QRun-IO/qbit-secured-data
3
0 Fork 0
Code Issues Pull Requests 4 Actions Packages Projects Releases 4 Wiki Activity

build(deps): Bump the maven-minor-and-patch group across 1 directory with 4 updates #20

Open
dependabot[bot] wants to merge 1 commits from dependabot/maven/develop/maven-minor-and-patch-47b49de09a into develop
pull from: dependabot/maven/develop/maven-minor-and-patch-47b49de09a
merge into: QRun-IO:develop
Conversation 1 Commits 1 Files Changed 3
+193 -193
dependabot[bot] commented 2026-10-20 20:54:52 +00:00 (Migrated from github.com)
Copy link
Copy source

Bumps the maven-minor-and-patch group with 4 updates in the / directory: com.kingsrook:qbit-build-parent, com.h2database:h2, org.apache.maven.plugins:maven-checkstyle-plugin and org.apache.maven:apache-maven.

Updates com.kingsrook:qbit-build-parent from 2.0.0 to 2.1.2

Release notes

Sourced from com.kingsrook:qbit-build-parent's releases.

Build Parent and Guardrails 2.1.2

com.kingsrook:qbit-build-parent:2.1.2 and com.kingsrook:qbit-guardrails:2.1.2 are published to Maven Central from the signed tag v2.1.2 on main 1630c83.

  • G1 default allow-lists now include qbit-assistant's provider SPI package (com.kingsrook.qbits.assistant.spi), so qbits can depend on the provider API without per-repo allow-list entries (#13).

This is a patch release with no other changes since 2.1.1.

Build Parent and Guardrails 2.1.1

com.kingsrook:qbit-build-parent:2.1.1 and com.kingsrook:qbit-guardrails:2.1.1 are published to Maven Central from the signed tag v2.1.1 on main 699c457.

  • G1 default allow-lists now include qbit-email and its public api package, so qbits can depend on qbit-email without per-repo allow-list entries (#12).

Patch release; no other changes from 2.1.0.

Build Parent and Guardrails 2.1.0

com.kingsrook:qbit-build-parent:2.1.0 and the new com.kingsrook:qbit-guardrails:2.1.0 are published to Maven Central from the signed tag v2.1.0 on main 67fa618 (#10, closes #9).

  • Architecture guardrails G1, G2, G3, G4 and G7 (from QRun-IO/qqq#1150, section 5) ship as qbit-guardrails, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).
  • The parent turns them on: a qbit-guardrails profile, active unless -Dqbit.guardrails.skip=true, runs the *GuardrailTest classes inside each qbit's surefire run and the enforcer at validate.
  • Report-first: every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.

Use com.kingsrook:qbit-build-parent:2.1.0 as the Maven parent to adopt them. See the README.

Commits
  • 1630c83 Merge pull request #13 from QRun-IO/feature/assistant-spi-allowlist
  • 00c6f1b feat(guardrails): allow qbit-assistant's provider SPI by default
  • b42f4f3 Bump version to 2.1.1 [skip ci]
  • 699c457 Merge pull request #12 from QRun-IO/feature/email-api-allowlist
  • 574a169 ci: re-run after a ChromeDriver install flake
  • 0f54482 feat(guardrails): allow qbit-email's published API by default
  • 736b796 Merge pull request #11 from QRun-IO/feature/ga-only-tag-filter-main
  • a4035aa ci: fix regex escaping in the GA tag filter
  • 52706aa ci: publish_release only on GA tags (port of #7 to main)
  • 67fa618 Merge pull request #10 from QRun-IO/feature/architecture-guardrails
  • Additional commits viewable in compare view

Updates com.h2database:h2 from 2.2.224 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

version-2.5.250

... (truncated)

Commits
  • f986838 in preparation for a release
  • 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
  • 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
  • 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
  • 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
  • 6ec30b6 #4395 disallow constraints between temporary and permanent tables
  • 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
  • f718b76 #4405 SecureFileStore.readFully() may skip decryption
  • e231ff7 #4405 SecureFileStore.readFully() may skip
  • 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-checkstyle-plugin from 3.3.1 to 3.6.0

Commits
  • dd1abd9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.6.0
  • 9ccb06e fix
  • 6ac89b8 [MCHECKSTYLE-452] Upgrade to Doxia 2.0.0 GA Stack
  • ff1a1b7 Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
  • 13e16c5 Remove unecessary test dependency on plexus-container-default
  • a7c962a [maven-release-plugin] prepare for next development iteration
  • 868abc9 [maven-release-plugin] prepare release maven-checkstyle-plugin-3.5.0
  • 9043f8a [MCHECKSTYLE-446] Dynamically calculate xrefLocation/xrefTestLocation
  • 0e7bd00 [MCHECKSTYLE-445] Upgrade to Doxia 2.0.0 Milestone Stack
  • b92666d Bump org.apache.maven.plugins:maven-plugins from 42 to 43
  • Additional commits viewable in compare view

Updates org.apache.maven:apache-maven from 3.9.11 to 3.10.0

Bumps the maven-minor-and-patch group with 4 updates in the / directory: [com.kingsrook:qbit-build-parent](https://github.com/Kingsrook/qbit-bom), [com.h2database:h2](https://github.com/h2database/h2database), [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) and org.apache.maven:apache-maven. Updates `com.kingsrook:qbit-build-parent` from 2.0.0 to 2.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kingsrook/qbit-bom/releases">com.kingsrook:qbit-build-parent's releases</a>.</em></p> <blockquote> <h2>Build Parent and Guardrails 2.1.2</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.2</code> and <code>com.kingsrook:qbit-guardrails:2.1.2</code> are published to Maven Central from the signed tag <code>v2.1.2</code> on main <code>1630c83</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-assistant's provider SPI package (<code>com.kingsrook.qbits.assistant.spi</code>), so qbits can depend on the provider API without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/13">#13</a>).</li> </ul> <p>This is a patch release with no other changes since 2.1.1.</p> <h2>Build Parent and Guardrails 2.1.1</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.1</code> and <code>com.kingsrook:qbit-guardrails:2.1.1</code> are published to Maven Central from the signed tag <code>v2.1.1</code> on main <code>699c457</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-email and its public api package, so qbits can depend on <code>qbit-email</code> without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/12">#12</a>).</li> </ul> <p>Patch release; no other changes from 2.1.0.</p> <h2>Build Parent and Guardrails 2.1.0</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.0</code> and the new <code>com.kingsrook:qbit-guardrails:2.1.0</code> are published to Maven Central from the signed tag <code>v2.1.0</code> on main <code>67fa618</code> (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/10">#10</a>, closes <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/9">#9</a>).</p> <ul> <li><strong>Architecture guardrails G1, G2, G3, G4 and G7</strong> (from <a href="https://redirect.github.com/QRun-IO/qqq/issues/1150">QRun-IO/qqq#1150</a>, section 5) ship as <code>qbit-guardrails</code>, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).</li> <li><strong>The parent turns them on:</strong> a <code>qbit-guardrails</code> profile, active unless <code>-Dqbit.guardrails.skip=true</code>, runs the <code>*GuardrailTest</code> classes inside each qbit's surefire run and the enforcer at <code>validate</code>.</li> <li><strong>Report-first:</strong> every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.</li> </ul> <p>Use <code>com.kingsrook:qbit-build-parent:2.1.0</code> as the Maven parent to adopt them. See the <a href="https://github.com/QRun-IO/qbit-bom/blob/v2.1.0/README.md">README</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/1630c830fe943a0857e0c149c8e640622a1960e8"><code>1630c83</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/13">#13</a> from QRun-IO/feature/assistant-spi-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/00c6f1bb5557184f803f16a65e06b67970204158"><code>00c6f1b</code></a> feat(guardrails): allow qbit-assistant's provider SPI by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/b42f4f30a2003c57341ff44313061c494f0ee936"><code>b42f4f3</code></a> Bump version to 2.1.1 [skip ci]</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/699c457f374e85120e7a5c3e665afcb4e6bcca24"><code>699c457</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/12">#12</a> from QRun-IO/feature/email-api-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/574a1696b6e5c3eb3cf8af7490df96c39f7bba72"><code>574a169</code></a> ci: re-run after a ChromeDriver install flake</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/0f5448256c77647fa6c18ae1fbca108142f97e36"><code>0f54482</code></a> feat(guardrails): allow qbit-email's published API by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/736b796d48f7cea65bfde28fce19f4ed3a307936"><code>736b796</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/11">#11</a> from QRun-IO/feature/ga-only-tag-filter-main</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/a4035aa8d714f659ec49b1664a639927bae4f217"><code>a4035aa</code></a> ci: fix regex escaping in the GA tag filter</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/52706aa987f881ebc39a25a941ff0b6b300760bb"><code>52706aa</code></a> ci: publish_release only on GA tags (port of <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/7">#7</a> to main)</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/67fa618d37d037f5689c8bf132240ed9266db89f"><code>67fa618</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/10">#10</a> from QRun-IO/feature/architecture-guardrails</li> <li>Additional commits viewable in <a href="https://github.com/Kingsrook/qbit-bom/compare/v2.0.0...v2.1.2">compare view</a></li> </ul> </details> <br /> Updates `com.h2database:h2` from 2.2.224 to 2.5.252 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/h2database/h2database/releases">com.h2database:h2's releases</a>.</em></p> <blockquote> <h2>Version 2.5.252</h2> <!-- raw HTML omitted --> <h2>version-2.5.250</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/h2database/h2database/commit/f986838bbbf4941d2edcd5298b18c9936d1b7359"><code>f986838</code></a> in preparation for a release</li> <li><a href="https://github.com/h2database/h2database/commit/06c34a7fa288208ecabb5d670555fd807270bb2a"><code>06c34a7</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4418">#4418</a> from andreitokar/issues-4380-4376</li> <li><a href="https://github.com/h2database/h2database/commit/1aef3e0692b7379402b2a1a14e5223a8911e31ec"><code>1aef3e0</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4376">#4376</a>: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...</li> <li><a href="https://github.com/h2database/h2database/commit/4bb8aee6bf4305a83e79b6a93e9e3781f904fed9"><code>4bb8aee</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4380">#4380</a>: creating a MATERIALIZED VIEW makes a persistent database permanently u...</li> <li><a href="https://github.com/h2database/h2database/commit/95b6af03b8768d770e5dac1ae829b7c15301b38e"><code>95b6af0</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4417">#4417</a> from andreitokar/issue-4395</li> <li><a href="https://github.com/h2database/h2database/commit/6ec30b66b68a298d6cfc424aa77fec90ebf05199"><code>6ec30b6</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4395">#4395</a> disallow constraints between temporary and permanent tables</li> <li><a href="https://github.com/h2database/h2database/commit/0f0f85605084bd4eaad8f6a467ff802161048b60"><code>0f0f856</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4416">#4416</a> from andreitokar/issue-4405</li> <li><a href="https://github.com/h2database/h2database/commit/f718b764c6d53e160f94d05003eae81d554ec253"><code>f718b76</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4405">#4405</a> SecureFileStore.readFully() may skip decryption</li> <li><a href="https://github.com/h2database/h2database/commit/e231ff7def4c280ffb845cb0b6e92fb9686867d1"><code>e231ff7</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4405">#4405</a> SecureFileStore.readFully() may skip</li> <li><a href="https://github.com/h2database/h2database/commit/4da0d1d02b4e860d6c2e68ff2de0c11c0a19011c"><code>4da0d1d</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4415">#4415</a> from jjh75607/fix/log-sql-aarch64</li> <li>Additional commits viewable in <a href="https://github.com/h2database/h2database/compare/version-2.2.224...version-2.5.252">compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven.plugins:maven-checkstyle-plugin` from 3.3.1 to 3.6.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/dd1abd9ee7cb1046ece3ae013fa6e68a345c7a32"><code>dd1abd9</code></a> [maven-release-plugin] prepare release maven-checkstyle-plugin-3.6.0</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/9ccb06ed3ef759a109d48456ccdad3f583f3ba57"><code>9ccb06e</code></a> fix</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/6ac89b88deec9893875a40ec62718bc02d1a27cc"><code>6ac89b8</code></a> [MCHECKSTYLE-452] Upgrade to Doxia 2.0.0 GA Stack</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/ff1a1b76e24a66107413eafda9eb17a3782957cd"><code>ff1a1b7</code></a> Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/13e16c5bbf322f24257b27f5ec4be01d2e39d485"><code>13e16c5</code></a> Remove unecessary test dependency on plexus-container-default</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/a7c962ae77e10c210b51e56e949f9df7223d1e71"><code>a7c962a</code></a> [maven-release-plugin] prepare for next development iteration</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/868abc95ea488a56f92a4610bdfd5d25c471e0de"><code>868abc9</code></a> [maven-release-plugin] prepare release maven-checkstyle-plugin-3.5.0</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/9043f8a96ee5f3ab9971ecae399fce4da6a8ce2e"><code>9043f8a</code></a> [MCHECKSTYLE-446] Dynamically calculate xrefLocation/xrefTestLocation</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/0e7bd00e106ea76d9ffaadf1256a95d463bf60e3"><code>0e7bd00</code></a> [MCHECKSTYLE-445] Upgrade to Doxia 2.0.0 Milestone Stack</li> <li><a href="https://github.com/apache/maven-checkstyle-plugin/commit/b92666d0b0dc3dfc4975be701e2f104ed6e96fb0"><code>b92666d</code></a> Bump org.apache.maven.plugins:maven-plugins from 42 to 43</li> <li>Additional commits viewable in <a href="https://github.com/apache/maven-checkstyle-plugin/compare/maven-checkstyle-plugin-3.3.1...maven-checkstyle-plugin-3.6.0">compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven:apache-maven` from 3.9.11 to 3.10.0
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-20 20:54:52 +00:00
Checking for merge conflicts…
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/maven/develop/maven-minor-and-patch-47b49de09a:dependabot/maven/develop/maven-minor-and-patch-47b49de09a
git checkout dependabot/maven/develop/maven-minor-and-patch-47b49de09a
Sign in to join this conversation.
Reviewers
No Reviewers
KofTwentyTwo
Labels
Clear labels
architecture
Architecture review: coupling, cohesion, UI API
 bug
Something isn't working
 dependencies
documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 java
Pull requests that update java code
 question
Further information is requested
 secuurity
wontfix
This will not be worked on
No labels dependencies java
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: QRun-IO/qbit-secured-data#20