fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
github/codeql-action	action	minor	v3.29.11 -> v3.30.1
dev.aga.gradle.version-catalog-generator	plugin	minor	3.2.2 -> 3.3.0
io.quarkus	plugin	patch	3.26.0 -> 3.26.2
io.quarkus:quarkus-junit5	dependencies	patch	3.26.0 -> 3.26.2
io.quarkus:quarkus-arc	dependencies	patch	3.26.0 -> 3.26.2
io.quarkus:quarkus-bom	dependencies	patch	3.26.0 -> 3.26.2
io.insert-koin:koin-test-junit5 (source)	dependencies	patch	4.1.0 -> 4.1.1
io.insert-koin:koin-test (source)	dependencies	patch	4.1.0 -> 4.1.1
io.insert-koin:koin-core (source)	dependencies	patch	4.1.0 -> 4.1.1
io.kotest:kotest-assertions-table	dependencies	patch	6.0.1 -> 6.0.3
io.kotest:kotest-assertions-core	dependencies	patch	6.0.1 -> 6.0.3
io.kotest:kotest-framework-engine	dependencies	patch	6.0.1 -> 6.0.3
io.kotest:kotest-runner-junit5	dependencies	patch	6.0.1 -> 6.0.3

---

Release Notes

github/codeql-action (github/codeql-action)

v3.30.1

Compare Source

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

• Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

quarkusio/quarkus (io.quarkus:quarkus-junit5)

v3.26.2

Compare Source

Complete changelog

• #​6661 - Define & document interactions between exec phases and profiles
• #​29698 - Gradle build with KSP fails with "circular dependency" after Quarkus 2.13.0
• #​49662 - Set correct OAuth2 protected metadata challenge parameter
• #​49684 - Test ClassLoader fails to load extension configuration
• #​49716 - Dev services starting even though quarkus.datasource.jdbc.url is set
• #​49722 - Make Docker detection silent in Dev Services
• #​49723 - QuarkusMainTest with Database Access not Working
• #​49726 - Do not decode query params in request filter
• #​49750 - Update @QuarkusMainTest documentation to mention limitations
• #​49751 - Add documentation about @Cancellable
• #​49756 - Add guidance on when to use QuarkusMainTest
• #​49760 - SmallRye GraphQL 2.14.1
• #​49762 - Make sure extension runtime artifacts are not flagged as reloadable in Gradle projects
• #​49763 - quarkus-micrometer-opentelemetry doc improvements
• #​49764 - Update Configuration Reference doc
• #​49769 - Fix QwcExtention typo in docs
• #​49778 - Ensure that NativeImageBuildContainerRunner#setup is only invoked once
• #​49785 - Dev mode fails to link .env files due to missing permissions on Windows
• #​49786 - Bump Elasticsearch to 9.1.3
• #​49790 - Falling back to hard link on Windows in linkDotEnvFile
• #​49792 - Projects with Gradle build relative paths issue
• #​49800 - Set project.projectDir as workingDir by default in Gradle
• #​49802 - Emergency fix for Dev JsonRPC calls using JsonObject
• #​49803 - Manage org.jspecify:jspecify to ensure dependency convergence accross Quarkiverse
• #​49807 - Fix HibernatePropertiesTest and make failure more expressive
• #​49811 - Add codegen source dirs to compile tasks instead of to the main source
• #​49814 - Update javadoc of QuarkusDev.getWorkingDirectory
• #​49818 - Quarkus dev mode not working for Hibernate ORM extension because of missing bean dependency
• #​49823 - Ensure that we call buildTimeComplete from the DelayedHandler before any runtime code
• #​49825 - Be less eager in getting docker status
• #​49826 - Get hold of the assistant in another way
• #​49832 - Don't mark Hibernate ORM and Search dev services as beans

v3.26.1

Compare Source

Complete changelog

• #​39321 - Add information about Session/EM proxying to the Hibernate ORM documentation
• #​45941 - Doc improve section about active profiles programmatic access
• #​49031 - Compose Dev Services testing - use top-level name attribute if specified in the Compose file
• #​49059 - Reflect top-level name attribute in Compose file for test execution
• #​49280 - [3.25.0] - REST-Client throws "BlockingNotAllowedException" on method that returns "Response"-object
• #​49379 - Client ResponseExceptionMapper cannot read Response Entity Twice after migration to 3.25.0
• #​49559 - DOCS: QE feedback application and cosmetic rewording to Configure Datasources guide
• #​49592 - H2C remains enabled with quarkus.http.http2=false
• #​49596 - Bump org.hibernate.reactive:hibernate-reactive-core from 3.1.0.Final to 3.1.1.Final in the hibernate group
• #​49622 - Dev MCP: Make sure to read all the buffer
• #​49623 - GraphQL client's resolution of TLS configuration is wrong
• #​49624 - Fix TLS config resolution for GraphQL clients
• #​49629 - Qute: fix params processing for include section
• #​49632 - Clarify security documentation on path precedence and @PermitAll behavior
• #​49634 - Disable HTTP/2 clear text when quarkus.http.http2 is false
• #​49640 - Update platform.adoc
• #​49641 - Exception on deserialization of list of objects from JSON when using kotlin serialization
• #​49657 - Dev UI: Small fixes to setting screen
• #​49666 - Document ConfigUtils.getProfiles
• #​49670 - Bump flyway.version from 11.11.1 to 11.11.2
• #​49692 - Allow buffering the REST Client Response when on a blocking thread
• #​49695 - Mention the proxy nature and transaction scoping in the Hibernate ORM CDI integration chapter
• #​49704 - Use generic type when deserializing with Kotlin Serialization in Jakarta REST
• #​49712 - Bump org.hibernate.reactive:hibernate-reactive-core from 3.1.1.Final to 3.1.2.Final in the hibernate group
• #​49713 - Make sure preferred platform BOMs passed to ExtensionCatalogResolver are actually prioritized
• #​49724 - Bump jakarta.mail:jakarta.mail-api from 2.1.3 to 2.1.4
• #​49732 - Ignore extension quarkus-config-javadoc.json when building uberjar

InsertKoinIO/koin (io.insert-koin:koin-test-junit5)

v4.1.1

Compare Source

Koin 4.1.1 Changelog

🐛 Bug Fixes

• Logger Constraint Revert - Reverted logger constraint due to compatibility issues causing errors across projects
• Compose Scope Resolution - Fixed scope resolution issues in Compose integration with proper context handling
• Maven Central Publication - Fixed publication issues for Maven Central distribution

🚀 Features & Improvements

• Compose ViewModel Navigation - Added optional navGraphRoute parameter to sharedKoinViewModel for better navigation support
• Compose Context Handling - Reworked LocalKoinApplication/LocalKoinScope with ContextWrapper to properly handle:
  • Scope closing lifecycle
  • Context restart scenarios
  • Better memory management

⚡ Performance & Core

• Core Resolver Optimization - Avoid unnecessary flattening operations when dealing with single scope resolution
• Scope Debugging - Enhanced scope debugging by showing linked scope IDs for better development experience
• Library Updates - Updated underlying dependencies to latest stable versions

📚 Library Updates

• Kotlin - Updated to 2.1.21 (from 2.1.20)
• Binary Validator - Updated to 0.18.1 (from 0.16.3)
• Ktor - Updated to 3.2.3 (from 3.1.3)
• Jetbrains Compose - Updated to 1.8.2 (from 1.8.0)
• AndroidX Libraries:
  • Fragment 1.8.9 (from 1.8.8)
  • WorkManager 2.10.3 (from 2.10.1)
  • Lifecycle 2.9.3 (from 2.9.0)
  • Navigation 2.9.3 (from 2.9.0)
  • JB Navigation RC01 (from Beta01)
• Testing:
  • Robolectric 4.15.1 (from 4.14.1)
  • Benchmark 0.4.14 (from 0.4.13)
• Build Tools - Added NMCP 1.1.0 for improved publication workflow

📦 Publication

• Multi-platform Artifacts - Ensured all platform variants are properly published
• Version Consistency - Synchronized all module versions across the ecosystem

🔧 Development

• Test Coverage - Added ActivityScopeArchetypeTest for better scope lifecycle testing
• API Stability - Maintained backward compatibility while fixing internal issues

---Migration Notes: This is a maintenance release - no breaking changes. Direct upgrade from 4.1.0 is recommended.

👥 Contributors

https://github.com/arnaudgiuliani - Project Lead & Core Developer
https://github.com/rfaturriza - Community Contributor

New Contributors

• @​rfaturriza made their first contribution in #​2262

Full Changelog: InsertKoinIO/koin@4.1.0...4.1.1

kotest/kotest (io.kotest:kotest-assertions-table)

v6.0.3

Compare Source

v6.0.2

Compare Source

What's Changed

• Replace typo in deprecation message of ContainerExtension by @​gpopides in #​5030
• support arrays of primitives in shouldBeEqualToComparingFields by @​AlexCue987 in #​5043
• Improved resource and json matchers by @​sksamuel in #​5045
• Record (some) breaking changes in 6.0 by @​TWiStErRob in #​5046
• lists-maps-in-json by @​AlexCue987 in #​5039
• Replace prints with logger in gradle plugin by @​sksamuel in #​5047
• Add test for boolean matchers by @​sksamuel in #​5048
• Fix InstancePerLeaf execution order by @​T45K in #​5044
• Fix shouldCompleteWithin masking errors by @​sksamuel in #​5049

New Contributors

• @​gpopides made their first contribution in #​5030
• @​T45K made their first contribution in #​5044

Full Changelog: kotest/kotest@6.0.1...v6.0.2

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.