Skip to content

Bump the routine-maven-updates group across 1 directory with 7 updates - #39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/routine-maven-updates-ea1dfbf090
Open

Bump the routine-maven-updates group across 1 directory with 7 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/routine-maven-updates-ea1dfbf090

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the routine-maven-updates group with 7 updates in the / directory:

Package From To
nl.hauntedmc.platform:haunted-library-parent 1.6.7 1.6.8
org.hibernate.orm:hibernate-core 7.4.7.Final 7.4.9.Final
org.codehaus.mojo:build-helper-maven-plugin 3.6.1 3.6.2
org.mongodb:mongodb-driver-sync 5.11.0 5.12.0
org.slf4j:slf4j-nop 2.0.18 2.0.19
org.slf4j:slf4j-api 2.0.18 2.0.19
com.velocitypowered:velocity-api 4.1.1 4.2.0

Updates nl.hauntedmc.platform:haunted-library-parent from 1.6.7 to 1.6.8

Updates org.hibernate.orm:hibernate-core from 7.4.7.Final to 7.4.9.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.9

Hibernate ORM 7.4.9.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.9.Final.

You can find the full list of 7.4.9.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Release 7.4.8

Hibernate ORM 7.4.8.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.8.Final.

You can find the full list of 7.4.8.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

... (truncated)

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.9.Final (September 17, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40446

Changes in 7.4.8.Final (September 13, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40444

** Bug * HHH-20855 SQL Server temporal rounding causing trouble with sub-micro input values * HHH-20849 org.hibernate.query.range.Range#suffix wrongly expects pattern * HHH-20806 Join elimination in 7.x skips @​SQLRestriction when querying by to-one association id * HHH-20805 MySQL schema update fails, if foreignkey related index is unique * HHH-20804 StatefulPersistenceContext.clear() does not release newEntityHolder * HHH-20801 AnyType.guessEntityPersister uses the wrapped proxy instead of the unwrapped implementation in its fallback → UnknownEntityTypeException during flush logging * HHH-20782 @​FilterJoinTable throws NPE when used with explicit HQL join * HHH-20744 UnknownTableReferenceException when querying the non-owning side of a one-to-one-mapping with a pessimistic lock mode * HHH-20675 @​FilterDef(applyToLoadByKey = true) breaks JOIN FETCH of a JOINED-inheritance to-one association: subclass table joins dropped from FROM while their columns remain in SELECT (invalid SQL) * HHH-20632 Regression: UnknownTableReferenceException fetching an @​Any discriminator through treat() (since 7.4.0, HHH-16730) * HHH-20343 HTE (Bulk ID) temporary table ignores PhysicalNamingStrategy when using SequenceGenerator * HHH-19486 SQLGrammarException when joining to subquery with Case expression * HHH-19485 AssertionError when using Subquery with Case in Criteria API * HHH-18911 Usage of ConcreteProxy in lazy loaded ManyToOne reference

** Deprecation * HHH-20862 Deprecate reflection optimizer and related property access APIs

** Task * HHH-20851 Upgrade to ant 1.10.18 * HHH-20848 Drop meaningless "provided" dependency to ant in hibernate-envers

Commits
  • 208bf6c [Jenkins release job] Preparing release 7.4.9.Final
  • 0204513 [Jenkins release job] changelog.txt updated by release build 7.4.9.Final
  • 8310983 HHH-20883 add tenant id to mutation SQL (#13412)
  • a36fbeb HHH-20882 Avoid exposing MariaDB JDBC parameters in logs
  • ec66308 HHH-20882 Redact MariaDB JDBC parameters from logging
  • 006022c HHH-20882 Redact credentials from database connection info logging
  • 07ee912 HHH-19930 Implement cascade support for key-to-ones
  • fd92450 HHH-20816 Ensure arguments to JSON functions don't allow SQL injection
  • ec81e89 [Jenkins release job] Preparing next development iteration
  • 2d3a7b8 [Jenkins release job] Preparing release 7.4.8.Final
  • Additional commits viewable in compare view

Updates org.codehaus.mojo:build-helper-maven-plugin from 3.6.1 to 3.6.2

Release notes

Sourced from org.codehaus.mojo:build-helper-maven-plugin's releases.

3.6.2

🐛 Bug Fixes

👻 Maintenance

  • Remove redundant maven-resolver-api dependency and ignore Resolver/SLF4J 2.x in Dependabot (#248) @​slachiewicz

📦 Dependency updates

Commits
  • 813bc7d [maven-release-plugin] prepare release 3.6.2
  • 07d9109 Remove redundant maven-resolver-api and ignore Resolver/SLF4J 2.x in Dependabot
  • 9abd552 Bump org.codehaus.plexus:plexus-utils from 4.0.3 to 4.1.0
  • 3c15526 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 3b1f104 Bump org.codehaus.mojo:mojo-parent from 96 to 97
  • 1749855 Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml
  • 5230041 Bump org.codehaus.plexus:plexus-utils from 4.0.2 to 4.0.3
  • c0e9375 Delete .github/release-drafter.yml
  • 84a839e Bump org.codehaus.mojo:mojo-parent from 95 to 96
  • a85c668 Replace raw NPEx with customized exception message
  • Additional commits viewable in compare view

Updates org.mongodb:mongodb-driver-sync from 5.11.0 to 5.12.0

Release notes

Sourced from org.mongodb:mongodb-driver-sync's releases.

