Skip to content

build(deps): bump the gradle group across 2 directories with 36 updates - #516

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-191e20e36c
Open

build(deps): bump the gradle group across 2 directories with 36 updates#516
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/gradle-191e20e36c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the gradle group with 32 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-dependencies 4.0.6 4.1.0
org.springframework.vault:spring-vault-core 4.0.2 4.1.0
org.springframework.modulith:spring-modulith-bom 2.0.6 2.1.0
org.springframework.cloud:spring-cloud-starter-vault-config 5.0.1 5.0.2
com.nimbusds:nimbus-jose-jwt 10.9 10.9.1
org.bouncycastle:bcpkix-jdk18on 1.84 1.85
com.google.auth:google-auth-library-oauth2-http 1.47.0 1.50.0
org.apache.tika:tika-core 3.3.1 3.3.2
com.googlecode.libphonenumber:libphonenumber 9.0.31 9.0.36
org.springframework.retry:spring-retry 2.0.12 2.0.13
org.mariadb.jdbc:mariadb-java-client 3.5.8 3.5.10
com.fasterxml.jackson.module:jackson-module-kotlin 2.21.3 2.22.1
org.openapitools:jackson-databind-nullable 0.2.10 0.2.11
org.springdoc:springdoc-openapi-starter-webmvc-ui 3.0.2 3.1.0
org.commonmark:commonmark 0.28.0 0.29.0
io.rest-assured:spring-mock-mvc 6.0.0 6.0.1
io.github.classgraph:classgraph 4.8.184 4.8.186
io.mockk:mockk 1.14.9 1.14.11
com.h2database:h2 2.3.232 2.4.240
org.graalvm.buildtools.native 1.1.1 1.1.7
plugin.jpa 2.3.21 2.4.10
plugin.allopen 2.3.21 2.4.10
plugin.noarg 2.3.21 2.4.10
kapt 2.3.21 2.4.10
org.springframework.security:spring-security-crypto 7.0.5 7.1.0
tools.jackson.module:jackson-module-kotlin 3.1.3 3.2.1
io.rest-assured:rest-assured 6.0.0 6.0.1
com.microsoft.playwright:playwright 1.60.0 1.61.0
org.junit.jupiter:junit-jupiter 6.1.0 6.1.2
org.jetbrains.kotlin:kotlin-gradle-plugin 2.3.21 2.4.10
org.springframework.boot:spring-boot-gradle-plugin 4.0.6 4.1.0
gradle-wrapper 9.5.1 9.6.1

Bumps the gradle group with 3 updates in the /build-logic directory: org.jetbrains.kotlin:kotlin-gradle-plugin, org.springframework.boot:spring-boot-gradle-plugin and org.openapitools:openapi-generator-gradle-plugin.

Updates org.springframework.boot:spring-boot-dependencies from 4.0.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-dependencies's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.vault:spring-vault-core from 4.0.2 to 4.1.0

Release notes

Sourced from org.springframework.vault:spring-vault-core's releases.

4.1.0

📗 Links

⭐ New Features

  • Support Pattern for Matches (Regex) query keywords #1000
  • Use set-based lookups for IN and NOT_IN query predicates #999
  • Build against Vault 2.0.0 #994
  • Add Key/Value version detection to VaultTemplate #974
  • Enable secrets without a Lease for rotation #973
  • Introduce ManagedSecret API #972
  • Add CertificateContainer for managed certificate issuance and rotation #969
  • Add VaultClient abstraction #942

🐞 Bug Fixes

  • Remove rule from set before adding another one with the same path #998
  • Use independent JacksonCompat as class loader source #987
  • JacksonCompat class loader from Jackson2 class causing potential Jackson 2 initialization #986
  • Use default constructor for JacksonHttpMessageConverters #977
  • Jackson Kotlin support broken in 4.0 #976

📔 Documentation

  • Document SecretLeaseContainer and CertificateContainer usage #970
  • Align secrets engines and auth methods terminology #963
  • Documentation grammar #959

🔨 Dependency Upgrades

  • Upgrade to Spring Data 2026.0.0 #1002
  • Upgrade to Spring Framework 7.0.7 #1001
  • Upgrade to Kotlin 2.3.20 #991
  • Upgrade to Spring Data 2026.0.0-RC1 #990
  • Upgrade to Spring Framework 7.0.7 #988
  • Upgrade to Jackson 3.1.0 #983
  • Upgrade to Spring Framework 7.0.6 #982
  • Upgrade dependencies #979
  • Bump org.assertj:assertj-core from 3.27.6 to 3.27.7 #975
  • Upgrade to Vault 1.21 #962

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

4.1.0-RC1

📗 Links

... (truncated)

Commits
  • 83514ce Release Spring Vault 4.1.0.
  • 4298eff Upgrade to Spring Data 2025.1.6, Spring Security 7.0.6, Reactor 2025.0.6
  • 94e3588 Upgrade to Spring Data 2026.0.0.
  • d0d8e61 Upgrade to Spring Framework 7.0.7.
  • 89bdb80 Upgrade build dependencies.
  • dedce00 Upgrade build dependencies.
  • 680015d Support Pattern for Matches (Regex) query keywords.
  • f6cdeef Polishing.
  • f78d715 Polishing.
  • 9a6b97b Use set-based lookups for IN and NOT_IN query predicates.
  • Additional commits viewable in compare view

Updates org.springframework.modulith:spring-modulith-bom from 2.0.6 to 2.1.0

Release notes

Sourced from org.springframework.modulith:spring-modulith-bom's releases.

2.1 GA

⭐ New Features

Outbox

  • Support for event outbox via Namastack #1517
  • Support for externalizing events via JobRunr #1637
  • Avoid executing Flyway migrations for modules without any migrations #1684

EPR

  • Allow opting out of event publication registry handling for an @TransactionalEventListener #1630
  • Enable JDBC event publication schema creation by default #1563
  • Make sure that JDBC EPR schema initialization runs after Boot's file-based one #1568

Testing

  • Support for application module testing in combination with Boot's slice test support #1573
  • Open up PublishedEvents and Scenario to see events from all threads by default #1564

Observability

  • Streamline observability infrastructure #1567
  • Split up observability support into API and core artifact #1559

Moments

  • Allow Moments' events to be (de)serialized by Jackson #1569

💡 Improvements

Core

  • Prefer @SpringBootApplication on explicitly declared classes in @ModuleSlicing #1644
  • Allow FormattableType to also abbreviate non-module types #1566

Outbox

  • Require RabbitMQ publisher confirmation for outbox-based externalization #1727
  • Block for externalization in outbox mode #1687
  • Improve transaction handling in JobRunr integration #1655

EPR

  • Switch to SHA-256 for event hashing in Neo4jEventPublicationRepository #1718
  • Simplify default status assignment in JpaEventPublication #1703
  • Unify event externalization infrastructure #1642
  • Add details about the refined event publication lifecycle to the reference documentation #1593
  • Avoid recreation of TransactionalEventListeners in PersistentApplicationEventMulticaster #1632
  • Hibernate schema validation fails with JPA event publication registry #1543

JUnit Extension

  • Allow skipping all tests if no changes are detected #1438

APT

  • SpringModulithProcessor fails on Windows with KAPT - StringIndexOutOfBoundsException due to hardcoded forward slashes #1544

Moments

... (truncated)

Commits

Updates org.springframework.cloud:spring-cloud-starter-vault-config from 5.0.1 to 5.0.2

Release notes

Sourced from org.springframework.cloud:spring-cloud-starter-vault-config's releases.

5.0.2

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​dependabot[bot]

What's Changed

Full Changelog: spring-cloud/spring-cloud-vault@v5.0.1...v5.0.2

Commits
  • 5c435fa Update SNAPSHOT to 5.0.2
  • 6027f1b Upgrade to Spring Vault 4.0.3
  • f98987d Merge pull request #945 from spring-cloud/dependabot/npm_and_yarn/docs/main/s...
  • f62fe08 Bump @​springio/antora-extensions from 1.14.11 to 1.14.12 in /docs
  • 461a696 Use PR workflow
  • bf81531 Bumping versions
  • 996f864 Upgrading antora to 3.2.0-alpha.12
  • b7e14b8 Merge pull request #937 from spring-cloud/dependabot/maven/main/org.springfra...
  • 42c9e8b Bump org.springframework.vault:spring-vault-core from 4.0.1 to 4.0.2
  • bf948d0 Merge pull request #935 from spring-cloud/dependabot/npm_and_yarn/docs/main/s...
  • Additional commits viewable in compare view

Updates com.nimbusds:nimbus-jose-jwt from 10.9 to 10.9.1

Commits
  • 94f4387 [maven-release-plugin] prepare for next development iteration
  • 5370446 Back-ports fix for iss #619
  • 62d00fc [maven-release-plugin] prepare release 10.9.1
  • See full diff in compare view

Updates org.bouncycastle:bcpkix-jdk18on from 1.84 to 1.85

Changelog

Sourced from org.bouncycastle:bcpkix-jdk18on's changelog.

... (truncated)

Commits

Updates com.google.auth:google-auth-library-oauth2-http from 1.47.0 to 1.50.0

Updates org.apache.tika:tika-core from 3.3.1 to 3.3.2

Changelog

Sourced from org.apache.tika:tika-core's changelog.

Release 3.3.2 - 7/16/2026

  • Dependency upgrades (TIKA-4738).

  • tika-server now requires enableUnsecureFeatures=true when the /pipes, /async, or /status endpoints are selected; the server refuses to start otherwise (TIKA-4760).

  • Port the 4.x SAX-based OOXML parsers to 3.x and make SAX default. The docx/pptx/xlsx/vsdx SAX parsers gain field-code hyperlink extraction, inlined footnotes/endnotes/comments, balanced-XHTML recovery on error, and XMLBeans-free xlsx/xlsb reading. The DOM docx/pptx parsers can still be configured via useSAXDocxExtractor/useSAXPptxExtractor (TIKA-4692, TIKA-4708, TIKA-4790).

Release 3.3.1 - 5/20/2026

  • Dependency upgrades (TIKA-4695).

  • Use the IANA-registered text/markdown as the primary media type, with text/x-web-markdown and text/x-markdown kept as aliases (TIKA-4724).

  • Fix several potential resource/file-handle leaks across the OOXML and ODF parsers, the HTTP fetcher, the gRPC server, and ForkClient (TIKA-4704).

  • The resourceName of a nested tarball no longer includes the parent directories of its parent gzip file, and fix a typo in the .gz extension (TIKA-4705).

Release 3.3.0 - 3/18/2026

  • Switch to poi-ooxml-full (TIKA-4563).

  • Users need to add "allowAbsolutePaths=true" for the FileSystemFetcher to fetch an absolute path (TIKA-4649).

  • Add a markdown option for content handlers (TIKA-4563).

  • Improve zip parsing (TIKA-4650).

  • Add detection of compressed bmp (TIKA-4511).

  • Allow per file timeouts in tika-pipes (TIKA-4497).

  • Add matroska detector (TIKA-1180).

  • Allow multiple values for many Dublin Core keys (TIKA-4466).

  • Extract macros by default in tika-app's commandline and gui (TIKA-4472).

  • Improve extraction of Javascript from PDFs (TIKA-4465).

... (truncated)

Commits
  • b8a6916 [maven-release-plugin] prepare release 3.3.2-rc1
  • bf67012 Prep for 3.3.2 rc1, another day...
  • a2d8362 Prep for 3.3.2 rc1, bump maven version
  • df5130f Prep for 3.3.2 rc1, roll back release version
  • d6cc513 Prep for 3.3.2 rc1, javadocs
  • 73865f9 [maven-release-plugin] prepare for next development iteration
  • c8a2d64 [maven-release-plugin] prepare release 3.3.2-rc1
  • 63f4a95 Prep for 3.3.2 rc1
  • 3cecc5b TIKA-4790 -- make sax parsing default in 3.x (#2957)
  • 883805d backport javadocs aggregate fix from main (#2958)
  • Additional commits viewable in compare view

Updates com.googlecode.libphonenumber:libphonenumber from 9.0.31 to 9.0.36

Release notes

Sourced from com.googlecode.libphonenumber:libphonenumber's releases.

v9.0.36

Hi all,

Please find the new JARs on the maven site here.

The new release contains mostly metadata changes.

Thanks to all those who contributed by providing issue reports! See detailed release notes.

Want to be notified of future releases? Join the discussion group!

v9.0.35

Hi all,

Please find the new JARs on the maven site here.

The new release contains mostly metadata changes. Thanks to all those who contributed by providing issue reports! See detailed release notes.

Want to be notified of future releases? Join the discussion group!

v9.0.34

Hi all,

Please find the new JARs on the maven site here.

The new release contains mostly metadata changes. Thanks to all those who contributed by providing issue reports! See detailed release notes.

Want to be notified of future releases? Join the discussion group!

v9.0.33

Hi all,

Please find the new JARs on the maven site here.

The new release contains mostly metadata changes. Thanks to all those who contributed by providing issue reports! See detailed release notes.

Want to be notified of future releases? Join the discussion group!

v9.0.32

Hi all,

Please find the new JARs on the maven site here.

... (truncated)

Changelog

Sourced from com.googlecode.libphonenumber:libphonenumber's changelog.

Jul 30, 2026: v9.0.36 Metadata changes:

  • Updated alternate formatting data for country calling code(s): 995
  • Updated phone metadata for region code(s): BD, EH, FO, GE, IL, LI, MA, ML, NO, SJ
  • Updated short number metadata for region code(s): FO, IT
  • Updated carrier data for country calling code(s): 47 (en), 61 (en), 212 (en), 256 (en), 298 (en), 423 (en), 972 (en), 995 (en)

Jul 16, 2026: v9.0.35 Metadata changes:

  • Updated alternate formatting data for country calling code(s): 995
  • Updated phone metadata for region code(s): AC, CN, FO, GE, IR, KE, SE, UG, ZW
  • Updated short number metadata for region code(s): FR
  • Updated geocoding data for country calling code(s): 86 (en, zh)
  • Updated carrier data for country calling code(s): 61 (en), 86 (en, zh), 93 (en, fa), 247 (en), 250 (en), 254 (en), 256 (en), 263 (en), 298 (en), 420 (en), 976 (en), 995 (en)

Jul 02, 2026: v9.0.34 Metadata changes:

  • Updated alternate formatting data for country calling code(s): 34
  • Updated phone metadata for region code(s): CM, ES, GY, HN, MZ, SR, TM, TZ, US, UZ
  • Updated geocoding data for country calling code(s): 504 (en)
  • Updated carrier data for country calling code(s): 46 (en), 255 (en), 258 (en), 352 (en), 381 (en), 592 (en), 597 (en), 886 (en), 998 (en)
  • Updated / refreshed time zone meta data.

Jun 17, 2026: v9.0.33 Metadata changes:

  • Updated phone metadata for region code(s): BF, KE, MC, MW, NO, SG, SI, UG, VN
  • Updated geocoding data for country calling code(s): 47 (en)
  • Updated carrier data for country calling code(s): 36 (en), 40 (en), 65 (en), 84 (en), 232 (en), 235 (en), 250 (en), 256 (en), 265 (en), 386 (en), 503 (en), 1868 (en)

Jun 03, 2026: v9.0.32 Metadata changes:

  • Updated phone metadata for region code(s): DZ, JP, NO, SJ, SO, UG
  • Updated carrier data for country calling code(s): 33 (en), 47 (en), 233 (en), 252 (en), 256 (en)

May 20, 2026: v9.0.31 Metadata changes:

  • Updated alternate formatting data for country calling code(s): 84
  • Updated phone metadata for region code(s):

... (truncated)

Commits

Updates org.springframework.retry:spring-retry from 2.0.12 to 2.0.13

Release notes

Sourced from org.springframework.retry:spring-retry's releases.

v2.0.13

⭐ New Features

  • Add automatic module metadata #494

🐞 Bug Fixes

  • Cache capacity limit prevents updates to existing entries in RetryContextCache #505
  • RecoverAnnotationRecoveryHandler chooses wrong @Recover method when JVM returns non-deterministic getDeclaredMethods order #496

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.15.12 #503
  • Upgrade to Spring Framework 6.2.19 #502
Commits
  • f101212 Release v2.0.13
  • 96b5e39 Fix name of attributes in artifacts.spec
  • 320e36a Refresh CI configuration
  • 6f351ed Implement LRU eviction and separate caches for RetryContextCache
  • 6a8b109 Upgrade to Spring Framework 6.2.19
  • 979f6dc Upgrade to Micrometer 1.15.12
  • ad874b8 Upgrade to AspectJ 1.9.25.1
  • f4ebd2e Start building against Micrometer 1.15.12 snapshots
  • a75315d Start building against Spring Framework 6.2.19 snapshots
  • 722db6d Bump org.assertj:assertj-core from 3.27.3 to 3.27.7
  • Additional commits viewable in compare view

Updates org.mariadb.jdbc:mariadb-java-client from 3.5.8 to 3.5.10

Release notes

Sourced from org.mariadb.jdbc:mariadb-java-client's releases.

MariaDB Connector/Java 3.5.10

3.5.10 (Jul 2026)

Full Changelog

Key Enhancements

  • CONJ-1333 - Add maxAllowedPacket connection option (send/receive limit)
  • CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
  • CONJ-1330 - add infer test to CI

Issues Resolved

  • CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
  • CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is attacker-controlled (report by Qing Xu)
  • CONJ-1307 - Connection.setReadOnly(true) still allows DML statements to execute
  • CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
  • CONJ-1327 - Align SSL hostname verification with TLS libraries (thanks to jmestwa-coder)
  • CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to jmestwa-coder)
  • CONJ-1331 - trustStore-configured TLS connections defer certificate-chain/identity validation instead of validating up front (thanks to jmestwa-coder)
  • CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to jmestwa-coder)
  • CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own password is supplied (report by fg0x0)
  • CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to jmestwa-coder)
  • CONJ-1338 - Validate length-encoded integers fit a non-negative int before use as a length (report by fg0x0)
  • CONJ-1336 - CONJ-1282 regression: TLS connection fails when JDBC hostname is an absolute FQDN ending with a trailing dot (report by Shaswata, thanks to Pepo48 for PR)
  • CONJ-1335 - getGeneratedKeys() throws "integer overflow" after a batch insert when the auto-increment value exceeds Integer.MAX_VALUE, and returns bulk generated keys out of batch order

MariaDB Connector/Java 3.5.9

3.5.9 (Jun 2026)

Full Changelog

Key Enhancements

  • CONJ-1223 - cache TLS trust/key managers across connections to reduce SSL connection cost
  • CONJ-1314 - add SPI for interactive dialog (PAM) authentication callback
  • CONJ-1311 - add dedicated option useIpForKillQuery for query cancellation
  • CONJ-1310 - Add full native image support and CI coverage

Issues Resolved

  • CONJ-1320 - PAM (dialog) authentication must require a secure connection (report by fg0x0)
  • CONJ-1319 - Use constant-time comparison when validating the server certificate fingerprint (report by jmestwa-coder)
  • CONJ-1318 - enforce allowLocalInfile=false on the server's local-infile request, so a malicious server cannot read a client file despite the option being disabled

... (truncated)

Changelog

Sourced from org.mariadb.jdbc:mariadb-java-client's changelog.

3.5.10 (Jul 2026)

Full Changelog

Key Enhancements

  • CONJ-1333 - Add maxAllowedPacket connection option (send/receive limit)
  • CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
  • CONJ-1330 - add infer test to CI

Issues Resolved

  • CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
  • CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is attacker-controlled (report by Qing Xu)
  • CONJ-1307 - Connection.setReadOnly(true) still allows DML statements to execute
  • CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
  • CONJ-1327 - Align SSL hostname verification with TLS libraries (thanks to jmestwa-coder)
  • CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to jmestwa-coder)
  • CONJ-1331 - trustStore-configured TLS connections defer certificate-chain/identity validation instead of validating up front (thanks to jmestwa-coder)
  • CONJ-1340 - SQL injection via unescaped identifiers in updatable ResultSet generated statements (thanks to jmestwa-coder)
  • CONJ-1341 - MariaDbPoolDataSource.getConnection(user, password) ignores the user argument when the pool's own password is supplied (report by fg0x0)
  • CONJ-1328 - restrictedAuth allowlist is matched with substring contains() instead of equality (thanks to jmestwa-coder)
  • CONJ-1338 - Validate length-encoded integers fit a non-negative int before use as a length (report by fg0x0)
  • CONJ-1336 - CONJ-1282 regression: TLS connection fails when JDBC hostname is an absolute FQDN ending with a trailing dot (report by Shaswata, thanks to Pepo48 for PR)
  • CONJ-1335 - getGeneratedKeys() throws "integer overflow" after a batch insert when the auto-increment value exceeds Integer.MAX_VALUE, and returns bulk generated keys out of batch order

3.4.4 (Jul 2026)

Full Changelog

Notable Changes
  • CONJ-1339 - Add maxAllowedColumns option to bound server-announced column count (report by fg0x0)
Bugs Fixed
  • CONJ-1332 - Reject multipart (>16 MB) packets before authentication to prevent pre-auth OOM from a rogue server
  • CONJ-1342 - socketFactory option allows loading arbitrary bytecode via jar: URL, enabling RCE when JDBC URL is attacker-controlled (report by Qing Xu)
  • CONJ-1326 - Unsafe escaping in enquoteLiteral()/enquoteNCharLiteral() (thanks to jmestwa-coder)
  • CONJ-1329 - LOAD DATA LOCAL INFILE validation fails open when a bound parameter can't be rendered (thanks to jmestwa-coder)

... (truncated)

Commits
  • 6164678 [misc] update changelog
  • 6f58858 [CONJ-1335] getGeneratedKeys() throws SQLDataException "integer overflow" aft...
  • 9f06db7 [misc] CI stability improvement
  • 99aa9e2 [CONJ-1336] correction follow up
  • 28a1550 [CONJ-1336] strip trailing dot from hostname before SNI and hostname verifica...
  • b2b3f1b [misc] limit authentication switch requests to 10 per connection
  • 26ca60a [misc] bound the whole connection phase by connectTimeout
  • 15e08ff [CONJ-1337] Limit parsec authentication PBKDF2 iteration factor to the connec...
  • d3c4a72 bump 3.5.10 version
  • d85e05f [CONJ-1342] socketFactory option allows loading arbitrary bytecode via jar: U...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.module:jackson-module-kotlin from 2.21.3 to 2.22.1

Commits
  • fa5d039 [maven-release-plugin] prepare release jackson-module-kotlin-2.22.1
  • 8120302 Prep for 2.22.1 release
  • fcc1c90 Merge branch '2.21' into 2.22
  • c497f80 Post-release dep version bump

@dependabot
build(deps): bump the gradle group across 2 directories with 36 updates
cda23e9 
Bumps the gradle group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `4.0.6` | `4.1.0` |
| [org.springframework.vault:spring-vault-core](https://github.com/spring-projects/spring-vault) | `4.0.2` | `4.1.0` |
| [org.springframework.modulith:spring-modulith-bom](https://github.com/spring-projects/spring-modulith) | `2.0.6` | `2.1.0` |
| [org.springframework.cloud:spring-cloud-starter-vault-config](https://github.com/spring-cloud/spring-cloud-vault) | `5.0.1` | `5.0.2` |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.9` | `10.9.1` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.84` | `1.85` |
| com.google.auth:google-auth-library-oauth2-http | `1.47.0` | `1.50.0` |
| [org.apache.tika:tika-core](https://github.com/apache/tika) | `3.3.1` | `3.3.2` |
| [com.googlecode.libphonenumber:libphonenumber](https://github.com/google/libphonenumber) | `9.0.31` | `9.0.36` |
| [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry) | `2.0.12` | `2.0.13` |
| [org.mariadb.jdbc:mariadb-java-client](https://github.com/mariadb-corporation/mariadb-connector-j) | `3.5.8` | `3.5.10` |
| [com.fasterxml.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `2.21.3` | `2.22.1` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.10` | `0.2.11` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `3.0.2` | `3.1.0` |
| [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) | `0.28.0` | `0.29.0` |
| io.rest-assured:spring-mock-mvc | `6.0.0` | `6.0.1` |
| [io.github.classgraph:classgraph](https://github.com/classgraph/classgraph) | `4.8.184` | `4.8.186` |
| [io.mockk:mockk](https://github.com/mockk/mockk) | `1.14.9` | `1.14.11` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `2.3.232` | `2.4.240` |
| [org.graalvm.buildtools.native](https://github.com/graalvm/native-build-tools) | `1.1.1` | `1.1.7` |
| [plugin.jpa](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [plugin.allopen](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [plugin.noarg](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [kapt](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [org.springframework.security:spring-security-crypto](https://github.com/spring-projects/spring-security) | `7.0.5` | `7.1.0` |
| [tools.jackson.module:jackson-module-kotlin](https://github.com/FasterXML/jackson-module-kotlin) | `3.1.3` | `3.2.1` |
| [io.rest-assured:rest-assured](https://github.com/rest-assured/rest-assured) | `6.0.0` | `6.0.1` |
| [com.microsoft.playwright:playwright](https://github.com/microsoft/playwright-java) | `1.60.0` | `1.61.0` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.1.0` | `6.1.2` |
| [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin) | `2.3.21` | `2.4.10` |
| [org.springframework.boot:spring-boot-gradle-plugin](https://github.com/spring-projects/spring-boot) | `4.0.6` | `4.1.0` |
| [gradle-wrapper](https://github.com/gradle/gradle) | `9.5.1` | `9.6.1` |

Bumps the gradle group with 3 updates in the /build-logic directory: [org.jetbrains.kotlin:kotlin-gradle-plugin](https://github.com/JetBrains/kotlin), [org.springframework.boot:spring-boot-gradle-plugin](https://github.com/spring-projects/spring-boot) and [org.openapitools:openapi-generator-gradle-plugin](https://github.com/OpenAPITools/openapi-generator).


Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.6...v4.1.0)

Updates `org.springframework.vault:spring-vault-core` from 4.0.2 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-vault/releases)
- [Commits](spring-projects/spring-vault@4.0.2...4.1.0)

Updates `org.springframework.modulith:spring-modulith-bom` from 2.0.6 to 2.1.0
- [Release notes](https://github.com/spring-projects/spring-modulith/releases)
- [Commits](spring-projects/spring-modulith@2.0.6...2.1.0)

Updates `org.springframework.cloud:spring-cloud-starter-vault-config` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/spring-cloud/spring-cloud-vault/releases)
- [Changelog](https://github.com/spring-cloud/spring-cloud-vault/blob/main/release-train-settings.xml)
- [Commits](spring-cloud/spring-cloud-vault@v5.0.1...v5.0.2)

Updates `com.nimbusds:nimbus-jose-jwt` from 10.9 to 10.9.1
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.9.1..10.9)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.84 to 1.85
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.auth:google-auth-library-oauth2-http` from 1.47.0 to 1.50.0

Updates `org.apache.tika:tika-core` from 3.3.1 to 3.3.2
- [Changelog](https://github.com/apache/tika/blob/3.3.2/CHANGES.txt)
- [Commits](apache/tika@3.3.1...3.3.2)

Updates `com.googlecode.libphonenumber:libphonenumber` from 9.0.31 to 9.0.36
- [Release notes](https://github.com/google/libphonenumber/releases)
- [Changelog](https://github.com/google/libphonenumber/blob/master/release_notes.txt)
- [Commits](google/libphonenumber@v9.0.31...v9.0.36)

Updates `org.springframework.retry:spring-retry` from 2.0.12 to 2.0.13
- [Release notes](https://github.com/spring-projects/spring-retry/releases)
- [Commits](spring-attic/spring-retry@v2.0.12...v2.0.13)

Updates `org.mariadb.jdbc:mariadb-java-client` from 3.5.8 to 3.5.10
- [Release notes](https://github.com/mariadb-corporation/mariadb-connector-j/releases)
- [Changelog](https://github.com/mariadb-corporation/mariadb-connector-j/blob/main/CHANGELOG.md)
- [Commits](mariadb-corporation/mariadb-connector-j@3.5.8...3.5.10)

Updates `com.fasterxml.jackson.module:jackson-module-kotlin` from 2.21.3 to 2.22.1
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-2.21.3...jackson-module-kotlin-2.22.1)

Updates `org.openapitools:jackson-databind-nullable` from 0.2.10 to 0.2.11
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.10...v0.2.11)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 3.0.2 to 3.1.0
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v3.0.2...v3.1.0)

Updates `org.commonmark:commonmark` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/commonmark/commonmark-java/releases)
- [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md)
- [Commits](commonmark/commonmark-java@commonmark-parent-0.28.0...commonmark-parent-0.29.0)

Updates `org.commonmark:commonmark-ext-gfm-tables` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/commonmark/commonmark-java/releases)
- [Changelog](https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md)
- [Commits](commonmark/commonmark-java@commonmark-parent-0.28.0...commonmark-parent-0.29.0)

Updates `io.rest-assured:spring-mock-mvc` from 6.0.0 to 6.0.1

Updates `io.github.classgraph:classgraph` from 4.8.184 to 4.8.186
- [Release notes](https://github.com/classgraph/classgraph/releases)
- [Commits](classgraph/classgraph@classgraph-4.8.184...classgraph-4.8.186)

Updates `io.mockk:mockk` from 1.14.9 to 1.14.11
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](mockk/mockk@1.14.9...v1.14.11)

Updates `com.h2database:h2` from 2.3.232 to 2.4.240
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-2.3.232...version-2.4.240)

Updates `org.graalvm.buildtools.native` from 1.1.1 to 1.1.7
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
- [Commits](graalvm/native-build-tools@1.1.1...1.1.7)

Updates `plugin.jpa` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `plugin.allopen` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `plugin.noarg` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `kapt` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `plugin.allopen` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `plugin.noarg` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `kapt` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.springframework.security:spring-security-crypto` from 7.0.5 to 7.1.0
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@7.0.5...7.1.0)

Updates `tools.jackson.module:jackson-module-kotlin` from 3.1.3 to 3.2.1
- [Commits](FasterXML/jackson-module-kotlin@jackson-module-kotlin-3.1.3...jackson-module-kotlin-3.2.1)

Updates `io.rest-assured:rest-assured` from 6.0.0 to 6.0.1
- [Changelog](https://github.com/rest-assured/rest-assured/blob/master/changelog.txt)
- [Commits](rest-assured/rest-assured@rest-assured-6.0.0...rest-assured-6.0.1)

Updates `com.microsoft.playwright:playwright` from 1.60.0 to 1.61.0
- [Release notes](https://github.com/microsoft/playwright-java/releases)
- [Commits](microsoft/playwright-java@v1.60.0...v1.61.0)

Updates `org.junit.jupiter:junit-jupiter` from 6.1.0 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.1.0...r6.1.2)

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-allopen` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-noarg` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.springframework.boot:spring-boot-gradle-plugin` from 4.0.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.6...v4.1.0)

Updates `gradle-wrapper` from 9.5.1 to 9.6.1
- [Release notes](https://github.com/gradle/gradle/releases)
- [Commits](gradle/gradle@v9.5.1...v9.6.1)

Updates `org.jetbrains.kotlin:kotlin-gradle-plugin` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-allopen` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-noarg` from 2.3.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.3.21...v2.4.10)

Updates `org.springframework.boot:spring-boot-gradle-plugin` from 4.0.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.6...v4.1.0)

Updates `org.openapitools:openapi-generator-gradle-plugin` from 7.22.0 to 7.24.0
- [Release notes](https://github.com/OpenAPITools/openapi-generator/releases)
- [Changelog](https://github.com/OpenAPITools/openapi-generator/blob/master/docs/release-summary.md)
- [Commits](OpenAPITools/openapi-generator@v7.22.0...v7.24.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.vault:spring-vault-core
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.modulith:spring-modulith-bom
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.cloud:spring-cloud-starter-vault-config
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: 10.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.85'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: com.google.auth:google-auth-library-oauth2-http
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.apache.tika:tika-core
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.googlecode.libphonenumber:libphonenumber
  dependency-version: 9.0.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springframework.retry:spring-retry
  dependency-version: 2.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.mariadb.jdbc:mariadb-java-client
  dependency-version: 3.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.fasterxml.jackson.module:jackson-module-kotlin
  dependency-version: 2.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.commonmark:commonmark
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.commonmark:commonmark-ext-gfm-tables
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: io.rest-assured:spring-mock-mvc
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: io.github.classgraph:classgraph
  dependency-version: 4.8.186
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: io.mockk:mockk
  dependency-version: 1.14.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.h2database:h2
  dependency-version: 2.4.240
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.graalvm.buildtools.native
  dependency-version: 1.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: plugin.jpa
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: plugin.allopen
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: plugin.noarg
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: kapt
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: plugin.allopen
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: plugin.noarg
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: kapt
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.security:spring-security-crypto
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: tools.jackson.module:jackson-module-kotlin
  dependency-version: 3.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: io.rest-assured:rest-assured
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: com.microsoft.playwright:playwright
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle
- dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.jetbrains.kotlin:kotlin-allopen
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.jetbrains.kotlin:kotlin-noarg
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-gradle-plugin
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: gradle-wrapper
  dependency-version: 9.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.jetbrains.kotlin:kotlin-gradle-plugin
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.jetbrains.kotlin:kotlin-allopen
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.jetbrains.kotlin:kotlin-noarg
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.springframework.boot:spring-boot-gradle-plugin
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
- dependency-name: org.openapitools:openapi-generator-gradle-plugin
  dependency-version: 7.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants