From baa1cbc40935b6f6c8852484db5c198e8b4e53e0 Mon Sep 17 00:00:00 2001
From: Phil Medcraft <pmedcraft@sdl.com>
Date: Mon, 2 Nov 2026 21:03:10 +0000
Subject: [PATCH 1/4] Third-party dependency updates.

---
 pom.xml | 76 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 38 insertions(+), 38 deletions(-)

diff --git a/pom.xml b/pom.xml
index 09f3b2f8c..c7d4158dc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -34,26 +34,26 @@
         <!-- /DXA Versions -->
 
         <!-- Apache -->
-        <commons-io-version>2.21.0</commons-io-version>
-        <commons-lang3.version>3.20.0</commons-lang3.version>
+        <commons-io-version>2.22.0</commons-io-version>
+        <commons-lang3.version>3.21.0</commons-lang3.version>
         <commons-text.version>1.15.0</commons-text.version>
-        <commons-collections4.version>4.5.0</commons-collections4.version>
+        <commons-collections4.version>4.6.0</commons-collections4.version>
         <commons-compress.version>1.28.0</commons-compress.version>
         <httpcomponents-client-version>4.5.14</httpcomponents-client-version>
         <httpcomponents.core.version>4.4.16</httpcomponents.core.version>
 
-        <guava-version>33.5.0-jre</guava-version>
+        <guava-version>33.8.0-jre</guava-version>
 
         <!-- Joda Time -->
-        <joda-time-version>2.14.0</joda-time-version>
+        <joda-time-version>2.15.1</joda-time-version>
 
-        <jackson.version>2.21.2</jackson.version>
-        <jackson-annotations.version>2.21</jackson-annotations.version>
-        <lombok.version>1.18.42</lombok.version>
+        <jackson.version>2.22.4</jackson.version>
+        <jackson-annotations.version>2.22</jackson-annotations.version>
+        <lombok.version>1.18.48</lombok.version>
 
         <!-- Logging -->
-        <logback.version>1.5.24</logback.version>
-        <slf4j-version>2.0.17</slf4j-version>
+        <logback.version>1.6.6</logback.version>
+        <slf4j-version>2.0.20</slf4j-version>
 
         <!-- Servlet and JSP APIs -->
         <servlet-api-version>6.1.0</servlet-api-version>
@@ -62,39 +62,39 @@
         <glassfish-jstl-version>3.0.1</glassfish-jstl-version>
 
         <!-- JUnit and other test libraries -->
-        <junit-version>6.0.2</junit-version>
+        <junit-version>6.1.3</junit-version>
         <hamcrest-version>3.0</hamcrest-version>
-        <mockito-version>5.21.0</mockito-version>
+        <mockito-version>5.24.0</mockito-version>
         <openpojo.version>0.9.1</openpojo.version>
         <jsonassert.version>1.5.3</jsonassert.version>
-        <xmlunit.version>2.11.0</xmlunit.version>
+        <xmlunit.version>2.14.0</xmlunit.version>
 
         <!-- Spring -->
-        <spring.version>7.0.6</spring.version>
-        <spring-security.version>7.0.4</spring-security.version>
+        <spring.version>7.0.10</spring.version>
+        <spring-security.version>7.1.2</spring-security.version>
 
-        <jsoup.version>1.22.1</jsoup.version>
+        <jsoup.version>1.23.2</jsoup.version>
         <rome.version>2.1.0</rome.version>
-        <jettison.version>1.5.4</jettison.version>
+        <jettison.version>1.5.7</jettison.version>
 
         <dozer.version>7.0.0</dozer.version>
         <device-detection.version>3.2.18.1</device-detection.version>
 
-        <jb-annotations.version>26.0.2-1</jb-annotations.version>
-        <jaxen.version>2.0.0</jaxen.version>
+        <jb-annotations.version>26.1.0</jb-annotations.version>
+        <jaxen.version>2.0.6</jaxen.version>
         <jdom2.version>2.0.6.1</jdom2.version>
 
-        <ehcache.version>3.11.1</ehcache.version>
+        <ehcache.version>3.12.0</ehcache.version>
         <ehcache-sizeof.version>0.4.4</ehcache-sizeof.version>
         <cache-api.version>1.1.1</cache-api.version>
 
-        <commons-codec.version>1.19.0</commons-codec.version>
+        <commons-codec.version>1.23.0</commons-codec.version>
 
-        <fast-classpath-scanner.version>4.8.184</fast-classpath-scanner.version>
-        <gson.version>2.13.2</gson.version>
+        <fast-classpath-scanner.version>6.0.1</fast-classpath-scanner.version>
+        <gson.version>2.15.0</gson.version>
         <jakarta.annotation.version>3.0.0</jakarta.annotation.version>
-        <jakarta.xml.ws-api.version>4.0.2</jakarta.xml.ws-api.version>
-        <jakarta.xml.bind-api.version>4.0.4</jakarta.xml.bind-api.version>
+        <jakarta.xml.ws-api.version>4.0.3</jakarta.xml.ws-api.version>
+        <jakarta.xml.bind-api.version>4.0.5</jakarta.xml.bind-api.version>
         <jakarta.activation.version>2.1.4</jakarta.activation.version>
         <jaxb-api.version>2.3.1</jaxb-api.version>
         <istack-commons-runtime.version>4.2.0</istack-commons-runtime.version>
@@ -108,7 +108,7 @@
 
         <pca-client.version>2.2.30</pca-client.version>
         <sitemapgen4j.version>1.1.2</sitemapgen4j.version>
-        <activemq.version>6.2.0</activemq.version>
+        <activemq.version>6.4.0</activemq.version>
     </properties>
 
     <scm>
@@ -738,27 +738,27 @@
             <dependency>
                 <groupId>com.squareup.okio</groupId>
                 <artifactId>okio-jvm</artifactId>
-                <version>3.16.4</version>
+                <version>3.18.2</version>
             </dependency>
             <dependency>
                 <groupId>org.scala-lang.modules</groupId>
                 <artifactId>scala-parser-combinators_2.12</artifactId>
-                <version>2.4.0</version>
+                <version>2.5.0</version>
             </dependency>
             <dependency>
                 <groupId>org.jetbrains.kotlin</groupId>
                 <artifactId>kotlin-stdlib</artifactId>
-                <version>2.3.0</version>
+                <version>2.4.21</version>
             </dependency>
             <dependency>
                 <groupId>org.jetbrains.kotlin</groupId>
                 <artifactId>kotlin-stdlib-jdk7</artifactId>
-                <version>2.3.0</version>
+                <version>2.4.21</version>
             </dependency>
             <dependency>
                 <groupId>org.jetbrains.kotlin</groupId>
                 <artifactId>kotlin-stdlib-jdk8</artifactId>
-                <version>2.3.0</version>
+                <version>2.4.21</version>
             </dependency>
             <dependency>
                 <groupId>com.github.ua-parser</groupId>
@@ -874,23 +874,23 @@
             <dependency>
                 <groupId>org.yaml</groupId>
                 <artifactId>snakeyaml</artifactId>
-                <version>2.5</version>
+                <version>2.7</version>
             </dependency>
             <dependency>
                 <groupId>com.squareup.okhttp3</groupId>
                 <artifactId>okhttp</artifactId>
-                <version>5.3.2</version>
+                <version>5.5.1</version>
             </dependency>
             <dependency>
                 <groupId>com.squareup.okhttp3</groupId>
                 <artifactId>logging-interceptor</artifactId>
-                <version>5.3.2</version>
+                <version>5.5.1</version>
             </dependency>
 
             <dependency>
                 <groupId>net.lingala.zip4j</groupId>
                 <artifactId>zip4j</artifactId>
-                <version>2.11.5</version>
+                <version>2.11.6</version>
             </dependency>
             <dependency>
                 <groupId>net.minidev</groupId>
@@ -900,19 +900,19 @@
             <dependency>
                 <groupId>org.glassfish.jersey.core</groupId>
                 <artifactId>jersey-common</artifactId>
-                <version>4.0.0</version>
+                <version>4.0.3</version>
             </dependency>
 
             <dependency>
                 <groupId>org.javassist</groupId>
                 <artifactId>javassist</artifactId>
-                <version>3.30.2-GA</version>
+                <version>3.33.0-GA</version>
             </dependency>
 
             <dependency>
                 <groupId>com.jayway.jsonpath</groupId>
                 <artifactId>json-path</artifactId>
-                <version>2.10.0</version>
+                <version>3.0.0</version>
             </dependency>
 
         </dependencies>

From b13e8f65c6fa28f42095295f9545e4317f907bcb Mon Sep 17 00:00:00 2001
From: Phil Medcraft <pmedcraft@sdl.com>
Date: Tue, 3 Nov 2026 09:09:32 +0000
Subject: [PATCH 2/4] Version update in archetype module

---
 dxa-webapp/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/dxa-webapp/pom.xml b/dxa-webapp/pom.xml
index 95165923e..f843ffdeb 100644
--- a/dxa-webapp/pom.xml
+++ b/dxa-webapp/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>com.sdl.dxa</groupId>
         <artifactId>dxa-oss-parent</artifactId>
-        <version>2.3.12-SNAPSHOT</version>
+        <version>2.3.15-SNAPSHOT</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
@@ -201,7 +201,7 @@
             <dependency>
                 <groupId>com.sdl.dxa</groupId>
                 <artifactId>dxa-oss-parent</artifactId>
-                <version>2.3.12-SNAPSHOT</version>
+                <version>2.3.15-SNAPSHOT</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>

From c8cca248a4acf7cc98e18ce093e5287232f0d323 Mon Sep 17 00:00:00 2001
From: Phil Medcraft <pmedcraft@sdl.com>
Date: Tue, 3 Nov 2026 09:25:55 +0000
Subject: [PATCH 3/4] [maven-release-plugin] prepare release DXA_2.3.15

---
 dxa-dd4t-ms-provider/pom.xml               | 2 +-
 dxa-framework/dxa-common-api/pom.xml       | 2 +-
 dxa-framework/dxa-common/pom.xml           | 2 +-
 dxa-framework/dxa-data-model/pom.xml       | 2 +-
 dxa-framework/dxa-tridion-common/pom.xml   | 2 +-
 dxa-framework/dxa-tridion-provider/pom.xml | 2 +-
 dxa-framework/pom.xml                      | 2 +-
 dxa-model-service-client/pom.xml           | 2 +-
 pom.xml                                    | 6 +++---
 9 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/dxa-dd4t-ms-provider/pom.xml b/dxa-dd4t-ms-provider/pom.xml
index 9536d8984..df3abe05f 100644
--- a/dxa-dd4t-ms-provider/pom.xml
+++ b/dxa-dd4t-ms-provider/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-oss-parent</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
     <modelVersion>4.0.0</modelVersion>
diff --git a/dxa-framework/dxa-common-api/pom.xml b/dxa-framework/dxa-common-api/pom.xml
index fe0e2d58f..a5e908305 100644
--- a/dxa-framework/dxa-common-api/pom.xml
+++ b/dxa-framework/dxa-common-api/pom.xml
@@ -17,7 +17,7 @@
     <parent>
         <groupId>com.sdl.dxa</groupId>
         <artifactId>dxa-framework</artifactId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
     </parent>
 
     <artifactId>dxa-common-api</artifactId>
diff --git a/dxa-framework/dxa-common/pom.xml b/dxa-framework/dxa-common/pom.xml
index 510c33656..63b3cde62 100644
--- a/dxa-framework/dxa-common/pom.xml
+++ b/dxa-framework/dxa-common/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
diff --git a/dxa-framework/dxa-data-model/pom.xml b/dxa-framework/dxa-data-model/pom.xml
index e8468216f..a6ea40929 100644
--- a/dxa-framework/dxa-data-model/pom.xml
+++ b/dxa-framework/dxa-data-model/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
diff --git a/dxa-framework/dxa-tridion-common/pom.xml b/dxa-framework/dxa-tridion-common/pom.xml
index e3a382221..29a927459 100644
--- a/dxa-framework/dxa-tridion-common/pom.xml
+++ b/dxa-framework/dxa-tridion-common/pom.xml
@@ -16,7 +16,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
     </parent>
 
     <artifactId>dxa-tridion-common</artifactId>
diff --git a/dxa-framework/dxa-tridion-provider/pom.xml b/dxa-framework/dxa-tridion-provider/pom.xml
index be8b59256..7566fbd6f 100644
--- a/dxa-framework/dxa-tridion-provider/pom.xml
+++ b/dxa-framework/dxa-tridion-provider/pom.xml
@@ -17,7 +17,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
     </parent>
 
     <artifactId>dxa-tridion-provider</artifactId>
diff --git a/dxa-framework/pom.xml b/dxa-framework/pom.xml
index 5e336721c..f3ad74dc9 100644
--- a/dxa-framework/pom.xml
+++ b/dxa-framework/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>com.sdl.dxa</groupId>
         <artifactId>dxa-oss-parent</artifactId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/dxa-model-service-client/pom.xml b/dxa-model-service-client/pom.xml
index 5e3c6fba9..e3ab28b46 100644
--- a/dxa-model-service-client/pom.xml
+++ b/dxa-model-service-client/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-oss-parent</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15-SNAPSHOT</version>
+        <version>2.3.15</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
     <modelVersion>4.0.0</modelVersion>
diff --git a/pom.xml b/pom.xml
index c7d4158dc..a1c66fc52 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,7 +10,7 @@
 
     <groupId>com.sdl.dxa</groupId>
     <artifactId>dxa-oss-parent</artifactId>
-    <version>2.3.15-SNAPSHOT</version>
+    <version>2.3.15</version>
     <packaging>pom</packaging>
 
     <name>DXA - Parent</name>
@@ -30,7 +30,7 @@
         <cd-cil.version>12.0.0-1197</cd-cil.version>
 
         <!-- DXA versions -->
-        <dxa.version>2.3.15-SNAPSHOT</dxa.version>
+        <dxa.version>2.3.15</dxa.version>
         <!-- /DXA Versions -->
 
         <!-- Apache -->
@@ -115,7 +115,7 @@
         <url>https://github.com/sdl/dxa-web-application-java</url>
         <connection>scm:git:git@github.com:sdl/dxa-web-application-java.git</connection>
         <developerConnection>scm:git:git@github.com:sdl/dxa-web-application-java.git</developerConnection>
-        <tag>HEAD</tag>
+        <tag>DXA_2.3.15</tag>
     </scm>
     <repositories>
         <repository>

From 987b992e64eb08c41dd603d286da921562a673a7 Mon Sep 17 00:00:00 2001
From: Phil Medcraft <pmedcraft@sdl.com>
Date: Tue, 3 Nov 2026 09:26:06 +0000
Subject: [PATCH 4/4] [maven-release-plugin] prepare for next development
 iteration

---
 dxa-dd4t-ms-provider/pom.xml               | 2 +-
 dxa-framework/dxa-common-api/pom.xml       | 2 +-
 dxa-framework/dxa-common/pom.xml           | 2 +-
 dxa-framework/dxa-data-model/pom.xml       | 2 +-
 dxa-framework/dxa-tridion-common/pom.xml   | 2 +-
 dxa-framework/dxa-tridion-provider/pom.xml | 2 +-
 dxa-framework/pom.xml                      | 2 +-
 dxa-model-service-client/pom.xml           | 2 +-
 pom.xml                                    | 6 +++---
 9 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/dxa-dd4t-ms-provider/pom.xml b/dxa-dd4t-ms-provider/pom.xml
index df3abe05f..b0702bd5a 100644
--- a/dxa-dd4t-ms-provider/pom.xml
+++ b/dxa-dd4t-ms-provider/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-oss-parent</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
     <modelVersion>4.0.0</modelVersion>
diff --git a/dxa-framework/dxa-common-api/pom.xml b/dxa-framework/dxa-common-api/pom.xml
index a5e908305..40d6dcf7b 100644
--- a/dxa-framework/dxa-common-api/pom.xml
+++ b/dxa-framework/dxa-common-api/pom.xml
@@ -17,7 +17,7 @@
     <parent>
         <groupId>com.sdl.dxa</groupId>
         <artifactId>dxa-framework</artifactId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
     </parent>
 
     <artifactId>dxa-common-api</artifactId>
diff --git a/dxa-framework/dxa-common/pom.xml b/dxa-framework/dxa-common/pom.xml
index 63b3cde62..ef77aa378 100644
--- a/dxa-framework/dxa-common/pom.xml
+++ b/dxa-framework/dxa-common/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
diff --git a/dxa-framework/dxa-data-model/pom.xml b/dxa-framework/dxa-data-model/pom.xml
index a6ea40929..3e9889eb9 100644
--- a/dxa-framework/dxa-data-model/pom.xml
+++ b/dxa-framework/dxa-data-model/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
diff --git a/dxa-framework/dxa-tridion-common/pom.xml b/dxa-framework/dxa-tridion-common/pom.xml
index 29a927459..67b588811 100644
--- a/dxa-framework/dxa-tridion-common/pom.xml
+++ b/dxa-framework/dxa-tridion-common/pom.xml
@@ -16,7 +16,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
     </parent>
 
     <artifactId>dxa-tridion-common</artifactId>
diff --git a/dxa-framework/dxa-tridion-provider/pom.xml b/dxa-framework/dxa-tridion-provider/pom.xml
index 7566fbd6f..288c34992 100644
--- a/dxa-framework/dxa-tridion-provider/pom.xml
+++ b/dxa-framework/dxa-tridion-provider/pom.xml
@@ -17,7 +17,7 @@
     <parent>
         <artifactId>dxa-framework</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
     </parent>
 
     <artifactId>dxa-tridion-provider</artifactId>
diff --git a/dxa-framework/pom.xml b/dxa-framework/pom.xml
index f3ad74dc9..f126f2dac 100644
--- a/dxa-framework/pom.xml
+++ b/dxa-framework/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>com.sdl.dxa</groupId>
         <artifactId>dxa-oss-parent</artifactId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
 
diff --git a/dxa-model-service-client/pom.xml b/dxa-model-service-client/pom.xml
index e3ab28b46..693145f76 100644
--- a/dxa-model-service-client/pom.xml
+++ b/dxa-model-service-client/pom.xml
@@ -3,7 +3,7 @@
     <parent>
         <artifactId>dxa-oss-parent</artifactId>
         <groupId>com.sdl.dxa</groupId>
-        <version>2.3.15</version>
+        <version>2.3.16-SNAPSHOT</version>
         <relativePath>../pom.xml</relativePath>
     </parent>
     <modelVersion>4.0.0</modelVersion>
diff --git a/pom.xml b/pom.xml
index a1c66fc52..f6c8368d4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -10,7 +10,7 @@
 
     <groupId>com.sdl.dxa</groupId>
     <artifactId>dxa-oss-parent</artifactId>
-    <version>2.3.15</version>
+    <version>2.3.16-SNAPSHOT</version>
     <packaging>pom</packaging>
 
     <name>DXA - Parent</name>
@@ -30,7 +30,7 @@
         <cd-cil.version>12.0.0-1197</cd-cil.version>
 
         <!-- DXA versions -->
-        <dxa.version>2.3.15</dxa.version>
+        <dxa.version>2.3.16-SNAPSHOT</dxa.version>
         <!-- /DXA Versions -->
 
         <!-- Apache -->
@@ -115,7 +115,7 @@
         <url>https://github.com/sdl/dxa-web-application-java</url>
         <connection>scm:git:git@github.com:sdl/dxa-web-application-java.git</connection>
         <developerConnection>scm:git:git@github.com:sdl/dxa-web-application-java.git</developerConnection>
-        <tag>DXA_2.3.15</tag>
+        <tag>HEAD</tag>
     </scm>
     <repositories>
         <repository>