Summary

• update JetBrains annotations from 16.0.3 to 26.1.0
• update Maven Compiler Plugin from 3.14.1 to 3.15.0
• update Maven JAR Plugin from 3.1.0 to 3.5.0
• update Felix Maven Bundle Plugin from 3.5.1 to 5.1.9, the latest Java 8-compatible line
• update Karaf Maven Plugin from 4.4.3 to 4.4.7, the latest Java 8-compatible line
• keep bnd's newly detected reflective OSGi imports optional
• prevent Dependabot from proposing Felix 6+ or Karaf 4.4.8+, which require newer Java runtimes

Why the Dependabot versions were adjusted

Felix Maven Bundle Plugin 6.x upgrades to bnd 7 and requires Java 17. Karaf Maven Plugin 4.4.10 contains Java 11 bytecode and declares Java [11,) plus Maven 3.9.12. Both conflict with the project's Java 8 support requirement.

Validation

• mvn -B -ntp clean verify — passed on Oracle JDK 8u152 with Maven 3.9.10, all 13 modules
• mvn -B -ntp -DskipTests clean package — passed on JDK 21, all 13 modules including Karaf feature verification
• compared old/new plugin JAR contents and descriptors; selected plugins execute on Java 8 and retain every configured goal/parameter
• compared generated project JARs entry-by-entry; all ten main JARs retain identical entry sets and ordinary class contents
• verified changed OSGi imports are explicitly optional and Java 9 module descriptors retain the same exported/required modules

The pre-existing test suite on JDK 21 still has 15 reflection-related errors in configuration test helpers; the same failures occur on unmodified develop.