Java Driver 5.12.0 (September 17, 2026)

What's Changed

Full Changelog: mongodb/mongo-java-driver@r5.11.0...r5.12.0

Verifying artifact signatures

Please refer to https://www.mongodb.com/docs/drivers/java/sync/current/security/validate-signatures/ for the full procedure.

To download and import the public key for verifying signatures, execute

gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys 1a75005e142192223d6a7c3b76e0008d166740a8

Java Driver 5.11.1 (September 10, 2026)

What's Changed

[!WARNING] Starting from driver version 3.3.0, an improper neutralization of a query operator in the GridFS delete methods allowed unintended data deletion.

See JAVA-6283 / CVE-2026-88033]

Upgrade reactive/sync driver version to 5.11.1 or later.

If you cannot upgrade, applications using older driver versions should call another delete overload delete(ObjectId). The driver constructs the BsonObjectId internally from a typed value, so no document can reach the filter.

[!WARNING] Starting from driver version 4.2.0, cancelling or timing out an encrypted operation while the driver fetches cloud KMS credentials makes it call into freed native memory, crashing or corrupting the application.

See JAVA-6266 / CVE-2026-88032

Upgrade both reactive driver and mongodb-crypt to version 5.11.1 or later.

Full Changelog: mongodb/mongo-java-driver@r5.11.0...r5.11.1

Commits
  • 84ee9a8 Version: bump 5.12.0
  • f0bc4cb Update the specifications submodule from d4d0cdf to 92b3c0b to match the `m...
  • dbcd762 Remove a TODO-BACKPRESSURE comment because it is no longer relevant
  • 795f7ce Introduce temporary fallback scheduler into DefaultAsyncClientExecutor (#2056)
  • 71c3f6e Add baseBackoffMS support (#2052)
  • 546ce8c Update client and server @​since labels to 5.12 and 9 for server (#2057)
  • 4b576bb Add code design rules for AI (#2028)
  • 7e4a331 Replace error label string literals with constants(#2055)
  • ca40f31 Add overload retry for non-retryable commands (#2048)
  • 5013a53 Adds overload retry for cursor getMore (#2046)
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-nop from 2.0.18 to 2.0.19

Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.19

Updates com.velocitypowered:velocity-api from 4.1.1 to 4.2.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the routine-maven-updates group across 1 directory with 7 updates
38b130f 
Bumps the routine-maven-updates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| nl.hauntedmc.platform:haunted-library-parent | `1.6.7` | `1.6.8` |
| [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `7.4.7.Final` | `7.4.9.Final` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.1` | `3.6.2` |
| [org.mongodb:mongodb-driver-sync](https://github.com/mongodb/mongo-java-driver) | `5.11.0` | `5.12.0` |
| org.slf4j:slf4j-nop | `2.0.18` | `2.0.19` |
| org.slf4j:slf4j-api | `2.0.18` | `2.0.19` |
| [com.velocitypowered:velocity-api](https://github.com/PaperMC/Velocity) | `4.1.1` | `4.2.0` |



Updates `nl.hauntedmc.platform:haunted-library-parent` from 1.6.7 to 1.6.8

Updates `org.hibernate.orm:hibernate-core` from 7.4.7.Final to 7.4.9.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.9/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.4.7...7.4.9)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](mojohaus/build-helper-maven-plugin@3.6.1...3.6.2)

Updates `org.mongodb:mongodb-driver-sync` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/mongodb/mongo-java-driver/releases)
- [Commits](mongodb/mongo-java-driver@r5.11.0...r5.12.0)

Updates `org.slf4j:slf4j-nop` from 2.0.18 to 2.0.19

Updates `org.slf4j:slf4j-api` from 2.0.18 to 2.0.19

Updates `com.velocitypowered:velocity-api` from 4.1.1 to 4.2.0
- [Commits](https://github.com/PaperMC/Velocity/commits)

---
updated-dependencies:
- dependency-name: nl.hauntedmc.platform:haunted-library-parent
  dependency-version: 1.6.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-maven-updates
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 7.4.9.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-maven-updates
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: routine-maven-updates
- dependency-name: org.mongodb:mongodb-driver-sync
  dependency-version: 5.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-maven-updates
- dependency-name: org.slf4j:slf4j-nop
  dependency-version: 2.0.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: routine-maven-updates
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine-maven-updates
- dependency-name: com.velocitypowered:velocity-api
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine-maven-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants