Skip to content

chore(deps): bump the all-maven group across 1 directory with 16 updates - #342

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/services/all-maven-bfe14d1386
Open

chore(deps): bump the all-maven group across 1 directory with 16 updates#342
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/services/all-maven-bfe14d1386

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-maven group with 16 updates in the /services directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 4.1.1 4.1.2
com.squareup.okhttp3:okhttp 4.12.0 4.12.1
com.google.guava:guava 33.7.2-jre 33.8.0-jre
org.apache.maven.plugins:maven-enforcer-plugin 3.6.3 3.7.0
com.alibaba.nacos:nacos-client 2.5.1 3.3.0
com.alibaba.nacos:nacos-common 2.5.1 3.3.0
com.alibaba.nacos:nacos-api 2.5.1 3.3.0
com.alibaba.nacos:nacos-common 2.5.1 3.3.0
com.alibaba.nacos:nacos-api 2.5.1 3.3.0
com.redis:testcontainers-redis 3.0.0 3.0.1
org.jacoco:jacoco-maven-plugin 0.8.15 0.8.16
com.baomidou:mybatis-plus-spring-boot4-starter 3.5.17 3.5.18.1
com.baomidou:mybatis-plus-jsqlparser 3.5.17 3.5.18.1
com.baomidou:mybatis-plus-annotation 3.5.17 3.5.18.1
com.baomidou:mybatis-plus-core 3.5.17 3.5.18.1
com.baomidou:mybatis-plus-jsqlparser 3.5.17 3.5.18.1
org.springdoc:springdoc-openapi-starter-webmvc-ui 3.1.1 3.2.0
com.baomidou:mybatis-plus-annotation 3.5.17 3.5.18.1
com.baomidou:mybatis-plus-core 3.5.17 3.5.18.1
org.flywaydb:flyway-core 13.10.3 13.12.0
org.flywaydb:flyway-mysql 13.10.3 13.12.0

Updates org.springframework.boot:spring-boot-starter-parent from 4.1.1 to 4.1.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.2

⭐ New Features

  • Add TWENTY_SEVEN to JavaVersion enum #51426

🐞 Bug Fixes

  • OriginTrackedResource does not implement equals correctly #52267
  • OriginTrackedPropertiesLoader drops properties whose name starts with # or ! #52265
  • JWTs are rejected when issuer-uri is empty and jwk-set-uri is set #52260
  • Package manifest attributes are missing for nested jars without directory entries #52258
  • Logback ColorConverter unnecessarily parses its options for every log event #52228
  • Empty system property in TestPropertyValues is cleared instead of being restored to its empty value #52208
  • Graceful shutdown of Tomcat or Jetty may call back with REQUESTS_ACTIVE when stop is called immediately after shutDownGracefully on an idle server #52197
  • NettyWebServer stop may hang when called immediately after shutDownGracefully #52196
  • gRPC client 'grpc' load balancing fails to bind with a NullPointerException when no child policies are configured #52193
  • Prevent gRPC client properties from overriding user customizations #52175
  • MongoDB fails to connect when credentials contain a space #52168
  • Authentication fails when password configured in spring.elasticsearch.uris contains a colon #52166
  • Logging can be lost when a context is paused by the test context framework #52088
  • Docker Compose support for MongoDB fails to connect when credentials contain a character that requires URL encoding #52084
  • Jersey does not use the endpoint ObjectMapper when Actuator is running on a separate port #51982
  • Fractions of a second are handled incorrectly when configuring gRPC service config durations #51957
  • Configuration property descriptions may be lost when building incrementally with Gradle #51925
  • BasicJsonParser mishandles escaped characters in nested lists and maps #51908
  • Zero week value conversion fails with 'intValue cannot be extracted from WEEKS' exception #51894
  • App fails to start when using DevTools and manually configuring JDBC or R2DBC without spring-boot-jdbc or spring-boot-r2dbc #51890
  • Docker Compose support incorrectly recognizes MARIADB_ALLOW_EMPTY_PASSWORD instead of MARIADB_ALLOW_EMPTY_ROOT_PASSWORD #51888
  • Auto-configured Kotlinx Serialization JSON codec customization is not applied #51877
  • NullPointerException can be thrown when using uber jars due to a race condition in NestedJarFileResources #51745
  • DevTools does not detect a reactive web environment #51730
  • spring.http.clients.cookie-handling has no effect when using a reactive client backed by an HttpComponents connector #51724
  • Connection fails when rabbitmq Docker Compose service is configured to use SSL #51667
  • SBOM-related manifest attributes are missing from Maven-packaged wars #51651
  • When server.reactive.session.cookie.same-site is not set, session cookies have no SameSite attribute #51639
  • OAuth2 resource server ignores authorities-claim-delimiter when set on its own #51630
  • developmentOnly and testAndDevelopmentOnly configurations do not specify any attributes causing potential resolution problems #51623
  • In a reactive web application, Cloud Foundry security integration returns a 500 rather than a 503 when the cloud controller URL is unavailable #51614
  • Layer temp file is not deleted when layer creation fails #51581
  • Docker Compose integration for RabbitMQ skips credential fallbacks when an environment variable has no value #51578
  • Some assertion messages name the wrong parameter #51574
  • OAuth2ResourceServerProperties.Jwt has a setter that does not match its getter #51562
  • jarmode tools commands print stacktrace instead of an error message #51547
  • Docker Compose ProcessRunner can hang or leave orphan processes #51538
  • NestedByteChannel.read(ByteBuffer) incorrectly returns 0 when buffer could not be filled #51520
  • Customizer null checks in HTTP client builders assert the wrong attribute #51513
  • SSL host config customizations may be lost during Tomcat initialization #51511
  • SQL Server Docker Compose integration may duplicate the JDBC URL's encrypt parameter #51481
  • WritableJson.toByteArray() may corrupt supplementary characters #51464
  • SSL host config customizations are lost when reloading SSL bundles #51457

... (truncated)

Commits
  • 634e6fd Release 4.1.2
  • 6b43cf1 Upgrade to Spring WS 5.0.3
  • a73dfad Upgrade to Spring Security 7.1.2
  • 0485f1e Upgrade to Spring RESTDocs 4.0.2
  • de2c11a Upgrade to Spring Pulsar 2.0.8
  • 8d0359e Upgrade to Spring LDAP 4.1.2
  • f22c6e6 Upgrade to Spring Kafka 4.1.2
  • ed55709 Upgrade to Spring Integration 7.1.2
  • 2e88a38 Upgrade to Spring HATEOAS 3.1.3
  • 0d69ce5 Upgrade to Spring gRPC 1.1.2
  • Additional commits viewable in compare view

Updates com.squareup.okhttp3:okhttp from 4.12.0 to 4.12.1

Commits

Updates com.google.guava:guava from 33.7.2-jre to 33.8.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.8.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.8.0-jre</version>
  <!-- or, for Android: -->
  <version>33.8.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • collect: Enhanced HashBiMap and LinkedHashMultimap.ValueSet to defend against hash flooding (forthcoming CVE-2026-118042). (7cd44b3506)
  • collect: Accidentally changed a few methods in ForwardingMap.StandardValues to be final. No Google-internal or GitHub-public code appears to be affected, but we will fix this in the next release. If it causes you problems, let us know.
  • net: Added MediaType.APPLICATION_GZIP (application/gzip) to be used in preference to GZIP (application/x-gzip). (6393ebbdb6)
  • primitives: Added Doubles.MIN_POSITIVE_VALUE and Floats.MIN_POSITIVE_VALUE as more clearly named aliases for Double.MIN_VALUE and Float.MIN_VALUE. (adf5554e7e)
  • testlib: Added AbstractClassInitializationTest. (80fd5c114d)
  • and, among the usual changes, a larger than usual number of small fixes (4afb1e04a4246c261be4742e1f2e2c39ebaf6266, 79152348ece2de85559eb2eb18133862d492c892, a279b884fe9890a3869142919352156f2a67a705, 786bb1a9b44685875ebe7b83f1404a1f07ac653c, 6b3a8d7498a7fde122967ba37a023ba3dcb47792, de57a419b56bcd887f51bb99103d91c65b7c5e86, fa64cc7c2b320aca9219981952bbb544f8f6ccff, 7b64964048948de3b5633a75d6e64f98cf8fcece, 5ae56d77e64305752b919ff2c96713f47ac0c94c, 37535d73f0416f30e0301efe61a8eb8ede44c1b7, ca8aedb2fdaf40fd6937a0643180aea51ca4154e, c0a8a1edc69393e8141424037571d9825f5fc0f4, 51246d06bb85ccc182a0aeb6a7adcbd55f759ae5, 81c7d030f8f144a4885ccf8efdc72c92605b4eec, 2b86a8216627a807ce8520abc6ae55437dbb85fb, 669a232b4e20ae6e8bc6efc62caaf2f830d56327, b157643c41f9ee6a38732b4fa1a590ba187912d9, ad73fbb9beff220aa26390630724855ef92fc50b, 1e6eb68f2ee8dc6cb164c285f7fe6ad5e8bc0905, 3d5be86651ec58b3f9d15c76cf888ade15aba39b)
Commits

Updates org.apache.maven.plugins:maven-enforcer-plugin from 3.6.3 to 3.7.0

Release notes

Sourced from org.apache.maven.plugins:maven-enforcer-plugin's releases.

3.7.0

⚠️ Deprecated

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

... (truncated)

Commits
  • 465ebf2 [maven-release-plugin] prepare release enforcer-3.7.0
  • b24b05c Fix test-scope mediation in RequireUpperBoundDeps
  • 2b75dd3 Improve RequireUpperBoundDeps error message (#1059)
  • b519cd0 Fix EnforcerRuleCache concurrency across plugin realms (#1055)
  • f622234 Ignore SLF4J 2.x in Dependabot
  • 5a9ebca Remove redundant rat configuration
  • e8512d0 Fix ATR project name
  • 08605b2 Use push for PR Automation
  • fbe1ae5 Use workflow_run for PR check (#1056)
  • b1d59aa Bump commons-codec:commons-codec from 1.22.1 to 1.23.0
  • Additional commits viewable in compare view

Updates com.alibaba.nacos:nacos-client from 2.5.1 to 3.3.0

Release notes

Sourced from com.alibaba.nacos:nacos-client's releases.

3.3.0(Oct 29th, 2026)

Nacos 3.3.0

Nacos 3.3.0 is a feature iteration release for the Nacos 3.x series. It brings protocol-neutral Agent management and discovery, shared AI resource search, and unified MCP lifecycle management to the stable release.

This release focuses on:

  • AI Registry capabilities across Agent, AgentSpec, Skill, Prompt, and MCP resources.
  • DNS service discovery and distributed locks.
  • Dynamic plugin management and authentication enabled by default.
  • Spring Boot 4 and Jackson 3 compatibility, with improved client and server reliability.

The main feature updates include:

  • Agent registration, version management, runtime endpoints, RAD discovery, transport negotiation, and Watch/Push through Java SDKs and Console workflows.
  • Shared AI resource search with hybrid keyword and vector retrieval, artifact access, and optional relevance filtering.
  • MCP draft, review, publish, online/offline, and visibility management, with migration support for historical resources.
  • Optional DNS discovery with A, AAAA, and SRV records over UDP and TCP.
  • Distributed reentrant and non-reentrant locks with watchdog renewal and Raft consistency.

The stable release also improves Skill metadata consistency across version transitions, extends visibility plugin capabilities, and strengthens Config SDK usability, Console compatibility, and recovery after Naming reconnects and cluster restarts.

These notes are cumulative and include the changes delivered in 3.3.0-BETA and 3.3.0-RC.

Detailed changes in this release:

Feature

  • #50 Add optional DNS service discovery over UDP and TCP, with A, AAAA, and SRV records, metrics, and configurable external DNS forwarding.
  • #14466 Add a neutral JSON adapter with Jackson 2 and Jackson 3 runtime support.
  • #14804 Add protocol-neutral Agent lifecycle management, Console workflows, RAD discovery, runtime endpoints, transport negotiation, Watch/Push, and Java SDKs.
  • #15279 Add distributed reentrant and non-reentrant locks with watchdog renewal, FIFO waiting, gRPC notifications, Raft consistency, and a Java Lock SDK.
  • #15471 Support SkillSpector as an AI publish pipeline.
  • #15475 Add unified dynamic plugin configuration, lifecycle management, runtime updates, deterministic discovery, and Console configuration workflows.
  • #15476#15604 Add plugin-owned visibility grant and revoke APIs and Console management for Skill and AgentSpec resources.
  • #15541 Add Agentic Resource Discovery with search, exploration, artifact retrieval, visibility filtering, persistent indexes, and hybrid keyword and vector retrieval.
  • #15640 Add Linux RISC-V64 compatibility for RocksDB JNI loading and startup.
  • #15761 Add shared MCP lifecycle management with drafts, review, publish, online/offline operations, visibility, Java SDKs, and historical reconciliation while preserving existing Config/Naming serving data.

Enhancement/Refactor

  • #8354 Replace the mandatory Prometheus client dependency with a pluggable client metrics SPI and a no-op default.
  • #12064 Support configuring the gRPC port offset through individual client properties.
  • #12734 Add request/result-based Config SDK methods, encrypted Config CAS publishing, and conditional queries with local cache reuse.
  • #13690 Log the resolved client logging configuration and include namespace IDs in subscription logs.
  • #14804 Improve Agent Console workflows, expose SDK discovery capabilities and A2A conversion helpers, and trace discovery request origins.
  • #14817 Disable selected deprecated Pipeline and MCP import APIs by default and provide a shared temporary compatibility switch.
  • #14932 Reduce read-path contention and improve index consistency in the legacy MCP cache.

... (truncated)

Commits

Updates com.alibaba.nacos:nacos-common from 2.5.1 to 3.3.0

Release notes

Sourced from com.alibaba.nacos:nacos-common's releases.

3.3.0(Oct 29th, 2026)

Nacos 3.3.0

Nacos 3.3.0 is a feature iteration release for the Nacos 3.x series. It brings protocol-neutral Agent management and discovery, shared AI resource search, and unified MCP lifecycle management to the stable release.

This release focuses on:

  • AI Registry capabilities across Agent, AgentSpec, Skill, Prompt, and MCP resources.
  • DNS service discovery and distributed locks.
  • Dynamic plugin management and authentication enabled by default.
  • Spring Boot 4 and Jackson 3 compatibility, with improved client and server reliability.

The main feature updates include:

  • Agent registration, version management, runtime endpoints, RAD discovery, transport negotiation, and Watch/Push through Java SDKs and Console workflows.
  • Shared AI resource search with hybrid keyword and vector retrieval, artifact access, and optional relevance filtering.
  • MCP draft, review, publish, online/offline, and visibility management, with migration support for historical resources.
  • Optional DNS discovery with A, AAAA, and SRV records over UDP and TCP.
  • Distributed reentrant and non-reentrant locks with watchdog renewal and Raft consistency.

The stable release also improves Skill metadata consistency across version transitions, extends visibility plugin capabilities, and strengthens Config SDK usability, Console compatibility, and recovery after Naming reconnects and cluster restarts.

These notes are cumulative and include the changes delivered in 3.3.0-BETA and 3.3.0-RC.

Detailed changes in this release:

