build(deps): bump the maven-dependencies group across 1 directory with 12 updates

[dependabot]

Bumps the maven-dependencies group with 12 updates in the / directory:

Package	From	To
org.slf4j:slf4j-api	2.0.18	2.0.19
software.amazon.awssdk:sts	2.54.9	2.54.13
software.amazon.awssdk:auth	2.54.9	2.54.13
software.amazon.awssdk:http-auth-aws	2.54.9	2.54.13
software.amazon.awssdk:http-auth-spi	2.54.9	2.54.13
software.amazon.awssdk:http-client-spi	2.54.9	2.54.13
software.amazon.awssdk:utils	2.54.9	2.54.13
com.google.auth:google-auth-library-oauth2-http	1.51.0	1.52.0
com.squareup.okio:okio	3.18.1	3.18.2
com.squareup.okio:okio-jvm	3.18.1	3.18.2
com.diffplug.spotless:spotless-maven-plugin	3.10.1	3.10.2
io.sundr:builder-annotations	0.300.0	0.400.0

Updates org.slf4j:slf4j-api from 2.0.18 to 2.0.19

Updates software.amazon.awssdk:sts from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:auth from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:http-auth-aws from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:http-auth-spi from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:http-client-spi from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:utils from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:auth from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:http-auth-aws from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:http-auth-spi from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:http-client-spi from 2.54.9 to 2.54.13

Updates software.amazon.awssdk:utils from 2.54.9 to 2.54.13

Updates com.google.auth:google-auth-library-oauth2-http from 1.51.0 to 1.52.0

Updates com.squareup.okio:okio from 3.18.1 to 3.18.2

Changelog

Sourced from com.squareup.okio:okio's changelog.

Version 3.18.2

2026-09-04

• Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused base64 strings to be encoded without padding, even though the previous and expected behavior is to encode such strings with padding (= characters). The bug impacts callers who compiled against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

Commits

• 9403a09 Prepare for release 3.18.2.
• 5a1c153 Fix an unintended behavior change with base64 padding (#1869)
• See full diff in compare view

Updates com.squareup.okio:okio-jvm from 3.18.1 to 3.18.2

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.2

2026-09-04

• Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused base64 strings to be encoded without padding, even though the previous and expected behavior is to encode such strings with padding (= characters). The bug impacts callers who compiled against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

Commits

• 9403a09 Prepare for release 3.18.2.
• 5a1c153 Fix an unintended behavior change with base64 padding (#1869)
• See full diff in compare view

Updates com.squareup.okio:okio-jvm from 3.18.1 to 3.18.2

Changelog

Sourced from com.squareup.okio:okio-jvm's changelog.

Version 3.18.2

2026-09-04

• Fix: Don't change behavior of base64-encoding. We introduced a bug in Okio 3.18.1 that caused base64 strings to be encoded without padding, even though the previous and expected behavior is to encode such strings with padding (= characters). The bug impacts callers who compiled against Okio releases < 3.18.0, and executed on Okio releases >= 3.18.

Commits

• 9403a09 Prepare for release 3.18.2.
• 5a1c153 Fix an unintended behavior change with base64 padding (#1869)
• See full diff in compare view

Updates com.diffplug.spotless:spotless-maven-plugin from 3.10.1 to 3.10.2

Release notes

Sourced from com.diffplug.spotless:spotless-maven-plugin's releases.

Maven Plugin v3.10.2

Fixed

• <shortenFullyQualifiedTypes> now shortens fully-qualified types used in expression contexts (such as static method calls, static fields, and enum constants) while avoiding imports that would change how existing unqualified type references resolve. (#3039)
• Eclipse JDT formatter step no longer fails with NoClassDefFoundError when lombok is active as a JVM agent (e.g. -javaagent:lombok.jar in Eclipse/VS Code/Cursor). (#2795)

Commits

• dc2a4cb Published maven/3.10.2
• 876c8c4 Published gradle/8.10.2
• ff28375 Published lib/4.10.2
• e260aa7 shortenFullyQualifiedTypes: preserve unqualified type resolution (#3037)
• 5a2cdca Update changelogs.
• 98ca50e Merge remote-tracking branch 'origin/main' into 3033-unqualified-type-collision
• 9591d7e Resolve interopability with spotless, lombok and VSCode (#3038)
• 5842e1b shortenFullyQualifiedTypes: shorten FQTs in expression context (#3039)
• e7f5b60 Add changelog entries
• 79ff6c7 Resolve interopability with spotless, lombok and VSCode
• Additional commits viewable in compare view

Updates io.sundr:builder-annotations from 0.300.0 to 0.400.0

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
com.diffplug.spotless:spotless-maven-plugin	[>= 2.4.a, < 2.5]
com.diffplug.spotless:spotless-maven-plugin	[>= 2.3.a, < 2.4]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[brendandburns]

/lgtm
/approve

[kubernetes-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: brendandburns, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [brendandburns]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment