chore(deps): bump the maven-minor group with 3 updates

[dependabot]

Bumps the maven-minor group with 3 updates: org.hibernate.validator:hibernate-validator, io.sentry:sentry-log4j2 and org.commonmark:commonmark.

Updates org.hibernate.validator:hibernate-validator from 9.1.0.Final to 9.1.1.Final

Release notes

Sourced from org.hibernate.validator:hibernate-validator's releases.

Release 9.1.1.Final

Hibernate Validator 9.1.1.Final released

We are pleased to announce the release of Hibernate Validator 9.1: 9.1.1.Final.

You can find the full list of 9.1.1.Final changes here.

What's new

• See the website for requirements and compatibilities.
• See the What's New guide for details about new features and capabilities.

Conclusion

For additional details, see:

• the release page
• the Migration Guide
• the Getting started
• the Reference Guide
• the API docs

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.validator:hibernate-validator's changelog.

9.1.1.Final (2026-06-22)

https://hibernate.atlassian.net/projects/HV/versions/36015

** Bug * HV-2217 HibernateConstraintValidatorContext::addExpressionVariable throws NPE when given null value * HV-2164 NIP constraint javadoc incorrectly states that it is a 9 digit sequence * HV-1923 CPF constraint accepting incorrect format

** Improvement * HV-2216 Use Maven 3.9.16 as a required minimum version for the build * HV-2214 Enable automatic releases * HV-2212 Bump joda-time to 2.14.2 * HV-2208 Update to OpenJFX to 17.0.19 * HV-2207 Use Maven 3.9.15 as a required minimum version for the build * HV-2197 Update to JBoss logging 3.6.3.Final * HV-2194 Bump joda-time to 2.14.1 * HV-2191 Simplify PlatformResourceBundleLocator#determineAvailabilityOfResourceBundleControl() to drop reflection * HV-2173 Upgrade to JBoss logging 3.6.2.Final * HV-2172 Update to OpenJFX to 17.0.18 * HV-2171 Bump Apache Groovy to 5.0.4 * HV-2170 Pass a ROOT locale to loggers to avoid unnecessary class lookups * HV-2162 Provide the member name in the JavaBeanProperty * HV-2158 Update documentation theme to the current latest 6.1.2.Final * HV-2157 Point to docs.hibernate.org instead of docs.jboss.org/hibernate in various docs * HV-2156 Test against wildfly-preview 38.0.1.Final

** Task * HV-2192 Use Maven 3.9.13 as a required minimum version for the build * HV-2163 Use Maven 3.9.12 as a required minimum version for the build

Commits

• 6ec5cdd [Jenkins release job] Preparing release 9.1.1.Final
• 75045e1 [Jenkins release job] changelog.txt updated by release build 9.1.1.Final
• 2ed963f [Jenkins release job] README.md updated by release build 9.1.1.Final
• 6e019da HV-2217 Allow null-valued expression variable and message parameter
• 921e5eb [9.1] Bump the build-dependencies group with 2 updates
• 133a2c0 [9.1] Bump the build-dependencies group with 4 updates
• b2b9d60 [9.1] Bump org.jboss.arquillian:arquillian-bom
• 4facf3a [9.1] Bump the build-dependencies group across 1 directory with 2 updates
• 8648ebd HV-2216 Use Maven 3.9.16 as a required minimum version for the build
• 22d5213 HV-2214 Enable automatic releases
• Additional commits viewable in compare view

Updates io.sentry:sentry-log4j2 from 8.43.2 to 8.44.1

Release notes

Sourced from io.sentry:sentry-log4j2's releases.

8.44.1

Fixes

• Fix FirstDrawDoneListener leaking an OnGlobalLayoutListener per registration (#5567)

Features

• Add experimental SentrySQLiteDriver to sentry-android-sqlite for instrumenting androidx.sqlite.SQLiteDriver (#5563)
  • To use it, pass SQLiteDriver to SentrySQLiteDriver.create(...)
  • Requires androidx.sqlite:sqlite (2.5.0+) on runtime classpath (typically provided by Room or SQLDelight)

Dependencies

• Bump Native SDK from v0.15.0 to v0.15.1 (#5570)
  • changelog
  • diff

8.44.0

Features

• Add enableStandaloneAppStartTracing option to send app start as a standalone transaction instead of attaching it as a child span of the first activity transaction (#5342)
  • Disabled by default; opt in via options.isEnableStandaloneAppStartTracing = true or manifest meta-data io.sentry.standalone-app-start-tracing.enable
  • Emits a transaction named App Start with op app.start, carrying the existing app start measurements and phase spans (process.load, contentprovider.load, application.load, activity lifecycle spans) as direct children of the root
  • The standalone transaction shares the same traceId as the first ui.load activity transaction so they remain linked in the trace view
  • Also covers non-activity starts (broadcast receivers, services, content providers)

Improvements

• Reduce boxing to improve performance (#5523, #5527, #5551)
• Replace Date with a unix timestamp in SentryNanotimeDate to improve performance (#5550)
  • SentryNanotimeDate is now marked @ApiStatus.Internal. A new (long unixDateMillis, long nanos) constructor was added, where unixDateMillis is milliseconds since the epoch. The existing (Date, long) constructor is retained but deprecated.

Dependencies

• Upgrade to asyncProfiler 4.4 (#5418)
• Bump Native SDK from v0.14.2 to v0.15.0 (#5528)
  • changelog
  • diff

Fixes

• Fix attachments being duplicated on native events that carry scope attachments (#5548)
• Fix performance collector scheduling many tasks in a row (#5524)

Changelog

Sourced from io.sentry:sentry-log4j2's changelog.

8.44.1

Fixes

• Fix FirstDrawDoneListener leaking an OnGlobalLayoutListener per registration (#5567)

Features

• Add experimental SentrySQLiteDriver to sentry-android-sqlite for instrumenting androidx.sqlite.SQLiteDriver (#5563)
  • To use it, pass SQLiteDriver to SentrySQLiteDriver.create(...)
  • Requires androidx.sqlite:sqlite (2.5.0+) on runtime classpath (typically provided by Room or SQLDelight)

Dependencies

• Bump Native SDK from v0.15.0 to v0.15.1 (#5570)
  • changelog
  • diff

8.44.0

Features

• Add enableStandaloneAppStartTracing option to send app start as a standalone transaction instead of attaching it as a child span of the first activity transaction (#5342)
  • Disabled by default; opt in via options.isEnableStandaloneAppStartTracing = true or manifest meta-data io.sentry.standalone-app-start-tracing.enable
  • Emits a transaction named App Start with op app.start, carrying the existing app start measurements and phase spans (process.load, contentprovider.load, application.load, activity lifecycle spans) as direct children of the root
  • The standalone transaction shares the same traceId as the first ui.load activity transaction so they remain linked in the trace view
  • Also covers non-activity starts (broadcast receivers, services, content providers)
  • On Android 15+ (API 35), the standalone app.start transaction reports why the OS started the process via app.vitals.start.reason trace data (e.g. launcher, broadcast, service, content_provider), derived from ApplicationStartInfo.getReason(). You can search and group by this attribute in the Trace Explorer. (#5552)

Improvements

• Reduce boxing to improve performance (#5523, #5527, #5551)
• Replace Date with a unix timestamp in SentryNanotimeDate to improve performance (#5550)
  • SentryNanotimeDate is now marked @ApiStatus.Internal. A new (long unixDateMillis, long nanos) constructor was added, where unixDateMillis is milliseconds since the epoch. The existing (Date, long) constructor is retained but deprecated.

Dependencies

• Upgrade to asyncProfiler 4.4 (#5418)
• Bump Native SDK from v0.14.2 to v0.15.0 (#5528)
  • changelog
  • diff

Fixes

• Fix attachments being duplicated on native events that carry scope attachments (#5548)
• Fix performance collector scheduling many tasks in a row (#5524)

Commits

• f4269fd release: 8.44.1
• 8da852c fix(android): Make FirstDrawDoneListener cleanup OnGlobalLayoutListener after...
• 9c501bb chore(deps): bump actions/checkout in the github-actions group (#5569)
• 547d3e4 chore: update scripts/update-sentry-native-ndk.sh to 0.15.1 (#5570)
• 7c1a728 chore(android-sqlite): Skip wrapping SupportSQLiteDriver bridge to avoid dupl...
• f6192aa chore(android-sqlite): Add SQLite samples to sentry-samples-android (#5504)
• 10a0bc2 feat(android-sqlite): Make SentrySQLiteDriver experimental (JAVA-275) (#5563)
• dcb1587 Merge branch 'release/8.44.0'
• 5dc86e8 chore(android-sqlite): Remove calls to deprecated SentryNanotimeDate construc...
• f944a75 release: 8.44.0
• Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.28.0 to 0.29.0

Release notes

Sourced from org.commonmark:commonmark's releases.

commonmark-java 0.29.0

Added

• Support rendering GFM task list items to Markdown (#433)
• Support rendering YAML front matter to Markdown (#434)
• Alerts
  • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
  • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

    var extension = AlertsExtension.builder()
            .setAllowedTypes(Map.ofEntries(
                    Map.entry("IMPORTANT", "Important"),
                    Map.entry("WARNING", "Warning")
                    Map.entry("BUG", "Known Bug")
            ))
            .build();

  • Support rendering alerts to text (#437)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.29.0] - 2026-06-20

Added

• Support rendering GFM task list items to Markdown (#433)
• Support rendering YAML front matter to Markdown (#434)
• Alerts
  • Allow customizing HTML attributes for alert title <p> tag via AttributeProvider (#427)
  • New configuration for AlertsExtension to allow authors to provide custom titles per alert. See the custom titles section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow alerts to be nested within other blocks (including other alerts). See this section of the alerts README for more information. (#430)
  • New configuration for AlertsExtension to allow the set of alert types (including standard GFM types) to be completely overwritten. (#435)

    var extension = AlertsExtension.builder()
            .setAllowedTypes(Map.ofEntries(
                    Map.entry("IMPORTANT", "Important"),
                    Map.entry("WARNING", "Warning")
                    Map.entry("BUG", "Known Bug")
            ))
            .build();

  • Support rendering alerts to text (#437)

Commits

• 57cf9fd [maven-release-plugin] prepare release commonmark-parent-0.29.0
• 4f6b66e Merge pull request #438 from commonmark/release-0.29.0
• b0f4dbc mvn versions:set -DnewVersion=0.29.0-SNAPSHOT
• c5f6bc9 Prepare CHANGELOG for version 0.29.0
• 952ce9d Merge pull request #437 from rdestefa/issue-436-alerts-text-rendering
• efc90bd Update CHANGELOG.md
• 0117b82 Update AlertHtmlNodeRenderer.java
• ffa682e Update AlertTextContentNodeRenderer.java
• 717dedd Add Text Content Rendering Support for Alerts
• b146e55 Merge pull request #435 from rdestefa/issue-431-disallow-github-alert-types
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions