build(deps): Bump the maven-minor-and-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #31 · QRun-IO/qbit-sql-workbench

dependabot · 2026-10-18T00:23:16Z

Bumps the maven-minor-and-patch group with 5 updates in the / directory:

Package	From	To
com.kingsrook:qbit-build-parent	`2.1.0`	`2.1.2`
com.h2database:h2	`2.2.220`	`2.5.252`
org.mockito:mockito-core	`5.8.0`	`5.24.0`
org.apache.maven.plugins:maven-failsafe-plugin	`3.1.2`	`3.6.0`
org.apache.maven:apache-maven	`3.9.11`	`3.10.0`

Updates com.kingsrook:qbit-build-parent from 2.1.0 to 2.1.2

Release notes

Sourced from com.kingsrook:qbit-build-parent's releases.

Build Parent and Guardrails 2.1.2

com.kingsrook:qbit-build-parent:2.1.2 and com.kingsrook:qbit-guardrails:2.1.2 are published to Maven Central from the signed tag v2.1.2 on main 1630c83.

G1 default allow-lists now include qbit-assistant's provider SPI package (com.kingsrook.qbits.assistant.spi), so qbits can depend on the provider API without per-repo allow-list entries (#13).

This is a patch release with no other changes since 2.1.1.

Build Parent and Guardrails 2.1.1

com.kingsrook:qbit-build-parent:2.1.1 and com.kingsrook:qbit-guardrails:2.1.1 are published to Maven Central from the signed tag v2.1.1 on main 699c457.

G1 default allow-lists now include qbit-email and its public api package, so qbits can depend on qbit-email without per-repo allow-list entries (#12).

Patch release; no other changes from 2.1.0.

Changelog

Sourced from com.kingsrook:qbit-build-parent's changelog.

Changelog

All notable changes to QBit Build Parent POM will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased]

Changed

G1 default API packages include qbit-assistant's published provider SPI, com.kingsrook.qbits.assistant.spi; artifact com.kingsrook.qbits:qbit-assistant-provider-api is already covered by com.kingsrook.qbits:*-api. Assistant implementation packages remain forbidden.

G1 default allow-lists include qbit-email's published API: artifact com.kingsrook.qbits:qbit-email and package com.kingsrook.qbits.email.api (as for qbit-object-storage), so consumers need no per-repo allow-list.

Commits

1630c83 Merge pull request #13 from QRun-IO/feature/assistant-spi-allowlist
00c6f1b feat(guardrails): allow qbit-assistant's provider SPI by default
b42f4f3 Bump version to 2.1.1 [skip ci]
699c457 Merge pull request #12 from QRun-IO/feature/email-api-allowlist
574a169 ci: re-run after a ChromeDriver install flake
0f54482 feat(guardrails): allow qbit-email's published API by default
736b796 Merge pull request #11 from QRun-IO/feature/ga-only-tag-filter-main
a4035aa ci: fix regex escaping in the GA tag filter
52706aa ci: publish_release only on GA tags (port of #7 to main)
See full diff in compare view

Updates com.h2database:h2 from 2.2.220 to 2.5.252

Release notes

Sourced from com.h2database:h2's releases.

Version 2.5.252

version-2.5.250

... (truncated)

Commits

f986838 in preparation for a release
06c34a7 Merge pull request #4418 from andreitokar/issues-4380-4376
1aef3e0 #4376: Reading INFORMATION_SCHEMA.COLUMNS fails with a NPE while any material...
4bb8aee #4380: creating a MATERIALIZED VIEW makes a persistent database permanently u...
95b6af0 Merge pull request #4417 from andreitokar/issue-4395
6ec30b6 #4395 disallow constraints between temporary and permanent tables
0f0f856 Merge pull request #4416 from andreitokar/issue-4405
f718b76 #4405 SecureFileStore.readFully() may skip decryption
e231ff7 #4405 SecureFileStore.readFully() may skip
4da0d1d Merge pull request #4415 from jjh75607/fix/log-sql-aarch64
Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.8.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

2026-09-23 - 27 commit(s) by Andrei Solntsev, DragonFSKY, Hünkar Can Tunç, Joshua Selbo, M. Minot, Markus Gaisbauer, Mirko Alicastro, Vinod Kumar M ( codingkiddo ), dependabot[bot]

Fix Mockito docs for -javaagent flag with Gradle [(#3866)](mockito/mockito#3866)

Kotlin example for adding Mockito as an agent is incorrect [(#3864)](mockito/mockito#3864)

Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 [(#3862)](mockito/mockito#3862)

Bump gradle/actions from 6.2.0 to 6.3.0 [(#3852)](mockito/mockito#3852)

Bump gradle/actions from 5 to 6.2.0 [(#3851)](mockito/mockito#3851)

Preserve method parameters when clearing inline mocks [(#3847)](mockito/mockito#3847)

Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 [(#3845)](mockito/mockito#3845)

Print object fields via reflection when toString() is not implemented [(#3844)](mockito/mockito#3844)

Migrate extensions-tests to JUnit Jupiter [(#3840)](mockito/mockito#3840)

Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 [(#3839)](mockito/mockito#3839)

docs(when-verify): fixes to explanations about redundancy [(#3838)](mockito/mockito#3838)

Confusing inconsistency in example method calls in “stubbing and verifying is redundant” note of “when” and “verify” Javadoc [(#3837)](mockito/mockito#3837)

Bump actions/checkout from 6 to 7 [(#3836)](mockito/mockito#3836)

Fixes #2740 : Add mockMaker option to @Spy annotation [(#3835)](mockito/mockito#3835)

Bump graalvm/setup-graalvm from 1.5.5 to 1.5.6 [(#3834)](mockito/mockito#3834)

Bump graalvm/setup-graalvm from 1.5.4 to 1.5.5 [(#3833)](mockito/mockito#3833)

Bump codecov/codecov-action from 6 to 7 [(#3831)](mockito/mockito#3831)

Bump graalvm/setup-graalvm from 1.4.5 to 1.5.4 [(#3830)](mockito/mockito#3830)

Fix clearInlineMocks not de-registering singleton mocks [(#3829)](mockito/mockito#3829)

Fix NotAMockException when using mockSingleton with MockitoJUnit [(#3827)](mockito/mockito#3827)

NotAMockException when using mockSingleton with MockitoSession or MockitoJUnit [(#3826)](mockito/mockito#3826)

Improve Gradle agent docs for configuration cache [(#3823)](mockito/mockito#3823)

Gradle documentation for setting up instrumentation with Gradle configuration cache [(#3822)](mockito/mockito#3822)

Fixes #3818 : Fix data race in InvocationContainerImpl.invocationForStubbing [(#3819)](mockito/mockito#3819)

Data race on invocationForPotentialStubbing [(#3818)](mockito/mockito#3818)

Fixes #3814 : implement package-level clinit suppression [(#3815)](mockito/mockito#3815)

Package-level clinit suppression [(#3814)](mockito/mockito#3814)

Upgrade Android Gradle Plugin to 8.13.2 [(#3812)](mockito/mockito#3812)

Replaces raw generic types with type parameters [(#3806)](mockito/mockito#3806)

Fixes #2398 : Implement global suppress static initialization leveraging java agent [(#3801)](mockito/mockito#3801)

Bump codecov/codecov-action from 5 to 6 [(#3800)](mockito/mockito#3800)

Fix non-deterministic AssertionError when using MockMakers.SUBCLASS (#3406, #2823) [(#3795)](mockito/mockito#3795)

Fixes #3536 : Implement SpyStatic API [(#3794)](mockito/mockito#3794)

The class's MethodParameters are removed after clearAllCaches is invoked [(#3763)](mockito/mockito#3763)

[FeatureRequest / Idea] Create Mockito.spyStatic [(#3536)](mockito/mockito#3536)

Add option to specify mockmaker for @Spy [(#2740)](mockito/mockito#2740)

How can I suppress static initializer? [(#2398)](mockito/mockito#2398)

v5.23.0

NOTE: Breaking change for Android

The mockito-android artifact has a breaking change: tests now require a device or emulator based on API 28+ (Android P). This is to enable new support for mocking Kotlin classes. See #3788 for more details.

Changelog generated by Shipkit Changelog Gradle Plugin

... (truncated)

Commits

5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
e7fd06d Preserve method parameters when clearing inline mocks (#3847)
5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-failsafe-plugin from 3.1.2 to 3.6.0

Release notes

Sourced from org.apache.maven.plugins:maven-failsafe-plugin's releases.

3.6.0

Please refer to the main page for what's new https://maven.apache.org/surefire/ And the migration page https://maven.apache.org/surefire/maven-surefire-plugin/whats-new-3-6-0.html

🚀 New features and improvements

Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432) @AzazelSensei

[SUREFIRE-1639] - Add ability to configure JUnit 5 TestExecutionListener (#3438) @pan3793

Issue #838 Implement extension point to run diagnosis tools when forked JVM times out (#3372) @olamy

[SUREFIRE-2148] - Verify recovered BeforeAll does not fail build (#3419) @wilx

[SUREFIRE-823] - Decouple -DskipTests from Failsafe plugin (#3371) @olamy

Use StackWalker in StackTraceProvider when available (Java 9+) (#3374) @olamy

[Issue-3380] Send sourceQualifiedName to forked clients (#3380) (#3381) @fabriciorby

🐛 Bug Fixes

[SUREFIRE-523] - Link all reported tests to source XRef (#3445) @wilx

[SUREFIRE-3446] - Fix direct selection of JUnit Jupiter @Nested classes (#3447) @wilx

Discover tests in a fork when a toolchain JDK is used (#3444) @olamy

[SUREFIRE-2239, SUREFIRE-2241, SUREFIRE-2260, SUREFIRE-2274, SUREFIRE-2300] Preserve JUnit Platform test identity across reruns (#3418) @wilx

Fix #3428: resolve parents via TestPlan.getParent for pre-1.8 platforms (#3429) @kalayciburak

[SUREFIRE-859] - Make random test order reproducible (#3421) @wilx

[SUREFIRE-862, SUREFIRE-3178] Handle missing Failsafe summary files (#3417) @wilx

fix: report AfterAll/AfterClass exceptions as errors again (#3412) (#3413) @arimu1

Fixes #3264 : tests inside @Suite incorrectly classified as flakes (#3342) @mirkoalicastro

Fix Windows flake in CommandChannelDecoderTest (#3400) @ascheman

Fix reportNameSuffix in XML testcase classname (#3379) @goutamadwant

Fix: resolve relative classpath elements against the fork's working dir (#3333) @cwegener-79

📝 Documentation updates

Magnify the home, well at least have something rather than nothing :) (#3377) @olamy

Restore the straight quotes the FAQ conversion turned typographic (#3425) @slachiewicz

Restore the table borders lost in the APT conversion (#3424) @slachiewicz

Convert the FAQ from FML to Markdown (#3423) @slachiewicz

Convert the remaining site documentation from APT to Markdown (#3422) @slachiewicz

javadoc: clarify statelessTestsetReporter, consoleOutputReporter, (#3410) @joshinii

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

Update documentation we support Junit 6 as well :) (#3370) @olamy

👻 Maintenance

Stop dependabot from updating test fixtures (#3440) @slachiewicz

Migrate legacy plugin Javadoc annotations (#3416) @wilx

Use the resolver's own HTTP transport in the report plugin tests (#3414) @slachiewicz

Pin maven-jar-plugin 3.5.1 in modular IT fixtures (#3398) @ascheman

Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#3387) @potiuk

... (truncated)

Commits

0ff622b [maven-release-plugin] prepare release surefire-3.6.0
bb3932a Let's go for 3.6.0 release
3002a16 Bump mavenVersion from 3.9.14 to 3.9.16
61a531d Bump Maven parent version from 47 to 49 (#3449)
e52ead4 [SUREFIRE-523] Link all reported tests to source XRef (#3445)
45102fa [SUREFIRE-3446] Fix direct selection of JUnit Jupiter @Nested classes (#3447)
b2e1f70 Fix #3303: distinguish JUnit 6 ParameterizedClass invocations (#3432)
c051938 Discover tests in a fork when a toolchain JDK is used (#3444)
db75df8 Bump org.codehaus.plexus:plexus-java from 1.5.2 to 1.6.0 (#3441)
77f2759 Bump org.codehaus.plexus:plexus-interpolation from 1.29 to 1.30.0
Additional commits viewable in compare view

Updates org.apache.maven:apache-maven from 3.9.11 to 3.10.0

…with 5 updates Bumps the maven-minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [com.kingsrook:qbit-build-parent](https://github.com/Kingsrook/qbit-bom) | `2.1.0` | `2.1.2` | | [com.h2database:h2](https://github.com/h2database/h2database) | `2.2.220` | `2.5.252` | | [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.8.0` | `5.24.0` | | [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.1.2` | `3.6.0` | | org.apache.maven:apache-maven | `3.9.11` | `3.10.0` | Updates `com.kingsrook:qbit-build-parent` from 2.1.0 to 2.1.2 - [Release notes](https://github.com/Kingsrook/qbit-bom/releases) - [Changelog](https://github.com/QRun-IO/qbit-bom/blob/main/CHANGELOG.md) - [Commits](QRun-IO/qbit-bom@v2.1.0...v2.1.2) Updates `com.h2database:h2` from 2.2.220 to 2.5.252 - [Release notes](https://github.com/h2database/h2database/releases) - [Commits](h2database/h2database@version-2.2.220...version-2.5.252) Updates `org.mockito:mockito-core` from 5.8.0 to 5.24.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.8.0...v5.24.0) Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.1.2 to 3.6.0 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.1.2...surefire-3.6.0) Updates `org.apache.maven:apache-maven` from 3.9.11 to 3.10.0 --- updated-dependencies: - dependency-name: com.h2database:h2 dependency-version: 2.5.252 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-minor-and-patch - dependency-name: com.kingsrook:qbit-build-parent dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven-minor-and-patch - dependency-name: org.apache.maven.plugins:maven-failsafe-plugin dependency-version: 3.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-minor-and-patch - dependency-name: org.apache.maven:apache-maven dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven-minor-and-patch - dependency-name: org.mockito:mockito-core dependency-version: 5.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from KofTwentyTwo as a code owner October 18, 2026 00:23

dependabot Bot added dependencies java Pull requests that update java code labels Oct 18, 2026

dependabot Bot force-pushed the dependabot/maven/develop/maven-minor-and-patch-3ab577e7f8 branch from 9c64e9f to 68dc0d8 Compare October 25, 2026 00:23

Navigation Menu

Repository navigation

build(deps): Bump the maven-minor-and-patch group across 1 directory with 5 updates - #31

build(deps): Bump the maven-minor-and-patch group across 1 directory with 5 updates#31
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/maven/develop/maven-minor-and-patch-3ab577e7f8

dependabot Bot commented on behalf of github Oct 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Build Parent and Guardrails 2.1.2

Build Parent and Guardrails 2.1.1

Changelog

[Unreleased]

Changed

Version 2.5.252

version-2.5.250

v5.24.0

5.24.0

v5.23.0

NOTE: Breaking change for Android

3.6.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 18, 2026 •

edited

Loading