fix(deps): update java dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.graalvm.buildtools:native-maven-plugin	1.1.5 → 1.1.8
com.diffplug.spotless:spotless-maven-plugin	3.8.0 → 3.9.0
org.pitest:pitest-maven (source)	1.25.8 → 1.25.9
org.graalvm.sdk:graal-sdk	25.1.3 → 25.2.4
com.tngtech.archunit:archunit-junit5-api	1.4.2 → 1.5.0
com.tngtech.archunit:archunit-junit5	1.4.2 → 1.5.0
com.tngtech.archunit:archunit	1.4.2 → 1.5.0
org.junit:junit-bom (source)	6.1.2 → 6.1.3
wtf.metio.maven:maven-parent	2026.7.17 → 2026.8.1043609

---

Release Notes

graalvm/native-build-tools (org.graalvm.buildtools:native-maven-plugin)

v1.1.8

Compare Source

What's Changed

• Release 1.1.7 by @​graalvmbot in #​1009
• Bump version to 1.1.8-SNAPSHOT by @​graalvmbot in #​1010
• Deprecate fallback plugin options by @​jormundur00 in #​997
• Update reachability metadata to 1.0.9 by @​graalvmbot in #​1014

Full Changelog: graalvm/native-build-tools@1.1.7...1.1.8

v1.1.7

Compare Source

What's Changed

• Release 1.1.6 by @​graalvmbot in #​996
• Suppress missing Javadoc diagnostics across convention tasks by @​jormundur00 in #​994
• Replace deprecated Kotlin DSL delegated accessors by @​jormundur00 in #​998
• Fix Maven plugin unit-test mock maker and SLF4J setup by @​jormundur00 in #​999
• Bump version to 1.1.7-SNAPSHOT by @​graalvmbot in #​1001
• Bump io.netty:netty-codec-http from 4.1.135.Final to 4.1.136.Final in /samples/metadata-repo-integration by @​dependabot[bot] in #​1002
• Avoid Maven internal API for console colors by @​jormundur00 in #​1003
• Update reachability metadata to 1.0.8 by @​graalvmbot in #​1008

Full Changelog: graalvm/native-build-tools@1.1.6...1.1.7

v1.1.6

Compare Source

What's Changed

• Prefer GraalVM's Java when running with agent by @​vjovanov in #​833
• Make Maven agent execution ID configurable by @​jormundur00 in #​933
• Fix optional JUnit dependency resolution in Maven native tests by @​jormundur00 in #​935
• Log selected Maven metadata repository by @​jormundur00 in #​936
• Fix Maven test agent paths with spaces by @​jormundur00 in #​934
• Log Gradle agent output directory by @​jormundur00 in #​937
• Clarify JUnit launcher alignment for Maven native tests by @​jormundur00 in #​938
• Fix custom Gradle binary classpath wiring by @​jormundur00 in #​939
• Document Maven native test output directories by @​jormundur00 in #​941
• Fix Gradle agent toolchain detection by @​jormundur00 in #​943
• Fix Gradle metadata repository service scoping by @​jormundur00 in #​942
• Release 1.1.5 by @​graalvmbot in #​972
• Fix Groovy agent predicate closures by @​jormundur00 in #​959
• Make Maven skip apply to all goals by @​jormundur00 in #​960
• Document Maven resource configuration by @​jormundur00 in #​965
• Fix layered image configuration cache test by @​jormundur00 in #​958
• Respect build-tool console colors for Native Image output by @​jormundur00 in #​961
• Normalize platform-dependent resource and test paths by @​jormundur00 in #​981
• Bump version to 1.1.6-SNAPSHOT by @​graalvmbot in #​990
• Add class introduced in 6.1 by @​marcphilipp in #​867
• Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.18.0 in /samples/java-application-with-tests by @​dependabot[bot] in #​823
• Fix order of access filter files by moving default to the start by @​ArloL in #​875
• Allow the test classes directory to be configured for the NativeTestMojo by @​thegridman in #​757
• Bump org.apache.commons:commons-lang3 from 3.12.0 to 3.18.0 in /samples/java-application-with-tests-in-src-main by @​dependabot[bot] in #​993
• Preserve test runner argLine when configuring agent by @​jormundur00 in #​992
• Update reachability metadata to 1.0.7 by @​graalvmbot in #​995

New Contributors

• @​ArloL made their first contribution in #​875
• @​thegridman made their first contribution in #​757

Full Changelog: graalvm/native-build-tools@1.1.5...1.1.6

hcoles/pitest (org.pitest:pitest-maven)

v1.25.9

Compare Source

• #​1486 normalise record attribute order on first load
• #​1488 rework record interceptor to filter based on a marker line number
• #​1490 filter mutants in enum switch default block

TNG/ArchUnit (com.tngtech.archunit:archunit-junit5-api)

v1.5.0: ArchUnit 1.5.0

Compare Source

Enhancements

Core

• Support Java 27 / class file major version 71 (#​1618)
• Improve descriptions of JavaAccess.Predicates.originOwner and JavaAccess.Predicates.targetOwner (#​1603; thanks to @​StefanGraeber 👋)
• Expose information on sealed classes via JavaClass: isSealed() and getPermittedSubclasses() (#​1677)
• Consider dependencies from caught exceptions (#​1555; thanks to @​bannmann 👋)
• ImportOption.DoNotIncludeTests and OnlyIncludeTests consider tests in custom Gradle source sets (#​1660; thanks to @​Develop-KIM 👋)

Lang

• ArchConditions offers new ArchCondition<JavaClass> haveAnyDependenciesThat(DescribedPredicate<Dependency>) (#​1580; thanks to @​wakingrufus 👋)

Library

• ArchitectureMetrics.lakosMetrics is computed much more performantly (#​1629; thanks to @​ThanosTsiamis 👋)
• TextFileBasedViolationStore is now thread-safe under parallel test execution (#​1656; thanks to @​kelunik 👋)
• ModuleDependency now provides stable descriptions (#​1648; thanks to @​DragonFSKY 👋)

JUnit

• archunit-junit6 supports ArchUnit with JUnit 6 (#​1556, #​1658, #​1659; many thanks to @​arukiidou & @​schulzjo-tng 👋)
• AnalyzeClasses supports individual classes (#​1569; thanks to @​TheManWhoStaresAtCode 👋)
• Preparation: archunit-junit:0.9.0 (which was renamed with ArchUnit 0.9.0) now relocates to archunit-junit4:0.9.0 (#​1673; thanks to @​schulzjo-tng 👋) – will be published after #​1684 🙈

Documentation

• Document Priority (#​1671; thanks to @​TheManWhoStaresAtCode 👋)
• Document Package Identifiers in User Guide (#​1672; thanks to @​TheManWhoStaresAtCode 👋)

Internal Improvements

• Text files now use UNIX line breaks (#​1602, #​1611; thanks to @​StefanGraeber 👋)
• Update Gradle from 8 to 9; build & test with JDK 25 (#​1550, and also #​1612, #​1619)
• Separate integration tests by JUnit version (#​1636; many thanks to @​schulzjo-tng 👋)
• Replace junit-dataprovider with junit-jupiter-params (#​1655)
• ArchUnit releases now update Maven examples (and Gradle wrapper) of ArchUnit-Examples (#​1450)
• Avoid managing hamcrest dependency (#​1467; thanks to @​TheManWhoStaresAtCode 👋)

metio/maven-parent (wtf.metio.maven:maven-parent)

v2026.8.1043609

Compare Source

2026.8.1043609

Added

• release monthly, within the shared Central budget
• adopt the metio standard CI stack

Changed

• inherit the org-wide community health files
• pin metio/ci to the released 2026.7.26080346 (#​235)

Dependencies

• update metio/ci action to v2026.7.30140746 (#​244) (#​244)
• update metio/ci action to v2026.7.29150653 (#​243) (#​243)
• update metio/ci action to v2026.7.28213002 (#​242) (#​242)
• update dependency org.codehaus.mojo:flatten-maven-plugin to v1.8.0 (#​241) (#​241)
• update metio/ci action to v2026.7.26085035 (#​240) (#​240)
• update actions/checkout digest to 3d3c42e (#​236)
• update dependency org.apache.maven.plugins:maven-jar-plugin to v3.5.1 (#​237)

v2026.7.24

Compare Source

What's Changed

• Bump org.graalvm.buildtools:native-maven-plugin from 1.1.4 to 1.1.5 by @​dependabot[bot] in #​231
• Bump org.pitest:pitest-maven from 1.25.7 to 1.25.8 by @​dependabot[bot] in #​232
• Bump org.graalvm.buildtools:native-maven-plugin from 1.1.5 to 1.1.6 by @​dependabot[bot] in #​233

Full Changelog: metio/maven-parent@2026.7.17...2026.7.24

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.