Bump jasperreports.version from 7.0.6 to 7.0.7

[dependabot]

Bumps jasperreports.version from 7.0.6 to 7.0.7.
Updates net.sf.jasperreports:jasperreports from 7.0.6 to 7.0.7

Release notes

Sourced from net.sf.jasperreports:jasperreports's releases.

JasperReports 7.0.7

• add deserialization class filter to fix the CVE-2026-6009 security vulnerability;

• introduce URL whitelist filter for controlling repository resources access;

• new keepTogether flag for crosstab row groups;

• various fixes made to the PDF exporter to better support the PDF/UA (accessibility) and PDF/A (archiving) standards;

• new OSGi and Spring Boot samples;

• support for versioning in the Jackson JRXML writer;

• various dependencies upgrades including: Spring 6.2.18, Jackson 2.18.6, Bouncy Castle 1.84, Jetty 12.0.35 and Apache Log4J 2.25.4;

• minor bug fixes and improvements;

Changelog

Sourced from net.sf.jasperreports:jasperreports's changelog.

JasperReports 7.0.7 (2026-05-30)

• add deserialization class filter to fix the CVE-2026-6009 security vulnerability;

• introduce URL whitelist filter for controlling repository resources access;

• new keepTogether flag for crosstab row groups;

• various fixes made to the PDF exporter to better support the PDF/UA (accessibility) and PDF/A (archiving) standards;

• new OSGi and Spring Boot samples;

• support for versioning in the Jackson JRXML writer;

• various dependencies upgrades including: Spring 6.2.18, Jackson 2.18.6, Bouncy Castle 1.84, Jetty 12.0.35 and Apache Log4J 2.25.4;

• minor bug fixes and improvements;

Commits

• 072738a eula and version update
• 9e373de check file repository root for output stream
• 0e2fb70 changes.txt update
• 5b02656 check root folder in HTML resource handler
• 9751ee0 check repository root on context resolve
• 9ff7da8 version update
• f90c29b Merge branch 'release-7.0.7-JSSEC-167' into 'release-7.0.7'
• ea320a1 add whitelist classes for virtualized JasperPrint
• d1945b4 maven plugin api upgrade
• 728f395 build number plugin config
• Additional commits viewable in compare view

Updates net.sf.jasperreports:jasperreports-pdf from 7.0.6 to 7.0.7

Release notes

Sourced from net.sf.jasperreports:jasperreports-pdf's releases.

JasperReports 7.0.7

• add deserialization class filter to fix the CVE-2026-6009 security vulnerability;

• introduce URL whitelist filter for controlling repository resources access;

• new keepTogether flag for crosstab row groups;

• various fixes made to the PDF exporter to better support the PDF/UA (accessibility) and PDF/A (archiving) standards;

• new OSGi and Spring Boot samples;

• support for versioning in the Jackson JRXML writer;

• various dependencies upgrades including: Spring 6.2.18, Jackson 2.18.6, Bouncy Castle 1.84, Jetty 12.0.35 and Apache Log4J 2.25.4;

• minor bug fixes and improvements;

Changelog

Sourced from net.sf.jasperreports:jasperreports-pdf's changelog.

JasperReports 7.0.7 (2026-05-30)

• add deserialization class filter to fix the CVE-2026-6009 security vulnerability;

• introduce URL whitelist filter for controlling repository resources access;

• new keepTogether flag for crosstab row groups;

• various fixes made to the PDF exporter to better support the PDF/UA (accessibility) and PDF/A (archiving) standards;

• new OSGi and Spring Boot samples;

• support for versioning in the Jackson JRXML writer;

• various dependencies upgrades including: Spring 6.2.18, Jackson 2.18.6, Bouncy Castle 1.84, Jetty 12.0.35 and Apache Log4J 2.25.4;

• minor bug fixes and improvements;

Commits

• 072738a eula and version update
• 9e373de check file repository root for output stream
• 0e2fb70 changes.txt update
• 5b02656 check root folder in HTML resource handler
• 9751ee0 check repository root on context resolve
• 9ff7da8 version update
• f90c29b Merge branch 'release-7.0.7-JSSEC-167' into 'release-7.0.7'
• ea320a1 add whitelist classes for virtualized JasperPrint
• d1945b4 maven plugin api upgrade
• 728f395 build number plugin config
• Additional commits viewable in compare view

Updates net.sf.jasperreports:jasperreports-excel-poi from 7.0.6 to 7.0.7

Release notes

Sourced from net.sf.jasperreports:jasperreports-excel-poi's releases.

JasperReports 7.0.7

• add deserialization class filter to fix the CVE-2026-6009 security vulnerability;

• introduce URL whitelist filter for controlling repository resources access;

• new keepTogether flag for crosstab row groups;

• various fixes made to the PDF exporter to better support the PDF/UA (accessibility) and PDF/A (archiving) standards;

• new OSGi and Spring Boot samples;

• support for versioning in the Jackson JRXML writer;

• various dependencies upgrades including: Spring 6.2.18, Jackson 2.18.6, Bouncy Castle 1.84, Jetty 12.0.35 and Apache Log4J 2.25.4;

• minor bug fixes and improvements;

Changelog

Sourced from net.sf.jasperreports:jasperreports-excel-poi's changelog.

JasperReports 7.0.7 (2026-05-30)

• add deserialization class filter to fix the CVE-2026-6009 security vulnerability;

• introduce URL whitelist filter for controlling repository resources access;

• new keepTogether flag for crosstab row groups;

• various fixes made to the PDF exporter to better support the PDF/UA (accessibility) and PDF/A (archiving) standards;

• new OSGi and Spring Boot samples;

• support for versioning in the Jackson JRXML writer;

• various dependencies upgrades including: Spring 6.2.18, Jackson 2.18.6, Bouncy Castle 1.84, Jetty 12.0.35 and Apache Log4J 2.25.4;

• minor bug fixes and improvements;

Commits

• 072738a eula and version update
• 9e373de check file repository root for output stream
• 0e2fb70 changes.txt update
• 5b02656 check root folder in HTML resource handler
• 9751ee0 check repository root on context resolve
• 9ff7da8 version update
• f90c29b Merge branch 'release-7.0.7-JSSEC-167' into 'release-7.0.7'
• ea320a1 add whitelist classes for virtualized JasperPrint
• d1945b4 maven plugin api upgrade
• 728f395 build number plugin config
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)