Skip to content

Bump the dependencies group with 2 updates - #5995

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/dependencies-102eaeaa0f
Closed

Bump the dependencies group with 2 updates#5995
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/dependencies-102eaeaa0f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 2 updates: org.apache.maven.plugins:maven-toolchains-plugin and org.safere:safere.

Updates org.apache.maven.plugins:maven-toolchains-plugin from 3.2.0 to 3.3.0

Release notes

Sourced from org.apache.maven.plugins:maven-toolchains-plugin's releases.

3.3.0

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

... (truncated)

Commits
  • 52474c0 [maven-release-plugin] prepare release maven-toolchains-plugin-3.3.0
  • 39e84b2 Update toolchains documentation to use JSR-330 terminology and links (#165)
  • a213292 Bump apache/maven-gh-actions-shared/.github/workflows/release-drafter.yml
  • 2402d77 Replace Plexus XML configuration with JSR-330 annotated beans (#160)
  • ab80fc8 Bump apache/maven-gh-actions-shared/.github/workflows/stale.yml (#161)
  • 525f40c Bump apache/maven-gh-actions-shared/.github/workflows/pr-automation.yml (#163)
  • d3960b9 Bump apache/maven-gh-actions-shared/.github/workflows/maven-verify.yml (#164)
  • e0b39a6 Add .asf.yaml project metadata for ATR
  • e53bcec Add tag-template to release-drafter config
  • df6df08 Update site descriptors and download page content
  • Additional commits viewable in compare view

Updates org.safere:safere from 0.9.0 to 0.10.0

Release notes

Sourced from org.safere:safere's releases.

SafeRE 0.10.0

Highlights

This release adds structured static and runtime regex diagnostics, improves several successful-match and replacement paths, and expands the benchmark infrastructure used to compare SafeRE with other regex engines.

New features

  • Added Pattern.analysis() for immutable static information about pattern features, engine capabilities, limitations, program size, and captures, plus a process-wide SafeReMatchDiagnostics listener that reports the strategies used by matching and replacement operations without exposing pattern or input text. Runtime diagnostics remain disabled by default and the disabled path does not allocate diagnostics state. (#567)

Performance

  • Accelerated long-input multi-byte literal searches over UTF-8 input with a SWAR candidate filter while preserving linear-time fallback behavior; measured absent-literal scans improved by 2.2–6.2×, with explicit Boyer-Moore-Horspool batching preserving short-input throughput. (#580, #583)
  • Reduced repeated capture-extraction work after callers request inner captures, improving representative log parsing by 1.85× and stack-trace extraction by 1.51×. (#587)
  • Added a single backward-scan path for greedy whole-input wrappers around word-bounded ASCII case-insensitive keyword alternatives, producing improvements from 108× at 1,000 characters to 14,726× at 100,000 characters in the measured matching workload. (#588)
  • Removed redundant anchored DFA verification passes when forward and reverse bounds are authoritative, improving representative successful searches by 1.21–1.33×. (#591)
  • Improved replacement fast paths by recording template capture demand earlier and directly handling nullable repeated character classes with literal templates; measured empty-match replaceAll improved by 7.22× and Pig Latin replacement by 1.20×. (#589)

Other changes

  • Refreshed the benchmark report with reproducible same-runtime and cross-language comparisons, and integrated the separately licensed OpenJDK-derived regex benchmark suite into the standard collection workflow. (#581, #596)
  • Made benchmark inputs reproducible across Java, C++, and Go by materializing one shared workload definition, and decoupled cross-engine workload selection from JMH entry points. (#601, #605)
  • Improved release automation, centralized the CI JDK configuration, and made the C++ benchmark harness portable to macOS. (#582, #598, #600)

Contributors

Thanks to @​wendigo for the SWAR-based UTF-8 literal-search acceleration and its benchmark and correctness coverage.

Full changelog: eaftan/safere@v0.9.0...v0.10.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the dependencies group with 2 updates
72b18a0 
Bumps the dependencies group with 2 updates: [org.apache.maven.plugins:maven-toolchains-plugin](https://github.com/apache/maven-toolchains-plugin) and [org.safere:safere](https://github.com/eaftan/safere).


Updates `org.apache.maven.plugins:maven-toolchains-plugin` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/apache/maven-toolchains-plugin/releases)
- [Commits](apache/maven-toolchains-plugin@maven-toolchains-plugin-3.2.0...maven-toolchains-plugin-3.3.0)

Updates `org.safere:safere` from 0.9.0 to 0.10.0
- [Release notes](https://github.com/eaftan/safere/releases)
- [Commits](eaftan/safere@v0.9.0...v0.10.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-toolchains-plugin
  dependency-version: 3.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: org.safere:safere
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Aug 2, 2026
@copybara-service copybara-service Bot mentioned this pull request Aug 2, 2026
Merged
@copybara-service copybara-service Bot closed this in c7b004a Aug 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/maven/dependencies-102eaeaa0f branch August 2, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cushon cushon cushon approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cushon