chore(deps): Bump the maven-minor-and-patch group across 1 directory with 3 updates #20

Open
dependabot[bot] wants to merge 1 commits from dependabot/maven/develop/maven-minor-and-patch-9930ea90ec into develop
pull from: dependabot/maven/develop/maven-minor-and-patch-9930ea90ec
dependabot[bot] commented 2026-10-19 12:21:47 +00:00 (Migrated from github.com)

Bumps the maven-minor-and-patch group with 3 updates in the / directory: com.kingsrook:qbit-build-parent, com.h2database:h2 and org.apache.maven:apache-maven.

Updates com.kingsrook:qbit-build-parent from 2.0.0 to 2.1.2

Release notes

Sourced from com.kingsrook:qbit-build-parent's releases.

Build Parent and Guardrails 2.1.2

com.kingsrook:qbit-build-parent:2.1.2 and com.kingsrook:qbit-guardrails:2.1.2 are published to Maven Central from the signed tag v2.1.2 on main 1630c83.

  • G1 default allow-lists now include qbit-assistant's provider SPI package (com.kingsrook.qbits.assistant.spi), so qbits can depend on the provider API without per-repo allow-list entries (#13).

This is a patch release with no other changes since 2.1.1.

Build Parent and Guardrails 2.1.1

com.kingsrook:qbit-build-parent:2.1.1 and com.kingsrook:qbit-guardrails:2.1.1 are published to Maven Central from the signed tag v2.1.1 on main 699c457.

  • G1 default allow-lists now include qbit-email and its public api package, so qbits can depend on qbit-email without per-repo allow-list entries (#12).

Patch release; no other changes from 2.1.0.

Build Parent and Guardrails 2.1.0

com.kingsrook:qbit-build-parent:2.1.0 and the new com.kingsrook:qbit-guardrails:2.1.0 are published to Maven Central from the signed tag v2.1.0 on main 67fa618 (#10, closes #9).

  • Architecture guardrails G1, G2, G3, G4 and G7 (from QRun-IO/qqq#1150, section 5) ship as qbit-guardrails, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).
  • The parent turns them on: a qbit-guardrails profile, active unless -Dqbit.guardrails.skip=true, runs the *GuardrailTest classes inside each qbit's surefire run and the enforcer at validate.
  • Report-first: every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.

Use com.kingsrook:qbit-build-parent:2.1.0 as the Maven parent to adopt them. See the README.

Commits
  • 1630c83 Merge pull request #13 from QRun-IO/feature/assistant-spi-allowlist
  • 00c6f1b feat(guardrails): allow qbit-assistant's provider SPI by default
  • b42f4f3 Bump version to 2.1.1 [skip ci]
  • 699c457 Merge pull request #12 from QRun-IO/feature/email-api-allowlist
  • 574a169 ci: re-run after a ChromeDriver install flake
  • 0f54482 feat(guardrails): allow qbit-email's published API by default
  • 736b796 Merge pull request #11 from QRun-IO/feature/ga-only-tag-filter-main
  • a4035aa ci: fix regex escaping in the GA tag filter
  • 52706aa ci: publish_release only on GA tags (port of #7 to main)
  • 67fa618 Merge pull request #10 from QRun-IO/feature/architecture-guardrails
  • Additional commits viewable in compare view

Updates com.h2database:h2 from 2.2.220 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

version-2.5.250

... (truncated)

Commits
  • f986838 in preparation for a release
  • 06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
  • 1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
  • 4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
  • 95b6af0 Merge pull request #4417 from andreitokar/issue-4395
  • 6ec30b6 #4395 disallow constraints between temporary and permanent tables
  • 0f0f856 Merge pull request #4416 from andreitokar/issue-4405
  • f718b76 #4405 SecureFileStore.readFully() may skip decryption
  • e231ff7 #4405 SecureFileStore.readFully() may skip
  • 4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
  • Additional commits viewable in compare view

Updates org.apache.maven:apache-maven from 3.9.11 to 3.10.0

Bumps the maven-minor-and-patch group with 3 updates in the / directory: [com.kingsrook:qbit-build-parent](https://github.com/Kingsrook/qbit-bom), [com.h2database:h2](https://github.com/h2database/h2database) and org.apache.maven:apache-maven. Updates `com.kingsrook:qbit-build-parent` from 2.0.0 to 2.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kingsrook/qbit-bom/releases">com.kingsrook:qbit-build-parent's releases</a>.</em></p> <blockquote> <h2>Build Parent and Guardrails 2.1.2</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.2</code> and <code>com.kingsrook:qbit-guardrails:2.1.2</code> are published to Maven Central from the signed tag <code>v2.1.2</code> on main <code>1630c83</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-assistant's provider SPI package (<code>com.kingsrook.qbits.assistant.spi</code>), so qbits can depend on the provider API without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/13">#13</a>).</li> </ul> <p>This is a patch release with no other changes since 2.1.1.</p> <h2>Build Parent and Guardrails 2.1.1</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.1</code> and <code>com.kingsrook:qbit-guardrails:2.1.1</code> are published to Maven Central from the signed tag <code>v2.1.1</code> on main <code>699c457</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-email and its public api package, so qbits can depend on <code>qbit-email</code> without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/12">#12</a>).</li> </ul> <p>Patch release; no other changes from 2.1.0.</p> <h2>Build Parent and Guardrails 2.1.0</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.0</code> and the new <code>com.kingsrook:qbit-guardrails:2.1.0</code> are published to Maven Central from the signed tag <code>v2.1.0</code> on main <code>67fa618</code> (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/10">#10</a>, closes <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/9">#9</a>).</p> <ul> <li><strong>Architecture guardrails G1, G2, G3, G4 and G7</strong> (from <a href="https://redirect.github.com/QRun-IO/qqq/issues/1150">QRun-IO/qqq#1150</a>, section 5) ship as <code>qbit-guardrails</code>, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).</li> <li><strong>The parent turns them on:</strong> a <code>qbit-guardrails</code> profile, active unless <code>-Dqbit.guardrails.skip=true</code>, runs the <code>*GuardrailTest</code> classes inside each qbit's surefire run and the enforcer at <code>validate</code>.</li> <li><strong>Report-first:</strong> every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.</li> </ul> <p>Use <code>com.kingsrook:qbit-build-parent:2.1.0</code> as the Maven parent to adopt them. See the <a href="https://github.com/QRun-IO/qbit-bom/blob/v2.1.0/README.md">README</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/1630c830fe943a0857e0c149c8e640622a1960e8"><code>1630c83</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/13">#13</a> from QRun-IO/feature/assistant-spi-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/00c6f1bb5557184f803f16a65e06b67970204158"><code>00c6f1b</code></a> feat(guardrails): allow qbit-assistant's provider SPI by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/b42f4f30a2003c57341ff44313061c494f0ee936"><code>b42f4f3</code></a> Bump version to 2.1.1 [skip ci]</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/699c457f374e85120e7a5c3e665afcb4e6bcca24"><code>699c457</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/12">#12</a> from QRun-IO/feature/email-api-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/574a1696b6e5c3eb3cf8af7490df96c39f7bba72"><code>574a169</code></a> ci: re-run after a ChromeDriver install flake</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/0f5448256c77647fa6c18ae1fbca108142f97e36"><code>0f54482</code></a> feat(guardrails): allow qbit-email's published API by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/736b796d48f7cea65bfde28fce19f4ed3a307936"><code>736b796</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/11">#11</a> from QRun-IO/feature/ga-only-tag-filter-main</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/a4035aa8d714f659ec49b1664a639927bae4f217"><code>a4035aa</code></a> ci: fix regex escaping in the GA tag filter</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/52706aa987f881ebc39a25a941ff0b6b300760bb"><code>52706aa</code></a> ci: publish_release only on GA tags (port of <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/7">#7</a> to main)</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/67fa618d37d037f5689c8bf132240ed9266db89f"><code>67fa618</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/10">#10</a> from QRun-IO/feature/architecture-guardrails</li> <li>Additional commits viewable in <a href="https://github.com/Kingsrook/qbit-bom/compare/v2.0.0...v2.1.2">compare view</a></li> </ul> </details> <br /> Updates `com.h2database:h2` from 2.2.220 to 2.5.252 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/h2database/h2database/releases">com.h2database:h2's releases</a>.</em></p> <blockquote> <h2>Version 2.5.252</h2> <!-- raw HTML omitted --> <h2>version-2.5.250</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/h2database/h2database/commit/f986838bbbf4941d2edcd5298b18c9936d1b7359"><code>f986838</code></a> in preparation for a release</li> <li><a href="https://github.com/h2database/h2database/commit/06c34a7fa288208ecabb5d670555fd807270bb2a"><code>06c34a7</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4418">#4418</a> from andreitokar/issues-4380-4376</li> <li><a href="https://github.com/h2database/h2database/commit/1aef3e0692b7379402b2a1a14e5223a8911e31ec"><code>1aef3e0</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4376">#4376</a>: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...</li> <li><a href="https://github.com/h2database/h2database/commit/4bb8aee6bf4305a83e79b6a93e9e3781f904fed9"><code>4bb8aee</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4380">#4380</a>: creating a MATERIALIZED VIEW makes a persistent database permanently u...</li> <li><a href="https://github.com/h2database/h2database/commit/95b6af03b8768d770e5dac1ae829b7c15301b38e"><code>95b6af0</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4417">#4417</a> from andreitokar/issue-4395</li> <li><a href="https://github.com/h2database/h2database/commit/6ec30b66b68a298d6cfc424aa77fec90ebf05199"><code>6ec30b6</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4395">#4395</a> disallow constraints between temporary and permanent tables</li> <li><a href="https://github.com/h2database/h2database/commit/0f0f85605084bd4eaad8f6a467ff802161048b60"><code>0f0f856</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4416">#4416</a> from andreitokar/issue-4405</li> <li><a href="https://github.com/h2database/h2database/commit/f718b764c6d53e160f94d05003eae81d554ec253"><code>f718b76</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4405">#4405</a> SecureFileStore.readFully() may skip decryption</li> <li><a href="https://github.com/h2database/h2database/commit/e231ff7def4c280ffb845cb0b6e92fb9686867d1"><code>e231ff7</code></a> <a href="https://redirect.github.com/h2database/h2database/issues/4405">#4405</a> SecureFileStore.readFully() may skip</li> <li><a href="https://github.com/h2database/h2database/commit/4da0d1d02b4e860d6c2e68ff2de0c11c0a19011c"><code>4da0d1d</code></a> Merge pull request <a href="https://redirect.github.com/h2database/h2database/issues/4415">#4415</a> from jjh75607/fix/log-sql-aarch64</li> <li>Additional commits viewable in <a href="https://github.com/h2database/h2database/compare/version-2.2.220...version-2.5.252">compare view</a></li> </ul> </details> <br /> Updates `org.apache.maven:apache-maven` from 3.9.11 to 3.10.0
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-19 12:21:47 +00:00
This pull request has changes conflicting with the target branch.
  • pom.xml
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/maven/develop/maven-minor-and-patch-9930ea90ec:dependabot/maven/develop/maven-minor-and-patch-9930ea90ec
git checkout dependabot/maven/develop/maven-minor-and-patch-9930ea90ec
Sign in to join this conversation.