Feature

  • #50 Add optional DNS service discovery over UDP and TCP, with A, AAAA, and SRV records, metrics, and configurable external DNS forwarding.
  • #14466 Add a neutral JSON adapter with Jackson 2 and Jackson 3 runtime support.
  • #14804 Add protocol-neutral Agent lifecycle management, Console workflows, RAD discovery, runtime endpoints, transport negotiation, Watch/Push, and Java SDKs.
  • #15279 Add distributed reentrant and non-reentrant locks with watchdog renewal, FIFO waiting, gRPC notifications, Raft consistency, and a Java Lock SDK.
  • #15471 Support SkillSpector as an AI publish pipeline.
  • #15475 Add unified dynamic plugin configuration, lifecycle management, runtime updates, deterministic discovery, and Console configuration workflows.
  • #15476#15604 Add plugin-owned visibility grant and revoke APIs and Console management for Skill and AgentSpec resources.
  • #15541 Add Agentic Resource Discovery with search, exploration, artifact retrieval, visibility filtering, persistent indexes, and hybrid keyword and vector retrieval.
  • #15640 Add Linux RISC-V64 compatibility for RocksDB JNI loading and startup.
  • #15761 Add shared MCP lifecycle management with drafts, review, publish, online/offline operations, visibility, Java SDKs, and historical reconciliation while preserving existing Config/Naming serving data.

Enhancement/Refactor

  • #8354 Replace the mandatory Prometheus client dependency with a pluggable client metrics SPI and a no-op default.
  • #12064 Support configuring the gRPC port offset through individual client properties.
  • #12734 Add request/result-based Config SDK methods, encrypted Config CAS publishing, and conditional queries with local cache reuse.
  • #13690 Log the resolved client logging configuration and include namespace IDs in subscription logs.
  • #14804 Improve Agent Console workflows, expose SDK discovery capabilities and A2A conversion helpers, and trace discovery request origins.
  • #14817 Disable selected deprecated Pipeline and MCP import APIs by default and provide a shared temporary compatibility switch.
  • #14932 Reduce read-path contention and improve index consistency in the legacy MCP cache.

... (truncated)

Commits

Updates com.alibaba.nacos:nacos-api from 2.5.1 to 3.3.0

Release notes

Sourced from com.alibaba.nacos:nacos-api's releases.

3.3.0(Oct 29th, 2026)

Nacos 3.3.0

Nacos 3.3.0 is a feature iteration release for the Nacos 3.x series. It brings protocol-neutral Agent management and discovery, shared AI resource search, and unified MCP lifecycle management to the stable release.

This release focuses on:

  • AI Registry capabilities across Agent, AgentSpec, Skill, Prompt, and MCP resources.
  • DNS service discovery and distributed locks.
  • Dynamic plugin management and authentication enabled by default.
  • Spring Boot 4 and Jackson 3 compatibility, with improved client and server reliability.

The main feature updates include:

  • Agent registration, version management, runtime endpoints, RAD discovery, transport negotiation, and Watch/Push through Java SDKs and Console workflows.
  • Shared AI resource search with hybrid keyword and vector retrieval, artifact access, and optional relevance filtering.
  • MCP draft, review, publish, online/offline, and visibility management, with migration support for historical resources.
  • Optional DNS discovery with A, AAAA, and SRV records over UDP and TCP.
  • Distributed reentrant and non-reentrant locks with watchdog renewal and Raft consistency.

The stable release also improves Skill metadata consistency across version transitions, extends visibility plugin capabilities, and strengthens Config SDK usability, Console compatibility, and recovery after Naming reconnects and cluster restarts.

These notes are cumulative and include the changes delivered in 3.3.0-BETA and 3.3.0-RC.

Detailed changes in this release:

Feature

  • #50 Add optional DNS service discovery over UDP and TCP, with A, AAAA, and SRV records, metrics, and configurable external DNS forwarding.
  • #14466 Add a neutral JSON adapter with Jackson 2 and Jackson 3 runtime support.
  • #14804 Add protocol-neutral Agent lifecycle management, Console workflows, RAD discovery, runtime endpoints, transport negotiation, Watch/Push, and Java SDKs.
  • #15279 Add distributed reentrant and non-reentrant locks with watchdog renewal, FIFO waiting, gRPC notifications, Raft consistency, and a Java Lock SDK.
  • #15471 Support SkillSpector as an AI publish pipeline.
  • #15475 Add unified dynamic plugin configuration, lifecycle management, runtime updates, deterministic discovery, and Console configuration workflows.
  • #15476#15604 Add plugin-owned visibility grant and revoke APIs and Console management for Skill and AgentSpec resources.
  • #15541 Add Agentic Resource Discovery with search, exploration, artifact retrieval, visibility filtering, persistent indexes, and hybrid keyword and vector retrieval.
  • #15640 Add Linux RISC-V64 compatibility for RocksDB JNI loading and startup.
  • #15761 Add shared MCP lifecycle management with drafts, review, publish, online/offline operations, visibility, Java SDKs, and historical reconciliation while preserving existing Config/Naming serving data.

Enhancement/Refactor

  • #8354 Replace the mandatory Prometheus client dependency with a pluggable client metrics SPI and a no-op default.
  • #12064 Support configuring the gRPC port offset through individual client properties.
  • #12734 Add request/result-based Config SDK methods, encrypted Config CAS publishing, and conditional queries with local cache reuse.
  • #13690 Log the resolved client logging configuration and include namespace IDs in subscription logs.
  • #14804 Improve Agent Console workflows, expose SDK discovery capabilities and A2A conversion helpers, and trace discovery request origins.
  • #14817 Disable selected deprecated Pipeline and MCP import APIs by default and provide a shared temporary compatibility switch.
  • #14932 Reduce read-path contention and improve index consistency in the legacy MCP cache.

... (truncated)

Commits

Updates com.alibaba.nacos:nacos-common from 2.5.1 to 3.3.0

Release notes

Sourced from com.alibaba.nacos:nacos-common's releases.

3.3.0(Oct 29th, 2026)

Nacos 3.3.0

Nacos 3.3.0 is a feature iteration release for the Nacos 3.x series. It brings protocol-neutral Agent management and discovery, shared AI resource search, and unified MCP lifecycle management to the stable release.

This release focuses on:

  • AI Registry capabilities across Agent, AgentSpec, Skill, Prompt, and MCP resources.
  • DNS service discovery and distributed locks.
  • Dynamic plugin management and authentication enabled by default.
  • Spring Boot 4 and Jackson 3 compatibility, with improved client and server reliability.

The main feature updates include:

  • Agent registration, version management, runtime endpoints, RAD discovery, transport negotiation, and Watch/Push through Java SDKs and Console workflows.
  • Shared AI resource search with hybrid keyword and vector retrieval, artifact access, and optional relevance filtering.
  • MCP draft, review, publish, online/offline, and visibility management, with migration support for historical resources.
  • Optional DNS discovery with A, AAAA, and SRV records over UDP and TCP.
  • Distributed reentrant and non-reentrant locks with watchdog renewal and Raft consistency.

The stable release also improves Skill metadata consistency across version transitions, extends visibility plugin capabilities, and strengthens Config SDK usability, Console compatibility, and recovery after Naming reconnects and cluster restarts.

These notes are cumulative and include the changes delivered in 3.3.0-BETA and 3.3.0-RC.

Detailed changes in this release:

Feature

  • #50 Add optional DNS service discovery over UDP and TCP, with A, AAAA, and SRV records, metrics, and configurable external DNS forwarding.
  • #14466 Add a neutral JSON adapter with Jackson 2 and Jackson 3 runtime support.
  • #14804 Add protocol-neutral Agent lifecycle management, Console workflows, RAD discovery, runtime endpoints, transport negotiation, Watch/Push, and Java SDKs.
  • #15279 Add distributed reentrant and non-reentrant locks with watchdog renewal, FIFO waiting, gRPC notifications, Raft consistency, and a Java Lock SDK.
  • #15471 Support SkillSpector as an AI publish pipeline.
  • #15475 Add unified dynamic plugin configuration, lifecycle management, runtime updates, deterministic discovery, and Console configuration workflows.
  • #15476#15604 Add plugin-owned visibility grant and revoke APIs and Console management for Skill and AgentSpec resources.
  • #15541 Add Agentic Resource Discovery with search, exploration, artifact retrieval, visibility filtering, persistent indexes, and hybrid keyword and vector retrieval.
  • #15640 Add Linux RISC-V64 compatibility for RocksDB JNI loading and startup.
  • #15761 Add shared MCP lifecycle management with drafts, review, publish, online/offline operations, visibility, Java SDKs, and historical reconciliation while preserving existing Config/Naming serving data.

Enhancement/Refactor

  • #8354 Replace the mandatory Prometheus client dependency with a pluggable client metrics SPI and a no-op default.
  • #12064 Support configuring the gRPC port offset through individual client properties.
  • #12734 Add request/result-based Config SDK methods, encrypted Config CAS publishing, and conditional queries with local cache reuse.
  • #13690 Log the resolved client logging configuration and include namespace IDs in subscription logs.
  • #14804 Improve Agent Console workflows, expose SDK discovery capabilities and A2A conversion helpers, and trace discovery request origins.
  • #14817 Disable selected deprecated Pipeline and MCP import APIs by default and provide a shared temporary compatibility switch.
  • #14932 Reduce read-path contention and improve index consistency in the legacy MCP cache.

... (truncated)

Commits

Updates com.alibaba.nacos:nacos-api from 2.5.1 to 3.3.0

Release notes

Sourced from com.alibaba.nacos:nacos-api's releases.

3.3.0(Oct 29th, 2026)

Nacos 3.3.0

Nacos 3.3.0 is a feature iteration release for the Nacos 3.x series. It brings protocol-neutral Agent management and discovery, shared AI resource search, and unified MCP lifecycle management to the stable release.

This release focuses on:

  • AI Registry capabilities across Agent, AgentSpec, Skill, Prompt, and MCP resources.
  • DNS service discovery and distributed locks.
  • Dynamic plugin management and authentication enabled by default.
  • Spring Boot 4 and Jackson 3 compatibility, with improved client and server reliability.

The main feature updates include:

  • Agent registration, version management, runtime endpoints, RAD discovery, transport negotiation, and Watch/Push through Java SDKs and Console workflows.
  • Shared AI resource search with hybrid keyword and vector retrieval, artifact access, and optional relevance filtering.
  • MCP draft, review, publish, online/offline, and visibility management, with migration support for historical resources.
  • Optional DNS discovery with A, AAAA, and SRV records over UDP and TCP.
  • Distributed reentrant and non-reentrant locks with watchdog renewal and Raft consistency.

The stable release also improves Skill metadata consistency across version transitions, extends visibility plugin capabilities, and strengthens Config SDK usability, Console compatibility, and recovery after Naming reconnects and cluster restarts.

These notes are cumulative and include the changes delivered in 3.3.0-BETA and 3.3.0-RC.

Detailed changes in this release:

Feature

  • #50 Add optional DNS service discovery over UDP and TCP, w...

    Description has been truncated

@dependabot
chore(deps): bump the all-maven group across 1 directory with 16 updates
a12143f 
Bumps the all-maven group with 16 updates in the /services directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.1.1` | `4.1.2` |
| [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) | `4.12.0` | `4.12.1` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.7.2-jre` | `33.8.0-jre` |
| [org.apache.maven.plugins:maven-enforcer-plugin](https://github.com/apache/maven-enforcer) | `3.6.3` | `3.7.0` |
| [com.alibaba.nacos:nacos-client](https://github.com/alibaba/nacos) | `2.5.1` | `3.3.0` |
| [com.alibaba.nacos:nacos-common](https://github.com/alibaba/nacos) | `2.5.1` | `3.3.0` |
| [com.alibaba.nacos:nacos-api](https://github.com/alibaba/nacos) | `2.5.1` | `3.3.0` |
| [com.alibaba.nacos:nacos-common](https://github.com/alibaba/nacos) | `2.5.1` | `3.3.0` |
| [com.alibaba.nacos:nacos-api](https://github.com/alibaba/nacos) | `2.5.1` | `3.3.0` |
| [com.redis:testcontainers-redis](https://github.com/redis-field-engineering/testcontainers-redis) | `3.0.0` | `3.0.1` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.15` | `0.8.16` |
| [com.baomidou:mybatis-plus-spring-boot4-starter](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| [com.baomidou:mybatis-plus-jsqlparser](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| [com.baomidou:mybatis-plus-annotation](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| [com.baomidou:mybatis-plus-core](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| [com.baomidou:mybatis-plus-jsqlparser](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `3.1.1` | `3.2.0` |
| [com.baomidou:mybatis-plus-annotation](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| [com.baomidou:mybatis-plus-core](https://github.com/baomidou/mybatis-plus) | `3.5.17` | `3.5.18.1` |
| org.flywaydb:flyway-core | `13.10.3` | `13.12.0` |
| org.flywaydb:flyway-mysql | `13.10.3` | `13.12.0` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 4.1.1 to 4.1.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.1.1...v4.1.2)

