Bump the "dependencies" group with 2 updates across multiple ecosystems by dependabot[bot] · Pull Request #17 · itsallcode/simple-process

dependabot · 2026-02-02T12:36:47Z

Bumps the dependencies group with 1 update: actions/cache.

Updates actions/cache from 4 to 5

Release notes

Sourced from actions/cache's releases.

v5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Upgrade to use node24 by @salmanmkc in actions/cache#1630

Prepare v5.0.0 release by @salmanmkc in actions/cache#1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

What's Changed

Add note on runner versions by @GhadimiR in actions/cache#1642

Prepare v4.3.0 release by @Link- in actions/cache#1655

New Contributors

@GhadimiR made their first contribution in actions/cache#1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

What's Changed

Update README.md by @nebuk89 in actions/cache#1620

Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in actions/cache#1634

Prepare release 4.2.4 by @Link- in actions/cache#1636

New Contributors

@nebuk89 made their first contribution in actions/cache#1620

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

What's Changed

Update to use @actions/cache 4.0.3 package & prepare for new release by @salmanmkc in actions/cache#1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

@salmanmkc made their first contribution in actions/cache#1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

Bump @actions/cache to v4.1.0

... (truncated)

Commits

cdf6c1f Merge pull request #1695 from actions/Link-/prepare-5.0.3
a1bee22 Add review for the @actions/http-client license
4695763 Add licensed output
dc73bb9 Upgrade dependencies and address security warnings
345d5c2 Add 5.0.3 builds
8b402f5 Merge pull request #1692 from GhadimiR/main
304ab5a license for httpclient
609fc19 Update licensed record for cache
b22231e Build
93150cd Add PR link to releases
Additional commits viewable in compare view

Bumps the dependencies group with 5 updates:

Package	From	To
org.sonarqube	`7.2.0.6526`	`7.2.2.6593`
gradle-wrapper	`9.2.0`	`9.3.1`
org.mockito:mockito-junit-jupiter	`5.20.0`	`5.21.0`
nl.jqno.equalsverifier:equalsverifier	`4.2.5`	`4.3.1`
org.assertj:assertj-core	`3.27.6`	`3.27.7`

Updates org.sonarqube from 7.2.0.6526 to 7.2.2.6593

Updates gradle-wrapper from 9.2.0 to 9.3.1

Updates org.mockito:mockito-junit-jupiter from 5.20.0 to 5.21.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.21.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0

2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]

Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 [(#3768)](mockito/mockito#3768)

Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 [(#3767)](mockito/mockito#3767)

Bump actions/checkout from 5 to 6 [(#3765)](mockito/mockito#3765)

Adds output of matchers to potential mismatch; Fixes #2468 [(#3760)](mockito/mockito#3760)

Forbid mocking WeakReference with inline mock maker [(#3759)](mockito/mockito#3759)

StackOverflowError when mocking WeakReference [(#3758)](mockito/mockito#3758)

Bump actions/upload-artifact from 4 to 5 [(#3756)](mockito/mockito#3756)

Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 [(#3755)](mockito/mockito#3755)

Support primitives in GenericArrayReturnType. [(#3753)](mockito/mockito#3753)

ClassNotFoundException when stubbing array of primitive type on Android [(#3752)](mockito/mockito#3752)

Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 [(#3744)](mockito/mockito#3744)

Bump gradle/actions from 4 to 5 [(#3743)](mockito/mockito#3743)

Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 [(#3738)](mockito/mockito#3738)

Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 [(#3735)](mockito/mockito#3735)

Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 [(#3734)](mockito/mockito#3734)

Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 [(#3733)](mockito/mockito#3733)

Bump errorprone from 2.41.0 to 2.42.0 [(#3732)](mockito/mockito#3732)

Feat: automatically detect class to mock in mockStatic and mockConstruction [(#3731)](mockito/mockito#3731)

Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues [(#3727)](mockito/mockito#3727)

automatically detect class to mock [(#2779)](mockito/mockito#2779)

Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers [(#2468)](mockito/mockito#2468)

Commits

09d2230 Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#3768)
df3e0cc Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#3767)
04a6e9f Bump actions/checkout from 5 to 6 (#3765)
756a3cf Add description of matchers to potential mismatch (#3760)
58ba445 Forbid mocking WeakReference with inline mock maker (#3759)
966d600 Bump actions/upload-artifact from 4 to 5 (#3756)
632bf7b Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#3755)
8564b43 Fix primitives support in GenericArrayReturnType for Android (#3753)
bf3a809 Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#3744)
cffddd4 Bump gradle/actions from 4 to 5 (#3743)
Additional commits viewable in compare view

Updates nl.jqno.equalsverifier:equalsverifier from 4.2.5 to 4.3.1

Release notes

Sourced from nl.jqno.equalsverifier:equalsverifier's releases.

Release equalsverifier-4.3.1

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.3

For a list of changes in this version, see CHANGELOG.md.

Release equalsverifier-4.2.6

For a list of changes in this version, see CHANGELOG.md.

Changelog

Sourced from nl.jqno.equalsverifier:equalsverifier's changelog.

[4.3.1] - 2026-01-24

Changed

EqualsVerifier now respects Kotlin's data class contract: properties declared in the class body are assumed not to take part in equals() and hashCode(). (Issue 1159; thanks Sogilis Team!)

[4.3] - 2026-01-01

Changed

Restored original behaviour for multiple predicate-based ScanOption exceptions. (Issue 1167; thanks Mark!)

[4.2.6] - 2025-12-30

Fixed

If first permitted and non-abstract subclass of a sealed type has a recursion, EqualsVerifier throws RecursionException instead of trying the second permitted non-abstract subclass. (Issue 1081)

Changed

Avoids potential parameter order bug when instantiating records. (Issue 1160; thanks lycoris106!)

More performance improvements.

Commits

cb1183d Bumps version to 4.3.1
70115b9 Updates CHANGELOG for release
8c72ab0 Slightly improves error message
b175147 Merge pull request #1159 from sogilis/improve-kotlin-data-class-support
81c58ee Improve message when testing kotlin data class without kotlin-reflect
b2e5abd Document specific behavior for data classes
bdda452 Ignore properties not declared in the primary constructor of Kotlin data classes
ae6ab2f Merge pull request #1174 from jqno/dependabot/maven/dependencies-6924995d37
569813f Bump net.bytebuddy:byte-buddy in the dependencies group
bc1d3b2 Merge pull request #1173 from jqno/refactor-instancecreator
Additional commits viewable in compare view

Updates org.assertj:assertj-core from 3.27.6 to 3.27.7

Release notes

Sourced from org.assertj:assertj-core's releases.

v3.27.7

🔒 Security

Core

Fix XXE vulnerability in isXmlEqualTo assertion (CVE-2026-24400)

See GHSA-rqfh-9r24-8c9r for details; many thanks to @wxt201 and @Song-Li for responsibly reporting it!

🚫 Deprecated

Core

Deprecate XmlStringPrettyFormatter with no replacement

🐛 Bug Fixes

Guava

Navigation to assertj-core or guava types from assertj-guava Javadoc site has unnecessary header #3478

🔨 Dependency Upgrades

Core

Upgrade to Byte Buddy 1.18.3

Upgrade to JUnit BOM 5.14.1

Guava

Upgrade to Guava 33.5.0-jre

Commits

e840716 [maven-release-plugin] prepare release assertj-build-3.27.7
85ca7eb Deprecate XmlStringPrettyFormatter
77081dc Merge commit from fork
b68fc24 Bump github/codeql-action from 4.31.9 to 4.31.10 in the github-actions group ...
0cf5bb6 Bump kotlin.version from 2.1.0 to 2.2.21
d393ef1 Abort tests when symbolic links cannot be created (#3788)
2212433 Add IntelliJ custom inspection for test class names
5717d02 Update JetBrains icon
a8ec20b Add icon for JetBrains products
c05fb3d Bump Maven to 3.9.12 and Wrapper to 3.3.4
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 1 update: [actions/cache](https://github.com/actions/cache). Updates `actions/cache` from 4 to 5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v5) Bump the dependencies group with 5 updates Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | org.sonarqube | `7.2.0.6526` | `7.2.2.6593` | | gradle-wrapper | `9.2.0` | `9.3.1` | | [org.mockito:mockito-junit-jupiter](https://github.com/mockito/mockito) | `5.20.0` | `5.21.0` | | [nl.jqno.equalsverifier:equalsverifier](https://github.com/jqno/equalsverifier) | `4.2.5` | `4.3.1` | | [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.27.6` | `3.27.7` | Updates `org.sonarqube` from 7.2.0.6526 to 7.2.2.6593 Updates `gradle-wrapper` from 9.2.0 to 9.3.1 Updates `org.mockito:mockito-junit-jupiter` from 5.20.0 to 5.21.0 - [Release notes](https://github.com/mockito/mockito/releases) - [Commits](mockito/mockito@v5.20.0...v5.21.0) Updates `nl.jqno.equalsverifier:equalsverifier` from 4.2.5 to 4.3.1 - [Release notes](https://github.com/jqno/equalsverifier/releases) - [Changelog](https://github.com/jqno/equalsverifier/blob/main/CHANGELOG.md) - [Commits](jqno/equalsverifier@equalsverifier-4.2.5...equalsverifier-4.3.1) Updates `org.assertj:assertj-core` from 3.27.6 to 3.27.7 - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](assertj/assertj@assertj-build-3.27.6...assertj-build-3.27.7) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.sonarqube dependency-version: 7.2.2.6593 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: gradle-wrapper dependency-version: 9.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.mockito:mockito-junit-jupiter dependency-version: 5.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: nl.jqno.equalsverifier:equalsverifier dependency-version: 4.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.assertj:assertj-core dependency-version: 3.27.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 2, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the "dependencies" group with 2 updates across multiple ecosystems#17

Bump the "dependencies" group with 2 updates across multiple ecosystems#17
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/dependencies-1b9eed3ca4

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 2, 2026

v5.0.0

What's Changed

v4.3.0

What's Changed

New Contributors

v4.2.4

What's Changed

New Contributors

v4.2.3

What's Changed

New Contributors

Releases

How to prepare a release

Changelog

5.0.3

5.0.2

5.0.1

5.0.0

4.3.0

v5.21.0

5.21.0

Release equalsverifier-4.3.1

Release equalsverifier-4.3

Release equalsverifier-4.2.6

[4.3.1] - 2026-01-24

Changed

[4.3] - 2026-01-01

Changed

[4.2.6] - 2025-12-30

Fixed

Changed

v3.27.7

🔒 Security

Core

🚫 Deprecated

Core

🐛 Bug Fixes

Guava

🔨 Dependency Upgrades

Core

Guava

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants