Skip to content

Bump the maven-dependencies group across 1 directory with 4 updates - #262

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-85a914b981
Open

Bump the maven-dependencies group across 1 directory with 4 updates#262
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-85a914b981

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 4 updates in the / directory: org.jsoup:jsoup, com.github.siom79.japicmp:japicmp, org.apache.maven.plugins:maven-enforcer-plugin and org.jacoco:jacoco-maven-plugin.

Updates org.jsoup:jsoup from 1.23.2 to 1.24.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.24.1

jsoup 1.24.1 is out now, with major improvements to CSS selectors and HTML parsing.

This release introduces an opt-in Web query mode, bringing selector behavior closer to CSS and browser DOM standards. It also adds new selectors and improves the correctness and performance of :has() queries. Web mode will become the default in 1.25.1; the selector migration guide explains how to get ready.

HTML parsing is now more closely aligned with the current HTML standard, including improvements to tables, formatting elements, templates, and customizable select elements. This release also adds processing instruction support, and includes a number of performance improvements and bug fixes.

There are some changes to existing behavior, including :root matching and limits on Response.bodyStream(). Please make sure to review the changes below before upgrading.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Download jsoup now.

Improvements

  • Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
    • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
    • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
    • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
    • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
  • Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
  • Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
  • :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
  • SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
  • Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
  • Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

  • Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
  • Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
  • Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
  • Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

  • Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
  • Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
  • Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
  • Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
  • Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
  • StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
  • Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
  • :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
  • Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
  • Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
  • Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
  • Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
  • Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
  • If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
  • Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
  • Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
  • Double-escaped script tags in body were being closed too early. #2627

... (truncated)

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.24.1 (2026-Nov-03)

Improvements

  • Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
    • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
    • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
    • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
    • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
  • Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
  • Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
  • :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
  • SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
  • Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
  • Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

  • Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
  • Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
  • Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
  • Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

  • Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
  • Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
  • Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
  • Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
  • Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
  • StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
  • Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
  • :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
  • Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
  • Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
  • Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
  • Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
  • Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
  • If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
  • Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
  • Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
  • Double-escaped script tags in body were being closed too early. #2627
  • Node.before(Node) and Node.after(Node) now leave the document unchanged when given the node itself, instead of throwing a NullPointerException. #2628
  • Fixed HTML parse of <dialog>, <main>, and <search> so their start and end tags close open paragraphs correctly. #2629
  • Updated the parse of malformed end tags such as </ COMMENT > to match the spec (<!-- COMMENT -->). #2631
  • Source position tracking no longer impacts the adoption algo when repeated HTML formatting tags are reconstructed after a paragraph closes. #2633
  • Fixed fragment parsing to ignore <body> and <frameset> start tags when the second open element is not body, matching the HTML spec. #2634
  • Updated how the tokeniser handles malformed doctypes, to remove duplicative tokens and error messages. #2635
  • Corrected HTML tokenisation of malformed comments such as <!---x and incomplete start tags such as <p id=, and improved their error reporting. #2636
  • Fixed FormElement.empty() retaining associations with removed controls. If an input node removed by empty() was subsequently inserted outside its original form, it could incorrectly reappear in that form's elements() and formData() results. #2646
Commits
  • 5e3c284 [maven-release-plugin] prepare release jsoup-1.24.1
  • 5d63820 Link fix
  • 55aa51e Bump org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12...
  • 3203485 Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.3 to 0.26.5 (#2...
  • fdbfd44 Bump github/codeql-action from 4.38.3 to 4.39.0 (#2649)
  • 6fedf39 Bump actions/setup-java from 6.0.1 to 6.1.0 (#2650)
  • 0c508f1 Improve Selector javadoc
  • 6feca03 Detach nested form controls on .empty()
  • e1d48ba Improve query complexity accounting
  • 76c125d Improve exception handling when parsing selectors across buffer boundaries.
  • Additional commits viewable in compare view

Updates com.github.siom79.japicmp:japicmp from 0.26.5 to 0.27.0

Release notes

Sourced from com.github.siom79.japicmp:japicmp's releases.

japicmp-base-0.27.0

  • japicmp now detects added type bounds on generics, new super interfaces of interfaces, and changes to the native modifier on methods #534
Commits
  • 9070c8e [maven-release-plugin] prepare release japicmp-base-0.27.0
  • 86b9987 upgraded version in *.md files to 0.27.0
  • 47dc43a mvn set version to 0.27.0-SNAPSHOT
  • 954bc30 Update ReleaseNotes with new version 0.27.0 details
  • 69e4b47 Merge pull request #534 from siom79/ccr-92c99681-fnf854
  • e58bdee README.md in api-evolution-corpus in English
  • 962b98b added section "Scientific work"
  • 5432008 removed unnecessary comments
  • d6c813a Detect additional type bounds, new super interfaces of interfaces and native ...
  • 9f95bba Add evaluation of japicmp against the Jezek & Dietrich API evolution corpus
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.7.0

⚠️ Deprecated

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 465ebf2 [maven-release-plugin] prepare release enforcer-3.7.0
  • b24b05c Fix test-scope mediation in RequireUpperBoundDeps
  • 2b75dd3 Improve RequireUpperBoundDeps error message (#1059)
  • b519cd0 Fix EnforcerRuleCache concurrency across plugin realms (#1055)
  • f622234 Ignore SLF4J 2.x in Dependabot
  • 5a9ebca Remove redundant rat configuration
  • e8512d0 Fix ATR project name
  • 08605b2 Use push for PR Automation
  • fbe1ae5 Use workflow_run for PR check (#1056)
  • b1d59aa Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
  • Additional commits viewable in compare view

Updates org.jacoco:jacoco-maven-plugin from 0.8.15 to 0.8.16

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.16

New Features

  • JaCoCo now officially supports Java 27 (GitHub #2287).
  • Experimental support for Java 28 class files (GitHub #2170, #2189).
  • To instrument classes loaded by the platform class loader, introduced in JDK 9 by JEP 261, the agent option inclbootstrapclasses=true is required (GitHub #2155).

Non-functional Changes

  • JaCoCo now depends on ASM 9.11.1 (GitHub #2299, #2304).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the maven-dependencies group across 1 directory with 4 updates
11b4296 
Bumps the maven-dependencies group with 4 updates in the / directory: [org.jsoup:jsoup](https://github.com/jhy/jsoup), [com.github.siom79.japicmp:japicmp](https://github.com/siom79/japicmp), [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) and [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco).


Updates `org.jsoup:jsoup` from 1.23.2 to 1.24.1
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](jhy/jsoup@jsoup-1.23.2...jsoup-1.24.1)

Updates `com.github.siom79.japicmp:japicmp` from 0.26.5 to 0.27.0
- [Release notes](https://github.com/siom79/japicmp/releases)
- [Changelog](https://github.com/siom79/japicmp/blob/master/release.py)
- [Commits](siom79/japicmp@japicmp-base-0.26.5...japicmp-base-0.27.0)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.3 to 3.7.0
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.3...enforcer-3.7.0)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.15...v0.8.16)

---
updated-dependencies:
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.github.siom79.japicmp:japicmp
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from jmanico as a code owner November 9, 2026 09:30
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 9, 2026
@dependabot
dependabot Bot requested a review from jeremylong as a code owner November 9, 2026 09:30
@dependabot dependabot Bot added the java Pull requests that update java code label Nov 9, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jmanico jmanico Awaiting requested review from jmanico jmanico is a code owner
@jeremylong jeremylong Awaiting requested review from jeremylong jeremylong is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants