From 14e2a1946ed9f5bcbe2e21075abccbba3587d2bf Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 3 Mar 2026 00:18:46 +0000
Subject: [PATCH] chore: [DevOps] bump the production-minor-patch group with 8
 updates

Bumps the production-minor-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [org.assertj:assertj-vavr](https://github.com/assertj/assertj-vavr) | `0.4.3` | `0.5.0` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.21.0` | `5.22.0` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.5` | `2.6` |
| [io.vavr:vavr](https://github.com/vavr-io/vavr) | `1.0.0` | `1.0.1` |
| [org.checkerframework:checker-qual](https://github.com/typetools/checker-framework) | `3.53.1` | `3.54.0` |
| [com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone) | `2.47.0` | `2.48.0` |
| [io.spiffe:java-spiffe-core](https://github.com/spiffe/java-spiffe) | `0.8.15` | `0.8.16` |
| [io.spiffe:grpc-netty-linux](https://github.com/spiffe/java-spiffe) | `0.8.15` | `0.8.16` |


Updates `org.assertj:assertj-vavr` from 0.4.3 to 0.5.0
- [Release notes](https://github.com/assertj/assertj-vavr/releases)
- [Commits](https://github.com/assertj/assertj-vavr/compare/v0.4.3...v0.5.0)

Updates `org.mockito:mockito-core` from 5.21.0 to 5.22.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](https://github.com/mockito/mockito/compare/v5.21.0...v5.22.0)

Updates `org.yaml:snakeyaml` from 2.5 to 2.6
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.6..snakeyaml-2.5)

Updates `io.vavr:vavr` from 1.0.0 to 1.0.1
- [Release notes](https://github.com/vavr-io/vavr/releases)
- [Commits](https://github.com/vavr-io/vavr/compare/v1.0.0...v1.0.1)

Updates `org.checkerframework:checker-qual` from 3.53.1 to 3.54.0
- [Release notes](https://github.com/typetools/checker-framework/releases)
- [Changelog](https://github.com/typetools/checker-framework/blob/master/docs/CHANGELOG.md)
- [Commits](https://github.com/typetools/checker-framework/compare/checker-framework-3.53.1...checker-framework-3.54.0)

Updates `com.google.errorprone:error_prone_annotations` from 2.47.0 to 2.48.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](https://github.com/google/error-prone/compare/v2.47.0...v2.48.0)

Updates `io.spiffe:java-spiffe-core` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/spiffe/java-spiffe/releases)
- [Changelog](https://github.com/spiffe/java-spiffe/blob/main/CHANGELOG.md)
- [Commits](https://github.com/spiffe/java-spiffe/compare/v0.8.15...v0.8.16)

Updates `io.spiffe:grpc-netty-linux` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/spiffe/java-spiffe/releases)
- [Changelog](https://github.com/spiffe/java-spiffe/blob/main/CHANGELOG.md)
- [Commits](https://github.com/spiffe/java-spiffe/compare/v0.8.15...v0.8.16)

---
updated-dependencies:
- dependency-name: org.assertj:assertj-vavr
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.vavr:vavr
  dependency-version: 1.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: org.checkerframework:checker-qual
  dependency-version: 3.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: com.google.errorprone:error_prone_annotations
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-minor-patch
- dependency-name: io.spiffe:java-spiffe-core
  dependency-version: 0.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
- dependency-name: io.spiffe:grpc-netty-linux
  dependency-version: 0.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 cloudplatform/connectivity-ztis/pom.xml | 4 ++--
 dependency-bundles/bom/pom.xml          | 6 +++---
 pom.xml                                 | 6 +++---
 3 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/cloudplatform/connectivity-ztis/pom.xml b/cloudplatform/connectivity-ztis/pom.xml
index 4520437cd..715c2dc2d 100644
--- a/cloudplatform/connectivity-ztis/pom.xml
+++ b/cloudplatform/connectivity-ztis/pom.xml
@@ -60,7 +60,7 @@
 		<dependency>
 			<groupId>io.spiffe</groupId>
 			<artifactId>java-spiffe-core</artifactId>
-			<version>0.8.15</version>
+			<version>0.8.16</version>
 			<exclusions>
 				<exclusion>
 					<artifactId>commons-logging</artifactId>
@@ -75,7 +75,7 @@
 		<dependency>
 			<groupId>io.spiffe</groupId>
 			<artifactId>grpc-netty-linux</artifactId>
-			<version>0.8.15</version>
+			<version>0.8.16</version>
 			<scope>runtime</scope>
 		</dependency>
 		<!-- Override grpc versions from spiffe -->
diff --git a/dependency-bundles/bom/pom.xml b/dependency-bundles/bom/pom.xml
index 40bbb1cbb..b0c16087a 100644
--- a/dependency-bundles/bom/pom.xml
+++ b/dependency-bundles/bom/pom.xml
@@ -62,7 +62,7 @@
 		<lombok.version>1.18.42</lombok.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<!-- @Nonnull/@Nullable annotations -->
-		<vavr.version>1.0.0</vavr.version>
+		<vavr.version>1.0.1</vavr.version>
 		<guava.version>33.5.0-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
 		<commons-io.version>2.21.0</commons-io.version>
@@ -279,13 +279,13 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>3.53.1</version>
+				<version>3.54.0</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>
 				<groupId>com.google.errorprone</groupId>
 				<artifactId>error_prone_annotations</artifactId>
-				<version>2.47.0</version>
+				<version>2.48.0</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>
diff --git a/pom.xml b/pom.xml
index a4662959e..13d49e9f1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -102,8 +102,8 @@
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.7</assertj-core.version>
-		<assertj-vavr.version>0.4.3</assertj-vavr.version>
-		<mockito.version>5.21.0</mockito.version>
+		<assertj-vavr.version>0.5.0</assertj-vavr.version>
+		<mockito.version>5.22.0</mockito.version>
 		<jsonassert.version>1.5.3</jsonassert.version>
 		<junit.jupiter.version>6.0.3</junit.jupiter.version>
 		<codemodel.version>2.6</codemodel.version>
@@ -125,7 +125,7 @@
 		<wiremock.version>3.13.2</wiremock.version>
 		<checkstyle.version>12.3.1</checkstyle.version>
 		<byte-buddy.version>1.18.5</byte-buddy.version>
-		<snakeyaml.version>2.5</snakeyaml.version>
+		<snakeyaml.version>2.6</snakeyaml.version>
 		<commons-codec.version>1.21.0</commons-codec.version>
 		<commons-beanutils.version>1.11.0</commons-beanutils.version>
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>