From 5e849eff022682267a3c113825efde7e7dbc0fb4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 25 Feb 2026 18:37:35 +0000
Subject: [PATCH] chore(deps): bump the maven group across 4 directories with 7
 updates

Bumps the maven group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.25` |
| [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `6.1.14` | `6.2.11` |
| org.apache.logging.log4j:log4j-core | `2.21.0` | `2.25.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.7` |
| org.eclipse.jetty:jetty-http | `11.0.25` | `12.0.12` |
| [com.mchange:c3p0](https://github.com/swaldman/c3p0) | `0.10.1` | `0.12.0` |
| [org.mozilla:rhino](https://github.com/mozilla/rhino) | `1.7.15` | `1.7.15.1` |

Bumps the maven group with 1 update in the /openmetadata-clients/openmetadata-java-client directory: [org.mozilla:rhino](https://github.com/mozilla/rhino).
Bumps the maven group with 5 updates in the /openmetadata-mcp directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.25` |
| [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `6.1.14` | `6.2.11` |
| org.apache.logging.log4j:log4j-core | `2.21.0` | `2.25.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.7` |
| org.eclipse.jetty:jetty-http | `11.0.25` | `12.0.12` |

Bumps the maven group with 6 updates in the /openmetadata-service directory:

| Package | From | To |
| --- | --- | --- |
| [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) | `1.5.18` | `1.5.25` |
| [org.springframework:spring-core](https://github.com/spring-projects/spring-framework) | `6.1.14` | `6.2.11` |
| org.apache.logging.log4j:log4j-core | `2.21.0` | `2.25.3` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.26.3` | `3.27.7` |
| org.eclipse.jetty:jetty-http | `11.0.25` | `12.0.12` |
| [com.mchange:c3p0](https://github.com/swaldman/c3p0) | `0.10.1` | `0.12.0` |



Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.18...v_1.5.25)

Updates `org.springframework:spring-core` from 6.1.14 to 6.2.11
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.14...v6.2.11)

Updates `org.apache.logging.log4j:log4j-core` from 2.21.0 to 2.25.3

Updates `org.assertj:assertj-core` from 3.26.3 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.26.3...assertj-build-3.27.7)

Updates `org.eclipse.jetty:jetty-http` from 11.0.25 to 12.0.12

Updates `com.mchange:c3p0` from 0.10.1 to 0.12.0
- [Changelog](https://github.com/swaldman/c3p0/blob/0.12.x/CHANGELOG)
- [Commits](https://github.com/swaldman/c3p0/compare/v0.10.1...v0.12.0)

Updates `org.mozilla:rhino` from 1.7.15 to 1.7.15.1
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `org.mozilla:rhino` from 1.7.15 to 1.7.15.1
- [Release notes](https://github.com/mozilla/rhino/releases)
- [Changelog](https://github.com/mozilla/rhino/blob/master/RELEASE-NOTES.md)
- [Commits](https://github.com/mozilla/rhino/commits)

Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.18...v_1.5.25)

Updates `org.springframework:spring-core` from 6.1.14 to 6.2.11
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.14...v6.2.11)

Updates `org.apache.logging.log4j:log4j-core` from 2.21.0 to 2.25.3

Updates `org.assertj:assertj-core` from 3.26.3 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.26.3...assertj-build-3.27.7)

Updates `org.eclipse.jetty:jetty-http` from 11.0.25 to 12.0.12

Updates `ch.qos.logback:logback-core` from 1.5.18 to 1.5.25
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.18...v_1.5.25)

Updates `org.springframework:spring-core` from 6.1.14 to 6.2.11
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v6.1.14...v6.2.11)

Updates `org.apache.logging.log4j:log4j-core` from 2.21.0 to 2.25.3

Updates `org.assertj:assertj-core` from 3.26.3 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.26.3...assertj-build-3.27.7)

Updates `org.eclipse.jetty:jetty-http` from 11.0.25 to 12.0.12

Updates `com.mchange:c3p0` from 0.10.1 to 0.12.0
- [Changelog](https://github.com/swaldman/c3p0/blob/0.12.x/CHANGELOG)
- [Commits](https://github.com/swaldman/c3p0/compare/v0.10.1...v0.12.0)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-core
  dependency-version: 6.2.11
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.eclipse.jetty:jetty-http
  dependency-version: 12.0.12
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.mchange:c3p0
  dependency-version: 0.12.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.mozilla:rhino
  dependency-version: 1.7.15.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.mozilla:rhino
  dependency-version: 1.7.15.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-core
  dependency-version: 6.2.11
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.eclipse.jetty:jetty-http
  dependency-version: 12.0.12
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.25
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.springframework:spring-core
  dependency-version: 6.2.11
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.7
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: org.eclipse.jetty:jetty-http
  dependency-version: 12.0.12
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.mchange:c3p0
  dependency-version: 0.12.0
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 openmetadata-clients/openmetadata-java-client/pom.xml | 2 +-
 openmetadata-mcp/pom.xml                              | 4 ++--
 openmetadata-service/pom.xml                          | 8 ++++----
 pom.xml                                               | 6 +++---
 4 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/openmetadata-clients/openmetadata-java-client/pom.xml b/openmetadata-clients/openmetadata-java-client/pom.xml
index ed3648c436d6..e5ed96c1bb5c 100644
--- a/openmetadata-clients/openmetadata-java-client/pom.xml
+++ b/openmetadata-clients/openmetadata-java-client/pom.xml
@@ -107,7 +107,7 @@
         <dependency>
             <groupId>org.mozilla</groupId>
             <artifactId>rhino</artifactId>
-            <version>1.7.15</version>
+            <version>1.7.15.1</version>
         </dependency>
         <dependency>
             <groupId>org.junit.jupiter</groupId>
diff --git a/openmetadata-mcp/pom.xml b/openmetadata-mcp/pom.xml
index 6529fb33e483..fb47010c0969 100644
--- a/openmetadata-mcp/pom.xml
+++ b/openmetadata-mcp/pom.xml
@@ -16,12 +16,12 @@
     <description>Model Context Protocol implementation for OpenMetadata</description>
     
     <properties>
-        <assertj-core.version>3.26.3</assertj-core.version>
+        <assertj-core.version>3.27.7</assertj-core.version>
         <okhttp.version>4.12.0</okhttp.version>
         <awaitility.version>4.2.2</awaitility.version>
         <mcp-sdk.version>0.11.2</mcp-sdk.version>
         <testcontainers.version>1.20.4</testcontainers.version>
-        <jetty.version>11.0.25</jetty.version>
+        <jetty.version>12.0.12</jetty.version>
     </properties>
     
     <dependencyManagement>
diff --git a/openmetadata-service/pom.xml b/openmetadata-service/pom.xml
index 10c62adbaa6b..5f9775eca2d5 100644
--- a/openmetadata-service/pom.xml
+++ b/openmetadata-service/pom.xml
@@ -32,8 +32,8 @@
     <json-smart.version>2.5.2</json-smart.version>
     <aws.sdk.version>2.31.1</aws.sdk.version>
     <bedrock.runtime.version>2.31.1</bedrock.runtime.version>
-    <jetty.version>11.0.25</jetty.version>
-    <logback-core.version>1.5.18</logback-core.version>
+    <jetty.version>12.0.12</jetty.version>
+    <logback-core.version>1.5.25</logback-core.version>
     <logback-classic.version>1.5.18</logback-classic.version>
     <resilience4j-ratelimiter.version>2.3.0</resilience4j-ratelimiter.version>
     <kubernetes-client.version>21.0.1</kubernetes-client.version>
@@ -601,7 +601,7 @@
     <dependency>
       <groupId>org.assertj</groupId>
       <artifactId>assertj-core</artifactId>
-      <version>3.26.3</version>
+      <version>3.27.7</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -854,7 +854,7 @@
     <dependency>
       <groupId>com.mchange</groupId>
       <artifactId>c3p0</artifactId>
-      <version>0.10.1</version>
+      <version>0.12.0</version>
     </dependency>
     <dependency>
       <groupId>com.fasterxml.woodstox</groupId>
diff --git a/pom.xml b/pom.xml
index 87be2bd10abd..67a2232715c6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -114,8 +114,8 @@
     <httpasyncclient.version>4.1.5</httpasyncclient.version>
     <openapiswagger.version>2.2.25</openapiswagger.version>
     <httpclient.version>4.5.14</httpclient.version>
-    <spring.version>6.1.14</spring.version>
-    <log4j.version>2.21.0</log4j.version>
+    <spring.version>6.2.11</spring.version>
+    <log4j.version>2.25.3</log4j.version>
     <org.junit.jupiter.version>5.9.3</org.junit.jupiter.version>
     <dropwizard-health.version>4.0.14</dropwizard-health.version>
     <fernet.version>1.5.0</fernet.version>
@@ -150,7 +150,7 @@
     <slack.version>1.29.2</slack.version>
     <spotless.version>2.41.1</spotless.version>
     <picocli.version>4.7.6</picocli.version>
-    <logback-core.version>1.5.18</logback-core.version>
+    <logback-core.version>1.5.25</logback-core.version>
     <logback-classic.version>1.5.18</logback-classic.version>
     <jsonpath.version>2.9.0</jsonpath.version>
     <everit.version>1.14.4</everit.version>