Skip to content

Bump the remaining-minor-updates group with 23 updates#493

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/maven/develop/remaining-minor-updates-1969e6f676
Open

Bump the remaining-minor-updates group with 23 updates#493
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/maven/develop/remaining-minor-updates-1969e6f676

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Bumps the remaining-minor-updates group with 23 updates:

Package From To
org.checkerframework:checker-qual 2.6.0 2.11.1
com.github.ben-manes.caffeine:caffeine 2.7.0 2.9.3
com.google.code.gson:gson 2.13.2 2.14.0
com.nimbusds:nimbus-jose-jwt 10.0.2 10.9
commons-io:commons-io 2.21.0 2.22.0
commons-codec:commons-codec 1.21.0 1.22.0
net.sf.saxon:Saxon-HE 9.5.1-5 9.9.1-8
com.google.errorprone:error_prone_annotations 2.3.3 2.49.0
ca.uhn.hapi.fhir:hapi-fhir-structures-r4 5.1.0 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-validation 5.1.0 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4 5.1.0 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-converter 5.1.0 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-base 5.1.0 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-client 8.4.2 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-caching-api 8.4.2 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-structures-r5 8.4.2 8.8.1
ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine 8.4.2 8.8.1
org.xerial:sqlite-jdbc 3.50.3.0 3.53.0.0
net.sourceforge.plantuml:plantuml-mit 1.2023.9 1.2026.2
io.opentelemetry:opentelemetry-api 1.44.1 1.61.0
io.opentelemetry:opentelemetry-context 1.44.1 1.61.0
io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations 2.10.0 2.27.0
ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r5 8.4.2 8.8.1

Updates org.checkerframework:checker-qual from 2.6.0 to 2.11.1

Release notes

Sourced from org.checkerframework:checker-qual's releases.

Checker Framework 2.11.1

Version 2.11.1, October 1, 2019

The manual links to the Object Construction Checker.

Closed issues: 1635, 2718, 2767.

Checker Framework 2.11.0

Version 2.11.0, August 30, 2019

The Checker Framework now uses the Java 9 javac API. The manual describes how to satisfy this dependency, in a way that works on a Java 8 JVM. Running the Checker Framework on a Java 9 JVM is not yet supported.

Checker Framework 2.10.1

Version 2.10.1, August 22, 2019

Closed issues: 1152, 1614, 2031, 2482, 2543, 2587, 2678, 2686, 2690, 2712, 2717, 2713, 2721, 2725, 2729.

Checker Framework 2.10.0

Version 2.10.0, August 1, 2019

Removed the NullnessRawnessChecker. Use the NullnessChecker instead.

Closed issues: 435, 939, 1430, 1687, 1771, 1902, 2173, 2345, 2470, 2534, 2606, 2613, 2619, 2633, 2638.

Checker Framework 2.9.0

Version 2.9.0, July 3, 2019

Renamed the Signedness Checker's @Constant annotation to @SignednessGlb. Introduced an alias, @​SignedPositive, for use by programmers.

Annotated the first argument of Opt.get and Opt.orElseThrow as @NonNull.

Removed meta-annotation @ImplicitFor:

  • Use the new meta-annotation @QualifierForLiteral to replace @ImplicitFor(literals, stringpatterns).
  • Use the meta-annotation @DefaultFor to replace @ImplicitFor(typeKinds, types).
  • Use the new meta-annotation @UpperBoundFor to specify a qualifier upper bound for certain types.
  • You can completely remove @ImplicitFor(typeNames = Void.class, literals = LiteralKind.NULL) on bottom qualifiers. @DefaultFor(types = Void.class) and @QualifierForLiterals(literals = LiteralKind.NULL) are added to the bottom qualifier by default.

Added @DefaultQualifierOnUse and @NoDefaultQualifierOnUse type declaration annotations

New/changed error message keys:

  • initialization.static.fields.uninitialized for uninitialized static fields
  • unary.increment.type.incompatible and unary.decrement.type.incompatible replace some occurrences of compound.assignment.type.incompatible

... (truncated)

Changelog

Sourced from org.checkerframework:checker-qual's changelog.

Version 2.11.1 (October 1, 2019)

The manual links to the Object Construction Checker.

