QRun-IO/qbit-qa-capture
3
0 Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases 1 Wiki Activity

build(deps): Bump the maven-minor-and-patch group across 1 directory with 4 updates #20

Open
dependabot[bot] wants to merge 1 commits from dependabot/maven/develop/maven-minor-and-patch-c5d59925a6 into develop
pull from: dependabot/maven/develop/maven-minor-and-patch-c5d59925a6
merge into: QRun-IO:develop
Conversation 1 Commits 1 Files Changed 3
+193 -193
dependabot[bot] commented 2026-10-29 18:06:37 +00:00 (Migrated from github.com)
Copy link
Copy source

Bumps the maven-minor-and-patch group with 4 updates in the / directory: com.kingsrook:qbit-build-parent, com.h2database:h2, org.jacoco:jacoco-maven-plugin and org.apache.maven:apache-maven.

Updates com.kingsrook:qbit-build-parent from 2.0.0 to 2.1.2

Release notes

Sourced from com.kingsrook:qbit-build-parent's releases.

Build Parent and Guardrails 2.1.2

com.kingsrook:qbit-build-parent:2.1.2 and com.kingsrook:qbit-guardrails:2.1.2 are published to Maven Central from the signed tag v2.1.2 on main 1630c83.

  • G1 default allow-lists now include qbit-assistant's provider SPI package (com.kingsrook.qbits.assistant.spi), so qbits can depend on the provider API without per-repo allow-list entries (#13).

This is a patch release with no other changes since 2.1.1.

Build Parent and Guardrails 2.1.1

com.kingsrook:qbit-build-parent:2.1.1 and com.kingsrook:qbit-guardrails:2.1.1 are published to Maven Central from the signed tag v2.1.1 on main 699c457.

  • G1 default allow-lists now include qbit-email and its public api package, so qbits can depend on qbit-email without per-repo allow-list entries (#12).

Patch release; no other changes from 2.1.0.

Build Parent and Guardrails 2.1.0

com.kingsrook:qbit-build-parent:2.1.0 and the new com.kingsrook:qbit-guardrails:2.1.0 are published to Maven Central from the signed tag v2.1.0 on main 67fa618 (#10, closes #9).

  • Architecture guardrails G1, G2, G3, G4 and G7 (from QRun-IO/qqq#1150, section 5) ship as qbit-guardrails, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).
  • The parent turns them on: a qbit-guardrails profile, active unless -Dqbit.guardrails.skip=true, runs the *GuardrailTest classes inside each qbit's surefire run and the enforcer at validate.
  • Report-first: every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.

Use com.kingsrook:qbit-build-parent:2.1.0 as the Maven parent to adopt them. See the README.

Commits
  • 1630c83 Merge pull request #13 from QRun-IO/feature/assistant-spi-allowlist
  • 00c6f1b feat(guardrails): allow qbit-assistant's provider SPI by default
  • b42f4f3 Bump version to 2.1.1 [skip ci]
  • 699c457 Merge pull request #12 from QRun-IO/feature/email-api-allowlist
  • 574a169 ci: re-run after a ChromeDriver install flake
  • 0f54482 feat(guardrails): allow qbit-email's published API by default
  • 736b796 Merge pull request #11 from QRun-IO/feature/ga-only-tag-filter-main
  • a4035aa ci: fix regex escaping in the GA tag filter
  • 52706aa ci: publish_release only on GA tags (port of #7 to main)
  • 67fa618 Merge pull request #10 from QRun-IO/feature/architecture-guardrails
  • Additional commits viewable in compare view

Updates com.h2database:h2 from 2.2.220 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

version-2.5.250

... (truncated)

Commits
  • f986838 in preparation for a release
  • 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
  • 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
  • 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
  • 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
  • 6ec30b6 #4395 disallow constraints between temporary and permanent tables
  • 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
  • f718b76 #4405 SecureFileStore.readFully() may skip decryption
  • e231ff7 #4405 SecureFileStore.readFully() may skip
  • 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.15 to 0.8.16

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.16

New Features

  • JaCoCo now officially supports Java 27 (GitHub #2287).
  • Experimental support for Java 28 class files (GitHub #2170, #2189).
  • To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

  • JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).
Commits

Updates org.apache.maven:apache-maven from 3.9.11 to 3.10.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Bumps the maven-minor-and-patch group with 4 updates in the / directory: [com.kingsrook:qbit-build-parent](https://github.com/Kingsrook/qbit-bom), [com.h2database:h2](https://github.com/h2database/h2database), [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) and org.apache.maven:apache-maven. Updates `com.kingsrook:qbit-build-parent` from 2.0.0 to 2.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kingsrook/qbit-bom/releases">com.kingsrook:qbit-build-parent's releases</a>.</em></p> <blockquote> <h2>Build Parent and Guardrails 2.1.2</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.2</code> and <code>com.kingsrook:qbit-guardrails:2.1.2</code> are published to Maven Central from the signed tag <code>v2.1.2</code> on main <code>1630c83</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-assistant's provider SPI package (<code>com.kingsrook.qbits.assistant.spi</code>), so qbits can depend on the provider API without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/13">#13</a>).</li> </ul> <p>This is a patch release with no other changes since 2.1.1.</p> <h2>Build Parent and Guardrails 2.1.1</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.1</code> and <code>com.kingsrook:qbit-guardrails:2.1.1</code> are published to Maven Central from the signed tag <code>v2.1.1</code> on main <code>699c457</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-email and its public api package, so qbits can depend on <code>qbit-email</code> without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/12">#12</a>).</li> </ul> <p>Patch release; no other changes from 2.1.0.</p> <h2>Build Parent and Guardrails 2.1.0</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.0</code> and the new <code>com.kingsrook:qbit-guardrails:2.1.0</code> are published to Maven Central from the signed tag <code>v2.1.0</code> on main <code>67fa618</code> (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/10">#10</a>, closes <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/9">#9</a>).</p> <ul> <li><strong>Architecture guardrails G1, G2, G3, G4 and G7</strong> (from <a href="https://redirect.github.com/QRun-IO/qqq/issues/1150">QRun-IO/qqq#1150</a>, section 5) ship as <code>qbit-guardrails</code>, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).</li> <li><strong>The parent turns them on:</strong> a <code>qbit-guardrails</code> profile, active unless <code>-Dqbit.guardrails.skip=true</code>, runs the <code>*GuardrailTest</code> classes inside each qbit's surefire run and the enforcer at <code>validate</code>.</li> <li><strong>Report-first:</strong> every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.</li> </ul> <p>Use <code>com.kingsrook:qbit-build-parent:2.1.0</code> as the Maven parent to adopt them. See the <a href="https://github.com/QRun-IO/qbit-bom/blob/v2.1.0/README.md">README</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/1630c830fe943a0857e0c149c8e640622a1960e8"><code>1630c83</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/13">#13</a> from QRun-IO/feature/assistant-spi-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/00c6f1bb5557184f803f16a65e06b67970204158"><code>00c6f1b</code></a> feat(guardrails): allow qbit-assistant's provider SPI by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/b42f4f30a2003c57341ff44313061c494f0ee936"><code>b42f4f3</code></a> Bump version to 2.1.1 [skip ci]</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/699c457f374e85120e7a5c3e665afcb4e6bcca24"><code>699c457</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/12">#12</a> from QRun-IO/feature/email-api-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/574a1696b6e5c3eb3cf8af7490df96c39f7bba72"><code>574a169</code></a> ci: re-run after a ChromeDriver install flake</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/0f5448256c77647fa6c18ae1fbca108142f97e36"><code>0f54482</code></a> feat(guardrails): allow qbit-email's published API by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/736b796d48f7cea65bfde28fce19f4ed3a307936"><code>736b796</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/11">#11</a> from QRun-IO/feature/ga-only-tag-filter-main</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/a4035aa8d714f659ec49b1664a639927bae4f217"><code>a4035aa</code></a> ci: fix regex escaping in the GA tag filter</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/52706aa987f881ebc39a25a941ff0b6b300760bb"><code>52706aa</code></a> ci: publish_release only on GA tags (port of <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/7">#7</a> to main)</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/67fa618d37d037f5689c8bf132240ed9266db89f"><code>67fa618</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/10">#10</a> from QRun-IO/feature/architecture-guardrails</li> <li>Additional commits viewable in <a href="https://github.com/Kingsrook/qbit-bom/compare/v2.0.0...v2.1.2">compare view</a></li> </ul> </details> <br /> Updates `com.h2database:h2` from 2.2.220 to 2.5.252 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/h2database/h2database/releases">com.h2database:h2's releases</a>.</em></p> <blockquote> <h2>Version 2.5.252</h2> <!-- raw HTML omitted --> <h2>version-2.5.250</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/h2database/h2database/commit/f986838bbbf4941d2edcd5298b18c9936d1b7359"><code>f986838</code></a> in preparation for a release</li> <li><a href="https://github.com/h2database/h2database/commit/06c34a7fa288208ecabb5d670555fd807270bb2a"><code>06c34a7</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4418">#4418</a> from andreitokar/issues-4380-4376</li> <li><a href="https://github.com/h2database/h2database/commit/1aef3e0692b7379402b2a1a14e5223a8911e31ec"><code>1aef3e0</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4376">#4376</a>: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...</li> <li><a href="https://github.com/h2database/h2database/commit/4bb8aee6bf4305a83e79b6a93e9e3781f904fed9"><code>4bb8aee</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4380">#4380</a>: creating a MATERIALIZED VIEW makes a persistent database permanently u...</li> <li><a href="https://github.com/h2database/h2database/commit/95b6af03b8768d770e5dac1ae829b7c15301b38e"><code>95b6af0</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4417">#4417</a> from andreitokar/issue-4395</li> <li><a href="https://github.com/h2database/h2database/commit/6ec30b66b68a298d6cfc424aa77fec90ebf05199"><code>6ec30b6</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4395">#4395</a> disallow constraints between temporary and permanent tables</li> <li><a href="https://github.com/h2database/h2database/commit/0f0f85605084bd4eaad8f6a467ff802161048b60"><code>0f0f856</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4416">#4416</a> from andreitokar/issue-4405</li> <li><a href="https://github.com/h2database/h2database/commit/f718b764c6d53e160f94d05003eae81d554ec253"><code>f718b76</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4405">#4405</a> SecureFileStore.readFully() may skip decryption</li> <li><a href="https://github.com/h2database/h2database/commit/e231ff7def4c280ffb845cb0b6e92fb9686867d1"><code>e231ff7</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4405">#4405</a> SecureFileStore.readFully() may skip</li> <li><a href="https://github.com/h2database/h2database/commit/4da0d1d02b4e860d6c2e68ff2de0c11c0a19011c"><code>4da0d1d</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4415">#4415</a> from jjh75607/fix/log-sql-aarch64</li> <li>Additional commits viewable in <a href="https://github.com/h2database/h2database/compare/version-2.2.220...version-2.5.252">compare view</a></li> </ul> </details> <br /> Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jacoco/jacoco/releases">org.jacoco:jacoco-maven-plugin's releases</a>.</em></p> <blockquote> <h2>0.8.16</h2> <h2>New Features</h2> <ul> <li>JaCoCo now officially supports Java 27 (GitHub <a href="https://redirect.github.com/jacoco/jacoco/issues/2287">#2287</a>).</li> <li>Experimental support for Java 28 class files (GitHub <a href="https://redirect.github.com/jacoco/jacoco/issues/2170">#2170</a>, <a href="https://redirect.github.com/jacoco/jacoco/issues/2189">#2189</a>).</li> <li>To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option <code>inclbootstrapclasses=true</code> is required (GitHub <a href="https://redirect.github.com/jacoco/jacoco/issues/2155">#2155</a>).</li> </ul> <h2>Non-functional Changes</h2> <ul> <li>JaCoCo now depends on ASM 9.11.1 (GitHub <a href="https://redirect.github.com/jacoco/jacoco/issues/2299">#2299</a>, <a href="https://redirect.github.com/jacoco/jacoco/issues/2304">#2304</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jacoco/jacoco/commit/466838a293cc2387f5788eddd9e41e1750d33b58"><code>466838a</code></a> Prepare release 0.8.16</li> <li><a href="https://github.com/jacoco/jacoco/commit/64d0ef7a0bd19ae0716da7b0e3545c377f561003"><code>64d0ef7</code></a> Upgrade ASM to 9.11.1 (<a href="https://redirect.github.com/jacoco/jacoco/issues/2304">#2304</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/fdaaab78b59446087132a84c102ea9cf0e3125ce"><code>fdaaab7</code></a> Upgrade ASM to 9.11 (<a href="https://redirect.github.com/jacoco/jacoco/issues/2299">#2299</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/d2571ae5103bcea1e1f6c7433142e0dd89e31006"><code>d2571ae</code></a> Upgrade Kotlin to 2.4.21 (<a href="https://redirect.github.com/jacoco/jacoco/issues/2302">#2302</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/2f763947443b7874d7fb4ba46b3270b93e2266f1"><code>2f76394</code></a> Improve Renovate commit messages and PR titles (<a href="https://redirect.github.com/jacoco/jacoco/issues/2301">#2301</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/e9f29365cac925207d6a16e0f531d5b779a104bc"><code>e9f2936</code></a> Use Ubuntu 26.04 (<a href="https://redirect.github.com/jacoco/jacoco/issues/2291">#2291</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/4ffe9f0033e05d50bc29d69cac9b16a419a135b1"><code>4ffe9f0</code></a> Upgrade actions/upload-artifact to 7.0.2 (<a href="https://redirect.github.com/jacoco/jacoco/issues/2295">#2295</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/aaede90e326a3ba32e619e6642eedbcfe99e2336"><code>aaede90</code></a> Upgrade Maven to 3.10.0 (<a href="https://redirect.github.com/jacoco/jacoco/issues/2292">#2292</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/f63849942e7d69e13062c99faa78c0ee0c7285f1"><code>f638499</code></a> Enable comment-based updates in pom.xml and html files (<a href="https://redirect.github.com/jacoco/jacoco/issues/2294">#2294</a>)</li> <li><a href="https://github.com/jacoco/jacoco/commit/2e115bb6868116ffa5af558e0b10c51b20db3811"><code>2e115bb</code></a> Happy birthday Java 27! (<a href="https://redirect.github.com/jacoco/jacoco/issues/2287">#2287</a>)</li> <li>Additional commits viewable in <a href="https://github.com/jacoco/jacoco/compare/v0.8.15...v0.8.16">compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven:apache-maven` from 3.9.11 to 3.10.0 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-29 18:06:37 +00:00
This pull request has changes conflicting with the target branch.
  • pom.xml
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/maven/develop/maven-minor-and-patch-c5d59925a6:dependabot/maven/develop/maven-minor-and-patch-c5d59925a6
git checkout dependabot/maven/develop/maven-minor-and-patch-c5d59925a6
Sign in to join this conversation.
Reviewers
No Reviewers
KofTwentyTwo
Labels
Clear labels
bug
Something isn't working
 dependencies
documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 java
Pull requests that update java code
 question
Further information is requested
 release:rc
Merging this develop PR cuts the next release candidate
 secuurity
wontfix
This will not be worked on
No labels dependencies java
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: QRun-IO/qbit-qa-capture#20