Updates `com.squareup.okhttp3:okhttp` from 4.12.0 to 4.12.1
- [Changelog](https://github.com/lysine-dev/okhttp/blob/main/CHANGELOG.md)
- [Commits](lysine-dev/okhttp@parent-4.12.0...parent-4.12.1)

Updates `com.google.guava:guava` from 33.7.2-jre to 33.8.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `org.apache.maven.plugins:maven-enforcer-plugin` from 3.6.3 to 3.7.0
- [Release notes](https://github.com/apache/maven-enforcer/releases)
- [Commits](apache/maven-enforcer@enforcer-3.6.3...enforcer-3.7.0)

Updates `com.alibaba.nacos:nacos-client` from 2.5.1 to 3.3.0
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@2.5.1...3.3.0)

Updates `com.alibaba.nacos:nacos-common` from 2.5.1 to 3.3.0
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@2.5.1...3.3.0)

Updates `com.alibaba.nacos:nacos-api` from 2.5.1 to 3.3.0
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@2.5.1...3.3.0)

Updates `com.alibaba.nacos:nacos-common` from 2.5.1 to 3.3.0
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@2.5.1...3.3.0)

Updates `com.alibaba.nacos:nacos-api` from 2.5.1 to 3.3.0
- [Release notes](https://github.com/alibaba/nacos/releases)
- [Changelog](https://github.com/alibaba/nacos/blob/develop/CHANGELOG.md)
- [Commits](alibaba/nacos@2.5.1...3.3.0)

Updates `com.redis:testcontainers-redis` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/redis-field-engineering/testcontainers-redis/releases)
- [Commits](redis-field-engineering/testcontainers-redis@v3.0.0...v3.0.1)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.15 to 0.8.16
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.15...v0.8.16)

Updates `com.baomidou:mybatis-plus-spring-boot4-starter` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `com.baomidou:mybatis-plus-jsqlparser` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `com.baomidou:mybatis-plus-annotation` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `com.baomidou:mybatis-plus-core` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `com.baomidou:mybatis-plus-jsqlparser` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v3.1.1...v3.2.0)

Updates `com.baomidou:mybatis-plus-annotation` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `com.baomidou:mybatis-plus-core` from 3.5.17 to 3.5.18.1
- [Release notes](https://github.com/baomidou/mybatis-plus/releases)
- [Changelog](https://github.com/baomidou/mybatis-plus/blob/3.0/CHANGELOG.md)
- [Commits](baomidou/mybatis-plus@v3.5.17...v3.5.18.1)

Updates `org.flywaydb:flyway-core` from 13.10.3 to 13.12.0

Updates `org.flywaydb:flyway-mysql` from 13.10.3 to 13.12.0

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 4.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.google.guava:guava
  dependency-version: 33.8.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven
- dependency-name: org.apache.maven.plugins:maven-enforcer-plugin
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-maven
- dependency-name: com.alibaba.nacos:nacos-client
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-maven
- dependency-name: com.alibaba.nacos:nacos-common
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-maven
- dependency-name: com.alibaba.nacos:nacos-api
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-maven
- dependency-name: com.alibaba.nacos:nacos-common
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-maven
- dependency-name: com.alibaba.nacos:nacos-api
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-maven
- dependency-name: com.redis:testcontainers-redis
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-spring-boot4-starter
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-jsqlparser
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-annotation
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-core
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-jsqlparser
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-annotation
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: com.baomidou:mybatis-plus-core
  dependency-version: 3.5.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-maven
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 13.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven
- dependency-name: org.flywaydb:flyway-mysql
  dependency-version: 13.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-maven
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants