diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 10a4bcb6eb..2e5a2d2e6b 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -65,10 +65,10 @@ jobs:
#- run: |
# make bootstrap
# make release
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
- name: run mvn clean package
run: ./mvnw clean package -Ddependency-check.skip=true -Dmaven.test.skip=true
diff --git a/.github/workflows/container_test.yml b/.github/workflows/container_test.yml
index f269a3a272..57da881746 100644
--- a/.github/workflows/container_test.yml
+++ b/.github/workflows/container_test.yml
@@ -19,10 +19,10 @@ jobs:
# Steps represent a sequence of tasks that will be executed as part of the job
steps:
- uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
- name: Navigate to test script and run
diff --git a/.github/workflows/dast-zap-test.yml b/.github/workflows/dast-zap-test.yml
index 15b8a39942..4cad1faf5a 100644
--- a/.github/workflows/dast-zap-test.yml
+++ b/.github/workflows/dast-zap-test.yml
@@ -14,10 +14,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
- name: Clean install
run: ./mvnw --no-transfer-progress clean install -DskipTests -Ddependency-check.skip -Dcyclonedx.skip=true -Dexec.skip
diff --git a/.github/workflows/desktop-container-publish.yml b/.github/workflows/desktop-container-publish.yml
index ad76b8a3a0..96e7f176bf 100644
--- a/.github/workflows/desktop-container-publish.yml
+++ b/.github/workflows/desktop-container-publish.yml
@@ -26,10 +26,10 @@ jobs:
- name: Checkout code
uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
diff --git a/.github/workflows/github-pages-preview.yml b/.github/workflows/github-pages-preview.yml
index 24533fd367..05c1d1713e 100644
--- a/.github/workflows/github-pages-preview.yml
+++ b/.github/workflows/github-pages-preview.yml
@@ -32,10 +32,10 @@ jobs:
- name: Checkout
uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
diff --git a/.github/workflows/java_swagger_doc.yml b/.github/workflows/java_swagger_doc.yml
index c0c6a2e808..8a8295541f 100644
--- a/.github/workflows/java_swagger_doc.yml
+++ b/.github/workflows/java_swagger_doc.yml
@@ -14,10 +14,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
- name: Clean install
run: ./mvnw --no-transfer-progress clean install -DskipTests -Ddependency-check.skip -Dcyclonedx.skip=true -Dexec.skip
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index cea1aeea95..3366ceb798 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -25,10 +25,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
- name: checkstyle with Maven
@@ -39,10 +39,10 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
- name: spotbugs with Maven
@@ -55,10 +55,10 @@ jobs:
contents: read
steps:
- uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
- name: Test with Maven
diff --git a/.github/workflows/master-container-publish.yml b/.github/workflows/master-container-publish.yml
index eb6c8a93bd..41f43cca53 100644
--- a/.github/workflows/master-container-publish.yml
+++ b/.github/workflows/master-container-publish.yml
@@ -17,10 +17,10 @@ jobs:
- name: Checkout code
uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
diff --git a/.github/workflows/pr-preview.yml b/.github/workflows/pr-preview.yml
index acc1debada..d1cb8f791a 100644
--- a/.github/workflows/pr-preview.yml
+++ b/.github/workflows/pr-preview.yml
@@ -25,10 +25,10 @@ jobs:
- name: Checkout code
uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
@@ -245,10 +245,10 @@ jobs:
ref: master
path: main-code
- - name: Set up JDK 25 for PR build
+ - name: Set up JDK 26 for PR build
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
@@ -274,10 +274,10 @@ jobs:
docker build --build-arg argBasedVersion="${{ steps.extract-pr-version.outputs.docker_version }}" -t wrongsecrets-pr .
echo "PR Docker image built successfully"
- - name: Set up JDK 25 for main
+ - name: Set up JDK 26 for main
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
@@ -335,7 +335,7 @@ jobs:
- name: Setup Node.js
uses: actions/setup-node@v6
with:
- node-version: '24'
+ node-version: '26'
- name: Install Playwright
run: |
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index dd13c1e742..8acbc8d7fc 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -26,12 +26,12 @@ jobs:
uses: psf/black@stable
- uses: actions/setup-node@v6
with:
- node-version: 24
+ node-version: 26
cache: "npm"
- uses: actions/setup-java@v5
with:
distribution: "temurin"
- java-version: "25"
+ java-version: "26"
- name: Install npm dependencies
run: npm install
- uses: actions/cache@v4
diff --git a/.github/workflows/version-sync-check.yml b/.github/workflows/version-sync-check.yml
index 64dc5b6926..0a5ddc8946 100644
--- a/.github/workflows/version-sync-check.yml
+++ b/.github/workflows/version-sync-check.yml
@@ -16,10 +16,10 @@ jobs:
- name: Checkout code
uses: actions/checkout@v5
- - name: Set up JDK 25
+ - name: Set up JDK 26
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
diff --git a/.github/workflows/visual-diff.yml b/.github/workflows/visual-diff.yml
index 81b3bc650c..8530418421 100644
--- a/.github/workflows/visual-diff.yml
+++ b/.github/workflows/visual-diff.yml
@@ -21,10 +21,10 @@ jobs:
ref: master
path: main-code
- - name: Set up JDK 25 for PR build
+ - name: Set up JDK 26 for PR build
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
@@ -49,10 +49,10 @@ jobs:
docker build --build-arg argBasedVersion="${{ steps.extract-pr-version.outputs.docker_version }}" -t wrongsecrets-pr .