Closed issues

#1635, #2718, #2767.

Version 2.11.0 (August 30, 2019)

The Checker Framework now uses the Java 9 javac API. The manual describes how to satisfy this dependency, in a way that works on a Java 8 JVM. Running the Checker Framework on a Java 9 JVM is not yet supported.

Version 2.10.1 (August 22, 2019)

Closed issues

#1152, #1614, #2031, #2482, #2543, #2587, #2678, #2686, #2690, #2712, #2717, #2713, #2721, #2725, #2729.

Version 2.10.0 (August 1, 2019)

Removed the NullnessRawnessChecker. Use the NullnessChecker instead.

Closed issues

#435, #939, #1430, #1687, #1771, #1902, #2173, #2345, #2470, #2534, #2606, #2613, #2619, #2633, #2638.

Version 2.9.0 (July 3, 2019)

Renamed the Signedness Checker's @​Constant annotation to @​SignednessGlb. Introduced an alias, @​SignedPositive, for use by programmers.

Annotated the first argument of Opt.get and Opt.orElseThrow as @​NonNull.

Removed meta-annotation @​ImplicitFor:

... (truncated)

Commits

Updates com.github.ben-manes.caffeine:caffeine from 2.7.0 to 2.9.3

Release notes

Sourced from com.github.ben-manes.caffeine:caffeine's releases.

2.9.3

Cache

  • Fixed reference eviction when used with a broken executor (JDK-8274349)
  • Reduced the entry overhead by 8 bytes when using weak or soft values
  • Suppressed log warnings if a future is cancelled or times out (#597)
  • Fixed Map.entrySet.contains(o) to use reference equality
  • Fixed early expiration of in-flight async loads (#625)

JCache

  • close() will now shutdown the executor and wait for in-flight loads to finish

2.9.2

Cache

  • Fixed reading an intermittent null weak/soft value during a concurrent write (#568)
  • Fixed extraneous eviction when concurrently removing a collected entry after a writer resurrects it with a new mapping (#568)
  • Fixed excessive retries of discarding an expired entry when the fixed duration period is extended, thereby resurrecting it (#568)

2.9.1

Cache

  • Added cancellation of the next scheduled expiration cleanup when the cache becomes empty (#542)
  • Improved how variable expiration reorganizes the timer events (#541)
  • Added putIfAbsent optimistic fastpath (#506)

2.9.0

Cache

  • Added Caffeine.evictionListener which is notified within the atomic operation when an entry is automatically removed
  • Added triggering cache maintenance if an iterator observes an expired entry for more aggressive eviction (#487)
  • Improved eager eviction of an added or updated entry if it exceeds the cache's maximum weight
  • Deprecated CacheWriter. Please use asMap computations or an eviction listener instead
  • Added CacheStats.of(...) to allow for becoming a value-based class in a future release

2.8.8

Cache

2.8.7

Cache

  • Fixed asMap().keySet().toArray() to not return expired mappings (#472)
  • Added support for ISO-8601 durations to CaffeineSpec (#466)
  • Fixed put update optimization for variable expiration (#478)

2.8.6

Cache

  • Changed false sharing protection to comply with JDK 15's field layout (Java Objects Inside Out)
  • Suppressed the removal listener notification when an AsyncCache future value resolves to null
  • Improved the implementations of AsyncCache.synchronous().asMap() conditional methods
  • Added Jandex index for assisting GraalVM AOT (quarkusio/quarkus#10420)
  • Deprecated UnsafeAccess and SingleConsumerQueue

... (truncated)

Commits
  • 05a040c Clarify the behavior of getAll if additional keys are loaded
  • 8c7160d Protect reference caches from a discarding executor
  • 336ef93 Do not expire in-flight async loads (fixes #625)
  • 7bcfe81 Shutdown the executor and wait for in-flight loads in JCache close
  • 58bfc14 Suppress log warning if a future is cancelled or times out (fixes #597)
  • 76349c2 Fixed Map.entrySet.contains(o) to use reference equality
  • 1eed56b update build and dependencies
  • 1afd872 Correct getAll javadoc (fixes #598)
  • 102011d Reduce entry overhead by 8 bytes when using weak/soft values
  • 0f1692d run isolatedTests on ci
  • Additional commits viewable in compare view

