Build(deps-dev): Bump org.hibernate.validator:hibernate-validator from 6.2.3.Final to 9.1.3.Final

[dependabot]

Bumps org.hibernate.validator:hibernate-validator from 6.2.3.Final to 9.1.3.Final.

Release notes

Sourced from org.hibernate.validator:hibernate-validator's releases.

Release 9.1.3.Final

Hibernate Validator 9.1.3.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.3.Final.

You can find the full list of 9.1.3.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Getting started
• the Reference Guide
• the API docs

Visit the website for details on getting in touch with us.

Release 9.1.2.Final

Hibernate Validator 9.1.2.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.2.Final.

You can find the full list of 9.1.2.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Getting started
• the Reference Guide
• the API docs

... (truncated)

Changelog

Sourced from org.hibernate.validator:hibernate-validator's changelog.

9.1.3.Final (2026-07-26)

Full changelog

Bug

• HV-2231 - RegexpURLValidator throws NPE when URL has no authority component

9.1.2.Final (2026-07-06)

Full changelog

Bug

• HV-2222 - ParameterNode.getParameterIndex throws NPE

9.1.1.Final (2026-06-22)

Full changelog

Bug

• HV-2217 HibernateConstraintValidatorContext::addExpressionVariable throws NPE when given null value
• HV-2164 NIP constraint javadoc incorrectly states that it is a 9 digit sequence
• HV-1923 CPF constraint accepting incorrect format

Improvement

• HV-2216 Use Maven 3.9.16 as a required minimum version for the build
• HV-2214 Enable automatic releases
• HV-2212 Bump joda-time to 2.14.2
• HV-2208 Update to OpenJFX to 17.0.19
• HV-2207 Use Maven 3.9.15 as a required minimum version for the build
• HV-2197 Update to JBoss logging 3.6.3.Final
• HV-2194 Bump joda-time to 2.14.1
• HV-2191 Simplify PlatformResourceBundleLocator#determineAvailabilityOfResourceBundleControl() to drop reflection
• HV-2173 Upgrade to JBoss logging 3.6.2.Final
• HV-2172 Update to OpenJFX to 17.0.18
• HV-2171 Bump Apache Groovy to 5.0.4
• HV-2170 Pass a ROOT locale to loggers to avoid unnecessary class lookups
• HV-2162 Provide the member name in the JavaBeanProperty
• HV-2158 Update documentation theme to the current latest 6.1.2.Final
• HV-2157 Point to docs.hibernate.org instead of docs.jboss.org/hibernate in various docs
• HV-2156 Test against wildfly-preview 38.0.1.Final

Task

• HV-2192 Use Maven 3.9.13 as a required minimum version for the build
• HV-2163 Use Maven 3.9.12 as a required minimum version for the build

9.1.0.Final (2025-11-07)

... (truncated)

Commits

• 8ab68bc [Jenkins release job] Preparing release 9.1.3.Final
• 36a8551 [Jenkins release job] changelog.md updated by release build 9.1.3.Final
• e8b4ebd [Jenkins release job] README.md updated by release build 9.1.3.Final
• 8ba5072 HV-2231 Fix NPE in RegexpURLValidator when URL has no host
• e9d4856 [9.1] Bump the build-dependencies group with 3 updates
• 7793c80 Use correct env var name for additional arguments in the release script
• 8cffdd8 [Jenkins release job] Preparing next development iteration
• 51f5c8c [Jenkins release job] Preparing release 9.1.2.Final
• c04ba71 [Jenkins release job] changelog.md updated by release build 9.1.2.Final
• ac29d5e [Jenkins release job] README.md updated by release build 9.1.2.Final
• Additional commits viewable in compare view

[lukaszlenart]

@dependabot rebase

[lukaszlenart]

Verified this one locally against main after #544, since it is a three-major-version jump (6.2.3 → 9.1.2) and bean-validation has no tests, so a green CI run only proves it resolves.

Ran the module under Jetty and exercised the actual validation path:

• POST with an invalid email → returns the input page with errorFor="save_personBean_email" and the message "Email address not in a valid email format"
• POST with a valid email → reaches "Update Successful!"
• no exceptions in the container log

So constraint evaluation and EL message interpolation both work under Hibernate Validator 9.1.2 with struts2-bean-validation-plugin 7.3.0. Jakarta Validation is already at 3.1.1 and the build targets Java 17, which are 9.x's requirements.

Worth noting this PR also fixes a real inconsistency: bean-validation/pom.xml hard-coded 6.2.3.Final (a javax-era release) which overrode the parent's managed 8.0.1.Final. After this both are on 9.1.2.

Looks good to merge once the rebase lands green.

[lukaszlenart]

@dependabot rebase