echo "PR Docker image built successfully"
- - name: Set up JDK 25 for main build
+ - name: Set up JDK 26 for main build
uses: actions/setup-java@v5
with:
- java-version: "25"
+ java-version: "26"
distribution: "temurin"
cache: "maven"
@@ -107,7 +107,7 @@ jobs:
- name: Setup Node.js
uses: actions/setup-node@v6
with:
- node-version: '24'
+ node-version: '26'
- name: Install Playwright
run: |
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index d4a6eae3c5..db701083fe 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -300,9 +300,9 @@ Select **_google-java-format Settings_** and click enable.
Open **_File > Project structure _**.
-In the tab `Project` make sure that an SDK of version `25` is selected (e.g. `openjdk-25`, `oraclejdk-25` or just `25` depending on which Java JDK variant you installed).
+In the tab `Project` make sure that an SDK of version `26` is selected (e.g. `openjdk-26`, `oraclejdk-26` or just `26` depending on which Java JDK variant you installed).
-In the tab `SDKs` make sure that an SDK of version `25` is selected.
+In the tab `SDKs` make sure that an SDK of version `26` is selected.
### Step 6: Reload the project
@@ -461,7 +461,7 @@ refer this block for reasons:
With this challenge, we basically aim to help new contributors to better understand the code and encourage them to add new challenges for our end-user.
```
-Use this block as refrence for hints:
+Use this block as reference for hints:
```adoc
Your secret is `Hello World`
diff --git a/Dockerfile b/Dockerfile
index b70bbdc4e9..ec4134d678 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM bellsoft/liberica-openjre-debian:25-cds AS builder
+FROM bellsoft/liberica-openjre-debian:26-cds AS builder
WORKDIR /builder
ARG argBasedVersion="1.13.5"
@@ -6,7 +6,7 @@ ARG argBasedVersion="1.13.5"
COPY --chown=wrongsecrets target/wrongsecrets-${argBasedVersion}-SNAPSHOT.jar application.jar
RUN java -Djarmode=tools -jar application.jar extract --layers --destination extracted
-FROM eclipse-temurin:25.0.2_10-jre-alpine
+FROM eclipse-temurin:26-jre-alpine
WORKDIR /application
ARG argBasedPassword="default"
diff --git a/README.md b/README.md
index 2964eb8127..c95f9c2f76 100644
--- a/README.md
+++ b/README.md
@@ -796,7 +796,7 @@ If you want to run WrongSecrets but without certain challenges you don't want to
*_NOTE_* Please note that we do not deliver any support to your fork when you follow the process below. Please understand that license and copyright of the original application remain intact for your Fork.
Requirements:
-- Have the JDK of Java 25 installed;
+- Have the JDK of Java 26 installed;
- Have an account at a registry to which you can push your variant of the WrongSecrets container;
Here are the steps you have to follow to create your own release of WrongSecrets with certain challenges disabled:
diff --git a/docs/ARCHITECTURE_OVERVIEW.md b/docs/ARCHITECTURE_OVERVIEW.md
index c82c5fe99f..daa031e31a 100644
--- a/docs/ARCHITECTURE_OVERVIEW.md
+++ b/docs/ARCHITECTURE_OVERVIEW.md
@@ -137,7 +137,7 @@ src/test/java/org/owasp/wrongsecrets/
### Prerequisites
-- Java 25
+- Java 26
- Maven 3.9+
- Docker
- Node.js (for frontend dependencies)
diff --git a/docs/DEVELOPMENT_PATTERNS.md b/docs/DEVELOPMENT_PATTERNS.md
index 2849e7026d..3a3306a840 100644
--- a/docs/DEVELOPMENT_PATTERNS.md
+++ b/docs/DEVELOPMENT_PATTERNS.md
@@ -211,13 +211,13 @@ jobs:
uses: actions/checkout@v4
- name: Setup Java
- uses: actions/setup-java@v4
+ uses: actions/setup-java@v5
with:
- java-version: '21'
+ java-version: '26'
distribution: 'temurin'
- name: Cache Maven dependencies
- uses: actions/cache@v4
+ uses: actions/cache@v5
with:
path: ~/.m2
key: ${{ runner.os }}-m2-${{ hashFiles('**/pom.xml') }}
diff --git a/js/package.json b/js/package.json
index 59fa29076b..dc12b354a3 100644
--- a/js/package.json
+++ b/js/package.json
@@ -4,7 +4,7 @@
"description": "Examples with how to not use secrets",
"main": "index.js",
"engines": {
- "node": ">=20.0.0"
+ "node": ">=26.0.0"
},
"scripts": {
"build": "./node_modules/.bin/javascript-obfuscator index.js --output ../target/classes/static/js/index.js"
diff --git a/package-lock.json b/package-lock.json
index d0a97680c6..9e5321b77e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -16,7 +16,7 @@
"globals": "^17.0.0"
},
"engines": {
- "node": ">=22.0.0"
+ "node": ">=26.0.0"
}
},
"node_modules/@babel/code-frame": {
@@ -2041,9 +2041,9 @@
}
},
"node_modules/brace-expansion": {
- "version": "1.1.14",
- "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.14.tgz",
- "integrity": "sha512-MWPGfDxnyzKU7rNOW9SP/c50vi3xrmrua/+6hfPbCS2ABNWfx24vPidzvC7krjU/RTo235sV776ymlsMtGKj8g==",
+ "version": "1.1.18",
+ "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.18.tgz",
+ "integrity": "sha512-Edep/X9fGqVNmzKBVsDYIOtD+z1tuezV70LBjdCst9Tqu76lsnvRiZ6oTic1n+/BIwX6QDGAO94PN4N2SADvtw==",
"dev": true,
"license": "MIT",
"dependencies": {
@@ -2836,9 +2836,9 @@
"license": "MIT"
},
"node_modules/js-yaml": {
- "version": "4.3.0",
- "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
- "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+ "version": "4.3.1",
+ "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+ "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
"dev": true,
"funding": [
{
diff --git a/package.json b/package.json
index 9a0f2c9269..1881f71cee 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
{
"engines": {
- "node": ">=22.0.0"
+ "node": ">=26.0.0"
},
"devDependencies": {
"@babel/eslint-parser": "^7.25.9",
diff --git a/pom.xml b/pom.xml
index 059e55fda2..2099e2b2c9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -65,15 +65,16 @@
26.86.0
4.0.25
- 25
+ 26
3.7.1
10.0.5.0
1.18.46
3.15.0
3.5.6
full
- 25
- v24.14.0
+ 26
+ 26
+ v26.0.0
11.8.0
4.10.3.0
4.9.8
@@ -298,6 +299,12 @@
org.springframework.boot
spring-boot-starter-test
test
+
+
+ com.vaadin.external.google
+ android-json
+
+
diff --git a/src/test/K8s-tests/package.json b/src/test/K8s-tests/package.json
index fb80845f1c..37b0617882 100644
--- a/src/test/K8s-tests/package.json
+++ b/src/test/K8s-tests/package.json
@@ -1,6 +1,6 @@
{
"engines": {
- "node": ">=20.0.0"
+ "node": ">=26.0.0"
},
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1"
diff --git a/src/test/e2e/cypress/README.md b/src/test/e2e/cypress/README.md
index 9baa34bffc..9394c2d341 100644
--- a/src/test/e2e/cypress/README.md
+++ b/src/test/e2e/cypress/README.md
@@ -13,7 +13,7 @@ The reporting of the tests themselves will be located in `target/test-classes/e2
Please note that cypress requires the templates to have been build first.
### Run outside of maven
-Want to run them outside of maven? Make sure you have node 22 installed and the application running and listening to `http://localhost:8080` . Then do:
+Want to run them outside of maven? Make sure you have node 26 installed and the application running and listening to `http://localhost:8080` . Then do:
```shell
cd src/test/e2e/cypress
diff --git a/src/test/e2e/package.json b/src/test/e2e/package.json
index 5df94d9539..d5a6be7606 100644
--- a/src/test/e2e/package.json
+++ b/src/test/e2e/package.json
@@ -1,6 +1,6 @@
{
"engines": {
- "node": ">=20.0.0"
+ "node": ">=26.0.0"
},
"scripts": {
"test": "echo \"Error: no test specified\" && exit 1"