Updates com.google.code.gson:gson from 2.13.2 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

  • Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

    When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

    With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

  • Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

    This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

  • Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

    Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

  • Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

    This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

  • Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

    The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

  • Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

    This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

  • Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

New Contributors

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Commits
  • 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
  • a3024fd Bump the maven group with 13 updates (#3002)
  • 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
  • 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
  • 53d703e Update outdated comment regarding serializable types (#3012)
  • 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
  • f4d371d Fix duplicate key detection when first value is null (#3006)
  • 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
  • 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
  • b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
  • Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.9

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

version 1.0 (2012-03-01)

  • First version based on the OpenInfoCard JWT, JWS and JWE code base.

version 1.1 (2012-03-06)

  • Introduces type-safe enumeration of the JSON Web Algorithms (JWA).
  • Refactors the JWT class.

version 1.2 (2012-03-08)

  • Moves JWS and JWE code into separate classes.

version 1.3 (2012-03-09)

  • Switches to Apache Commons Codec for Base64URL encoding and decoding
  • Consolidates the crypto utilities within the package.
  • Introduces a JWT content serialiser class.

version 1.4 (2012-03-09)

  • Refactoring of JWT class and JUnit tests.

version 1.5 (2012-03-18)

  • Switches to JSON Smart for JSON serialisation and parsing.
  • Introduces claims set class with JSON objects, string, Base64URL and byte array views.

version 1.6 (2012-03-20)

  • Creates class for representing, serialising and parsing JSON Web Keys (JWK).
  • Introduces separate class for representing JWT headers.

version 1.7 (2012-04-01)

  • Introduces separate classes for plain, JWS and JWE headers.
  • Introduces separate classes for plain, signed and encrypted JWTs.
  • Removes the JWTContent class.
  • Removes password-based (PE820) encryption support.

version 1.8 (2012-04-03)

  • Adds support for the ZIP JWE header parameter.
  • Removes unsupported algorithms from the JWA enumeration.

version 1.9 (2012-04-03)

  • Renames JWEHeader.{get|set}EncryptionAlgorithm() to JWEHeader.{get|set}EncryptionMethod().

version 1.9.1 (2012-04-03)

  • Upgrades JSON Smart JAR to 1.1.1.

version 1.10 (2012-04-14)

  • Introduces serialize() method to base abstract JWT class.

version 1.11 (2012-05-13)

  • JWT.serialize() throws checked JWTException instead of

... (truncated)

Commits
  • d4137db Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595)
  • c6c8025 [maven-release-plugin] prepare release 10.4.1
  • e7c7a8c [maven-release-plugin] prepare for next development iteration
  • b33b54b Bumps GSon and BouncyCastle
  • 3eeaada [maven-release-plugin] prepare release 10.4.2
  • 2aa473f [maven-release-plugin] prepare for next development iteration
  • d52acf5 Merged in iss592 (pull request #129)
  • d1834c6 JWKSourceBuilderTest must target Java 7
  • 5fb46ee Change log for 10.5, JavaDoc edits (iss #592)
  • 724be14 RefreshAheadCachingJWKSetSource JavaDoc markup fix (iss #592)
  • Additional commits viewable in compare view

Updates commons-io:commons-io from 2.21.0 to 2.22.0

Updates commons-codec:commons-codec from 1.21.0 to 1.22.0

Changelog

Sourced from commons-codec:commons-codec's changelog.

Apache Commons Codec 1.22.0 Release Notes

The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.22.0.

The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.

This is a feature and maintenance release. Java 8 or later is required.

New features

  • CODEC-326: Add Base58 support. Thanks to Inkeet, Gary Gregory, Wolff Bock von Wuelfingen.
  •         Add BaseNCodecInputStream.AbstracBuilder.setByteArray(byte[]). Thanks to Gary Gregory.
  • CODEC-335: Add GitIdentifiers to compute Git blob and tree object identifiers. Thanks to Piotr P. Karwasz, Gary Gregory.

Fixed Bugs

  • CODEC-249: Fix Incorrect transform of CH digraph according Metaphone basic rules #423. Thanks to Shalu Jha, Andrey, Gary Gregory.
  • CODEC-317: ColognePhonetic can create duplicate consecutive codes in some cases. Thanks to DRUser123, Shalu Jha, Gary Gregory.
  •         Add boundary tests for BinaryCodec.fromAscii partial-bit inputs [#425](https://github.com/apache/commons-codec/issues/425). Thanks to fancying, Gary Gregory.
  • CODEC-336: Base64.Builder.setUrlSafe(boolean) Javadoc incorrectly states null is accepted for primitive boolean parameter. Thanks to Partha Paul, Gary Gregory.

Changes

  •         Bump org.apache.commons:commons-parent from 96 to 98. Thanks to Gary Gregory.

For complete information on Apache Commons Codec, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Codec website:

https://commons.apache.org/proper/commons-codec/

Download page: https://commons.apache.org/proper/commons-codec/download_codec.cgi

Commits

Updates net.sf.saxon:Saxon-HE from 9.5.1-5 to 9.9.1-8

Updates com.google.errorprone:error_prone_annotations from 2.3.3 to 2.49.0

Release notes

Sourced from com.google.errorprone:error_prone_annotations's releases.

Error Prone 2.49.0

This release includes several changes to Matcher APIs, and removed some deprecated or problematic APIs:

  • Remove deprecated MethodMatchers.withSignature API, which relies on fragile toString behaviour. Alternatives for matching on method signatures with varargs and type parameters were added in google/error-prone@a98a1c5.
  • Removed variableType(Matcher) API. Matchers.variableType(Matcher) uses VariableTree#getType to match variable types, which own't work for lambda parameters with inferred types after JDK-8268850. The recommended replacement is variableType(TypePredicate).
  • Make enclosingPackage return an optional. Module elements are not enclosed by a package, checks using enclosingPackage shouldn't assume an enclosing package exists when processing arbitrary elements.
  • New FieldMatchers API, similar to MethodMatchers (google/error-prone@1dd9c3a).

New checks:

Closed issues: #2283, #3503, #5210, #5289, #5548, #5548, #5554, #5609, #5614, #5656

Full changelog: google/error-prone@v2.48.0...v2.49.0

Error Prone 2.48.0

Changes:

New checks:

Closed issues: #5529, #5537, #5522, #5521

Full changelog: google/error-prone@v2.47.0...v2.48.0

Error Prone 2.47.0

New checks:

Closed issues: #1811, #4168, #5459, #5460

Full changelog: google/error-prone@v2.46.0...v2.47.0

Error Prone 2.46.0

Changes:

... (truncated)

Commits
  • 89d75c1 Release Error Prone 2.49.0
  • 0b7b03b Fix up some javadoc on `ModifySourceCollectionInStream.isStreamApiInvocationO...
  • fe5a7b1 Remove old FieldMatchers API
  • d54a1d1 Fix up some Finally javadocs.
  • d93b319 [RefactorSwitch] bugfix comment handling
  • ff59782 [IfChainToSwitch] cleanup redundant conditions in ternary. No functional cha...
  • 43b6df6 Generalise DuplicateAssertion to handle check* methods.
  • 2c4346f Fix a bug in BooleanLiteral: it currently suggests replacing `Boolean.FALSE...
  • 559039b [IfChainToSwitch] doc-only change. fix typo in code comments.
  • 393c61c [IfChainToSwitch] enhance code generation to emit unnamed variables, when sup...
  • Additional commits viewable in compare view

Updates ca.uhn.hapi.fhir:hapi-fhir-structures-r4 from 5.1.0 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-validation from 5.1.0 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4 from 5.1.0 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-converter from 5.1.0 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-base from 5.1.0 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-client from 8.4.2 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-caching-api from 8.4.2 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-structures-r5 from 8.4.2 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine from 8.4.2 to 8.8.1

Updates ca.uhn.hapi.fhir:hapi-fhir-caching-api from 8.4.2 to 8.8.1

Updates org.xerial:sqlite-jdbc from 3.50.3.0 to 3.53.0.0

Release notes

Sourced from org.xerial:sqlite-jdbc's releases.

Release 3.53.0.0

Changelog

🚀 Features

jdbc

  • expose wal_autocheckpoint pragma in SQLiteConfig (dd2adcc), closes #1397

sqlite

  • upgrade to sqlite 3.53.0 (baaf087)

unscoped

🛠 Build

deps

  • bump org.sonatype.central:central-publishing-maven-plugin (19259e5)
  • bump EndBug/add-and-commit from 9 to 10 (f572217)

deps-dev

  • bump surefire.version from 3.5.4 to 3.5.5 (b649d25)
  • bump org.assertj:assertj-core from 3.27.6 to 3.27.7 (857a754)
  • bump org.mockito:mockito-core from 5.21.0 to 5.23.0 (a597952)

Contributors

We'd like to thank the following people for their contributions: Gauthier, Karl-Michael Edlinger, kju2

Release 3.51.3.0

Changelog

🚀 Features

sqlite

  • upgrade to sqlite 3.51.3 (09e9741)
  • upgrade to sqlite 3.52.0 (64cf690)

🛠 Build

deps

  • bump org.graalvm.buildtools:native-maven-plugin (5ad5155)
  • bump actions/upload-artifact from 6 to 7 (90c726f)
  • bump actions/download-artifact from 7 to 8 (17d4998)

deps-dev

  • bump org.jreleaser:jreleaser-maven-plugin (d4d5c04)

unscoped

  • set-version trigger CI after build native (89dfbc8)
  • set-version commit and trigger workflow (eed41ae)
  • set-version fix VERSION (22e5106)

... (truncated)

Commits
  • f88e9c7 chore(release): 3.53.0.0 [skip ci]
  • bdd2b64 feat: publish multiple classifer jars
  • 7eb6f3f feat: better Android support
  • 23ead2e chore: update native libraries
  • baaf087 feat(sqlite): upgrade to sqlite 3.53.0
  • dd2adcc feat(jdbc): expose wal_autocheckpoint pragma in SQLiteConfig
  • b649d25 build(deps-dev): bump surefire.version from 3.5.4 to 3.5.5
  • 857a754 build(deps-dev): bump org.assertj:assertj-core from 3.27.6 to 3.27.7
  • 19259e5 build(deps): bump org.sonatype.central:central-publishing-maven-plugin
  • a597952 build(deps-dev): bump org.mockito:mockito-core from 5.21.0 to 5.23.0
  • Additional commits viewable in compare view

Updates net.sourceforge.plantuml:plantuml-mit from 1.2023.9 to 1.2026.2

Release notes

Sourced from net.sourceforge.plantuml:plantuml-mit's releases.

v1.2026.2

Issues fixed and PR from Milestone 1.2026.2

What's Changed

Full Changelog: plantuml/plantuml@v1.2026.1...v1.2026.2

v1.2026.1

Issues fixed and PR from Milestone 1.2026.1

What's Changed

Full Changelog: plantuml/plantuml@v1.2026.0...v1.2026.1

v1.2026.0

Issues fixed and PR from Milestone 1.2026.0

What's Changed

... (truncated)

Changelog

Sourced from net.sourceforge.plantuml:plantuml-mit's changelog.

V1.2026.2 (Feb 27, 2026)

V1.2026.1 (Jan 18, 2026)

@dependabot
Bump the remaining-minor-updates group with 23 updates
55289fa 
Bumps the remaining-minor-updates group with 23 updates:

| Package | From | To |
| --- | --- | --- |
| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `2.6.0` | `2.11.1` |
| [com.github.ben-manes.caffeine:caffeine](https://github.com/ben-manes/caffeine) | `2.7.0` | `2.9.3` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.2` | `2.14.0` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.9` |
| commons-io:commons-io | `2.21.0` | `2.22.0` |
| [commons-codec:commons-codec](https://github.com/apache/commons-codec) | `1.21.0` | `1.22.0` |
| net.sf.saxon:Saxon-HE | `9.5.1-5` | `9.9.1-8` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.3.3` | `2.49.0` |
| ca.uhn.hapi.fhir:hapi-fhir-structures-r4 | `5.1.0` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-validation | `5.1.0` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4 | `5.1.0` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-converter | `5.1.0` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-base | `5.1.0` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-client | `8.4.2` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-caching-api | `8.4.2` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-structures-r5 | `8.4.2` | `8.8.1` |
| ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine | `8.4.2` | `8.8.1` |
| [org.xerial:sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) | `3.50.3.0` | `3.53.0.0` |
| [net.sourceforge.plantuml:plantuml-mit](https://github.com/plantuml/plantuml) | `1.2023.9` | `1.2026.2` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.44.1` | `1.61.0` |
| [io.opentelemetry:opentelemetry-context](https://github.com/open-telemetry/opentelemetry-java) | `1.44.1` | `1.61.0` |
| [io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations](https://github.com/open-telemetry/opentelemetry-java-instrumentation) | `2.10.0` | `2.27.0` |
| ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r5 | `8.4.2` | `8.8.1` |


Updates `org.checkerframework:checker-qual` from 2.6.0 to 2.11.1
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](typetools/checker-framework@checker-framework-2.6.0...checker-framework-2.11.1)

Updates `com.github.ben-manes.caffeine:caffeine` from 2.7.0 to 2.9.3
- [Release notes](https://github.com/ben-manes/caffeine/releases)
- [Commits](ben-manes/caffeine@v2.7.0...v2.9.3)

Updates `com.google.code.gson:gson` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.14.0)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.9
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9..10.0.2)

Updates `commons-io:commons-io` from 2.21.0 to 2.22.0

Updates `commons-codec:commons-codec` from 1.21.0 to 1.22.0
- [Changelog](https://github.com/apache/commons-codec/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-codec@rel/commons-codec-1.21.0...rel/commons-codec-1.22.0)

Updates `net.sf.saxon:Saxon-HE` from 9.5.1-5 to 9.9.1-8

Updates `com.google.errorprone:error_prone_annotations` from 2.3.3 to 2.49.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](google/error-prone@v2.3.3...v2.49.0)

Updates `ca.uhn.hapi.fhir:hapi-fhir-structures-r4` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-validation` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-converter` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-base` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-client` from 8.4.2 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-caching-api` from 8.4.2 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-structures-r5` from 8.4.2 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine` from 8.4.2 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-caching-api` from 8.4.2 to 8.8.1

Updates `org.xerial:sqlite-jdbc` from 3.50.3.0 to 3.53.0.0
- [Release notes](https://github.com/xerial/sqlite-jdbc/releases)
- [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG)
- [Commits](xerial/sqlite-jdbc@3.50.3.0...3.53.0.0)

Updates `net.sourceforge.plantuml:plantuml-mit` from 1.2023.9 to 1.2026.2
- [Release notes](https://github.com/plantuml/plantuml/releases)
- [Changelog](https://github.com/plantuml/plantuml/blob/master/CHANGES.md)
- [Commits](plantuml/plantuml@v1.2023.9...v1.2026.2)

Updates `io.opentelemetry:opentelemetry-api` from 1.44.1 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.44.1...v1.61.0)

Updates `io.opentelemetry:opentelemetry-context` from 1.44.1 to 1.61.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.44.1...v1.61.0)

Updates `io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations` from 2.10.0 to 2.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java-instrumentation/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java-instrumentation@v2.10.0...v2.27.0)

Updates `ca.uhn.hapi.fhir:hapi-fhir-structures-r4` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-validation` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4` from 5.1.0 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-structures-r5` from 8.4.2 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine` from 8.4.2 to 8.8.1

Updates `ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r5` from 8.4.2 to 8.8.1

---
updated-dependencies:
- dependency-name: org.checkerframework:checker-qual
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.github.ben-manes.caffeine:caffeine
  dependency-version: 2.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.9'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: commons-codec:commons-codec
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: net.sf.saxon:Saxon-HE
  dependency-version: 9.9.1-8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-structures-r4
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-validation
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-converter
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-base
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-client
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-caching-api
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-structures-r5
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-caching-api
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: org.xerial:sqlite-jdbc
  dependency-version: 3.53.0.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: net.sourceforge.plantuml:plantuml-mit
  dependency-version: 1.2026.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: io.opentelemetry:opentelemetry-context
  dependency-version: 1.61.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations
  dependency-version: 2.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-structures-r4
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-validation
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r4
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-structures-r5
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-caching-caffeine
  dependency-version: 8.8.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
- dependency-name: ca.uhn.hapi.fhir:hapi-fhir-validation-resources-r5
  dependency-version: 8.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: remaining-minor-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants