fix(deps): bump the prod-deps group across 1 directory with 6 updates #290

dependabot · 2026-01-19T09:15:46Z

Bumps the prod-deps group with 6 updates in the / directory:

Package	From	To
org.junit:junit-bom	`6.0.1`	`6.0.2`
org.apache.logging.log4j:log4j-bom	`2.25.2`	`2.25.3`
io.vertx:vertx-stack-depchain	`5.0.5`	`5.0.7`
org.testcontainers:testcontainers-bom	`1.20.6`	`2.0.3`
org.aspectj:aspectjrt	`1.9.25`	`1.9.25.1`
org.aspectj:aspectjtools	`1.9.25`	`1.9.25.1`

Updates org.junit:junit-bom from 6.0.1 to 6.0.2

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 6.0.2 = Platform 6.0.2 + Jupiter 6.0.2 + Vintage 6.0.2

See Release Notes.

Full Changelog: junit-team/junit-framework@r6.0.1...r6.0.2

Commits

c5c5de5 Release 6.0.2
98b6f78 Add missing checkout step
732dc27 Finalize 6.0.2 release notes
6a25736 Finalize 5.14.2 release notes
33e66bf Move release notes for #5238 entry to 6.1.0-M2
11f0f82 Update copyright headers
6ce1265 Consistently add license header to all java source files
4d454ee Update dependency @antora/lunr-extension to v1.0.0-alpha.12
faf4a58 Use --since feature of Javadoc
5cc8b05 Mark new recommended APIs as "maintained" rather than "experimental"
Additional commits viewable in compare view

Updates org.apache.logging.log4j:log4j-bom from 2.25.2 to 2.25.3

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.25.3

This patch release addresses issues detailed in the changelog below. In particular, it includes an important fix for the host name verification in SSL/TLS configuration. This is used by Socket Appender.

Changed

Optimize DefaultThreadContextMap.getCopy() performance by avoiding megamorphic calls in HashMap constructor (#3935, #3939)

Fixed

Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996)

Fix failures caused by null SslConfiguration (#3947, #3953)

Fix incorrect handling of the host name verification in SSL/TLS configuration, which is used by Socket Appender when SSL/TLS is enabled (#4002)

Removed

Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)

Commits

028e9fa Update the project.build.outputTimestamp property
5350d10 Fix host name verification in SSLSocketManager (#4002)
e2898a0 Fix @Version annotations
041435d Get ready for the 2.25.3 release
73db4fb Fix log message in ApiLogger::setUseParentHandlers (#3943)
6076b16 Fix nullability issues in SslConfiguration (#3953)
8d43a99 Remove the com.github.spotbugs:spotbugs-annotations dependency (#3984, #3985)
78dc01d Use binary names in GraalVmProcessor (#3996)
c09b012 Optimize DefaultThreadContextMap.getCopy() performance (#3939)
See full diff in compare view

Updates io.vertx:vertx-stack-depchain from 5.0.5 to 5.0.7

Updates org.testcontainers:testcontainers-bom from 1.20.6 to 2.0.3

Release notes

Sourced from org.testcontainers:testcontainers-bom's releases.

2.0.3

What's Changed

Update questdb/questdb image version to 9.2.2 (#11347) @eddumelendez

Fix GitHub-Action Generate PR descriptions (#11129) @JackPGreen

Update testcontainers version to ${GITHUB_REF##*/} (#11220) @github-actions[bot]

Update docs version to ${GITHUB_REF##*/} (#11221) @github-actions[bot]

🐛 Bug Fixes

Fix compatibility with older Docker Engines by falling back to v1.32 (#11346) @eddumelendez

📖 Documentation

Dead links in CircleCI reference documentation (#10789) @JohnWill14

📦 Dependency updates

Combined dependencies PR (#11353) @eddumelendez

Combined dependencies PR (#11352) @eddumelendez

Combined dependencies PR (#11341) @eddumelendez

Combined dependencies PR (#11334) @eddumelendez

Combined dependencies PR (#11333) @eddumelendez

Combined dependencies PR (#11332) @eddumelendez

Combined dependencies PR (#11323) @eddumelendez

2.0.2

What's Changed

Update docker image version to 25.0.5 (#11219) @eddumelendez

Set default docker API version to 1.44 (#11216) @eddumelendez

Fix ollama example (#11217) @eddumelendez

Update testcontainers version to ${GITHUB_REF##*/} (#11125) @github-actions[bot]

Update docs version to ${GITHUB_REF##*/} (#11126) @github-actions[bot]

🐛 Bug Fixes

Optimize ScriptSplitter from O(n*m) to O(1) when initializing database (#11130) @hspragg-godaddy

📖 Documentation

Update kotest-extensions-testcontainers link (#11138) @noojung

🧹 Housekeeping

Add getBaseUrl() to NginxContainer using NGINX_DEFAULT_PORT (#11137) @ghusta

... (truncated)

Commits

43c6a97 Combined dependencies PR (#11353)
7778cc5 Merge remote-tracking branch 'origin/dependabot/gradle/modules/activemq/org.a...
30b043f Merge remote-tracking branch 'origin/dependabot/gradle/modules/db2/com.ibm.db...
17d570b Merge remote-tracking branch 'origin/dependabot/gradle/modules/elasticsearch/...
47e9ae5 Merge remote-tracking branch 'origin/dependabot/gradle/modules/gcloud/com.goo...
f34ab26 Merge remote-tracking branch 'origin/dependabot/gradle/modules/couchbase/com....
ac66ad6 Merge remote-tracking branch 'origin/dependabot/gradle/modules/activemq/org.a...
b6a1f28 Merge remote-tracking branch 'origin/dependabot/gradle/modules/milvus/io.milv...
6a99624 Merge remote-tracking branch 'origin/dependabot/gradle/modules/influxdb/com.i...
4ff0770 Merge remote-tracking branch 'origin/dependabot/gradle/modules/grafana/io.mic...
Additional commits viewable in compare view

Updates org.aspectj:aspectjrt from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjrt's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.aspectj:aspectjtools from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Updates org.aspectj:aspectjtools from 1.9.25 to 1.9.25.1

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.25.1

Full Changelog: eclipse-aspectj/aspectj@V1_9_25...V1_9_25_1

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `6.0.1` | `6.0.2` | | [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) | `2.25.2` | `2.25.3` | | io.vertx:vertx-stack-depchain | `5.0.5` | `5.0.7` | | [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `2.0.3` | | [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` | | [org.aspectj:aspectjtools](https://github.com/eclipse/org.aspectj) | `1.9.25` | `1.9.25.1` | Updates `org.junit:junit-bom` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/junit-team/junit-framework/releases) - [Commits](junit-team/junit-framework@r6.0.1...r6.0.2) Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.25.3 - [Release notes](https://github.com/apache/logging-log4j2/releases) - [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc) - [Commits](apache/logging-log4j2@rel/2.25.2...rel/2.25.3) Updates `io.vertx:vertx-stack-depchain` from 5.0.5 to 5.0.7 Updates `org.testcontainers:testcontainers-bom` from 1.20.6 to 2.0.3 - [Release notes](https://github.com/testcontainers/testcontainers-java/releases) - [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md) - [Commits](testcontainers/testcontainers-java@1.20.6...2.0.3) Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1 - [Release notes](https://github.com/eclipse/org.aspectj/releases) - [Commits](https://github.com/eclipse/org.aspectj/commits) --- updated-dependencies: - dependency-name: org.junit:junit-bom dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: org.apache.logging.log4j:log4j-bom dependency-version: 2.25.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: io.vertx:vertx-stack-depchain dependency-version: 5.0.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: org.testcontainers:testcontainers-bom dependency-version: 2.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: org.aspectj:aspectjrt dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: org.aspectj:aspectjtools dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: org.aspectj:aspectjtools dependency-version: 1.9.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 19, 2026

dependabot bot requested a review from a team as a code owner January 19, 2026 09:15

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 19, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): bump the prod-deps group across 1 directory with 6 updates #290

fix(deps): bump the prod-deps group across 1 directory with 6 updates #290

Uh oh!

dependabot bot commented on behalf of github Jan 19, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

fix(deps): bump the prod-deps group across 1 directory with 6 updates #290

Are you sure you want to change the base?

fix(deps): bump the prod-deps group across 1 directory with 6 updates #290

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.25.3

Changed

Fixed

Removed

2.0.3

What's Changed

🐛 Bug Fixes

📖 Documentation

📦 Dependency updates

2.0.2

What's Changed

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

1.9.25.1

1.9.25.1

1.9.25.1

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jan 19, 2026 •

edited

Loading