Skip to content

fix(deps): bump the prod-deps group across 1 directory with 11 updates #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): bump the prod-deps group across 1 directory with 11 updates #96

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025 •
edited
Loading

Bumps the prod-deps group with 10 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.4.10 3.5.7
commons-io:commons-io 2.18.0 2.20.0
com.h2database:h2 2.3.232 2.4.240
org.postgresql:postgresql 42.7.7 42.7.8
org.apache.maven.plugins:maven-compiler-plugin 3.14.0 3.14.1
org.apache.maven.plugins:maven-surefire-plugin 3.5.2 3.5.4
org.springdoc:springdoc-openapi-maven-plugin 1.4 1.5
org.jacoco:jacoco-maven-plugin 0.8.12 0.8.14
org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.9 2.8.13
org.springdoc:springdoc-openapi-starter-webflux-ui 2.8.9 2.8.13

Updates org.springframework.boot:spring-boot-starter-parent from 3.4.10 to 3.5.7

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.7

⭐ New Features

  • Add TWENTY_FIVE to JavaVersion enum #47609

🐞 Bug Fixes

  • Signed jar verification fails when nested in an uber war running on an Oracle JVM #47771
  • In an uber war, value of the Sbom-Location manifest attribute does not match the SBOM's actual location #47737
  • Homebrew formula for the CLI should use libexec #47722
  • When virtual threads are enabled, embedded Jetty does not use recommended virtual thread configuration #47717
  • ClientHttpRequestFactoryRuntimeHints is missing timeout methods with Duration overloads #47678
  • OnBeanCondition no longer correctly finds annotations on scoped target proxy beans #47635
  • JavaVersion doesn't work reliably in native-image #47620
  • LiquibaseEndpoint always uses defaultSchema instead of liquibaseSchema #47346
  • Launcher fails to find main method when it is parameterless #47311
  • Package private Main class using Java 25 is not found by build plugins #47309
  • Bitnami legacy images are not automatically detected #47275
  • Maven plugin does not provide an easy way to exclude optional dependencies from uber jar #25403

📔 Documentation

  • Some spring.test.* properties are not documented #47775
  • Dependency management for Maven AntRun Plugin is missing changelog link #47744
  • Developing Your First Spring Boot Application has outdated tools #47700
  • Include deprecated configuration properties in the reference documentation #47669
  • Aggregated Javadoc should link to the proper version of JakartaEE #47593
  • Update javadoc of TestRestTemplate following change to redirect behavior #47474
  • Use non-deprecated syntax to configure sourceCompatibility #47343
  • Fix link to Framework's @Bean annotation #47330
  • Update managed dependency version override examples in documentation #47306

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.8 #47767
  • Upgrade to Angus Mail 2.0.5 #47525
  • Upgrade to AssertJ 3.27.6 #47526
  • Upgrade to Byte Buddy 1.17.8 #47527
  • Upgrade to Cassandra Driver 4.19.1 #47768
  • Upgrade to Classmate 1.7.1 #47528
  • Upgrade to Elasticsearch Client 8.18.8 #47671
  • Upgrade to Glassfish JAXB 4.0.6 #47529
  • Upgrade to GraphQL Java 24.3 #47755
  • Upgrade to Groovy 4.0.29 #47713
  • Upgrade to Hibernate 6.6.33.Final #47530
  • Upgrade to HttpClient5 5.5.1 #47531
  • Upgrade to HttpCore5 5.3.6 #47532
  • Upgrade to Jakarta Mail 2.1.5 #47533
  • Upgrade to Jakarta XML Bind 4.0.4 #47242
  • Upgrade to Jetty 12.0.29 #47728

... (truncated)

Commits
  • d3152ea Release v3.5.7
  • af07358 Merge branch '3.4.x' into 3.5.x
  • b0bef35 Document missing spring.test.* properties
  • 6683d0f Merge branch '3.4.x' into 3.5.x
  • 5ba3642 Next development version (v3.4.12-SNAPSHOT)
  • 59aba4e Merge branch '3.4.x' into 3.5.x
  • 4525a0c Merge pull request #47284 from DKARAGODIN
  • 43d91ae Write signature files to uber wars for Oracle Java 17 verification
  • eaad688 Upgrade to Spring Batch 5.2.4
  • edee2de Upgrade to Cassandra Driver 4.19.1
  • Additional commits viewable in compare view

Updates commons-io:commons-io from 2.18.0 to 2.20.0

Changelog

Sourced from commons-io:commons-io's changelog.

Apache Commons IO 2.20.0 Release Notes

The Apache Commons IO team is pleased to announce the release of Apache Commons IO 2.20.0.

Introduction

The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.

Version 2.19.1: Java 8 or later is required.

New features

o IO-875: Add org.apache.commons.io.file.CountingPathVisitor.accept(Path, BasicFileAttributes) #743. Thanks to Pierre Baumard, Gary Gregory. o Add org.apache.commons.io.Charsets.isAlias(Charset, String). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.isUTF8(Charset). Thanks to Gary Gregory. o Add org.apache.commons.io.Charsets.toCharsetDefault(String, Charset). Thanks to Gary Gregory. o IO-279: Add Tailer ignoreTouch option #757. Thanks to Joerg Budischewski, Gary Gregory.

Fixed Bugs

o [javadoc] Rename parameter of ProxyOutputStream.write(int) #740. Thanks to Jesse Glick. o IO-875: CopyDirectoryVisitor ignores fileFilter #743. Thanks to Pierre Baumard, Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.ByeArrayOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.InputStreamOrigin.getReader(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.AbstractRandomAccessFileOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o org.apache.commons.io.build.AbstractOrigin.OutputStreamOrigin.getWriter(Charset) now maps a null Charset to the default Charset. Thanks to Gary Gregory. o FileUtils.readLines(File, Charset) now maps a null Charset to the default Charset #744. Thanks to Ryan Kurtz, Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream, org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 77]Another occurrence at WindowsLineEndingInputStream.java:[line 81] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 112] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.WindowsLineEndingInputStream] At WindowsLineEndingInputStream.java:[line 113] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 75] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atEos" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 120] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashCr" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 124] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "atSlashLf" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.UnixLineEndingInputStream] At UnixLineEndingInputStream.java:[line 125] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "closed" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.ProxyInputStream] At ProxyInputStream.java:[line 233] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o Fix SpotBugs [ERROR] Medium: Shared primitive variable "propagateClose" in one thread may not yield the value of the most recent write from another thread [org.apache.commons.io.input.BoundedInputStream] At BoundedInputStream.java:[line 555] AT_STALE_THREAD_WRITE_OF_PRIMITIVE. Thanks to Gary Gregory. o QueueInputStream reads all but the first byte without waiting. #748. Thanks to maxxedev, Piotr P. Karwasz, Gary Gregory. o Javadoc fixes and improvements. Thanks to Gary Gregory. o Avoid NPE in org.apache.commons.io.filefilter.WildcardFilter.accept(File). Thanks to Gary Gregory. o IO-874: FileUtils.forceDelete can delete a broken symlink again #756. Thanks to Andy Russell, Joerg Budischewski. o Fix infinite loop in AbstractByteArrayOutputStream. #758. Thanks to Alex Benusovich.

... (truncated)

Commits

Updates com.h2database:h2 from 2.3.232 to 2.4.240

Release notes

Sourced from com.h2database:h2's releases.

Version 2.4.240

... (truncated)

Commits
  • c8eb81b in preparation for a release
  • 7ff5ee5 Merge pull request #4260 from JackPGreen/update-maven-central-url
  • da4c337 Merge pull request #4271 from IrisesD/master
  • d053544 feat: allow CATALOG in CREATE SCHEMA and DROP SCHEMA (#4277)
  • a448d91 Merge pull request #4273 from naive924/feat/compactThreads
  • 6672123 fix: change log
  • 858e74a fix: MVStore.compact: run map copy in parallel by default (¼ cores, override ...
  • bce0ec1 feat: parallel map copy option for MVStore.compact()
  • d8a6cc3 Fix command syntax in help.csv
  • c45413c Merge pull request #4266 from andreitokar/issue-4208-2
  • Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.7.7 to 42.7.8

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.8

Notable changes:

  • Releases are signed with a new PGP key which is generated at GitHub Actions and stored only there @​vlsi (#3701)

Changes

🐛 Bug Fixes

  • fix: avoid IllegalStateException: Timer already cancelled when StatementCancelTimerTask.run throws a runtime error @​vlsi (#3778)
  • fix: avoid NullPointerException when cancelling a query if cancel key is not known yet @​vlsi (#3780)
  • fix: unable to open replication connection to servers < 12 @​vlsi (#3678)

🧰 Maintenance

  • chore: fix published project name @​vlsi (#3809)
  • chore: update publish to Central Portal task name after bumping nmcp @​vlsi (#3808)
  • fix(deps): update com.gradleup.nmcp to 1.1.0 @​vlsi (#3807)
  • Revert "fix: Update release plugin config to use .set(...) for props and inject nexus creds via gradle props" @​vlsi (#3803)
  • chore: group com.gradleup.nmcp version updates @​vlsi (#3805)
  • chore: use bump org.apache.bcel:bcel test dependency in testCompileClasspath as well @​vlsi (#3775)
  • Fix typo in PGReplicationStream.java @​atorik (#3758)
  • chore: remove JDK versions from the key workflow names @​vlsi (#3759)
  • chore: add GitHub Actions workflow for generating release PGP key @​vlsi (#3701)
  • chore: replace StandardCharsets with Charsets to simplify code @​vlsi (#3751)
  • chore: migrate publish workflow to Central Portal publishing via com.gradleup.nmcp @​vlsi (#3686)
  • chore: adjust the default branch name for ossf scorecard scan @​vlsi (#3697)
  • chore: add top-level read-only permissions for GitHub Actions when missing @​vlsi (#3696)
  • chore: use config:best-practices preset for Renovate @​vlsi (#3687)

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.8] (2025-09-18)

Added

Changed

  • perf: remove QUERY_ONESHOT flag when calling getMetaData [PR #3783](pgjdbc/pgjdbc#3783)
  • perf: use BufferedInputStream with FileInputStream [PR #3750](pgjdbc/pgjdbc#3750)
  • perf: enable server-prepared statements for DatabaseMetaData

Fixed

  • fix: avoid NullPointerException when cancelling a query if cancel key is not known yet
  • fix: Change "PST" timezone in TimestampTest to "Pacific Standard Time" [PR #3774](pgjdbc/pgjdbc#3774)
  • fix: traverse the current dimension to get the correct pos in PgArray#calcRemainingDataLength [PR #3746](pgjdbc/pgjdbc#3746)
  • fix: make sure getImportedExportedKeys returns columns in consistent order
  • fix: Add "SELF_REFERENCING_COL_NAME" field to getTables' ResultSetMetaData to fix NullPointerException [PR #3660](pgjdbc/pgjdbc#3660)
  • fix: unable to open replication connection to servers < 12
  • fix: avoid closing statement caused by driver's internal ResultSet#close()
  • fix: return empty metadata for empty catalog names as it was before
  • fix: Incorrect class comparison in PGXmlFactoryFactory validation
Commits
  • 9a5492d chore: fix published project name
  • ca064f8 chore: update publish to Central Portal task name after bumping nmcp
  • 3d97bb8 fix: avoid IllegalStateException: Timer already cancelled when StatementCanc...
  • faa7dfc test: move BaseTest4 to testkit module
  • dbf2847 fix(deps): update com.gradleup.nmcp to 1.1.0
  • 9245e26 Revert "fix: Update release plugin config to use .set(...) for props and inje...
  • 8e833c3 chore: group com.gradleup.nmcp version updates
  • ec5a088 fix: Update release plugin config to use .set(...) for props and inject nexus...
  • c03db58 update version to 42.7.8 (#3801)
  • 50ff169 change logs for version 42.7.8 (#3797)
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-compiler-plugin from 3.14.0 to 3.14.1

Release notes

Sourced from org.apache.maven.plugins:maven-compiler-plugin's releases.

3.14.1

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

Commits
  • 0df6940 [maven-release-plugin] prepare release maven-compiler-plugin-3.14.1
  • 1bf9e5a Enforce asm version used here, to not depend on brittle transitive (#964)
  • f5161c4 Bump mavenVersion from 3.9.10 to 3.9.11 (#952)
  • 63846f1 Improve DeltaList behavior for large projects (#335)
  • ab3f845 Bump org.apache.maven.plugins:maven-plugins from 44 to 45
  • 164bad4 Allow to not use --module-version for the Java compiler
  • 0b76ccd Bump mavenVersion from 3.9.9 to 3.9.10
  • 5dbc9c3 Bump org.codehaus.plexus:plexus-java from 1.4.0 to 1.5.0
  • 17949d1 Bump org.apache.maven.plugins:maven-plugins from 43 to 44 (#316)
  • d44d1be Add generatedSourcesPath back to the maven project
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.5.2 to 3.5.4

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.5.4

🚀 New features and improvements

🐛 Bug Fixes

👻 Maintenance

📦 Dependency updates

3.5.3

🐛 Bug Fixes

👻 Maintenance

... (truncated)

Commits
  • 88513d8 [maven-release-plugin] prepare release surefire-3.5.4
  • 9c48828 Simplify cuncumber IT configuration and make windows build working again (#3174)
  • 74b2d8c Bump org.htmlunit:htmlunit from 4.15.0 to 4.16.0 (#3173)
  • 6c30bf1 [SUREFIRE-2298] fix xml output with junit 5 nested classes (#828)
  • 9f49866 Bump org.codehaus.plexus:plexus-i18n from 1.0-beta-10 to 1.0.0 (#3172)
  • fb96954 Bump org.htmlunit:htmlunit from 4.13.0 to 4.15.0 (#3171)
  • 1e63159 Name the shutdown hook (#3170)
  • 76e806a feat: enable prevent branch protection rules (#3168)
  • 0fbfb27 Implement fail-fast behavior for JUnit Platform provider (#3155)
  • 98d081e Bump org.assertj:assertj-core from 3.27.3 to 3.27.4 (#3167)
  • Additional commits viewable in compare view

Updates org.hibernate.orm.tooling:hibernate-enhance-maven-plugin from 6.6.29.Final to 6.6.33.Final

Release notes

Sourced from org.hibernate.orm.tooling:hibernate-enhance-maven-plugin's releases.

Hibernate ORM 6.6.33.Final released

Today, we published a new release of Hibernate ORM 6.6: 6.6.33.Final.

You can find the full list of 6.6.33.Final changes here.

What's new

This release introduces a few minor improvements as well as bug fixes.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Hibernate ORM 6.6.31.Final released

Today, we published a new release of Hibernate ORM 6.6: 6.6.31.Final.

You can find the full list of 6.6.31.Final changes here.

What's new

This release introduces a few minor improvements as well as bug fixes.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

... (truncated)

Changelog

Sourced from org.hibernate.orm.tooling:hibernate-enhance-maven-plugin's changelog.

Changes in 6.6.33.Final (October 10, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/35651

** Bug * [HHH-19853] - Gradle plugin org.hibernate.orm not published for 6.6.31 / 6.2.47

Changes in 6.6.32.Final (October 09, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/35485

** Bug * [HHH-19853] - Gradle plugin org.hibernate.orm not published for 6.6.31 / 6.2.47

Changes in 6.6.31.Final (October 03, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/35420

** Bug * [HHH-18885] - ClassCastException with queued persist in an extra lazy Map * [HHH-18936] - remove parent with @​OnDelete(CASCADE) leads to TransientObjectException

** Task * [HHH-19800] - Migrate to release scripts for documentation publishing

Changes in 6.6.30.Final (September 29, 2025)

https://hibernate.atlassian.net/projects/HHH/versions/35320

** Bug * [HHH-19784] - Bytecode enhancement generates wrong field access method for classes in different JARs but with same package name deployed in the same EAR * [HHH-19768] - Wrong supportsRowValueConstructorSyntaxInInSubQuery leads to bad performing queries * [HHH-19681] - AssertionError on extract results from array containing jsonb values

Commits
  • c07b8c2 Pre-steps for release : 6.6.33.Final
  • c39d81a Post-steps for release : 6.6.32.Final
  • 698a50f Pre-steps for release : 6.6.32.Final
  • 96eece6 Fix Gradle plugin publishing credentials check
  • 85800a9 Add a publish plugin task dependency to releasePerform
  • 588cd5c Fix check Gradle task graph contains task
  • 1530c75 Update the changelog to match the released JIRAs
  • 3d9936b Post-steps for release : 6.6.31.Final
  • 2a8ea79 Pre-steps for release : 6.6.31.Final
  • bd63ded HHH-18885 Introduce DelayedOperation.getAddedEntry() for maps
  • Additional commits viewable in compare view

Updates org.springdoc:springdoc-openapi-maven-plugin from 1.4 to 1.5

Commits

Updates org.jacoco:jacoco-maven-plugin from 0.8.12 to 0.8.14

Release notes

Sourced from org.jacoco:jacoco-maven-plugin's releases.

0.8.14

New Features

  • JaCoCo now officially supports Java 25 (GitHub #1950).
  • Experimental support for Java 26 class files (GitHub #1870).
  • Branches added by the Kotlin compiler for default argument number 33 or higher are filtered out during generation of report (GitHub #1655).
  • Part of bytecode generated by the Kotlin compiler for elvis operator that follows safe call operator is filtered out during generation of report (GitHub #1814, #1954).
  • Part of bytecode generated by the Kotlin compiler for more cases of chained safe call operators is filtered out during generation of report (GitHub #1956).
  • Part of bytecode generated by the Kotlin compiler for invocations of suspendCoroutineUninterceptedOrReturn intrinsic is filtered out during generation of report (GitHub #1929).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas with parameters is filtered out during generation of report (GitHub #1945).
  • Part of bytecode generated by the Kotlin compiler for suspending functions and lambdas with suspension points that return inline value class is filtered out during generation of report (GitHub #1871).
  • Part of bytecode generated by the Kotlin Compose compiler plugin for pausable composition is filtered out during generation of report (GitHub #1911).
  • Methods generated by the Kotlin serialization compiler plugin are filtered out (GitHub #1885, #1970, #1971).

Fixed bugs

  • Fixed handling of implicit else clause of when with String subject in Kotlin (GitHub #1813, #1940).
  • Fixed handling of implicit default clause of switch by String in Java when compiled by ECJ (GitHub #1813, #1940). Fixed handling of exceptions in chains of safe call operators in Kotlin (GitHub #1819).

Non-functional Changes

  • JaCoCo now depends on ASM 9.9 (GitHub #1965).

0.8.13

New Features

  • JaCoCo now officially supports Java 23 and Java 24 (GitHub #1757, #1631, #1867).
  • Experimental support for Java 25 class files (GitHub #1807).
  • Calculation of line coverage for Kotlin inline functions (GitHub #1670).
  • Calculation of line coverage for Kotlin inline functions with reified type parameter (GitHub #1670, #1700).
  • Calculation of coverage for Kotlin JvmSynthetic functions (GitHub #1700).
  • Part of bytecode generated by the Kotlin Compose compiler plugin is filtered out during generation of report (GitHub #1616).
  • Part of bytecode generated by the Kotlin compiler for inline value classes is filtered out during generation of report (GitHub #1475).
  • Part of bytecode generated by the Kotlin compiler for suspending lambdas without suspension points is filtered out during generation of report (GitHub #1283).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable enum subject is filtered out during generation of report (GitHub #1774).
  • Part of bytecode generated by the Kotlin compiler for when expressions and statements with nullable String subject is filtered out during generation of report (GitHub #1769).
  • Part of bytecode generated by the Kotlin compiler for chains of safe call operators is filtered out during generation of report (GitHub #1810, #1818).
  • Method getEntries generated by the Kotlin compiler for enum classes is filtered out during generation of report (GitHub #1625).
  • Methods generated by the Kotlin compiler for constructors and functions with JvmOverloads annotation are filtered out (GitHub

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 27, 2025
@dependabot
fix(deps): bump the prod-deps group across 1 directory with 11 updates
37b05af 
Bumps the prod-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.4.10` | `3.5.7` |
| [commons-io:commons-io](https://github.com/apache/commons-io) | `2.18.0` | `2.20.0` |
| [com.h2database:h2](https://github.com/h2database/h2database) | `2.3.232` | `2.4.240` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.7` | `42.7.8` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.0` | `3.14.1` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.2` | `3.5.4` |
| [org.springdoc:springdoc-openapi-maven-plugin](https://github.com/springdoc/springdoc-openapi-maven-plugin) | `1.4` | `1.5` |
| [org.jacoco:jacoco-maven-plugin](https://github.com/jacoco/jacoco) | `0.8.12` | `0.8.14` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.9` | `2.8.13` |
| [org.springdoc:springdoc-openapi-starter-webflux-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.9` | `2.8.13` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.4.10 to 3.5.7
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.4.10...v3.5.7)

Updates `commons-io:commons-io` from 2.18.0 to 2.20.0
- [Changelog](https://github.com/apache/commons-io/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-io@rel/commons-io-2.18.0...rel/commons-io-2.20.0)

Updates `com.h2database:h2` from 2.3.232 to 2.4.240
- [Release notes](https://github.com/h2database/h2database/releases)
- [Commits](h2database/h2database@version-2.3.232...version-2.4.240)

Updates `org.postgresql:postgresql` from 42.7.7 to 42.7.8
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.7.7...REL42.7.8)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.0...maven-compiler-plugin-3.14.1)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.2 to 3.5.4
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.2...surefire-3.5.4)

Updates `org.hibernate.orm.tooling:hibernate-enhance-maven-plugin` from 6.6.29.Final to 6.6.33.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/6.6.33/changelog.txt)
- [Commits](hibernate/hibernate-orm@6.6.29...6.6.33)

Updates `org.springdoc:springdoc-openapi-maven-plugin` from 1.4 to 1.5
- [Commits](springdoc/springdoc-openapi-maven-plugin@v1.4...v1.5)

Updates `org.jacoco:jacoco-maven-plugin` from 0.8.12 to 0.8.14
- [Release notes](https://github.com/jacoco/jacoco/releases)
- [Commits](jacoco/jacoco@v0.8.12...v0.8.14)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.9 to 2.8.13
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.9...v2.8.13)

Updates `org.springdoc:springdoc-openapi-starter-webflux-ui` from 2.8.9 to 2.8.13
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.9...v2.8.13)

Updates `org.springdoc:springdoc-openapi-starter-webflux-ui` from 2.8.9 to 2.8.13
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.9...v2.8.13)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: commons-io:commons-io
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: com.h2database:h2
  dependency-version: 2.4.240
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.hibernate.orm.tooling:hibernate-enhance-maven-plugin
  dependency-version: 6.6.33.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.springdoc:springdoc-openapi-maven-plugin
  dependency-version: '1.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.jacoco:jacoco-maven-plugin
  dependency-version: 0.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 2.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.springdoc:springdoc-openapi-starter-webflux-ui
  dependency-version: 2.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.springdoc:springdoc-openapi-starter-webflux-ui
  dependency-version: 2.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-4999ecec49 branch from 526389e to 37b05af Compare November 3, 2025 00:06
@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 3, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant