#5681)
  • The single-threaded SentryExecutorService queued the prewarm work ahead of the first useful task, so it could only delay init work, never speed it up; the thread and class loading it warmed are paid identically by the first real task submitted right after.

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.48.0

Features

• Add Sentry.extendAppStart(), Sentry.finishExtendedAppStart(), and Sentry.getExtendedAppStartSpan() to extend the app start measurement past the first frame for extra launch-time work on Android (#5604)

  • Requires standalone app start tracing (options.isEnableStandaloneAppStartTracing). Call extendAppStart() in Application.onCreate after SDK init and finishExtendedAppStart() when done:

  Sentry.extendAppStart()
  // Optionally, retrieve the extended app start span to attach your own child spans
  val child = Sentry.getExtendedAppStartSpan()?.startChild("preload", "Preload resources")
  // ... extra launch-time work ...
  child?.finish()
  Sentry.finishExtendedAppStart()

• Add trace_metric_byte data category and record byte-level client reports when trace metrics are discarded (#5626)

• Expose sentry-native's heartbeat-based app-hang detection through SentryAndroidOptions (#5623)

  • Enable via setEnableNdkAppHangTracking(true) (disabled by default) and tune the timeout with setNdkAppHangTimeoutIntervalMillis(...) (default 5000 ms), or the io.sentry.ndk.app-hang.enable / io.sentry.ndk.app-hang.timeout-interval-millis manifest entries
  • Intended for hybrid SDKs: emit the heartbeat by calling the native sentry_app_hang_heartbeat() from the thread you want monitored. Independent of the JVM-based ANR detection (setAnrEnabled)

• Support the io.sentry.tombstone.report-historical manifest option to enable historical tombstone reporting via AndroidManifest.xml <meta-data> (#5683)

Fixes

• Fix NoSuchMethodError from using Math.floorDiv/Math.floorMod overloads that are unavailable on Java 8 (#5743)
• Fix main thread identification parsing for ApplicationExitInfo ANRs (#5733)
• Do not send threads without stacktraces for ApplicationExitInfo ANRs (#5733)
• Record byte-level client reports when event processors discard logs or trace metrics (#5718)
• Name the device-info caching thread SentryDeviceInfoCache so all threads spawned by the SDK are identifiable (#5684)
• Apply byte-category rate limits to log and trace metric envelope items (#5716)

Performance

• Skip Hint allocation in Scope.addBreadcrumb when no beforeBreadcrumb callback is set (#5689)
• Speed up scope persistence by detecting the Sentry executor thread via a marker instead of a Thread.getName() name scan on every scope mutation (#5691)
• Remove executor prewarm during SDK init (#5681)
  • The single-threaded SentryExecutorService queued the prewarm work ahead of the first useful task, so it could only delay init work, never speed it up; the thread and class loading it warmed are paid identically by the first real task submitted right after.

Dependencies

• Bump Native SDK from v0.15.2 to v0.15.3 (#5623)
  • changelog
  • diff

Commits

• 15e0feb release: 8.48.0
• a5db1a2 fix(android): Avoid Math floor APIs (#5743)
• e3bd612 fix(anr): extend main thread detection from thread dump (#5733)
• 69edd7d chore(deps): bump actions/setup-java in the github-actions group (#5740)
• cc59f48 feat(extend-app-start): App start extension API (#5604)
• 5f1bb66 docs(agents): Prefer Google Truth for new unit test assertions (#5735)
• 61ba1d5 fix(samples): Add Retrofit R8 full-mode keep rules to Android sample (#5727)
• 803fad4 feat(samples): Distinguish debug and release builds of the Android sample (#5...
• 7a19fee perf(core): Remove executor prewarm (#5681)
• 87f4f63 perf(core): Detect Sentry executor thread without a name scan (#5691)
• Additional commits viewable in compare view

Updates org.eclipse.jetty.ee11:jetty-ee11-cdi from 12.1.10 to 12.1.11

Updates org.eclipse.jetty.ee11:jetty-ee11-maven-plugin from 12.1.10 to 12.1.11

Updates com.github.spotbugs:spotbugs-maven-plugin from 4.10.2.0 to 4.10.3.0

Release notes

Sourced from com.github.spotbugs:spotbugs-maven-plugin's releases.

Spotbugs Maven Plugin 4.10.3.0

Summary

This release delivers improvements to reliability, maintainability, and reproducibility. The SpotBugs execution path has been modernized by replacing the Ant-based launcher with ProcessBuilder, temporary auxiliary classpath handling has been improved, and toolchain detection has been made more robust. Build tooling has also been cleaned up with Maven modernization efforts, improved reproducible artifact generation, and updated documentation. Additional fixes include improved artifact handling, test coverage improvements, and dependency updates.

What's Changed

• [fix] Skip non-JAR artifacts in buildBugTypeUrlMap by @​uweguenther in spotbugs/spotbugs-maven-plugin#1445
• modify renovate config to not use bytebuddy -jdk5 postifx versions by @​JuditKnoll in spotbugs/spotbugs-maven-plugin#1451
• Copilot/analyze test coverage by @​hazendaz in spotbugs/spotbugs-maven-plugin#1454
• Use StandardCharsets.UTF_8 in groovy verify in IT tests by @​hazendaz in spotbugs/spotbugs-maven-plugin#1456
• [license] Use spdx license header for apache 2.0 (no change to license) by @​hazendaz in spotbugs/spotbugs-maven-plugin#1457
• Cleanup the build pom by @​hazendaz in spotbugs/spotbugs-maven-plugin#1458
• [pom] Modernize how download / copy of spotbugs source works by @​hazendaz in spotbugs/spotbugs-maven-plugin#1459
• Add reproducibility checks section to README by @​hazendaz in spotbugs/spotbugs-maven-plugin#1460
• Avoid 'def' usage by @​hazendaz in spotbugs/spotbugs-maven-plugin#1462
• [pom] Replace antrun to fix groovy docs with find-and-replace plugin … by @​hazendaz in spotbugs/spotbugs-maven-plugin#1463
• Correct 2 integration tests by @​hazendaz in spotbugs/spotbugs-maven-plugin#1467
• Make tool chain logic more robust by @​hazendaz in spotbugs/spotbugs-maven-plugin#1469
• [pom] Use jar plugin to zip groovy docs so reproducibility works by @​hazendaz in spotbugs/spotbugs-maven-plugin#1470
• Make 'spotbugsAuxClasspath' a temp file and minor coding cleanup by @​hazendaz in spotbugs/spotbugs-maven-plugin#1471
• Replace 'ant' based SpotBugs execution with ProcessBuilder by @​hazendaz in spotbugs/spotbugs-maven-plugin#1472
• Update dependency com.github.spotbugs:spotbugs to v4.10.3 by @​renovate[bot] in spotbugs/spotbugs-maven-plugin#1473
• Other build/dependency updates

New Contributors

• @​uweguenther made their first contribution in spotbugs/spotbugs-maven-plugin#1445

Full Changelog: spotbugs/spotbugs-maven-plugin@spotbugs-maven-plugin-4.10.2.0...spotbugs-maven-plugin-4.10.3.0

Commits

• f0e6f45 [maven-release-plugin] prepare release spotbugs-maven-plugin-4.10.3.0
• 86af8d5 Merge pull request #1473 from spotbugs/renovate/spotbugs.version
• 2fc1232 Update dependency com.github.spotbugs:spotbugs to v4.10.3
• 8938370 Merge pull request #1472 from hazendaz/antwork
• 68ee04d Replace 'ant' usage with process builder
• 4fcdf58 Merge pull request #1471 from hazendaz/master
• c97f85e [ci] Minor cleanup after toolchain adjustments
• f7dde3a [nio] Change 'spotbugsAuxClasspath' file to a temp file and remove larger try...
• ce2addb Merge pull request #1470 from hazendaz/restructure
• bc53d37 [ci] readme update to reproducible builesd info
• Additional commits viewable in compare view

Updates org.eclipse.jetty.ee11:jetty-ee11-maven-plugin from 12.1.10 to 12.1.11

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions