Skip to content

FINERACT-2181: Update all non-major dependencies #5109

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate-bot wants to merge 1 commit into
base: develop
Choose a base branch
from
Open

FINERACT-2181: Update all non-major dependencies #5109

renovate-bot wants to merge 1 commit into from
+109 −109

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Oct 20, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
mariadb service minor 11.5.2 → 11.8.5 age confidence
mysql service minor 9.1 → 9.5 age confidence
postgres service minor 17.4 → 17.7 age confidence
at.yawk.lz4:lz4-java devDependencies patch 1.10.1 → 1.10.2 age confidence
io.netty:netty-codec-http (source) devDependencies minor 4.1.129.Final → 4.2.9.Final age confidence
io.netty:netty-codec (source) devDependencies minor 4.1.129.Final → 4.2.9.Final age confidence
org.springframework.security:spring-security-core (source) devDependencies patch 6.5.4 → 6.5.7 age confidence
org.springframework:spring-core devDependencies patch 6.2.11 → 6.2.15 age confidence
com.nimbusds:nimbus-jose-jwt devDependencies minor 10.0.2 → 10.6 age confidence
org.apache.commons:commons-lang3 (source) devDependencies minor 3.18.0 → 3.20.0 age confidence
org.yakworks:spring-icu4j devDependencies minor 0.4.2 → 0.5.2 age confidence
org.springframework.restdocs:spring-restdocs-restassured devDependencies patch 3.0.3 → 3.0.5 age confidence
org.springframework.restdocs:spring-restdocs-webtestclient devDependencies patch 3.0.3 → 3.0.5 age confidence
org.springframework.restdocs:spring-restdocs-mockmvc devDependencies patch 3.0.3 → 3.0.5 age confidence
org.springframework.restdocs:spring-restdocs-asciidoctor devDependencies patch 3.0.3 → 3.0.5 age confidence
io.cucumber:cucumber-spring (source) devDependencies minor 7.20.1 → 7.33.0 age confidence
io.cucumber:cucumber-junit-platform-engine (source) devDependencies minor 7.20.1 → 7.33.0 age confidence
io.cucumber:cucumber-java8 (source) devDependencies minor 7.20.1 → 7.33.0 age confidence
io.cucumber:cucumber-java (source) devDependencies minor 7.20.1 → 7.33.0 age confidence
org.apache.sshd:sshd-core (source) devDependencies minor 2.15.0 → 2.16.0 age confidence
org.apache.sshd:sshd-common (source) devDependencies minor 2.15.0 → 2.16.0 age confidence
org.wiremock:wiremock-standalone (source) devDependencies patch 3.13.0 → 3.13.2 age confidence
org.assertj:assertj-core (source) devDependencies minor 3.26.3 → 3.27.6 age confidence
com.mysql:mysql-connector-j (source) devDependencies minor 9.2.0 → 9.5.0 age confidence
org.mariadb.jdbc:mariadb-java-client (source) devDependencies patch 3.5.2 → 3.5.7 age confidence
org.apache.avro:avro (source) devDependencies patch 1.12.0 → 1.12.1 age confidence
org.apache.groovy:groovy-json (source) devDependencies patch 5.0.2 → 5.0.3 age confidence
org.apache.groovy:groovy-xml (source) devDependencies patch 5.0.2 → 5.0.3 age confidence
io.rest-assured:xml-path (source) devDependencies patch 5.5.1 → 5.5.6 age confidence
io.rest-assured:json-path (source) devDependencies patch 5.5.1 → 5.5.6 age confidence
io.rest-assured:rest-assured (source) devDependencies patch 5.5.1 → 5.5.6 age confidence
org.apache.poi:poi-ooxml devDependencies minor 5.4.1 → 5.5.1 age confidence
org.apache.poi:poi devDependencies minor 5.4.1 → 5.5.1 age confidence
org.awaitility:awaitility (source) devDependencies minor 4.2.2 → 4.3.0 age confidence
org.dom4j:dom4j (source) devDependencies minor 2.1.4 → 2.2.0 age confidence
org.hibernate.validator:hibernate-validator (source) devDependencies minor 9.0.1.Final → 9.1.0.Final age confidence
jakarta.xml.bind:jakarta.xml.bind-api devDependencies patch 4.0.2 → 4.0.4 age confidence
jakarta.activation:jakarta.activation-api devDependencies patch 2.1.3 → 2.1.4 age confidence
org.apache.activemq:activemq-client (source) devDependencies minor 6.1.6 → 6.2.0 age confidence
com.google.cloud.sql:mysql-socket-factory-connector-j-8 devDependencies minor 1.23.1 → 1.27.1 age confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) devDependencies minor 2.6.0 → 2.8.14 age confidence
com.tmatesoft.svnkit:svnkit (source) devDependencies patch 1.10.12 → 1.10.13 age confidence
org.eclipse.jgit:org.eclipse.jgit.ssh.apache devDependencies minor 7.2.0.202503040940-r → 7.5.0.202512021534-r age confidence
org.eclipse.jgit:org.eclipse.jgit.gpg.bc devDependencies minor 7.2.0.202503040940-r → 7.5.0.202512021534-r age confidence
org.eclipse.jgit:org.eclipse.jgit devDependencies minor 7.2.0.202503040940-r → 7.5.0.202512021534-r age confidence
org.bouncycastle:bcpg-jdk18on (source) devDependencies minor 1.81 → 1.83 age confidence
org.bouncycastle:bcutil-jdk18on (source) devDependencies minor 1.81 → 1.83 age confidence
org.bouncycastle:bcprov-jdk18on (source) devDependencies minor 1.81 → 1.83 age confidence
org.bouncycastle:bcpkix-jdk18on (source) devDependencies minor 1.81 → 1.83 age confidence
org.projectlombok:lombok (source) devDependencies patch 1.18.36 → 1.18.42 age confidence
commons-codec:commons-codec (source) devDependencies minor 1.17.1 → 1.20.0 age confidence
com.squareup.retrofit2:converter-protobuf devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-gson devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-scalars devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-java8 devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-jaxb devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-simplexml devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-jackson devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:converter-wire devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:adapter-guava devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:adapter-rxjava3 devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:adapter-rxjava2 devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:adapter-java8 devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:retrofit-mock devDependencies minor 2.11.0 → 2.12.0 age confidence
com.squareup.retrofit2:retrofit devDependencies minor 2.11.0 → 2.12.0 age confidence
com.github.spotbugs:spotbugs-annotations (source) devDependencies minor 4.8.6 → 4.9.8 age confidence
io.github.classgraph:classgraph devDependencies patch 4.8.179 → 4.8.184 age confidence
joda-time:joda-time (source) devDependencies minor 2.13.1 → 2.14.0 age confidence
me.champeau.jmh plugin patch 0.7.1 → 0.7.3 age confidence
com.gradleup.shadow plugin patch 8.3.5 → 8.3.9 age confidence
org.openapi.generator plugin minor 7.8.0 → 7.18.0 age confidence
se.thinkcode.cucumber-runner plugin patch 0.0.11 → 0.0.12 age confidence
com.github.spotbugs plugin minor 6.0.26 → 6.4.8 age confidence
com.github.andygoossens.modernizer plugin minor 1.10.0 → 1.12.0 age confidence
org.sonarqube plugin minor 6.0.1.5171 → 6.3.1.5724 age confidence
com.google.cloud.tools.jib plugin minor 3.4.5 → 3.5.2 age confidence
com.gorylenko.gradle-git-properties plugin minor 2.4.2 → 2.5.4 age confidence
io.swagger.core.v3.swagger-gradle-plugin plugin patch 2.2.23 → 2.2.41 age confidence
net.ltgt.errorprone plugin minor 4.1.0 → 4.3.0 age confidence
org.springframework.boot plugin patch 3.5.6 → 3.5.9 age confidence
org.zeroturnaround.gradle.jrebel plugin patch 1.2.0 → 1.2.2 age confidence
com.jayway.jsonpath:json-path devDependencies minor 2.9.0 → 2.10.0 age confidence
org.ehcache:ehcache (source) devDependencies minor 3.10.8 → 3.11.1 age confidence
org.barfuin.gradle.taskinfo plugin patch 2.2.0 → 2.2.1 age confidence
org.quartz-scheduler:quartz (source) devDependencies patch 2.5.0 → 2.5.2 age confidence
org.apache.commons:commons-csv (source) devDependencies minor 1.12.0 → 1.14.1 age confidence
commons-io:commons-io (source) devDependencies minor 2.18.0 → 2.21.0 age confidence
software.amazon.msk:aws-msk-iam-auth (source) devDependencies minor 2.2.0 → 2.3.5 age confidence
org.apache.commons:commons-collections4 (source) devDependencies minor 4.4 → 4.5.0 age confidence
com.google.googlejavaformat:google-java-format devDependencies minor 1.24.0 → 1.33.0 age confidence
com.google.code.gson:gson devDependencies minor 2.11.0 → 2.13.2 age confidence
ch.qos.logback:logback-classic (source, changelog) devDependencies patch 1.5.19 → 1.5.23 age confidence
ch.qos.logback:logback-core (source, changelog) devDependencies patch 1.5.19 → 1.5.23 age confidence
org.glassfish.jersey:jersey-bom (source) devDependencies patch 3.1.10 → 3.1.11 age confidence
org.testcontainers:testcontainers-bom (source) devDependencies minor 1.20.4 → 1.21.4 age confidence
io.github.resilience4j:resilience4j-bom (source) devDependencies minor 2.2.0 → 2.3.0 age confidence
software.amazon.awssdk:bom devDependencies minor 2.29.9 → 2.41.0 age confidence
org.mockito:mockito-bom devDependencies minor 5.14.2 → 5.21.0 age confidence
io.cucumber:cucumber-bom (source) devDependencies minor 7.20.1 → 7.33.0 age confidence
com.fasterxml.jackson:jackson-bom devDependencies minor 2.19.2 → 2.20.1 age confidence
org.junit:junit-bom (source) devDependencies minor 5.11.3 → 5.14.1 age confidence
org.jetbrains.kotlin:kotlin-bom (source) devDependencies minor 2.0.21 → 2.3.0 age confidence
io.opentelemetry:opentelemetry-bom devDependencies minor 1.44.1 → 1.57.0 age confidence
io.awspring.cloud:spring-cloud-aws-dependencies (source) devDependencies minor 3.2.1 → 3.4.2 age confidence
org.springframework.boot:spring-boot-dependencies (source) devDependencies patch 3.5.6 → 3.5.9 age confidence
io.micrometer:micrometer-bom devDependencies minor 1.13.6 → 1.16.1 age confidence
com.gradle.common-custom-user-data-gradle-plugin plugin minor 2.0.2 → 2.4.0 age confidence

Release Notes

yawkat/lz4-java (at.yawk.lz4:lz4-java)

v1.10.2: lz4-java v1.10.2

What's Changed

New Contributors

Full Changelog: yawkat/lz4-java@v1.10.1...v1.10.2

spring-projects/spring-security (org.springframework.security:spring-security-core)

v6.5.7

Compare Source

⭐ New Features

  • Add Include-Code for the Password Storage page #​18054
  • Default WebAuthnConfigurer#rpName to rpId #​18131
  • Document effects of disabling CORS #​18129

🪲 Bug Fixes

  • typ values should not be case-sensitive in JwtTypeValidator #​18101
  • BCryptPasswordEncoderTests should password limit of 72 bytes #​18136
  • Fix GenerateOneTimeTokenRequestResolver ignored if username param not present #​18074
  • GenerateOneTimeTokenFilter should not attempt to generate a token with a null token request #​18088

🔨 Dependency Upgrades

  • Bump com.fasterxml.jackson:jackson-bom from 2.18.4.1 to 2.18.5 #​18110
  • Bump io.micrometer:micrometer-observation from 1.14.12 to 1.14.13 #​18149
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.11 to 1.0.13 #​18141
  • Bump org-aspectj from 1.9.24 to 1.9.25 #​18142
  • Bump org.hibernate.orm:hibernate-core from 6.6.33.Final to 6.6.34.Final #​18111
  • Update to Reactor 2024.0.12 #​18181
  • Update to Spring Data 2024.1.12 #​18182
  • Update to Spring Framework 6.2.13 #​18180

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​himanshu-pareek, @​marcusdacoregio, and @​namest504

v6.5.6

Compare Source

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.19 to 1.5.20 #​18082
  • Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 #​17930
  • Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE #​17929
  • Bump io.micrometer:micrometer-observation from 1.14.11 to 1.14.12 #​18045
  • Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 #​17950
  • Bump org.gretty:gretty from 4.1.7 to 4.1.10 #​17945
  • Bump org.hibernate.orm:hibernate-core from 6.6.31.Final to 6.6.33.Final #​18039
  • Bump org.springframework.data:spring-data-bom from 2024.1.10 to 2024.1.11 #​18083
  • Bump org.springframework.ldap:spring-ldap-core from 3.2.14 to 3.2.15 #​18067
  • Bump org.springframework:spring-framework-bom from 6.2.11 to 6.2.12 #​18068

v6.5.5

Compare Source

🔨 Dependency Upgrades

  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17922
  • Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11 #​17911
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 #​17923
  • Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4 #​17910
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17924
  • Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final #​17913
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17925
  • Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10 #​17912
  • Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11 #​17926
  • Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11 #​17914
spring-projects/spring-framework (org.springframework:spring-core)

v6.2.15

⭐ New Features

  • Avoid package cycle caused by use of UriComponentsBuilder in ServletServerHttpRequest #​35954
  • DefaultHandshakeHandler should not log client faults on error level #​35948
  • Use concurrent set behind reactive TransactionSynchronizationManager#registerSynchronization #​35922
  • Expose Collection on FragmentsRendering to facilitate Unit Tests #​35912
  • Different ReactorNettyWebSocketSession call getId() may return the same value #​35911
  • Enhance handleTypeMismatch error message in ResponseEntityExceptionHandler #​35878

🐞 Bug Fixes

  • NullPointerException thrown from JdkClientHttpRequestFactory for null request header value #​35998
  • State inconsistency in LazyConnectionDataSourceProxy when connection settings fail #​35981
  • SubscriberInputStream#resume misuses parked thread reference #​35979
  • PathMatchingResourcePatternResolver fails with URI in JAR manifest Class-Path entries #​35967
  • Strong locking in ConcurrentReferenceHashMap#computeIfAbsent may cause context initialisation deadlock #​35945
  • BridgeMethodResolver change in 6.2.13 breaks Spring Data entity introspection #​35941
  • DefaultMessageListenerContainer does not clear Session and MessageConsumer for paused invokers #​35935
  • Tighten cacheable decision behind @Lazy injection point #​35918
  • Use provided ReactiveAdapterRegistry in BindingContext constructor #​35914
  • Accidental fallback match for Collection-type beans due to @Bean-level qualifier annotation #​35909
  • SortedResourcesFactoryBean does not accept non-existent resources anymore #​35896

📔 Documentation

  • Document that annotations are ignored if attributes reference types not present in the classpath #​35973
  • Fix broken Javadoc links to methods #​35904
  • Refer to "Spring Tools" instead of "Spring Tools for Eclipse" in reference manual #​35902
  • Clarify JMS sessionTransacted flag for local versus global transaction #​35898
  • Reference docs should not use obsolete "junit5" links #​35893
  • Testing chapter references nonexistent Dependency Management documentation #​35891

🔨 Dependency Upgrades

v6.2.14

⭐ New Features

  • Add resetCaches() method to Caffeine/ConcurrentMapCacheManager #​35841
  • Fix single-check idiom in UnmodifiableMultiValueMap #​35831
  • Fix Spliterator characteristics in ConcurrentReferenceHashMap [#​35828](https://redirect.github.com/sp

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate bot added the renovate https://renovate.whitesourcesoftware.com [FINERACT-962] label Oct 20, 2025
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from f3c0e3f to f9abc1b Compare October 27, 2025 18:58
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 7b1803f to 2d603c8 Compare November 1, 2025 08:41
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 9 times, most recently from 1c9bf7b to ca353ec Compare November 7, 2025 21:40
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 13 times, most recently from 9f06f6b to 1f045c0 Compare December 16, 2025 09:36
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 11 times, most recently from 492ebc6 to 7f62610 Compare December 23, 2025 17:49
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 54a7454 to 7c6ccae Compare December 30, 2025 12:40
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 7c6ccae to a51a3af Compare December 31, 2025 02:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@galovics galovics galovics approved these changes

Assignees

No one assigned

Labels

renovate https://renovate.whitesourcesoftware.com [FINERACT-962]

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @galovics