[dependabot]

Bumps the all-deps group with 5 updates:

Package	From	To
io.vertx:vertx-stack-depchain	5.2.2	5.2.3
org.jsoup:jsoup	1.23.2	1.24.1
org.aspectj:aspectjrt	1.9.26	1.9.27
org.aspectj:aspectjtools	1.9.26	1.9.27
com.puppycrawl.tools:checkstyle	14.3.0	14.4.0

Updates io.vertx:vertx-stack-depchain from 5.2.2 to 5.2.3

Updates org.jsoup:jsoup from 1.23.2 to 1.24.1

Release notes

Sourced from org.jsoup:jsoup's releases.

jsoup 1.24.1

jsoup 1.24.1 is out now, with major improvements to CSS selectors and HTML parsing.

This release introduces an opt-in Web query mode, bringing selector behavior closer to CSS and browser DOM standards. It also adds new selectors and improves the correctness and performance of :has() queries. Web mode will become the default in 1.25.1; the selector migration guide explains how to get ready.

HTML parsing is now more closely aligned with the current HTML standard, including improvements to tables, formatting elements, templates, and customizable select elements. This release also adds processing instruction support, and includes a number of performance improvements and bug fixes.

There are some changes to existing behavior, including :root matching and limits on Response.bodyStream(). Please make sure to review the changes below before upgrading.

jsoup is a Java library for working with real-world HTML and XML. It provides a very convenient API for extracting and manipulating data, using the best of HTML5 DOM methods and CSS selectors.

Download jsoup now.

Improvements

• Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
  • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
  • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
  • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
  • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
• Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
• Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
• :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
• SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
• Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
• Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

• Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
• Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
• Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
• Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

• Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
• Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
• Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
• Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
• Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
• StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
• Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
• :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
• Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
• Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
• Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
• Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
• Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
• If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
• Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
• Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
• Double-escaped script tags in body were being closed too early. #2627

... (truncated)

Changelog

Sourced from org.jsoup:jsoup's changelog.

1.24.1 (2026-Nov-03)

Improvements

• Added an opt-in Web query mode to align jsoup's selectors with CSS and Web DOM standards. See the selector migration guide for more details. #2642
  • Enable with System.setProperty("jsoup.queryMode", "web"). Queries return matching descendants only, can match surrounding ancestors, and follow HTML/XML case rules. Attribute ~= matches whitespace separated tokens instead of regexes.
  • You can jsoup.queryMode=check to help prepare for Web mode. Selectors return legacy results and print differences to stderr, with caller locations to help identify affected code.
  • Added :scope, :matchesAttr(name, regex), |= attribute matching, and attribute case flags i and s. These work in both legacy and Web modes, so queries can be updated before switching modes.
  • Web mode will become the default in 1.25.1 and the only mode in 1.26.1.
• Added support for parsing processing instructions in HTML and XML, as ProcessingInstruction nodes. This supports marker nodes such as <?marker name="country-options"?>, matched by \<template for="country-options"> in the HTML Standard's new declarative streaming syntax. Processing instructions can be selected with ::pi or ::pi(target), and their data can be read and changed through the node's attribute methods. Change: when using the XML parser, ordinary <?target ...?> nodes are now represented by ProcessingInstruction instead of XmlDeclaration; the <?xml ...?> declaration remains an XmlDeclaration. #2613
• Added Parser.parseAttributes(String) to parse an attribute fragment using that parser's settings.
• :has() selectors with child and sibling combinators now run faster by limiting the search to the parts of the document where they can match. This particularly improves selectors such as :has(> a), :has(+ dd), and :has(+ div span). #2610
• SVG-specific tag and attribute names are now automatically case corrected (e.g. pathlength becomes pathLength) when parsing HTML. #2630
• Improved the HTML parse across document boundaries by handling whitespace separately from subsequent text. This better preserves the input's whitespace through parse and serialize round-trips. #2632
• Improved HTML parsing performance for documents with misplaced elements, and DOM update performance. #2646

Changes

• Removed APIs previously deprecated and scheduled for removal in 1.24.1. #2597
• Response.bodyStream() now observes the configured max body size and request timeout, consistent with the other response body methods. The default max size is 2 MB. You can configure that with maxBodySize(0) before executing the request to disable the cap. Response.isTruncated() reports when the decoded response content exceeded the configured limit. #2598
• Query selector parsing now limits each query to 128 structural steps, counting combinators, node selectors, and :has(), :is(), and :not() expressions together. More complex queries throw SelectorParseException during parsing.
• Attributes.equals() and hashCode() now exclude internal attributes, such as source ranges and user data. #2633

Bug Fixes

• Corrected :root to match the tree's root element in both query modes. Previously, it matched the element the query was called on. Use :scope to refer to that element.
• Standardized parser normalization of tag and attribute names so that HTML comparisons use ASCII-only case folding, and accepted control characters are preserved, aligning name handling to the HTML and XML specs. #2594
• Named character references without a semicolon before - or _ now decode correctly in attribute values, matching HTML and browser behavior (e.g., &copy- becomes ©-). #2588
• Support downloads > 2GB via Response.bodyStream() when maxBodySize(0) is configured. #2593
• Updated table and table-fragment parsing to place misnested content correctly per the HTML5 spec. For example, <table><b><p>X</b> places the paragraph before the table. #2601
• StreamParser now preserves its progress if you use the same Parser to parse another document, or call Element.append(String) on a streamed element. Previously, these operations replaced the active parse state and prevented streaming from continuing correctly. #2605
• Updated the adoption-agency algorithm to match the current HTML5 spec and to preserve formatting order when recovering misnested elements. #2604
• :has() now correctly matches sibling alternatives and descendants of siblings. Given <div id=a></div><div><span></span></div>, both #a:has(+ div, > span) and #a:has(+ div span) select #a. #2610
• Within node selectors, :not() now correctly applies :contains() and :matches() to the node value. For example, ::comment:not(:contains(foo)) excludes comments containing foo. #2610
• Updated <select> parsing to the current HTML spec, retaining elements such as buttons and other markup that the previous rules discarded. #2611
• Template parsing now closes unclosed templates at EOF and handles forms correctly in template documents and fragments. #2614
• Fixed handling of null characters and initial newlines in HTML to better match the HTML spec, including pre, listing, and textarea elements. Leading newlines in these elements' text are preserved when saving and reparsing HTML. #2616
• Fixed several HTML parsing edge cases across malformed doctypes, misplaced text in tables, and whitespace in framesets to match the HTML spec. #2618
• If a HTML void element ends up with children (via DOM manipulation), those are no longer serialized in html(). #2619
• Fixed a ConcurrentModificationException when emptying and reading separate childless elements concurrently. #2620
• Removed the old command, device, and menuitem tags, as they are no longer in the HTML spec. #2621
• Double-escaped script tags in body were being closed too early. #2627
• Node.before(Node) and Node.after(Node) now leave the document unchanged when given the node itself, instead of throwing a NullPointerException. #2628
• Fixed HTML parse of <dialog>, <main>, and <search> so their start and end tags close open paragraphs correctly. #2629
• Updated the parse of malformed end tags such as </ COMMENT > to match the spec (<!-- COMMENT -->). #2631
• Source position tracking no longer impacts the adoption algo when repeated HTML formatting tags are reconstructed after a paragraph closes. #2633
• Fixed fragment parsing to ignore <body> and <frameset> start tags when the second open element is not body, matching the HTML spec. #2634
• Updated how the tokeniser handles malformed doctypes, to remove duplicative tokens and error messages. #2635
• Corrected HTML tokenisation of malformed comments such as <!---x and incomplete start tags such as <p id=, and improved their error reporting. #2636
• Fixed FormElement.empty() retaining associations with removed controls. If an input node removed by empty() was subsequently inserted outside its original form, it could incorrectly reappear in that form's elements() and formData() results. #2646

Commits

• 5e3c284 [maven-release-plugin] prepare release jsoup-1.24.1
• 5d63820 Link fix
• 55aa51e Bump org.sonatype.central:central-publishing-maven-plugin from 0.11.0 to 0.12...
• 3203485 Bump com.github.siom79.japicmp:japicmp-maven-plugin from 0.26.3 to 0.26.5 (#2...
• fdbfd44 Bump github/codeql-action from 4.38.3 to 4.39.0 (#2649)
• 6fedf39 Bump actions/setup-java from 6.0.1 to 6.1.0 (#2650)
• 0c508f1 Improve Selector javadoc
• 6feca03 Detach nested form controls on .empty()
• e1d48ba Improve query complexity accounting
• 76c125d Improve exception handling when parsing selectors across buffer boundaries.
• Additional commits viewable in compare view

Updates org.aspectj:aspectjrt from 1.9.26 to 1.9.27

Release notes

Sourced from org.aspectj:aspectjrt's releases.

1.9.27

AspectJ 1.9.27 supporting Java 27

For information on changes see: AspectJ 1.9.27 Readme

Commits

• See full diff in compare view

Updates org.aspectj:aspectjtools from 1.9.26 to 1.9.27

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.27

AspectJ 1.9.27 supporting Java 27

For information on changes see: AspectJ 1.9.27 Readme

Commits

• See full diff in compare view

Updates org.aspectj:aspectjtools from 1.9.26 to 1.9.27

Release notes

Sourced from org.aspectj:aspectjtools's releases.

1.9.27

AspectJ 1.9.27 supporting Java 27

For information on changes see: AspectJ 1.9.27 Readme

Commits

• See full diff in compare view

Updates com.puppycrawl.tools:checkstyle from 14.3.0 to 14.4.0

Release notes

Sourced from com.puppycrawl.tools:checkstyle's releases.

checkstyle-14.4.0

Checkstyle 14.4.0 - https://checkstyle.org/releasenotes.html#Release_14.4.0

New:

#21890 - New property for JavadocUtilizingTrailingSpace validateOnlyJoinableLines to report a line only when the whole next line fits on it. #20970 - JavadocLeadingAsteriskAlign: Add indentation property. #12226 - LeftCurly: new option nl_or_singleline to allow single-line blocks in otherwise Allman-style code. #21813 - New property for JavadocUtilizingTrailingSpace ignoreTooShortPattern to allow skip utilization if line ends with punctuation symbol. #18437 - EmptyLineSeparatorCheck does not report violations when more than one empty line appears with enum constants. #20496 - New check: RedundantModifierCompactSource. #18571 - Google-style: New Check BlockCommentEndPositionCheck. #21359 - New Check: FinalPatternVariable for Enforcing Final Pattern Variables. #18971 - New Check NoCauseGetMessageInExceptionConstructor: to not use caught exception message in wrapper exception constructor. #20595 - new Check: ClassHeaderWrapOpenjdk. #20638 - new Check: OpenjdkMethodParameterAlignmentCheck. #21802 - New Check ExceptionThrowShouldUseContext: Exception wrapping should always use context variables. #7895 - new Check: RedundantThis. #5313 - New Check: EmptyLineWrappingInBlock. #16748 - New check JavadocUtilizingTrailingSpace: Javadoc comments check to enforce compact content to full usage of line length.

Bug fixes:

#21941 - escape line breaks in property keys echoed in violation messages. #20266 - RedundantModifierCheck: redundant public modifier on top-level method not flagged in compact source files (JEP 512). #21828 - UnnecessaryNullCheckWithInstanceOf: false positive when variable is dereferenced inside arithmetic or comparison sub-expression. #22058 - False Positive: AvoidNoArgumentSuperConstructorCall reports super() when statements precede it in constructor (Flexible Constructor Bodies). #22173 - MethodCountCheck does not clear counters on beginTree. #21816 - Add checks for Sun Style [8.2 - Blank Spaces]. #22153 - NoCauseGetMessageInExceptionConstructorCheck does not clear catchScopes state on beginTree. #22092 - VariableDeclarationUsageDistance: NullPointerException on method in enum, record or interface. #21761 - EmptyLineSeparator: false positive duplicate violation when multiple enum constants share a line. #22045 - DescendantToken: StackOverflowError on deeply nested string concatenation. #21694 - add OpenjdkMethodParameterAlignment check in openjdk_checks.xml. #21952 - CLI exits with code 0 when the number of errors is a multiple of 256. #21864 - malformed unicode escape in UniqueProperties. #21883 - UnnecessaryNullCheckWithInstanceOf: NullPointerException when Boolean variable is used as condition in logical AND expression. #21908 - fix NullPointerException and memory leak in RedundantThis. #15193 - Conflict in Indentation Check Between if Parentheses and Record Pattern Parentheses. #21600 - EmptyLineSeparator with allowMultipleEmptyLines as false does not report a violation if there is Javadoc then an annotation before a method. #18590 - False Negative in EmptyStatement Check. #21785 - Add checks for Sun Style [7.5 - for Statements]. #21755 - MissingJavadocMethod: false-positive on getters containing block comments when allowMissingPropertyJavadoc is enabled. #5353 - RequireThisCheck: false positive in anonymous class with same name as field in top level class. #21721 - SarifLogger: artifactLocation.uri is not properly encoded for file names containing '#', '?', or '%'. #21519 - RegexpSinglelineJava hangs on a suppressed zero-width match. #4225 - FinalLocalVariable: "throw" false negative. #21751 - RequireThis: false negative for a field shadowed by a resource in finally. #20811 - Update Coverage for Sun's Java Style.

... (truncated)

Commits

• 7d9e948 [maven-release-plugin] prepare release checkstyle-14.4.0
• 7304bca doc: release notes for 14.4.0
• e1b949f infra: restore git cred to let release pass for 14.4.0; release notes push wa...
• 9706aad Issue #20590: Add EqualsAvoidNullCheck compact source coverage
• ac4900c Issue #20590: Add HideUtilityClassConstructorCheck compact source coverage
• cecf68d Issue #20590: Add FinalClassCheck compact source coverage
• 532ffa6 Issue #20590: Add DefaultComesLastCheck compact source coverage
• a046994 Issue #20590: Add EmptyBlockCheck compact source coverage
• ef9378a Pull #21941: escape line breaks in property keys echoed in violation messages
• 0ffcc88 Issue #20590: Add AvoidEscapedUnicodeCharactersCheck compact source coverage
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud