chore(deps): bump the maven-dependencies group with 27 updates

[dependabot]

Bumps the maven-dependencies group with 27 updates:

Package	From	To
org.htmlunit:htmlunit	5.5.0	5.6.0
org.hibernate.orm:hibernate-core	7.4.11.Final	7.4.13.Final
org.codehaus.mojo:versions-maven-plugin	2.22.0	2.23.0
org.eclipse.jetty.ee11:jetty-ee11-maven-plugin	12.1.13	12.1.14
org.eclipse.jetty:jetty-server	12.1.13	12.1.14
org.eclipse.jetty.ee11:jetty-ee11-webapp	12.1.13	12.1.14
org.eclipse.jetty.ee11:jetty-ee11-apache-jsp	12.1.13	12.1.14
org.eclipse.jetty.ee11:jetty-ee11-annotations	12.1.13	12.1.14
org.eclipse.jetty.ee11:jetty-ee11-glassfish-jstl	12.1.13	12.1.14
org.eclipse.jetty:jetty-plus	12.1.13	12.1.14
org.eclipse.jetty:jetty-jndi	12.1.13	12.1.14
org.eclipse.jetty:jetty-annotations	12.1.13	12.1.14
com.github.siom79.japicmp:japicmp-maven-plugin	0.26.2	0.26.3
org.apache.cxf:cxf-rt-frontend-jaxrs	4.2.3	4.2.4
org.omnifaces:omnifaces	5.5.4	5.5.5
org.apache.tomcat.embed:tomcat-embed-core	11.0.26	11.0.27
org.apache.tomcat.embed:tomcat-embed-el	11.0.26	11.0.27
org.apache.tomcat.embed:tomcat-embed-websocket	11.0.26	11.0.27
org.apache.tomcat:tomcat-jaspic-api	11.0.26	11.0.27
org.apache.tomcat:tomcat-catalina	11.0.26	11.0.27
org.apache.tomcat:tomcat-jasper	11.0.26	11.0.27
org.apache.tomcat:tomcat-jasper-el	11.0.26	11.0.27
org.apache.cxf:cxf-bom	4.2.3	4.2.4
org.apache.cxf:cxf-rt-rs-client	4.2.3	4.2.4
com.flowlogix.depchain:integration-test	131	132
com.flowlogix:flowlogix-jee	11.7	11.7.1
org.seleniumhq.selenium:selenium-bom	4.50.0	4.51.0

Updates org.htmlunit:htmlunit from 5.5.0 to 5.6.0

Release notes

Sourced from org.htmlunit:htmlunit's releases.

HtmlUnit 5.6.0

Highlights

• Firefox 157, Chrome/Edge 154
• A major rewrite of JavaScript scope handling
• Comprehensive improvements to HTML parsing and serialization
• Better keyboard support
• WebSocket improvements
• tons of small fixes and improvements

Please have a look at the full release notes for details about this release.

💕 Thank you to all who have contributed and to the sponsors (more sponsoring is welcome https://github.com/sponsors/rbri).

Full Changelog: HtmlUnit/htmlunit@5.5.0...5.6.0

Commits

• b0d78e9 5.6.0
• 1e31aca core-js 5.6.0 and WebDriver 4.51
• e484287 neko is released
• c962a03 first 5.6.0 releases available
• 9d02c36 document xpath changes
• b3805e7 ignore two files
• 9bbe20e more tests
• 411a663 add missing tests
• 2d4288f document last fixes, and finally the tests all passing
• 6771193 one more passes
• Additional commits viewable in compare view

Updates org.hibernate.orm:hibernate-core from 7.4.11.Final to 7.4.13.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.4.13

Hibernate ORM 7.4.13.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.13.Final.

You can find the full list of 7.4.13.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Introduction Guide
• the User Guide
• the API docs

See also the following resources related to supported APIs:

• the compatibility policy
• the incubating API report (@Incubating)
• the deprecated API report (@Deprecated + @Remove)
• the internal API report (internal packages, @Internal)

Visit the website for details on getting in touch with us.

Release 7.4.12

Hibernate ORM 7.4.12.Final released

Today, we published a new release of Hibernate ORM 7.4: 7.4.12.Final.

You can find the full list of 7.4.12.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.
• See the Migration Guide for details about migration.

Conclusion

... (truncated)

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.4.13.Final (October 11, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40491

** Bug * HHH-20906 Bug in combination of @​Audited, Joined Inheritance and @​SecondaryTable * HHH-17354 HQL queries do not handle quoted identifiers from sub-queries

** Task * HHH-20957 Upgrade ByteBuddy to 1.18.14 (latest micro update) for Java 27

Changes in 7.4.12.Final (October 04, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/40490

** Bug * HHH-20951 Inherited Quarkus Data entity metamodels generate incompatible static repository accessors * HHH-20440 ConcreteSqmSelectQueryPlan forces TupleTransformer to provided suiteable constructor

Commits

• ba8526a [Jenkins release job] Preparing release 7.4.13.Final
• 16c973a [Jenkins release job] changelog.txt updated by release build 7.4.13.Final
• a6c432d HHH-20906 Retain audited secondary table references
• c80991a Add test to detect unnecessary net.bytebuddy.experimental=true in CI
• ed82665 HHH-17354 Fix SqmCteTable import after cherry-pick to 7.4
• 9d13ef7 HHH-17354 - HQL queries do not handle quoted identifiers from sub-queries
• 2cf4f47 Skip Checker Framework on JDK 28 builds
• 110a305 HHH-20957 Also remove net.bytebuddy.experimental=true in Jenkinsfile on Java 27
• 243e332 HHH-20957 Try upgrading ByteBuddy to 1.18.14 (latest micro update) for Java 2...
• 1d07d24 [Jenkins release job] Preparing next development iteration
• Additional commits viewable in compare view

Updates org.codehaus.mojo:versions-maven-plugin from 2.22.0 to 2.23.0

Release notes

Sourced from org.codehaus.mojo:versions-maven-plugin's releases.

2.23.0

Versions Maven Plugin 2.23.0 makes the property goals more reliable on multi-module projects and adds a few options people have asked for over the years. It still runs on Java 8 and Maven 3.6.3 or later.

Property updates

• update-property and update-properties now update a property that is defined in a reactor parent POM, rather than leaving it untouched (#997).
• A property shared by a plugin and an excluded dependency is no longer updated behind the exclude's back (#1199).
• The property goals look up all properties in parallel, which shortens runs on POMs with many version properties (#1157).
• A dependency whose type or classifier is itself a property, such as ${native.classifier}, no longer breaks the property goals on Maven 3.10 and 4 (#1409).
• lock-snapshots and unlock-snapshots now rewrite snapshot versions held in properties, where that is safe (#1269).

Other fixes and additions

• versions:set with selected projects (-pl) updates the modules that inherit the version again, on Maven 3 and Maven 4 (#1338, #1339, #1357).
• Includes and excludes now filter the candidate versions too, so an excluded version is never proposed as an update (#1378).
• display-dependency-updates -Dversions.showNewestPerSegment lists the newest incremental, minor and major version, for example 1.0.3 -> 1.0.9, 1.3.9, 4.0.6 (#1043).
• parent-updates-report supports formats, including XML (#975), and the XML property updates report now fills in the current version (#976).
• The plugin update reports share their lookup with display-plugin-updates and include plugins declared only in <reporting> (#1250).

Thanks to @​wilx and @​adityaanikam for their contributions to this release.

🚀 New features and improvements

• Resolve property versions in parallel (#1447, fixes #1157) @​slachiewicz
• Show the newest version of each segment in display-dependency-updates (#1450, fixes #1043) @​slachiewicz
• Lock and unlock snapshot versions held in properties (#1451, fixes #1269) @​slachiewicz
• Support the xml format in parent-updates-report (#1446, fixes #975) @​slachiewicz
• Share plugin discovery and version lookup between display and reports (#1397, fixes #1250) @​wilx

🐛 Bug Fixes

• Update properties defined in a reactor parent POM (#1448, fixes #997) @​slachiewicz
• Honor the excludes of modules that use an inherited property (#1449, fixes #1199) @​slachiewicz
• Restore versions:set propagation with selected projects (#1440, fixes #1338, #1339, #1357) @​wilx
• Apply excludes and includes to candidate versions, not just the current one (#1441, fixes #1378) @​adityaanikam
• Report the property's current version in the XML property updates report (#1437, fixes #976) @​slachiewicz
• Interpolate the type and classifier of dependencies whose version is a property (#1436, fixes #1409) @​slachiewicz

📝 Documentation updates

• Rewrite the README and add AGENTS.md (#1435) @​slachiewicz

👻 Maintenance

• Use localhost coordinates instead of real artifacts in the compare-dependencies fixtures (#1443) @​slachiewicz
• Delete the two integration tests that never ran (#1442) @​slachiewicz
• Move it-resolve-ranges-001 and it-unlock-snapshots-001 to unit tests (#1439) @​slachiewicz
• Run use-releases in it-use-releases-issue-134 (#1433) @​slachiewicz
• Write the remaining verify scripts as assertions (#1431) @​slachiewicz
• Move the tests of versions-common and versions-enforcer off Hamcrest (#1430) @​slachiewicz

... (truncated)

Commits

• 701cf76 [maven-release-plugin] prepare release 2.23.0
• 05854d0 Mark the API added since 2.22.0 as @​since 2.23.0
• a8fac27 Prepare 2.23.0
• 58a2ea5 Resolve property versions in parallel
• 4a89885 Update a shared parent POM from one module at a time
• 2230fbe Update properties defined in a reactor parent POM
• b495844 Honor excludes of modules that inherit an update-properties property
• 3330666 Show the newest version of each segment in display-dependency-updates
• fe0be9a Rewrite timestamped and SNAPSHOT versions held in properties in unlock-snapsh...
• bfb8f3a Support the xml format in parent-updates-report
• Additional commits viewable in compare view

Updates org.eclipse.jetty.ee11:jetty-ee11-maven-plugin from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-server from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-webapp from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-apache-jsp from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-annotations from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-glassfish-jstl from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-plus from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-jndi from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-annotations from 12.1.13 to 12.1.14

Updates com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.2 to 0.26.3

Release notes

Sourced from com.github.siom79.japicmp:japicmp-maven-plugin's releases.

japicmp-base-0.26.3

• Filter classes modified by hidden members #529

Commits

• 799bac6 [maven-release-plugin] prepare release japicmp-base-0.26.3
• 6912bfe upgraded version in *.md files to 0.26.3
• 41e9beb Add release notes for version 0.26.3
• 58fa5bd Merge pull request #529 from siom79/filter-classes-modified-by-hidden-members
• 1226307 Add tests for class change status of members below the access modifier
• 2c7477f Respect access modifier when evaluating the change status of a class
• b556f9e Filter classes that are only modified by elements hidden in the output
• 828c558 Merge pull request #528 from siom79/release-v0.26.2
• 71a8617 [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Updates org.apache.cxf:cxf-rt-frontend-jaxrs from 4.2.3 to 4.2.4

Updates org.omnifaces:omnifaces from 5.5.4 to 5.5.5

Commits

• e9e3414 Prepare 5.5.5 release
• 602c16e Merge branch '4.x' into 5.x
• 588d598 Branch is now ready for 4.7.16 development
• f65f52a Prepare 4.7.15 release
• cb452c1 Merge branch '3.x' into 4.x
• e3a51b5 Branch is now ready for 3.14.27 development
• dcf0ccb Prepare 3.14.26 release
• d4ac780 Fix ViewScopedPreDestroyDependencyIT unload trigger on Mojarra 4.1+
• 37fad54 Merge #1012 from 4.x into 5.x
• c0b5c9b Bump Selenium to 4.50.0 for Chrome 154 support in ITs
• Additional commits viewable in compare view

Updates org.apache.tomcat.embed:tomcat-embed-core from 11.0.26 to 11.0.27

Updates org.apache.tomcat.embed:tomcat-embed-el from 11.0.26 to 11.0.27

Updates org.apache.tomcat.embed:tomcat-embed-websocket from 11.0.26 to 11.0.27

Updates org.apache.tomcat:tomcat-jaspic-api from 11.0.26 to 11.0.27

Updates org.apache.tomcat:tomcat-catalina from 11.0.26 to 11.0.27

Updates org.apache.tomcat:tomcat-jasper from 11.0.26 to 11.0.27

Updates org.apache.tomcat:tomcat-jasper-el from 11.0.26 to 11.0.27

Updates org.apache.tomcat.embed:tomcat-embed-el from 11.0.26 to 11.0.27

Updates org.apache.tomcat.embed:tomcat-embed-websocket from 11.0.26 to 11.0.27

Updates org.apache.cxf:cxf-bom from 4.2.3 to 4.2.4

Updates org.apache.tomcat:tomcat-jaspic-api from 11.0.26 to 11.0.27

Updates org.apache.tomcat:tomcat-catalina from 11.0.26 to 11.0.27

Updates org.apache.cxf:cxf-rt-rs-client from 4.2.3 to 4.2.4

Updates org.eclipse.jetty:jetty-server from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-webapp from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-apache-jsp from 12.1.13 to 12.1.14

Updates org.eclipse.jetty.ee11:jetty-ee11-annotations from 12.1.13 to 12.1.14

Updates com.flowlogix.depchain:integration-test from 131 to 132

Commits

• See full diff in compare view

Updates com.flowlogix:flowlogix-jee from 11.7 to 11.7.1

Release notes

Sourced from com.flowlogix:flowlogix-jee's releases.

11.7.1

New Feature

• feat: add FacesBufferSizeInitializer to configure Facelets buffer siz… by @​lprimak in flowlogix/flowlogix#1725

Dependency Updates

• build(deps): bump org.apache.maven:apache-maven from 4.0.0-rc-6 to 4.0.0-rc-7 in the maven-dependencies group by @​dependabot[bot] in flowlogix/flowlogix#1716
• build(deps): bump the github-actions-dependencies group with 3 updates by @​dependabot[bot] in flowlogix/flowlogix#1717
• build(deps): bump com.flowlogix:payara-pom from 142 to 143 in the maven-dependencies group by @​dependabot[bot] in flowlogix/flowlogix#1718
• build(deps): bump flowlogix/base-pom/.github/workflows/dependabot-automerge.yml from 143 to 144 in the github-actions-dependencies group by @​dependabot[bot] in flowlogix/flowlogix#1722
• build(deps): bump the maven-dependencies group with 2 updates by @​dependabot[bot] in flowlogix/flowlogix#1721
• build(deps): bump flowlogix/base-pom/.github/workflows/dependabot-automerge.yml from 144 to 145 in the github-actions-dependencies group by @​dependabot[bot] in flowlogix/flowlogix#1724
• build(deps): bump the maven-dependencies group with 2 updates by @​dependabot[bot] in flowlogix/flowlogix#1726

Full Changelog: flowlogix/flowlogix@Version-11.7...Version-11.7.1

Commits

• 28ef2bf [maven-release-plugin] prepare release Version-11.7.1
• 03d48a2 feat: add FacesBufferSizeInitializer to configure Facelets buffer siz… (#1725)
• 077299d build(deps): bump the maven-dependencies group with 2 updates (#1726)
• f8d4803 build(deps): bump flowlogix/base-pom/.github/workflows/dependabot-automerge.y...
• 33d5f3d build(deps): bump the maven-dependencies group with 2 updates (#1721)
• 703cfbd build(deps): bump flowlogix/base-pom/.github/workflows/dependabot-automerge.y...
• c9fb7b1 build(deps): bump com.flowlogix:payara-pom (#1718)
• 29e0a97 build(deps): bump the github-actions-dependencies group with 3 updates (#1717)
• 71b59bc build(deps): pin the dependabot automerge workflow reference to v142
• 25b22c7 build(deps): bump org.apache.maven:apache-maven (#1716)
• See full diff in compare view

Updates org.seleniumhq.selenium:selenium-bom from 4.50.0 to 4.51.0

Release notes

Sourced from org.seleniumhq.selenium:selenium-bom's releases.

Selenium 4.51.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

• [py] Validate WebSocket response interval correctly by @​cuishuang in SeleniumHQ/selenium#17984
• [py][bidi] Send setClientWindowState rect members as sibling params by @​AutomatedTester in SeleniumHQ/selenium#18100
• [rust] Degrade to empty metadata when the cache cannot be read by @​AutomatedTester in SeleniumHQ/selenium#18101
• [dotnet] [test] Separate project for NUnit infrastructure by @​nvborisenko in SeleniumHQ/selenium#18104
• [java] Do not leak the HttpClient on startup failure by @​joerg1985 in SeleniumHQ/selenium#18047
• [java] Add RemoteWebDriver.getClientFactory() and move HttpCommandExecutor field removal to 4.53 by @​diemol in SeleniumHQ/selenium#18111
• [dotnet] [test] Parallelize internal testing by @​nvborisenko in SeleniumHQ/selenium#18110
• [build] pin Firefox BiDi vendor CDDL from the Firefox repository by @​titusfortner in SeleniumHQ/selenium#18094
• [build] remove obsolete third_party dependencies and dead build references by @​titusfortner in SeleniumHQ/selenium#18072
• [build] generate release docs at approval and commit them after the packages publish by @​titusfortner in SeleniumHQ/selenium#18113
• [dotnet] [test] Upgrade NUnit library to v5 by @​nvborisenko in SeleniumHQ/selenium#18114
• [build] recover from incomplete Java release by dropping staged repositories when found by @​titusfortner in SeleniumHQ/selenium#18112
• [dotnet] [build] Escape macOS Edge browser path by @​nvborisenko in SeleniumHQ/selenium#18126
• [js][bidi] Add vendor specific class generation by @​pujagani in SeleniumHQ/selenium#18125
• [java] assert setFiles uploads reach the server in SetFilesCommandTest by @​yashp676 in SeleniumHQ/selenium#18058
• [java][bidi] Decode nested RemoteValues from the parsed tree instead of re-serializing each subtree by @​yashp676 in SeleniumHQ/selenium#18095
• [rb] type a field-less synthetic map record as a validated map by @​aguspe in SeleniumHQ/selenium#18121
• [java] remove guava from client bindings #12737 by @​joerg1985 in SeleniumHQ/selenium#13739
• [build] clean up IntelliJ project files and align .editorconfig with formatters by @​titusfortner in SeleniumHQ/selenium#18119
• [javascript] Create @​seleniumhq/atoms npm package from TypeScript atoms by @​AutomatedTester in SeleniumHQ/selenium#17459
• [java][bidi] Add BiDi code generator by @​pujagani in SeleniumHQ/selenium#17777
• [java][bidi] Type field-less synthetic map records as Map<String, V> by @​yashp676 in SeleniumHQ/selenium#18122
• [javascript] Publish atoms under the @​selenium npm scope by @​AutomatedTester in SeleniumHQ/selenium#18132
• [build] sign Java artifacts in-process with in-memory PGP keys instead of gpg-agent by @​titusfortner in SeleniumHQ/selenium#18130
• [py] Support Python 3.15 by @​cgoldberg in SeleniumHQ/selenium#18065
• [javascript] Publish @​seleniumhq/atoms as part of the npm release by @​AutomatedTester in SeleniumHQ/selenium#18133
• [js] Remove the WebSQL and AppCache atoms by @​AutomatedTester in SeleniumHQ/selenium#18137
• [build] remove bazel patches that now have upstream fixes by @​titusfortner in SeleniumHQ/selenium#18140
• [rust] configure the Chrome sandbox after unpacking a Chrome for Testing build on Windows by @​titusfortner in SeleniumHQ/selenium#18139
• [dotnet] [test] Entry point to mutate driver options per fixture by @​nvborisenko in SeleniumHQ/selenium#18141
• [js] Add webextension methods on the driver with BiDi and fallback by @​pujagani in SeleniumHQ/selenium#18127
• [build] source the Java and .NET versions from a root version.bzl that tests do not read by @​titusfortner in SeleniumHQ/selenium#18138
• [build] pin the driver location once per test process so services built in tests skip Selenium Manager by @​titusfortner in SeleniumHQ/selenium#18143
• [java] Do not pass a bare --proxy to Selenium Manager by @​Mochxd in SeleniumHQ/selenium#18089
• [java][bidi] Update tests to use converter functions by @​pujagani in SeleniumHQ/selenium#18146
• [java] manage state in tests not in global hooks by @​titusfortner in SeleniumHQ/selenium#18142
• [build] add stub mode option for using selenium manager with bazel by @​titusfortner in SeleniumHQ/selenium#18135

New Contributors

• @​cuishuang made their first contribution in SeleniumHQ/selenium#17984

... (truncated)

Commits

• 35c5fab [build] Prepare for release of selenium-4.51.0 (#18149)
• 8f7503a [build] Automated Browser Version Update (major) with CDP (#18131)
• f3a43a5 [build] remove the Windows session settle sleeps now that Selenium Manager co...
• 1915426 [build] Automated Selenium Manager Update
• af27a30 [build] add stub mode option for using selenium manager with bazel (#18135)
• 953b27b [rb] drop Safari captureScreenshot guard now that Safari Technology Preview 2...
• bffbdaf [java] manage state in tests not in global hooks (#18142)
• 73b2084 [java][bidi] Update tests to use converter functions (#18146)
• 73ccf58 [java] Do not pass a bare --proxy to Selenium Manager (#18089)
• 55c6cb9 [build] restore support for 32-bit Windows Selenium Manager
• Additional commits viewable in compare view

Updates org.apache.tomcat:tomcat-jasper from 11.0.26 to 11.0.27

Updates org.apache.tomcat:tomcat-jasper-el from 11.0.26 to 11.0.27

Updates org.eclipse.jetty.ee11:jetty-ee11-glassfish-jstl from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-plus from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-jndi from 12.1.13 to 12.1.14

Updates org.eclipse.jetty:jetty-annotations from 12.1.13 to 12.1.14

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions