Skip to content

FINERACT-2181: Update all non-major dependencies #5109

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate-bot wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

FINERACT-2181: Update all non-major dependencies #5109

renovate-bot wants to merge 1 commit into from
+109 −109

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Oct 20, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
mariadb service minor 11.5.2 -> 11.8.5 age confidence
mysql service minor 9.1 -> 9.5 age confidence
postgres service minor 17.4 -> 17.7 age confidence
at.yawk.lz4:lz4-java devDependencies patch 1.10.1 -> 1.10.2 age confidence
io.netty:netty-codec-http (source) devDependencies minor 4.1.129.Final -> 4.2.9.Final age confidence
io.netty:netty-codec (source) devDependencies minor 4.1.129.Final -> 4.2.9.Final age confidence
org.springframework.security:spring-security-core (source) devDependencies patch 6.5.4 -> 6.5.7 age confidence
org.springframework:spring-core devDependencies patch 6.2.11 -> 6.2.15 age confidence
com.nimbusds:nimbus-jose-jwt devDependencies minor 10.0.2 -> 10.6 age confidence
org.apache.commons:commons-lang3 (source) devDependencies minor 3.18.0 -> 3.20.0 age confidence
org.yakworks:spring-icu4j devDependencies minor 0.4.2 -> 0.5.2 age confidence
org.springframework.restdocs:spring-restdocs-restassured devDependencies patch 3.0.3 -> 3.0.5 age confidence
org.springframework.restdocs:spring-restdocs-webtestclient devDependencies patch 3.0.3 -> 3.0.5 age confidence
org.springframework.restdocs:spring-restdocs-mockmvc devDependencies patch 3.0.3 -> 3.0.5 age confidence
org.springframework.restdocs:spring-restdocs-asciidoctor devDependencies patch 3.0.3 -> 3.0.5 age confidence
io.cucumber:cucumber-spring (source) devDependencies minor 7.20.1 -> 7.33.0 age confidence
io.cucumber:cucumber-junit-platform-engine (source) devDependencies minor 7.20.1 -> 7.33.0 age confidence
io.cucumber:cucumber-java8 (source) devDependencies minor 7.20.1 -> 7.33.0 age confidence
io.cucumber:cucumber-java (source) devDependencies minor 7.20.1 -> 7.33.0 age confidence
org.apache.sshd:sshd-core (source) devDependencies minor 2.15.0 -> 2.16.0 age confidence
org.apache.sshd:sshd-common (source) devDependencies minor 2.15.0 -> 2.16.0 age confidence
org.wiremock:wiremock-standalone (source) devDependencies patch 3.13.0 -> 3.13.2 age confidence
org.assertj:assertj-core (source) devDependencies minor 3.26.3 -> 3.27.6 age confidence
com.mysql:mysql-connector-j (source) devDependencies minor 9.2.0 -> 9.5.0 age confidence
org.mariadb.jdbc:mariadb-java-client (source) devDependencies patch 3.5.2 -> 3.5.7 age confidence
org.apache.avro:avro (source) devDependencies patch 1.12.0 -> 1.12.1 age confidence
org.apache.groovy:groovy-json (source) devDependencies patch 5.0.2 -> 5.0.3 age confidence
org.apache.groovy:groovy-xml (source) devDependencies patch 5.0.2 -> 5.0.3 age confidence
io.rest-assured:xml-path (source) devDependencies patch 5.5.1 -> 5.5.6 age confidence
io.rest-assured:json-path (source) devDependencies patch 5.5.1 -> 5.5.6 age confidence
io.rest-assured:rest-assured (source) devDependencies patch 5.5.1 -> 5.5.6 age confidence
org.apache.poi:poi-ooxml devDependencies minor 5.4.1 -> 5.5.1 age confidence
org.apache.poi:poi devDependencies minor 5.4.1 -> 5.5.1 age confidence
org.awaitility:awaitility (source) devDependencies minor 4.2.2 -> 4.3.0 age confidence
org.dom4j:dom4j (source) devDependencies minor 2.1.4 -> 2.2.0 age confidence
org.hibernate.validator:hibernate-validator (source) devDependencies minor 9.0.1.Final -> 9.1.0.Final age confidence
jakarta.xml.bind:jakarta.xml.bind-api devDependencies patch 4.0.2 -> 4.0.4 age confidence
jakarta.activation:jakarta.activation-api devDependencies patch 2.1.3 -> 2.1.4 age confidence
org.apache.activemq:activemq-client (source) devDependencies minor 6.1.6 -> 6.2.0 age confidence
com.google.cloud.sql:mysql-socket-factory-connector-j-8 devDependencies minor 1.23.1 -> 1.27.1 age confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) devDependencies minor 2.6.0 -> 2.8.14 age confidence
com.tmatesoft.svnkit:svnkit (source) devDependencies patch 1.10.12 -> 1.10.13 age confidence
org.eclipse.jgit:org.eclipse.jgit.ssh.apache devDependencies minor 7.2.0.202503040940-r -> 7.5.0.202512021534-r age confidence
org.eclipse.jgit:org.eclipse.jgit.gpg.bc devDependencies minor 7.2.0.202503040940-r -> 7.5.0.202512021534-r age confidence
org.eclipse.jgit:org.eclipse.jgit devDependencies minor 7.2.0.202503040940-r -> 7.5.0.202512021534-r age confidence
org.bouncycastle:bcpg-jdk18on (source) devDependencies minor 1.81 -> 1.83 age confidence
org.bouncycastle:bcutil-jdk18on (source) devDependencies minor 1.81 -> 1.83 age confidence
org.bouncycastle:bcprov-jdk18on (source) devDependencies minor 1.81 -> 1.83 age confidence
org.bouncycastle:bcpkix-jdk18on (source) devDependencies minor 1.81 -> 1.83 age confidence
org.projectlombok:lombok (source) devDependencies patch 1.18.36 -> 1.18.42 age confidence
commons-codec:commons-codec (source) devDependencies minor 1.17.1 -> 1.20.0 age confidence
com.squareup.retrofit2:converter-protobuf devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-gson devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-scalars devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-java8 devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-jaxb devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-simplexml devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-jackson devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:converter-wire devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:adapter-guava devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:adapter-rxjava3 devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:adapter-rxjava2 devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:adapter-java8 devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:retrofit-mock devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.squareup.retrofit2:retrofit devDependencies minor 2.11.0 -> 2.12.0 age confidence
com.github.spotbugs:spotbugs-annotations (source) devDependencies minor 4.8.6 -> 4.9.8 age confidence
io.github.classgraph:classgraph devDependencies patch 4.8.179 -> 4.8.184 age confidence
joda-time:joda-time (source) devDependencies minor 2.13.1 -> 2.14.0 age confidence
me.champeau.jmh plugin patch 0.7.1 -> 0.7.3 age confidence
com.gradleup.shadow plugin patch 8.3.5 -> 8.3.9 age confidence
org.openapi.generator plugin minor 7.8.0 -> 7.18.0 age confidence
se.thinkcode.cucumber-runner plugin patch 0.0.11 -> 0.0.12 age confidence
com.github.spotbugs plugin minor 6.0.26 -> 6.4.8 age confidence
com.github.andygoossens.modernizer plugin minor 1.10.0 -> 1.12.0 age confidence
org.sonarqube plugin minor 6.0.1.5171 -> 6.3.1.5724 age confidence
com.google.cloud.tools.jib plugin minor 3.4.5 -> 3.5.2 age confidence
com.gorylenko.gradle-git-properties plugin minor 2.4.2 -> 2.5.4 age confidence
io.swagger.core.v3.swagger-gradle-plugin plugin patch 2.2.23 -> 2.2.41 age confidence
net.ltgt.errorprone plugin minor 4.1.0 -> 4.3.0 age confidence
org.springframework.boot plugin patch 3.5.6 -> 3.5.9 age confidence
org.zeroturnaround.gradle.jrebel plugin patch 1.2.0 -> 1.2.2 age confidence
com.jayway.jsonpath:json-path devDependencies minor 2.9.0 -> 2.10.0 age confidence
org.ehcache:ehcache (source) devDependencies minor 3.10.8 -> 3.11.1 age confidence
org.barfuin.gradle.taskinfo plugin patch 2.2.0 -> 2.2.1 age confidence
org.quartz-scheduler:quartz (source) devDependencies patch 2.5.0 -> 2.5.2 age confidence
org.apache.commons:commons-csv (source) devDependencies minor 1.12.0 -> 1.14.1 age confidence
commons-io:commons-io (source) devDependencies minor 2.18.0 -> 2.21.0 age confidence
software.amazon.msk:aws-msk-iam-auth (source) devDependencies minor 2.2.0 -> 2.3.5 age confidence
org.apache.commons:commons-collections4 (source) devDependencies minor 4.4 -> 4.5.0 age confidence
com.google.googlejavaformat:google-java-format devDependencies minor 1.24.0 -> 1.33.0 age confidence
com.google.code.gson:gson devDependencies minor 2.11.0 -> 2.13.2 age confidence
ch.qos.logback:logback-classic (source, changelog) devDependencies patch 1.5.19 -> 1.5.23 age confidence
ch.qos.logback:logback-core (source, changelog) devDependencies patch 1.5.19 -> 1.5.23 age confidence
org.glassfish.jersey:jersey-bom (source) devDependencies patch 3.1.10 -> 3.1.11 age confidence
org.testcontainers:testcontainers-bom (source) devDependencies minor 1.20.4 -> 1.21.4 age confidence
io.github.resilience4j:resilience4j-bom (source) devDependencies minor 2.2.0 -> 2.3.0 age confidence
software.amazon.awssdk:bom devDependencies minor 2.29.9 -> 2.40.15 age confidence
org.mockito:mockito-bom devDependencies minor 5.14.2 -> 5.21.0 age confidence
io.cucumber:cucumber-bom (source) devDependencies minor 7.20.1 -> 7.33.0 age confidence
com.fasterxml.jackson:jackson-bom devDependencies minor 2.19.2 -> 2.20.1 age confidence
org.junit:junit-bom (source) devDependencies minor 5.11.3 -> 5.14.1 age confidence
org.jetbrains.kotlin:kotlin-bom (source) devDependencies minor 2.0.21 -> 2.3.0 age confidence
io.opentelemetry:opentelemetry-bom devDependencies minor 1.44.1 -> 1.57.0 age confidence
io.awspring.cloud:spring-cloud-aws-dependencies (source) devDependencies minor 3.2.1 -> 3.4.2 age confidence
org.springframework.boot:spring-boot-dependencies (source) devDependencies patch 3.5.6 -> 3.5.9 age confidence
io.micrometer:micrometer-bom devDependencies minor 1.13.6 -> 1.16.1 age confidence
com.gradle.common-custom-user-data-gradle-plugin plugin minor 2.0.2 -> 2.4.0 age confidence

Release Notes

yawkat/lz4-java (at.yawk.lz4:lz4-java)

v1.10.2: lz4-java v1.10.2

What's Changed

New Contributors

Full Changelog: yawkat/lz4-java@v1.10.1...v1.10.2

spring-projects/spring-security (org.springframework.security:spring-security-core)

v6.5.7

Compare Source

⭐ New Features

  • Add Include-Code for the Password Storage page #​18054
  • Default WebAuthnConfigurer#rpName to rpId #​18131
  • Document effects of disabling CORS #​18129

🪲 Bug Fixes

  • typ values should not be case-sensitive in JwtTypeValidator #​18101
  • BCryptPasswordEncoderTests should password limit of 72 bytes #​18136
  • Fix GenerateOneTimeTokenRequestResolver ignored if username param not present #​18074
  • GenerateOneTimeTokenFilter should not attempt to generate a token with a null token request #​18088

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson:jackson-bom from 2.18.4.1 to 2.18.5 #​18110
  • Bump io.micrometer:micrometer-observation from 1.14.12 to 1.14.13 #​18149
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.11 to 1.0.13 #​18141
  • Bump org-aspectj from 1.9.24 to 1.9.25 #​18142
  • Bump org.hibernate.orm:hibernate-core from 6.6.33.Final to 6.6.34.Final #​18111
  • Update to Reactor 2024.0.12 #​18181
  • Update to Spring Data 2024.1.12 #​18182
  • Update to Spring Framework 6.2.13 #​18180

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​himanshu-pareek, @​marcusdacoregio, and @​namest504

v6.5.6

Compare Source

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 #​18082
  • Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 #​17930
  • Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE #​17929
  • Bump io.micrometer:micrometer-observation from 1.14.11 to 1.14.12 #​18045
  • Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 #​17950
  • Bump org.gretty:gretty from 4.1.7 to 4.1.10 #​17945
  • Bump org.hibernate.orm:hibernate-core from 6.6.31.Final to 6.6.33.Final #​18039
  • Bump org.springframework.data:spring-data-bom from 2024.1.10 to 2024.1.11 #​18083
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.14 to 3.2.15 #​18067
  • Bump org.springframework:spring-framework-bom from 6.2.11 to 6.2.12 #​18068

v6.5.5

Compare Source

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17922
  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17911
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 #​17923
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 #​17910
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17924
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17913
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17925
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17912
  • Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11 #​17926
  • Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11 #​17914
spring-projects/spring-framework (org.springframework:spring-core)

v6.2.15

Compare Source

v6.2.14

Compare Source

⭐ New Features
  • Add resetCaches() method to Caffeine/ConcurrentMapCacheManager #​35841
  • Fix single-check idiom in UnmodifiableMultiValueMap #​35831
  • Fix Spliterator characteristics in ConcurrentReferenceHashMap #​35828
🐞 Bug Fixes
  • MissingPathVariableException produces wrong status code in ProblemDetail #​35856
  • Fix getCacheNames() concurrent access in NoOpCacheManager #​35844
  • Annotation discovery regression for interfaces extending BeanNameAware and co. #​35838
  • Fix HtmlUtils unescape for supplementary chars #​35832
📔 Documentation
  • Fix cross-reference links in HtmlUnit sections #​35857
  • Remove @see Javadoc references to deprecated PropertiesBeanDefinitionReader #​35854

v6.2.13

Compare Source

⭐ New Features
  • Support response encoding in select and options JSP form tags #​35783
  • Preserve Connection readOnly state for DataSource with defaultReadOnly configuration #​35743
  • Optimize resource URL resolution in SortedResourcesFactoryBean #​35687
  • Relax multiple segment matching constraints in PathPattern #​35686
  • Support wildcard path elements at the start of path patterns #​35679
  • Validating byte[]s may produce OutOfMemoryError #​35675
  • Update in FragmentsRendering to names of static methods #​33974
🐞 Bug Fixes
  • ConcurrentReferenceHashMap misses dedicated computeIfAbsent, computeIfPresent, compute, merge implementations #​35794
  • Avoid unnecessary bridge method resolution around getMostSpecificMethod #​35780
  • Fix multi-release JAR issue with VirtualThreadDelegate #​35773
  • ContentNegotiationManager not finding media type when request includes quality parameter #​35754
  • Race condition in BufferingClientHttpResponseWrapper.getBody() #​35745
  • Deprecate setConnectTimeout on HttpComponentsClientHttpRequestFactory #​35748
  • Fix PathMatchingResourcePatternResolver to handle absolute paths in JAR manifests #​35732
  • BeanDefinitionBuilder.addAutowiredProperty causes error during AOT processing #​35731
  • Improve HttpServiceMethod support for Kotlin suspending functions returning Flow #​35718
  • Exception translation does not expose original BatchUpdateException anymore [#​35717](https://redirect.github.com/spring-project

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate bot added the renovate https://renovate.whitesourcesoftware.com [FINERACT-962] label Oct 20, 2025
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from f3c0e3f to f9abc1b Compare October 27, 2025 18:58
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 7b1803f to 2d603c8 Compare November 1, 2025 08:41
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 1c9bf7b to ca353ec Compare November 7, 2025 21:40
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 745eedc to 98c793f Compare December 12, 2025 03:10
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 0288368 to 93ab0c8 Compare December 19, 2025 01:43
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 492ebc6 to 7f62610 Compare December 23, 2025 17:49
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 7f62610 to ac7b710 Compare December 24, 2025 00:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@galovics galovics galovics approved these changes

Assignees

No one assigned

Labels

renovate https://renovate.whitesourcesoftware.com [FINERACT-962]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @galovics