fix(deps): update all minor dependencies by renovate[bot] · Pull Request #285 · InseeFr/Eno-Xml

renovate · 2026-02-21T02:00:22Z

This PR contains the following updates:

Package	Type	Update	Change
eclipse-temurin	final	patch	`25.0.1_8-jre` → `25.0.3_9-jre`
softprops/action-gh-release	action	minor	`v2.5.0` → `v2.6.2`
org.sonarsource.scanner.maven:sonar-maven-plugin (source)	build	minor	`5.6.0.6792` → `5.7.0.6970`
org.apache.maven.plugins:maven-surefire-plugin (source)	build	patch	`3.5.5` → `3.5.6`
org.jacoco:jacoco-maven-plugin (source)	build	patch	`0.8.14` → `0.8.15`
org.xmlunit:xmlunit-matchers (source)	test	minor	`2.11.0` → `2.12.0`
com.sun.xml.bind:jaxb-core (source)	compile	patch	`4.0.8` → `4.0.9`
org.springframework.boot:spring-boot-starter-parent (source)	parent	minor	`4.0.6` → `4.1.0`

Release Notes

softprops/action-gh-release (softprops/action-gh-release)

`v2.6.2`

Compare Source

What's Changed

Other Changes 🔄

chore(deps): bump picomatch from 4.0.3 to 4.0.4 by @dependabot[bot] in #775
chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by @dependabot[bot] in #777
chore(deps): bump vite from 8.0.0 to 8.0.5 by @dependabot[bot] in #781

Full Changelog: softprops/action-gh-release@v2...v2.6.2

`v2.6.1`

Compare Source

2.6.1 is a patch release focused on restoring linked discussion thread creation when
discussion_category_name is set. It fixes #764, where the draft-first publish flow
stopped carrying the discussion category through the final publish step.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: preserve discussion category on publish by @chenrui333 in #765

`v2.6.0`

Compare Source

2.6.0 is a minor release centered on previous_tag support for generate_release_notes,
which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range.
It also includes the recent concurrent asset upload recovery fix, a working_directory docs sync,
a checked-bundle freshness guard for maintainers, and clearer immutable-prerelease guidance where
GitHub platform behavior imposes constraints on how prerelease asset uploads can be published.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Exciting New Features 🎉

feat: support previous_tag for generate_release_notes by @pocesar in #372

Bug fixes 🐛

fix: recover concurrent asset metadata 404s by @chenrui333 in #760

Other Changes 🔄

docs: clarify reused draft release behavior by @chenrui333 in #759
docs: clarify working_directory input by @chenrui333 in #761
ci: verify dist bundle freshness by @chenrui333 in #762
fix: clarify immutable prerelease uploads by @chenrui333 in #763

`v2.5.3`

Compare Source

2.5.3 is a patch release focused on the remaining path-handling and release-selection bugs uncovered after 2.5.2.
It fixes #639, #571, #280, #614, #311, #403, and #368.
It also adds documentation clarifications for #541, #645, #542, #393, and #411,
where the current behavior is either usage-sensitive or constrained by GitHub platform limits rather than an action-side runtime bug.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: prefer token input over GITHUB_TOKEN by @chenrui333 in #751
fix: clean up duplicate drafts after canonicalization by @chenrui333 in #753
fix: support Windows-style file globs by @chenrui333 in #754
fix: normalize refs-tag inputs by @chenrui333 in #755
fix: expand tilde file paths by @chenrui333 in #756

Other Changes 🔄

docs: clarify token precedence by @chenrui333 in #752
docs: clarify GitHub release limits by @chenrui333 in #758
documentation clarifications for empty-token handling, preserve_order, and special-character asset filename behavior

Full Changelog: softprops/action-gh-release@v2...v2.5.3

`v2.5.2`

Compare Source

2.5.2 is a patch release focused on the remaining release-creation and prerelease regressions in the 2.5.x bug-fix cycle.
It fixes #705, fixes #708, fixes #740, fixes #741, and fixes #722.
Regression testing covers the shared-tag race, prerelease event behavior, dotfile asset labels,
same-filename concurrent uploads, and blocked-tag cleanup behavior.

If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.

What's Changed

Bug fixes 🐛

fix: canonicalize releases after concurrent create by @chenrui333 in #746
fix: preserve prereleased events for prereleases by @chenrui333 in #748
fix: restore dotfile asset labels by @chenrui333 in #749
fix: handle upload already_exists races across workflows by @api2062 in #745
fix: clean up orphan drafts when tag creation is blocked by @chenrui333 in #750

New Contributors

@api2062 made their first contribution in #745

Full Changelog: softprops/action-gh-release@v2...v2.5.2

`v2.5.1`

Compare Source

2.5.1 is a patch release focused on regressions introduced in 2.5.0 and on release lookup reliability.
It fixes #713, addresses #703, and fixes #724. Regression testing shows that
current master no longer reproduces the finalize-race behavior reported in #704 and #709.

What's Changed

Bug fixes 🐛

fix: fetch correct asset URL after finalization; test; some refactoring by @pzhlkj6612 in #738
fix: release marked as 'latest' despite make_latest: false by @Boshen in #715
fix: use getReleaseByTag API instead of iterating all releases by @kim-em in #725

Other Changes 🔄

dependency updates, including the ESM/runtime compatibility refresh in #731

New Contributors

@autarch made their first contribution in #716
@pzhlkj6612 made their first contribution in #738
@Boshen made their first contribution in #715
@kim-em made their first contribution in #725

Full Changelog: softprops/action-gh-release@v2...v2.5.1

SonarSource/sonar-scanner-maven (org.sonarsource.scanner.maven:sonar-maven-plugin)

`v5.7.0.6970`

Compare Source

Release notes - Sonar Scanner for Maven - 5.7

Feature

SCANMAVEN-317 Support encryption of sonar.token, and other new secure properties
SCANMAVEN-332 support modular-jar artifact type
SCANMAVEN-341 Rework the support of encrypted properties

Maintenance

SCANMAVEN-370 Prepare next development iteration 5.7.0
SCANMAVEN-372 Configure Renovate for sonar-scanner-maven
SCANMAVEN-373 SubmitReview: Use Vault token
SCANMAVEN-374 Unpin internal GitHub actions
SCANMAVEN-376 Use SonarSource/.../sonar-update-center-release@v1 instead of @master
SCANMAVEN-377 Update dependency org.assertj:assertj-core to v3.27.7 [SECURITY]

jacoco/jacoco (org.jacoco:jacoco-maven-plugin)

`v0.8.15`

Compare Source

xmlunit/xmlunit (org.xmlunit:xmlunit-matchers)

`v2.12.0`

Compare Source

bumped xmlunit-assertj3's dependency on assert to 3.27.7.

This is to make people aware of
GHSA-rqfh-9r24-8c9r

XMLUnit itself does not use the affected code in AssertJ so the upgrade is not strictly necessary - and this is why
the xmlunit-assertj module is not updated. In fact the assertions provided by xmlunit-assertj3 are the recommended
upgrade path for users of AssertJ 3.x+.

PRs #320 and
#321
actually made withDTDParsingDisabled do what it says.

This is a bugfix and in a way it is backwards incompatible as it changes default behavior in a way that I intended to
do with XMLUnit 2.6.0 eight years ago. DocumentBuilderFactoryConfigurer.DefaultWithDTDParsing provides the
behavior of XMLUnit 2.6.0 to 2.11.0.

PRs #326 by @jmestwa-coder
and #328

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

`v4.1.0`

Compare Source

`v4.0.7`

Compare Source

Configuration

📅 Schedule: (in timezone Europe/Paris)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot added the dependencies Pull requests that update a dependency file label Feb 21, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch from 9011a7f to cc41307 Compare February 21, 2026 12:45

renovate Bot changed the title ~~fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.11~~ fix(deps): update all minor dependencies Feb 21, 2026

renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e84b08b to b37930b Compare March 5, 2026 10:15

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0070162 to faa2ad2 Compare March 19, 2026 17:11

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from dc51624 to 967da6b Compare March 28, 2026 13:14

renovate Bot force-pushed the renovate/all-minor-patch branch from 967da6b to 365d4d2 Compare April 12, 2026 00:44

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 883a1ab to 0facd37 Compare April 23, 2026 15:45

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 2d11675 to 22c17a2 Compare May 7, 2026 10:26

renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 772202a to ad56fc1 Compare May 18, 2026 09:09

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 392736f to 45efd19 Compare June 1, 2026 13:34

renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from e9e4b0c to 7abb665 Compare June 10, 2026 20:01

fix(deps): update all minor dependencies

e154ee6

renovate Bot force-pushed the renovate/all-minor-patch branch from 7abb665 to e154ee6 Compare June 11, 2026 10:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update all minor dependencies#285

fix(deps): update all minor dependencies#285
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Feb 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Feb 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Other Changes 🔄

What's Changed

Bug fixes 🐛

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

What's Changed

Bug fixes 🐛

Other Changes 🔄

What's Changed

Bug fixes 🐛

New Contributors

What's Changed

Bug fixes 🐛

Other Changes 🔄

New Contributors

Release notes - Sonar Scanner for Maven - 5.7

Feature

Maintenance

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Feb 21, 2026 •

edited

Loading