[java-parent-project] 01/02: JPAR-236 Bump Maven plugin versions for IdP 5.3

Codeberg noreply at shibboleth.net
Thu Sep 3 19:16:10 UTC 2026


This is an automated email from the git hooks/post-receive script.

codeberg pushed a commit to branch dev/JPAR-36
in repository java-parent-project.

View the commit online:
https://codeberg.org/Shibboleth/java-parent-project/commit/dd55fb1e72c94156fcc03f0a377516d2c77715c0

commit dd55fb1e72c94156fcc03f0a377516d2c77715c0
Author: Rod Widdowson <rdw at steadingsoftware.com>
AuthorDate: Thu Sep 3 13:12:38 2026 +0100

    JPAR-236 Bump Maven plugin versions for IdP 5.3
    
    https://shibboleth.atlassian.net/browse/JPAR-236
    
    Clean up the pom slightly>bring forward artefacts when it is safe so to do.
---
 pom.xml | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/pom.xml b/pom.xml
index 9527eab..91fae53 100644
--- a/pom.xml
+++ b/pom.xml
@@ -37,8 +37,8 @@
         <bouncycastle.pg.version>1.84</bouncycastle.pg.version>
         <commons.codec.version>1.16.1</commons.codec.version>
         <!-- IMPORTANT: commons-compress and commons-io versions need to be updated with the -io version coming from -compress.  -->
-        <commons.compress.version>1.26.2</commons.compress.version>
-        <commons.io.version>2.16.1</commons.io.version>
+        <commons.compress.version>1.28.0</commons.compress.version>
+        <commons.io.version>2.20.0</commons.io.version>
         <commons.lang3.version>3.20.0</commons.lang3.version>
         <cryptacular.version>1.3.0</cryptacular.version>
         <duoweb.version>1.3</duoweb.version>
@@ -65,14 +65,14 @@
         <ldaptive.version>2.5.1</ldaptive.version>
         <mockito.version>3.9.0</mockito.version>
         <testng.version>7.7.1</testng.version>
-        <unboundid.version>7.0.2</unboundid.version> <!-- Test only dependency -->
-        <metrics.version>4.2.39</metrics.version>
-        <rhino.version>1.7.15</rhino.version>
-        <nashorn.jdk.version>15.4</nashorn.jdk.version> <!-- Test only dependency -->
+        <unboundid.version>7.0.5</unboundid.version> <!-- Test only dependency -->
+        <metrics.version>4.2.40</metrics.version>
+        <rhino.version>1.9.1</rhino.version>
+        <nashorn.jdk.version>15.7</nashorn.jdk.version> <!-- Test only dependency -->
         <rhino.engine.version>1.0.0</rhino.engine.version> <!-- Test only dependency -->
         <slf4j.groupId>org.slf4j</slf4j.groupId>
-        <slf4j.version>2.0.13</slf4j.version>
-        <logback.version>1.5.34</logback.version>
+        <slf4j.version>2.0.18</slf4j.version>
+        <logback.version>1.6.3</logback.version>
         <spring.groupId>org.springframework</spring.groupId>
         <spring.version>7.0.8</spring.version>
         <spring-webflow.groupId>org.springframework.webflow</spring-webflow.groupId>
@@ -547,7 +547,7 @@
             <dependency>
                 <groupId>org.hsqldb</groupId>
                 <artifactId>hsqldb</artifactId>
-                <version>2.7.3</version>
+                <version>2.7.4</version>
                 <scope>test</scope>
             </dependency>
             <dependency>
@@ -1064,7 +1064,6 @@
                 </plugins>
             </build>
         </profile>
-
     </profiles>
 
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list