Skip to content

chore(deps): bump the all group across 1 directory with 8 updates - #405

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/all-fca472a1fb
Open

chore(deps): bump the all group across 1 directory with 8 updates#405
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/gradle/all-fca472a1fb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all group with 8 updates in the / directory:

Package From To
org.sonarqube 7.4.0.8496 7.5.0.8588
com.sanctionco.jmail:jmail 2.2.0 2.2.2
org.mockito:mockito-core 5.23.0 5.24.0
com.fasterxml.jackson.core:jackson-databind 2.22.1 2.22.3
org.json:json 20260719 20260814
org.yaml:snakeyaml 2.6 2.7
tools.jackson.core:jackson-databind 3.2.1 3.2.3
gradle-wrapper 9.7.0 9.8.0

Updates org.sonarqube from 7.4.0.8496 to 7.5.0.8588

Updates com.sanctionco.jmail:jmail from 2.2.0 to 2.2.2

Release notes

Sourced from com.sanctionco.jmail:jmail's releases.

v2.2.2

  • Fix bug where the Unicode character U+2400 SYMBOL FOR NULL was incorrectly required to be backslash-escaped within quotes. This was intended to check for the actual NUL control character U+0000. This is now enforced correctly. (Thanks @​fluentfuture for reporting!)
  • Fix bug where Unicode control characters (1-8, 11, 12, 14-31, and 127) were not properly required to be quoted. The disallowed set was incorrectly populated with Unicode "control picture" glyphs instead of the actual control characters.

v2.2.1

  • Performance improvements up to 77% 🔥 across various types address validation, with most improvements for the standard simple address case. Plus, published performance benchmarking numbers.
  • Fix bug where addresses with whitespace at the beginning or end of the address within angle brackets of quoted identifiers (ex. John Smith < John@smith.com >) were incorrectly considered invalid.
  • Fix bug where addresses containing an encoded word in the local-part were incorrectly considered valid. These addresses (ex. =?utf-8?q?=40evil.com=00?=@microsoft.com) are invalid according to RFC 2047. Encoded words are still allowed in identifiers, comments, and quoted parts (ex. =?utf-8?q?=40evil.com=00?= <test@microsoft.com>).
  • Fix bug where addresses that started with a comment followed by a quoted local-part (ex. (comment)"test"@example.com) were incorrectly considered invalid.
Changelog

Sourced from com.sanctionco.jmail:jmail's changelog.

2.2.2

  • Fix bug where the Unicode character U+2400 SYMBOL FOR NULL was incorrectly required to be backslash-escaped within quotes. This was intended to check for the actual NUL control character U+0000. This is now enforced correctly. (Thanks @​fluentfuture for reporting!)
  • Fix bug where Unicode control characters (1-8, 11, 12, 14-31, and 127) were not properly required to be quoted. The disallowed set was incorrectly populated with Unicode "control picture" glyphs instead of the actual control characters.

2.2.1

  • Performance improvements up to 77% 🔥 across various types address validation, with most improvements for the standard simple address case. Plus, published performance benchmarking numbers.
  • Fix bug where addresses with whitespace at the beginning or end of the address within angle brackets of quoted identifiers (ex. John Smith < John@smith.com >) were incorrectly considered invalid.
  • Fix bug where addresses containing an encoded word in the local-part were incorrectly considered valid. These addresses (ex. =?utf-8?q?=40evil.com=00?=@microsoft.com) are invalid according to RFC 2047. Encoded words are still allowed in identifiers, comments, and quoted parts (ex. =?utf-8?q?=40evil.com=00?= <test@microsoft.com>).
  • Fix bug where addresses that started with a comment followed by a quoted local-part (ex. (comment)"test"@example.com) were incorrectly considered invalid.
Commits
  • ba6544b [maven-release-plugin] prepare release v2.2.2
  • 3dc27f4 docs: update changelog
  • c9e014d fix: proper handling of unicode control characters
  • 77340e4 docs: update docs after 2.2.1 release
  • bc82c73 [maven-release-plugin] prepare for next development iteration
  • a033de4 [maven-release-plugin] prepare release v2.2.1
  • c80200f docs: update comment in BenchmarkRunnerTest
  • d9bd09f test: run benchmarks in CI
  • b87a0fe test: better test coverage
  • deb6049 fix: addresses starting with comment and quote are valid
  • Additional commits viewable in compare view

Updates org.mockito:mockito-core from 5.23.0 to 5.24.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.24.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.24.0

Commits
  • 5a2f0f8 Fix Mockito docs for -javaagent flag with Gradle (#3866)
  • 9c5f36f Bump graalvm/setup-graalvm from 1.6.3 to 1.6.6 (#3862)
  • e7fd06d Preserve method parameters when clearing inline mocks (#3847)
  • 5a676bc Bump gradle/actions from 6.2.0 to 6.3.0 (#3852)
  • 508f8e7 Bump gradle/actions from 5 to 6.2.0 (#3851)
  • ee8a330 Print object fields via reflection when toString() is not implemented (#3844)
  • 39b1aba Bump graalvm/setup-graalvm from 1.6.0 to 1.6.3 (#3845)
  • d8638e1 Migrate extensions-tests to JUnit Jupiter (#3840)
  • 0aab922 Bump graalvm/setup-graalvm from 1.5.6 to 1.6.0 (#3839)
  • f3cf74c docs(when-verify): fixes to explanations about redundancy (#3838)
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-databind from 2.22.1 to 2.22.3

Commits
  • 4385c5f [maven-release-plugin] prepare release jackson-databind-2.22.3
  • ccb4fd0 Prep for 2.22.3 release
  • 2958412 Merge branch '2.21' into 2.22
  • 1215b94 Post-release dep version bump
  • 1f0df62 [maven-release-plugin] prepare for next development iteration
  • 13a9ff4 [maven-release-plugin] prepare release jackson-databind-2.21.7
  • d168f96 Prep for 2.21.7 release
  • eaf5c76 Merge branch '2.21' into 2.22
  • e05ef4c Merge branch '2.20' into 2.21
  • f6d4000 Merge branch '2.19' into 2.20
  • Additional commits viewable in compare view

Updates org.json:json from 20260719 to 20260814

Release notes

Sourced from org.json:json's releases.

20260814

Pull Request Description
#1070 Fix XML.unescape for valid whitespace chars
Changelog

Sourced from org.json:json's changelog.

20260814 Fixes XML.unescape whitespace handling

Commits
  • 6c14048 Merge pull request #1073 from stleary/pre-release-20260814
  • 34efda6 pre-release-20260814 initial commit
  • 22ab2fb Update jar file link in README
  • 392a352 Fix formatting of the latest release jar file link
  • b594a32 Merge pull request #1070 from dong0713/fix/xml-unescape-whitespace-control-chars
  • 94854a1 Fix XML.unescape rejecting valid whitespace numeric character references
  • See full diff in compare view

Updates org.yaml:snakeyaml from 2.6 to 2.7

Updates tools.jackson.core:jackson-databind from 3.2.1 to 3.2.3

Commits
  • 4179a66 [maven-release-plugin] prepare release jackson-databind-3.2.3
  • 37c8a72 Prep for 3.2.3 release
  • 5fa7881 Merge branch '3.1' into 3.2
  • c9f17a2 Post-release dep version bump
  • 1ea1c40 [maven-release-plugin] prepare for next development iteration
  • 2968e8f [maven-release-plugin] prepare release jackson-databind-3.1.7
  • d61810b Prep for 3.1.7 release
  • e065a09 Merge branch '2.x' into 3.1
  • fd189a7 Merge branch '2.22' into 2.x
  • 211faf7 Post-release dep version bump
  • Additional commits viewable in compare view

Updates gradle-wrapper from 9.7.0 to 9.8.0

Release notes

Sourced from gradle-wrapper's releases.

9.8.0

The Gradle team is excited to announce Gradle 9.8.0.

Here are the highlights of this release:

  • Java 27 support
  • Maven mirror settings reuse
  • Linked problem locations in build output

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle: Aman Gautam, Björn Kautler, Eng Zer Jun, Hashim Khan, Julian Krannich, KBS, Labh R Jethe, Mark Dodgson, Maxim, monkey, nataphon-ktsystems, Paul King, Qiu Tian, rg_sandesh, Roberto Perez Alcolea, Sean, Zongle Wang.

Upgrade instructions

Switch your build to use Gradle 9.8.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.8.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines. If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

9.8.0 RC3

The Gradle team is excited to announce Gradle 9.8.0 RC3.

Here are the highlights of this release:

... (truncated)

Commits
  • a927be5 Add the Develocity plugin back to the Android smoke tests (#39273)
  • eaee500 Add the Develocity plugin back to the Android smoke tests
  • 189b672 Route everything still hitting Maven Central through the mirror (#39257)
  • 36b1814 Add back mavenCentral to doc snippets
  • 2740c2d Update Gradle wrapper to version 9.8.0-rc-3 (#39264)
  • 2099383 Update Gradle wrapper to version 9.8.0-rc-3
  • c80202f Route everything still hitting Maven Central through the mirror
  • 3f6a534 Fix when a best practice was introduced (#39253)
  • 9efc9ed Fix when a best practice was introduced
  • 459e143 Route integration test dependencies through the repository mirror (#39239)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all group across 1 directory with 8 updates
7da56d0 
Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| org.sonarqube | `7.4.0.8496` | `7.5.0.8588` |
| [com.sanctionco.jmail:jmail](https://github.com/RohanNagar/jmail) | `2.2.0` | `2.2.2` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.23.0` | `5.24.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.22.1` | `2.22.3` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) | `20260719` | `20260814` |
| org.yaml:snakeyaml | `2.6` | `2.7` |
| [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `3.2.1` | `3.2.3` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.7.0` | `9.8.0` |



Updates `org.sonarqube` from 7.4.0.8496 to 7.5.0.8588

Updates `com.sanctionco.jmail:jmail` from 2.2.0 to 2.2.2
- [Release notes](https://github.com/RohanNagar/jmail/releases)
- [Changelog](https://github.com/RohanNagar/jmail/blob/master/CHANGELOG.md)
- [Commits](RohanNagar/jmail@v2.2.0...v2.2.2)

Updates `org.mockito:mockito-core` from 5.23.0 to 5.24.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.23.0...v5.24.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.22.1 to 2.22.3
- [Commits](FasterXML/jackson-databind@jackson-databind-2.22.1...jackson-databind-2.22.3)

Updates `org.json:json` from 20260719 to 20260814
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
- [Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
- [Commits](stleary/JSON-java@2026071...2026081)

Updates `org.yaml:snakeyaml` from 2.6 to 2.7

Updates `tools.jackson.core:jackson-databind` from 3.2.1 to 3.2.3
- [Commits](FasterXML/jackson-databind@jackson-databind-3.2.1...jackson-databind-3.2.3)

Updates `gradle-wrapper` from 9.7.0 to 9.8.0
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.7.0...v9.8.0)

---
updated-dependencies:
- dependency-name: org.sonarqube
  dependency-version: 7.5.0.8588
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.sanctionco.jmail:jmail
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: org.json:json
  dependency-version: '20260814'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: gradle-wrapper
  dependency-version: 9.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 28, 2026
@sonarqubecloud

sonarqubecloud Bot commented Sep 28, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed for 'jackson3 (JSON provider)'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@sonarqubecloud

sonarqubecloud Bot commented Sep 28, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed for 'json-schema'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants