From 2c9b894048939c16d4975a5da8a70252a104bafe Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 00:08:25 +0000
Subject: [PATCH] [12.0.x Root pom] Bump the dev-dependencies group across 1
 directory with 8 updates

Bumps the dev-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) | `2.22.2` | `2.22.3` |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.6.3` | `1.6.4` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.3` | `1.6.4` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.7.1-jre` | `33.7.2-jre` |
| [io.smallrye.common:smallrye-common-annotation](https://github.com/smallrye/smallrye-common) | `2.20.0` | `2.21.1` |
| [io.smallrye.common:smallrye-common-cpu](https://github.com/smallrye/smallrye-common) | `2.20.0` | `2.21.1` |
| [io.smallrye.common:smallrye-common-cpu](https://github.com/smallrye/smallrye-common) | `2.20.0` | `2.21.1` |
| org.apache.commons:commons-lang3 | `3.20.0` | `3.21.0` |
| [org.apache.directory.api:api-parent](https://github.com/apache/directory-ldap-api) | `2.1.8` | `2.1.9` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) | `1.6.3` | `1.6.4` |



Updates `com.fasterxml.jackson:jackson-bom` from 2.22.2 to 2.22.3
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.22.2...jackson-bom-2.22.3)

Updates `ch.qos.logback:logback-core` from 1.6.3 to 1.6.4
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.4)

Updates `ch.qos.logback:logback-classic` from 1.6.3 to 1.6.4
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.4)

Updates `com.google.guava:guava` from 33.7.1-jre to 33.7.2-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `io.smallrye.common:smallrye-common-annotation` from 2.20.0 to 2.21.1
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.20.0...2.21.1)

Updates `io.smallrye.common:smallrye-common-cpu` from 2.20.0 to 2.21.1
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.20.0...2.21.1)

Updates `io.smallrye.common:smallrye-common-cpu` from 2.20.0 to 2.21.1
- [Release notes](https://github.com/smallrye/smallrye-common/releases)
- [Commits](https://github.com/smallrye/smallrye-common/compare/2.20.0...2.21.1)

Updates `org.apache.commons:commons-lang3` from 3.20.0 to 3.21.0

Updates `org.apache.directory.api:api-parent` from 2.1.8 to 2.1.9
- [Release notes](https://github.com/apache/directory-ldap-api/releases)
- [Commits](https://github.com/apache/directory-ldap-api/compare/2.1.8...2.1.9)

Updates `ch.qos.logback:logback-classic` from 1.6.3 to 1.6.4
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.4)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: com.google.guava:guava
  dependency-version: 33.7.2-jre
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-annotation
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-cpu
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: io.smallrye.common:smallrye-common-cpu
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: org.apache.directory.api:api-parent
  dependency-version: 2.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 jetty-core/jetty-security/pom.xml |  2 +-
 pom.xml                           | 10 +++++-----
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/jetty-core/jetty-security/pom.xml b/jetty-core/jetty-security/pom.xml
index 25f3e531df4..1acf20d0508 100644
--- a/jetty-core/jetty-security/pom.xml
+++ b/jetty-core/jetty-security/pom.xml
@@ -12,7 +12,7 @@
   <description>The common Jetty security implementation</description>
 
   <properties>
-    <apache.directory.api.version>2.1.8</apache.directory.api.version>
+    <apache.directory.api.version>2.1.9</apache.directory.api.version>
     <apacheds.version>2.0.0.AM27</apacheds.version>
     <bundle-symbolic-name>${project.groupId}.security</bundle-symbolic-name>
     <spotbugs.onlyAnalyze>org.eclipse.jetty.security.*</spotbugs.onlyAnalyze>
diff --git a/pom.xml b/pom.xml
index fa6e046f8e3..dc5a85c01cf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -176,7 +176,7 @@
     <checkstyle.version>10.26.1</checkstyle.version>
     <commons-codec.version>1.22.1</commons-codec.version>
     <commons-io.version>2.22.0</commons-io.version>
-    <commons-lang3.version>3.20.0</commons-lang3.version>
+    <commons-lang3.version>3.21.0</commons-lang3.version>
     <commons.compress.version>1.28.0</commons.compress.version>
     <compiler.release>17</compiler.release>
     <compiler.source>17</compiler.source>
@@ -193,7 +193,7 @@
     <groovy.version>4.0.26</groovy.version>
     <grpc.version>1.84.0</grpc.version>
     <gson.version>2.14.0</gson.version>
-    <guava.version>33.7.1-jre</guava.version>
+    <guava.version>33.7.2-jre</guava.version>
     <guice.version>7.0.0</guice.version>
     <hamcrest.version>3.0</hamcrest.version>
     <hazelcast.version>5.7.0</hazelcast.version>
@@ -205,7 +205,7 @@
     <injection.bundle.version>1.2</injection.bundle.version>
     <invoker.mergeUserSettings>false</invoker.mergeUserSettings>
     <it.debug>false</it.debug>
-    <jackson.version>2.22.2</jackson.version>
+    <jackson.version>2.22.3</jackson.version>
     <jacoco.maven.plugin.version>0.8.15</jacoco.maven.plugin.version>
     <javadoc.verbose>false</javadoc.verbose>
     <jboss-logmanager.version>3.2.2.Final</jboss-logmanager.version>
@@ -245,7 +245,7 @@
     <license.maven.plugin.version>4.6</license.maven.plugin.version>
     <localRepoPath>${project.build.directory}/local-repo</localRepoPath>
     <log4j2.version>2.26.1</log4j2.version>
-    <logback.version>1.6.3</logback.version>
+    <logback.version>1.6.4</logback.version>
     <lucene.version>9.11.1</lucene.version>
     <mariadb.docker.version>10.3.6</mariadb.docker.version>
     <mariadb.version>3.5.10</mariadb.version>
@@ -315,7 +315,7 @@
     <settingsPath>src/it/settings.xml</settingsPath>
     <sisu.plexus.version>1.1.0</sisu.plexus.version>
     <slf4j.version>2.0.17</slf4j.version>
-    <smallrye-common.version>2.20.0</smallrye-common.version>
+    <smallrye-common.version>2.21.1</smallrye-common.version>
     <spifly.version>1.3.8</spifly.version>
     <surefire.failIfNoSpecifiedTests>false</surefire.failIfNoSpecifiedTests>
     <surefire.rerunFailingTestsCount>0</surefire.rerunFailingTestsCount>