From 56f2d090a251daf4118526e75b25fa464ab04bf5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 13 Nov 2026 01:11:46 +0000
Subject: [PATCH] Bump the asterixdb-dependencies group

Bumps the asterixdb-dependencies group in /asterixdb/asterix-common with 18 updates:

| Package | From | To |
| --- | --- | --- |
| [com.rometools:rome](https://github.com/rometools/rome) | `1.19.0` | `2.1.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.0.0-M5` | `3.6.1` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `2.22.2` | `3.6.1` |
| [org.apache:apache](https://github.com/apache/maven-apache-parent) | `18` | `40` |
| org.glassfish.jaxb:jaxb-runtime | `2.3.9` | `4.0.9` |
| [net.java.dev.javacc:javacc](https://github.com/javacc/javacc) | `6.1.2` | `7.0.13` |
| org.slf4j:slf4j-simple | `1.7.36` | `2.0.20` |
| com.sun.xml.bind:jaxb-core | `2.3.0.1` | `4.0.9` |
| com.sun.xml.bind:jaxb-impl | `2.3.9` | `4.0.9` |
| [software.amazon.awssdk.crt:aws-crt](https://github.com/awslabs/aws-crt-java) | `0.48.5` | `0.50.0` |
| org.projectnessie.nessie:nessie-model | `0.108.8` | `0.110.0` |
| org.projectnessie.nessie:nessie-client | `0.108.8` | `0.110.0` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.0.0-M3` | `3.7.0` |
| [org.codehaus.mojo:versions-maven-plugin](https://github.com/mojohaus/versions) | `2.23.0` | `2.24.0` |
| [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) | `3.6.2` | `3.7.0` |
| [org.codehaus.mojo:javacc-maven-plugin](https://github.com/mojohaus/javacc-maven-plugin) | `2.6` | `3.2.1` |
| [org.apache.maven.plugins:maven-gpg-plugin](https://github.com/apache/maven-gpg-plugin) | `1.6` | `3.2.8` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.15` | `0.8.16` |


Updates `com.rometools:rome` from 1.19.0 to 2.1.0
- [Release notes](https://github.com/rometools/rome/releases)
- [Commits](https://github.com/rometools/rome/compare/1.19.0...2.1.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.0.0-M5 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-3.0.0-M5...surefire-3.6.1)

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 2.22.2 to 3.6.1
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](https://github.com/apache/maven-surefire/compare/surefire-2.22.2...surefire-3.6.1)

Updates `org.apache:apache` from 18 to 40
- [Release notes](https://github.com/apache/maven-apache-parent/releases)
- [Commits](https://github.com/apache/maven-apache-parent/commits)

Updates `org.glassfish.jaxb:jaxb-runtime` from 2.3.9 to 4.0.9

Updates `net.java.dev.javacc:javacc` from 6.1.2 to 7.0.13
- [Release notes](https://github.com/javacc/javacc/releases)
- [Changelog](https://github.com/javacc/javacc/blob/master/docs/release-notes.md)
- [Commits](https://github.com/javacc/javacc/commits/javacc-7.0.13)

Updates `org.slf4j:slf4j-simple` from 1.7.36 to 2.0.20

Updates `com.sun.xml.bind:jaxb-core` from 2.3.0.1 to 4.0.9

Updates `com.sun.xml.bind:jaxb-impl` from 2.3.9 to 4.0.9

Updates `software.amazon.awssdk.crt:aws-crt` from 0.48.5 to 0.50.0
- [Release notes](https://github.com/awslabs/aws-crt-java/releases)
- [Commits](https://github.com/awslabs/aws-crt-java/compare/v0.48.5...v0.50.0)

Updates `org.projectnessie.nessie:nessie-model` from 0.108.8 to 0.110.0

Updates `org.projectnessie.nessie:nessie-client` from 0.108.8 to 0.110.0

Updates `org.projectnessie.nessie:nessie-client` from 0.108.8 to 0.110.0

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.0.0-M3 to 3.7.0
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](https://github.com/apache/maven-enforcer/compare/enforcer-3.0.0-M3...enforcer-3.7.0)

Updates `org.codehaus.mojo:versions-maven-plugin` from 2.23.0 to 2.24.0
- [Release notes](https://github.com/mojohaus/versions/releases)
- [Changelog](https://github.com/mojohaus/versions/blob/master/ReleaseNotes.md)
- [Commits](https://github.com/mojohaus/versions/compare/2.23.0...2.24.0)

Updates `org.codehaus.mojo:build-helper-maven-plugin` from 3.6.2 to 3.7.0
- [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/build-helper-maven-plugin/compare/3.6.2...3.7.0)

Updates `org.codehaus.mojo:javacc-maven-plugin` from 2.6 to 3.2.1
- [Release notes](https://github.com/mojohaus/javacc-maven-plugin/releases)
- [Commits](https://github.com/mojohaus/javacc-maven-plugin/compare/javacc-maven-plugin-2.6...javacc-maven-plugin-3.2.1)

Updates `org.apache.maven.plugins:maven-gpg-plugin` from 1.6 to 3.2.8
- [Release notes](https://github.com/apache/maven-gpg-plugin/releases)
- [Commits](https://github.com/apache/maven-gpg-plugin/compare/maven-gpg-plugin-1.6...maven-gpg-plugin-3.2.8)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](https://github.com/jacoco/jacoco/compare/v0.8.15...v0.8.16)

---
updated-dependencies:
- dependency-name: com.rometools:rome
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: org.apache:apache
  dependency-version: '40'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: org.glassfish.jaxb:jaxb-runtime
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: net.java.dev.javacc:javacc
  dependency-version: 7.0.13
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: org.slf4j:slf4j-simple
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: com.sun.xml.bind:jaxb-core
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: com.sun.xml.bind:jaxb-impl
  dependency-version: 4.0.9
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: software.amazon.awssdk.crt:aws-crt
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.projectnessie.nessie:nessie-model
  dependency-version: 0.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.projectnessie.nessie:nessie-client
  dependency-version: 0.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.projectnessie.nessie:nessie-client
  dependency-version: 0.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.codehaus.mojo:versions-maven-plugin
  dependency-version: 2.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.codehaus.mojo:build-helper-maven-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: asterixdb-dependencies
- dependency-name: org.codehaus.mojo:javacc-maven-plugin
  dependency-version: 3.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: org.apache.maven.plugins:maven-gpg-plugin
  dependency-version: 3.2.8
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: asterixdb-dependencies
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: asterixdb-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 asterixdb/pom.xml | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml
index 284a046630..eb4bf1e957 100644
--- a/asterixdb/pom.xml
+++ b/asterixdb/pom.xml
@@ -28,7 +28,7 @@
   <parent>
     <groupId>org.apache</groupId>
     <artifactId>apache</artifactId>
-    <version>18</version>
+    <version>40</version>
     <relativePath />
   </parent>
 
@@ -98,7 +98,7 @@
          single-threaded input listing forced in HDFSUtils#configureHadoopAuthentication is a
          workaround for its absence and should be removed at that point. -->
     <hadoop.version>3.5.0</hadoop.version>
-    <jacoco.version>0.8.15</jacoco.version>
+    <jacoco.version>0.8.16</jacoco.version>
     <log4j.version>2.26.1</log4j.version>
     <avro.version>1.12.2</avro.version>
     <parquet.version>1.18.2</parquet.version> <!-- NOTICE: please update transitives from parquet below on any change -->
@@ -107,7 +107,7 @@
     <!-- keep in sync with hyracks-fullstack/pom.xml -->
     <awsjavasdk.version>2.57.13</awsjavasdk.version>
     <!-- @derived-from: software.amazon.awssdk:aws-sdk-java-pom:${awsjavasdk.version}#awscrt.version -->
-    <awsjavasdk.crt.version>0.48.5</awsjavasdk.crt.version>
+    <awsjavasdk.crt.version>0.50.0</awsjavasdk.crt.version>
 
     <!-- azure-storage-blob vendors relocated Apache Arrow (arrow-format) and FlatBuffers
          (flatbuffers-java) sources, listed in its shade-apache-arrow-format profile; review the
@@ -140,7 +140,7 @@
     <iceberg-gcs-fork.version>1.12.0</iceberg-gcs-fork.version>
 
     <!-- @derived-from: org.apache.iceberg:iceberg-nessie:${icebergjavasdk.version}#dep:nessie-client -->
-    <nessieproject.version>0.108.8</nessieproject.version>
+    <nessieproject.version>0.110.0</nessieproject.version>
 
     <implementation.title>Apache AsterixDB - ${project.name}</implementation.title>
     <implementation.url>https://asterixdb.apache.org/</implementation.url>
@@ -520,7 +520,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>versions-maven-plugin</artifactId>
-          <version>2.23.0</version>
+          <version>2.24.0</version>
         </plugin>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
@@ -566,7 +566,7 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>build-helper-maven-plugin</artifactId>
-          <version>3.6.2</version>
+          <version>3.7.0</version>
         </plugin>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
@@ -601,7 +601,7 @@
             <dependency>
               <groupId>org.glassfish.jaxb</groupId>
               <artifactId>jaxb-runtime</artifactId>
-              <version>2.3.9</version>
+              <version>4.0.9</version>
             </dependency>
           </dependencies>
         </plugin>
@@ -613,12 +613,12 @@
         <plugin>
           <groupId>org.codehaus.mojo</groupId>
           <artifactId>javacc-maven-plugin</artifactId>
-          <version>2.6</version>
+          <version>3.2.1</version>
           <dependencies>
             <dependency>
               <groupId>net.java.dev.javacc</groupId>
               <artifactId>javacc</artifactId>
-              <version>6.1.2</version>
+              <version>7.0.13</version>
             </dependency>
           </dependencies>
         </plugin>
@@ -649,12 +649,12 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-enforcer-plugin</artifactId>
-          <version>3.0.0-M3</version>
+          <version>3.7.0</version>
         </plugin>
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-surefire-plugin</artifactId>
-          <version>3.0.0-M5</version>
+          <version>3.6.1</version>
           <configuration>
             <failIfNoTests>true</failIfNoTests>
             <systemPropertyVariables>
@@ -696,7 +696,7 @@
         <plugin>
           <groupId>org.apache.maven.plugins</groupId>
           <artifactId>maven-failsafe-plugin</artifactId>
-          <version>2.22.2</version>
+          <version>3.6.1</version>
           <configuration>
             <failIfNoTests>true</failIfNoTests>
             <runOrder>alphabetical</runOrder>
@@ -908,7 +908,7 @@
           <plugin>
             <groupId>org.apache.maven.plugins</groupId>
             <artifactId>maven-gpg-plugin</artifactId>
-            <version>1.6</version>
+            <version>3.2.8</version>
             <executions>
               <execution>
                 <id>sign-artifacts</id>
@@ -1044,7 +1044,7 @@
       <dependency>
         <groupId>org.slf4j</groupId>
         <artifactId>slf4j-simple</artifactId>
-        <version>1.7.36</version>
+        <version>2.0.20</version>
       </dependency>
       <dependency>
         <groupId>org.apache.maven</groupId>
@@ -1531,7 +1531,7 @@
       <dependency>
         <groupId>com.rometools</groupId>
         <artifactId>rome</artifactId>
-        <version>1.19.0</version>
+        <version>2.1.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.zookeeper</groupId>
@@ -1585,12 +1585,12 @@
       <dependency>
         <groupId>com.sun.xml.bind</groupId>
         <artifactId>jaxb-core</artifactId>
-        <version>2.3.0.1</version>
+        <version>4.0.9</version>
       </dependency>
       <dependency>
         <groupId>com.sun.xml.bind</groupId>
         <artifactId>jaxb-impl</artifactId>
-        <version>2.3.9</version>
+        <version>4.0.9</version>
       </dependency>
       <dependency>
         <groupId>javax.activation</groupId>