[java, js, ruby] bump compatible dependencies

java/cli/pom.xml

@@ -31,7 +31,7 @@
           <outputDirectory>${project.build.directory}/dependency</outputDirectory>
         </configuration></execution></executions>
       </plugin>
-      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-failsafe-plugin</artifactId><version>3.5.4</version>
+      <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-failsafe-plugin</artifactId><version>3.6.0</version>
         <configuration><argLine>--enable-native-access=ALL-UNNAMED</argLine></configuration>
         <executions><execution><goals><goal>integration-test</goal><goal>verify</goal></goals></execution></executions>
       </plugin>

java/conformance/pom.xml

@@ -17,12 +17,13 @@
   </dependencies>
   <build><plugins>
     <plugin>
-      <groupId>org.apache.maven.plugins</groupId><artifactId>maven-shade-plugin</artifactId><version>3.6.1</version>
+      <groupId>org.apache.maven.plugins</groupId><artifactId>maven-shade-plugin</artifactId><version>3.6.2</version>
       <executions><execution><phase>package</phase><goals><goal>shade</goal></goals><configuration>
         <createDependencyReducedPom>false</createDependencyReducedPom>
         <transformers>
           <!-- Preserve all dependency attribution text when resource paths overlap. -->
           <transformer implementation="org.apache.maven.plugins.shade.resource.AppendingTransformer"><resource>META-INF/LICENSE</resource></transformer>
+          <transformer implementation="org.apache.maven.plugins.shade.resource.AppendingTransformer"><resource>META-INF/LICENSE.txt</resource></transformer>
           <transformer implementation="org.apache.maven.plugins.shade.resource.AppendingTransformer"><resource>META-INF/NOTICE</resource></transformer>
           <transformer implementation="org.apache.maven.plugins.shade.resource.ServicesResourceTransformer"/>
           <transformer implementation="org.apache.maven.plugins.shade.resource.ManifestResourceTransformer">

java/pom.xml

@@ -26,25 +26,25 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
   </properties>
   <dependencyManagement><dependencies>
-    <dependency><groupId>tools.jackson.core</groupId><artifactId>jackson-databind</artifactId><version>3.2.3</version></dependency>
-    <dependency><groupId>org.postgresql</groupId><artifactId>postgresql</artifactId><version>42.7.12</version></dependency>
+    <dependency><groupId>tools.jackson.core</groupId><artifactId>jackson-databind</artifactId><version>3.2.4</version></dependency>
+    <dependency><groupId>org.postgresql</groupId><artifactId>postgresql</artifactId><version>42.7.14</version></dependency>
     <dependency><groupId>org.xerial</groupId><artifactId>sqlite-jdbc</artifactId><version>3.53.4.0</version></dependency>
-    <dependency><groupId>org.junit.jupiter</groupId><artifactId>junit-jupiter</artifactId><version>5.13.4</version></dependency>
+    <dependency><groupId>org.junit.jupiter</groupId><artifactId>junit-jupiter</artifactId><version>6.1.3</version></dependency>
   </dependencies></dependencyManagement>
   <build><plugins>
     <!-- Shade replaces the thin adapter jar; always recreate it before adding dependencies. -->
     <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-jar-plugin</artifactId><version>3.5.1</version><configuration><forceCreation>true</forceCreation></configuration></plugin>
     <plugin>
-      <groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.14.1</version>
+      <groupId>org.apache.maven.plugins</groupId><artifactId>maven-compiler-plugin</artifactId><version>3.16.0</version>
       <configuration>
         <parameters>true</parameters>
         <showWarnings>true</showWarnings>
         <failOnWarning>true</failOnWarning>
         <compilerArgs><arg>-Xlint:all</arg></compilerArgs>
       </configuration>
     </plugin>
-    <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.5.4</version><configuration><argLine>--enable-native-access=ALL-UNNAMED</argLine></configuration></plugin>
-    <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-source-plugin</artifactId><version>3.3.1</version><executions><execution><goals><goal>jar-no-fork</goal></goals></execution></executions></plugin>
+    <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-surefire-plugin</artifactId><version>3.6.0</version><configuration><argLine>--enable-native-access=ALL-UNNAMED</argLine></configuration></plugin>
+    <plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-source-plugin</artifactId><version>3.4.0</version><executions><execution><goals><goal>jar-no-fork</goal></goals></execution></executions></plugin>
     <plugin>
       <groupId>org.apache.maven.plugins</groupId><artifactId>maven-javadoc-plugin</artifactId><version>3.12.0</version>
       <configuration>

js/package.json

@@ -98,7 +98,7 @@
     "eslint-config-prettier": "^10.1.8",
     "fast-check": "^4.10.2",
     "knex": "^3.1.0",
-    "knip": "^6.42.0",
+    "knip": "^6.42.1",
     "license-checker-rseidelsohn": "^5.0.1",
     "pg": "^8.23.1",
     "pino": "^10.4.0",
@@ -117,10 +117,14 @@
   "pnpm": {
     "overrides": {
       "deepmerge-ts": "8.0.1",
+      "fast-uri@3.1.8": "3.1.9",
+      "ip-address@10.7.3": "10.7.4",
+      "markdown-it@14.3.1": "14.3.3",
       "mysql2": "3.24.4",
       "nanoid": "3.3.18",
       "postcss-selector-parser": "7.1.6",
-      "source-map-js": "1.2.2"
+      "source-map-js": "1.2.2",
+      "undici@6.29.0": "6.29.1"
     }
   },
   "keywords": [

js/pnpm-workspace.yaml

@@ -17,3 +17,6 @@ auditConfig:
     # license-checker-rseidelsohn's npm registry client, which the offline
     # `license:check` never uses.
     - GHSA-ch52-4w7c-c8xp
+    # pnpm audits the cli workspace path as the unrelated npm cli package.
+    # This workspace is @riverqueue/cli; no npm cli package is installed.
+    - GHSA-6cpc-mj5c-m9rq

ruby/Gemfile

@@ -5,13 +5,14 @@ source "https://rubygems.org"
 gemspec
 
 group :development, :test do
-  gem "standard"
-  gem "steep"
+  gem "json", "< 3"
+  gem "standard", "< 1.57"
+  gem "steep", "< 2"
 end
 
 group :test do
   gem "debug"
-  gem "fugit", "~> 1.13", require: false
+  gem "fugit", "~> 1.14", require: false
   gem "minitest", require: false
   gem "pg"
   gem "rspec-core"