fix(deps): update dependency io.micronaut:micronaut-core-bom to v4.10.26

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.micronaut:micronaut-core-bom (source)	4.9.3 → 4.10.26

---

Release Notes

micronaut-projects/micronaut-core (io.micronaut:micronaut-core-bom)

v4.10.26: Micronaut Core 4.10.26

What's Changed

Dependency Upgrades

• Jackson databind 2.21.5
• Update logback to 1.5.37
• Netty 4.2.16.Final

Full Changelog: micronaut-projects/micronaut-core@v4.10.25...v4.10.26

v4.10.25: Micronaut Core 4.10.25

What's Changed

Dependency updates 🚀

• Update Micronaut 4 to netty to v4.2.15.Final by @​sdelamo in #​12704

Full Changelog: micronaut-projects/micronaut-core@v4.10.24...v4.10.25

v4.10.24: Micronaut Core 4.10.24

What's Changed

🚨 Security

Fixes for security advisories:

• GHSA-387m-935m-c4vw
• GHSA-q6gh-6v2r-hjv3

Bug Fixes 🐞

• Fix IllegalArgumentException synthesizing bootstrap-loaded annotations (e.g. @​Deprecated) by @​szabelin in #​12692

New Contributors

• @​szabelin made their first contribution in #​12692

Full Changelog: micronaut-projects/micronaut-core@v4.10.23...v4.10.24

v4.10.23: Micronaut Core 4.10.23

What's Changed

Bug Fixes 🐞

• Fix HTTP server TCK on 4.10.x by @​yawkat in #​12645
• Fix full body subscribers on 4.10.x by @​yawkat in #​12646

Other Changes 💡

• Update Netty to 4.2.13.Final by @​yawkat in #​12662

Full Changelog: micronaut-projects/micronaut-core@v4.10.22...v4.10.23

v4.10.22: Micronaut Core 4.10.22

What's Changed

Security 👮🏻‍♂️🚨

This release contains fixes for these two security advisories:
*Unbounded formattersCache in TimeConverterRegistrar Allows Memory Exhaustion via Accept-Language Header
*Unbounded bundleCache in ResourceBundleMessageSource Allows Memory Exhaustion via Accept-Language Header

Other Changes 💡

• Fix locale converter throwing IllegalArgumentException for invalid input by @​asmaaknidar33 in #​12609

New Contributors

• @​asmaaknidar33 made their first contribution in #​12609

Full Changelog: micronaut-projects/micronaut-core@v4.10.21...v4.10.22

v4.10.21: Micronaut Core 4.10.21

What's Changed

Other Changes 💡

• Access log support for %U by @​n0tl3ss in #​12595

Full Changelog: micronaut-projects/micronaut-core@v4.10.20...v4.10.21

v4.10.20: Micronaut Core 4.10.20

What's Changed

Dependency updates 🚀

• Jackson upgrade to 2.21.2 by @​sdelamo in #​12587

Full Changelog: micronaut-projects/micronaut-core@v4.10.19...v4.10.20

v4.10.19: Micronaut Core 4.10.19

What's Changed

Dependency updates 🚀

• update to Jackson 2.21.1 by @​sdelamo in #​12510
• fix(deps): update netty monorepo to v4.2.12.final by @​sdelamo in #​12568

Other Changes 💡

• fix: MediaType can decode quoted charset by @​valtercorreia in #​12385
• Fix parsing of fully qualified type identifiers in ctx[...] expressions by @​yawkat in #​12523
• Correct this "|" to "||". by @​sdelamo in #​12573
• Conversion service already in abstract argument binder by @​sdelamo in #​12575
• rename fields to avoid sonar issues by @​sdelamo in #​12572

New Contributors

• @​valtercorreia made their first contribution in #​12385

Full Changelog: micronaut-projects/micronaut-core@v4.10.18...v4.10.19

v4.10.18: Micronaut Core 4.10.18

What's Changed

Bug Fixes 🐞

• fix: preserve SSL configuration when refreshing netty HTTP client by @​yawkat in #​12434

Other Changes 💡

• Fix: Relative redirects not resolved against request URI by @​ArtemLikhitskiy in #​12395

New Contributors

• @​ArtemLikhitskiy made their first contribution in #​12395

Full Changelog: micronaut-projects/micronaut-core@v4.10.17...v4.10.18

v4.10.17: Micronaut Core 4.10.17

What's Changed

Bug Fixes 🐞

• Fix GraalVM 25 loom-carrier native image initialization by @​yawkat in #​12418
• fix: avoid Path @​QueryValue StackOverflow in declarative clients by @​yawkat in #​12421
• align deprecated managed jackson version
• Replace ConcurrentHashMap with ConcurrentLinkedHashMap
  Full Changelog: micronaut-projects/micronaut-core@v4.10.16...v4.10.17

v4.10.16: Micronaut Core 4.10.16

What's Changed

Bug Fixes 🐞

• fix: prevent denial of service submitting form-url-encoded payload by @​sdelamo in #​12410

Other Changes 💡

• Add FunctionInitilizerTest by @​sdelamo in #​12396

Full Changelog: micronaut-projects/micronaut-core@v4.10.15...v4.10.16

v4.10.15: Micronaut Core 4.10.15

What's Changed

Bug Fixes 🐞

• add null check for environment by @​graemerocher in #​12380
• Fix duplicate content-type header bug, add test by @​wfhartford-wordly in #​12376

Dependency updates 🚀

• upgrade logback to 1.5.25 by @​graemerocher in #​12379

Other Changes 💡

• Return error on QueryValue conversion failures by @​iamsb97 in #​12321
• feat(12135): Adding support for list access using env variables by @​davidgammon-mettle in #​12136

New Contributors

• @​davidgammon-mettle made their first contribution in #​12136
• @​wfhartford-wordly made their first contribution in #​12376

Full Changelog: micronaut-projects/micronaut-core@v4.10.14...v4.10.15

v4.10.14: Micronaut Core 4.10.14

What's Changed

Bug Fixes 🐞

• Don't dispose request body on HTTP/2 RST by @​yawkat in #​12332

Improvements ⭐

• Apply request-decompression-enabled config to HTTP/2 by @​yawkat in #​12334

Dependency updates 🚀

• Upgrade log4j to version 2.25.3 by @​sdelamo in #​12327

Full Changelog: micronaut-projects/micronaut-core@v4.10.13...v4.10.14

v4.10.13: Micronaut Core 4.10.13

What's Changed

Other Changes 💡

• Create a fix for native image build with ContextConfigurer on GraalVM 22+ by @​andriy-dmytruk in #​12310

Full Changelog: micronaut-projects/micronaut-core@v4.10.12...v4.10.13

v4.10.12: Micronaut Core 4.10.12

What's Changed

Bug Fixes 🐞

• Preserving Body Related Headers When Following 307 or 308 Redirects by @​everett-hayes in #​12271
• In CORS Filter add GET as available method for static resources by @​sdelamo in #​12279

New Contributors

• @​everett-hayes made their first contribution in #​12271

Full Changelog: micronaut-projects/micronaut-core@v4.10.11...v4.10.12

v4.10.11: Micronaut Core 4.10.11

What's Changed

Improvements ⭐

• New leak detection for tests by @​yawkat in #​12139

Dependency updates 🚀

• [CVE-2025-67735] Update managed-netty version to 4.2.9.Final by @​alvarosanchez in #​12275

Full Changelog: micronaut-projects/micronaut-core@v4.10.10...v4.10.11

v4.10.10: Micronaut Core 4.10.10

What's Changed

Other Changes 💡

• Make http header list size configurable in HTTP client for HTTP2 by @​Pavlov7 in #​12172
• Fix BeanIntrospection to handle primitive types in property lookup by @​yashdoshi in #​12142

New Contributors

• @​Pavlov7 made their first contribution in #​12172
• @​yashdoshi made their first contribution in #​12142

Full Changelog: micronaut-projects/micronaut-core@v4.10.9...v4.10.10

v4.10.9: Micronaut Core 4.10.9

What's Changed

Bug Fixes 🐞

• Add support for less buggy multipart decoder by @​yawkat in #​12202

Full Changelog: micronaut-projects/micronaut-core@v4.10.8...v4.10.9

v4.10.8: Micronaut Core 4.10.8

What's Changed

Improvements ⭐

• Introduce TaskQueueInterceptor by @​yawkat in #​12158

Docs 📖

• Add certificate providers to the documentation table of contents by @​yawkat in #​12150

Full Changelog: micronaut-projects/micronaut-core@v4.10.7...v4.10.8

v4.10.7: Micronaut Core 4.10.7

What's Changed

Bug Fixes 🐞

• Fix graceful shutdown when event loop is already shut down by @​yawkat in #​12134
• Fix event loop thread naming by @​yawkat in #​12138
• Fixes Invalid query value with @​Format("csv") #​12105 by @​Myshkouski in #​12106
• Fx ConfigurationBuilder by @​n0tl3ss in #​12140

New Contributors

• @​Myshkouski made their first contribution in #​12106

Full Changelog: micronaut-projects/micronaut-core@v4.10.6...v4.10.7

v4.10.6: Micronaut Core 4.10.6

What's Changed

Dependency updates 🚀

• upgrade native build tools by @​graemerocher in #​12113

Full Changelog: micronaut-projects/micronaut-core@v4.10.5...v4.10.6

v4.10.5: Micronaut Core 4.10.5

What's Changed

Bug Fixes 🐞

• Fix injecting a field with the same name by @​dstepanov in #​12125

Dependency updates 🚀

• fix(deps): update netty monorepo to v4.2.7.final by @​renovate[bot] in #​12128
• fix(deps): update managed.reactor to v3.7.12 by @​renovate[bot] in #​12127
• fix(deps): update dependency io.netty:netty-tcnative-boringssl-static to v2.0.74.final by @​renovate[bot] in #​12126

Other Changes 💡

• Docs: update micronaut-docs to 3.0.0 by @​lissam1 in #​12121

New Contributors

• @​lissam1 made their first contribution in #​12121

Full Changelog: micronaut-projects/micronaut-core@v4.10.4...v4.10.5

v4.10.4: Micronaut Core 4.10.4

What's Changed

Bug Fixes 🐞

• Annotations referencing generated sources result in PostponeToNextRoundException by @​graemerocher in #​12110
• Fix Groovy processing exception by @​dstepanov in #​12115

Dependency updates 🚀

• fix(deps): update bytebuddy to v1.17.8 by @​renovate[bot] in #​12111

Other Changes 💡

• Restore previous getDocumentation behaviour by @​dstepanov in #​12112
• Correct ConfigurationMetadataWriterVisitor by @​dstepanov in #​12114

Full Changelog: micronaut-projects/micronaut-core@v4.10.3...v4.10.4

v4.10.3: Micronaut Core 4.10.3

What's Changed

Bug Fixes 🐞

• Collection of enum types not converting with ConfigurationBuilder by @​graemerocher in #​12107

Other Changes 💡

• Correct default getDocumentation by @​dstepanov in #​12108

Full Changelog: micronaut-projects/micronaut-core@v4.10.2...v4.10.3

v4.10.2: Micronaut Core v4.10.2

What's Changed

Improvements ⭐

• ByteBody: add optional operation tracking by @​yawkat in #​12087
• Support dynamic proxies for TypeHint by @​dstepanov in #​12088

Dependency updates 🚀

• chore(deps): update softprops/action-gh-release action to v2.3.4 by @​renovate[bot] in #​12089

Other Changes 💡

• Add getDocumentation(parseContent) to get the raw javadoc + corrected tests by @​dstepanov in #​12104

Full Changelog: micronaut-projects/micronaut-core@v4.10.1...v4.10.2

v4.10.1: Micronaut Core 4.10.1

What's Changed

Bug Fixes 🐞

• Correct Configuration Metadata by @​dstepanov in #​12084

Full Changelog: micronaut-projects/micronaut-core@v4.10.0...v4.10.1

v4.10.0: Micronaut Core 4.10.0

What's Changed

New Features 🎉

• Support @Introspected on packages by @​dstepanov in #​12001
• Certificate provider API by @​yawkat in #​12057
• Feature/Support for QueryValue as a object by @​MarianConstantinMarica in #​11787

Bug Fixes 🐞

• Don't log message when content-length is incorrect by @​yawkat in #​12007
• Fix buffer leak when decompressing empty LastHttpContent by @​yawkat in #​12011
• Fix compilation error for interface conf properties by @​dstepanov in #​12042
• Properly adapt streaming body in RawHttpClient by @​yawkat in #​12071
• Fix choosing record constructor by @​dstepanov in #​12078

Improvements ⭐

• Allow visiting imported classes + Mixin by @​dstepanov in #​11845
• Added factory class for InstantSource bean creation by @​bfg in #​11774
• Add string: and base64: resource loaders by @​yawkat in #​11937
• Add new OutputStream buffer method to ByteBodyFactory by @​yawkat in #​11934
• Support loading keys and trusts from PEM files by @​yawkat in #​11939
• Make CopyOnWriteMap public by @​yawkat in #​11974
• Add configurable max header size for HTTP client by @​brumarq in #​11971
• Add ThrowingRunnable to round out the set of throwing lambdas. by @​mikehearn in #​11961
• Introduce ReadBuffer API by @​yawkat in #​11984
• Use ReadBuffer to reduce code duplication by @​yawkat in #​12024
• feat(http-client-netty): configurable response decompression by @​yawkat in #​12047
• Event loop carrier support for openjdk loom branch by @​yawkat in #​12061
• Add explicit event loop transport configuration by @​yawkat in #​11987
• feat(http-server-netty): make server request decompression configurable by @​yawkat in #​12070
• Add defaultValue for Body and Parameter annotations by @​iamsb97 in #​11954
• Add ResponseBodyWriter for ByteBody by @​yawkat in #​11985

Docs 📖

• Clarify documentation about underscores in properties by @​lewchuk-span in #​12035

Dependency updates 🚀

• fix(deps): update managed.reactor to v3.7.7 by @​renovate[bot] in #​11850
• Update vertx to v4.5.15 by @​renovate[bot] in #​11868
• fix(deps): update bytebuddy to v1.17.6 by @​renovate[bot] in #​11877
• chore(deps): update softprops/action-gh-release action to v2.3.2 by @​renovate[bot] in #​11880
• fix(deps): update dependency io.methvin:directory-watcher to v0.19.1 by @​renovate[bot] in #​11896
• chore(deps): update graalvm/setup-graalvm action to v1.3.4 by @​renovate[bot] in #​11899
• fix(deps): update dependency org.testcontainers:spock to v1.21.3 by @​renovate[bot] in #​11909
• fix(deps): update dependency io.github.classgraph:classgraph to v4.8.180 by @​renovate[bot] in #​11903
• fix(deps): update dependency org.zalando:logbook-netty to v3.12.2 by @​renovate[bot] in #​11922
• fix(deps): update vertx to v4.5.16 by @​renovate[bot] in #​11924
• chore(deps): update dependency gradle to v8.14.3 by @​renovate[bot] in #​11927
• fix(deps): update dependency com.blazebit:blaze-persistence-core-impl to v1.6.16 by @​renovate[bot] in #​11940
• fix(deps): update netty monorepo to v4.2.3.final by @​renovate[bot] in #​11945
• fix(deps): update dependency io.github.classgraph:classgraph to v4.8.181 by @​renovate[bot] in #​11953
• fix(deps): update jackson monorepo to v2.19.2 by @​renovate[bot] in #​11955
• fix(deps): update dependency org.graalvm.sdk:nativeimage to v23.1.8 by @​renovate[bot] in #​11946
• fix(deps): update managed.reactor to v3.7.8 by @​renovate[bot] in #​11957
• chore(deps): update graalvm/setup-graalvm action to v1.3.5 by @​renovate[bot] in #​11959
• fix(deps): update groovy monorepo to v4.0.28 by @​renovate[bot] in #​11962
• fix(deps): update dependency io.smallrye:smallrye-fault-tolerance to v6.9.2 by @​renovate[bot] in #​11969
• fix(deps): update vertx to v4.5.17 by @​renovate[bot] in #​11982
• fix(deps): update netty monorepo to v4.2.4.final by @​renovate[bot] in #​11996
• fix(deps): update bytebuddy to v1.17.7 by @​renovate[bot] in #​12002
• fix(deps): update dependency org.eclipse.jetty:jetty-alpn-openjdk8-client to v9.4.58.v20250814 by @​renovate[bot] in #​12003
• fix(deps): update managed.reactor to v3.7.9 by @​renovate[bot] in #​12006
• chore(deps): update graalvm/setup-graalvm action to v1.3.6 by @​renovate[bot] in #​12025
• fix(deps): update dependency io.netty:netty-tcnative-boringssl-static to v2.0.73.final by @​renovate[bot] in #​12021
• fix(deps): update dependency com.blazebit:blaze-persistence-core-impl to v1.6.17 by @​renovate[bot] in #​12030
• fix(deps): update dependency io.micronaut.build.internal:micronaut-gradle-plugins to v7.6.4 by @​renovate[bot] in #​11963
• fix(deps): update dependency io.micronaut.aws:micronaut-aws-bom to v4.11.0 - autoclosed by @​renovate[bot] in #​11944
• fix(deps): update dependency io.micronaut.groovy:micronaut-runtime-groovy to v4.7.0 by @​renovate[bot] in #​11975
• fix(deps): update dependency org.projectlombok:lombok to v1.18.40 by @​renovate[bot] in #​12036
• fix(deps): update dependency com.github.javaparser:javaparser-symbol-solver-core to v3.27.0 by @​renovate[bot] in #​11930
• fix(deps): update netty monorepo to v4.2.6.final by @​renovate[bot] in #​12044
• fix(deps): update dependency com.github.spotbugs:spotbugs-annotations to v4.9.6 by @​renovate[bot] in #​8374
• chore(deps): update softprops/action-gh-release action to v2.3.3 by @​renovate[bot] in #​12069
• fix(deps): update dependency ch.qos.logback:logback-classic to v1.5.19 by @​renovate[bot] in #​12074

Other Changes 💡

• Merge 4.9.x by @​yawkat in #​11866
• 4.9.x->4.10.x merge by @​yawkat in #​11923
• Improve bean ordering semantics by @​mikehearn in #​11874
• Remove dynamic postfix for dummy file by @​altro3 in #​11846
• Support JSpecify by @​dstepanov in #​11991
• Fail on unresolved annotation values by @​dstepanov in #​11967
• Refactor configuration properties visitor + correct Javadoc for AST elements by @​dstepanov in #​11938
• 4.9.x into 4.10.x by @​yawkat in #​12041
• Correct RefreshEndpointSpec, Netty modifies system properties by @​dstepanov in #​12049
• Remove @​Experimental from BeanIntrospection.Builder by @​graemerocher in #​12034
• Remove @​Experimental annotation from BeanIntrospection.Builder interface by @​Copilot in #​12033

New Contributors

• @​brumarq made their first contribution in #​11971
• @​lewchuk-span made their first contribution in #​12035
• @​Copilot made their first contribution in #​12033
• @​iamsb97 made their first contribution in #​11954
• @​MarianConstantinMarica made their first contribution in #​11787

Full Changelog: micronaut-projects/micronaut-core@v4.9.12...v4.10.0

v4.9.12: Micronaut Core 4.9.12

What's Changed

Bug Fixes 🐞

• Fix support for abstract and inner classes for @Mixin and @ClassImport by @​dstepanov in #​12072

Improvements ⭐

• Update native-image.properties with new initialization args by @​graemerocher in #​12063

Docs 📖

• doc: mention snapshotOnly() by @​sdelamo in #​11933

Full Changelog: micronaut-projects/micronaut-core@v4.9.11...v4.9.12

v4.9.11: Micronaut Core 4.9.11

What's Changed

Bug Fixes 🐞

• Verifier error importing Lombok introspections by @​graemerocher in #​11711
• Properly handle HTTP/2 idle timeout by @​yawkat in #​11726
• Backport: Bean introspection: generate property / methods metadata in separate methods by @​dstepanov in #​11776
• fix config properties refresh for each property by @​graemerocher in #​11798
• Fix two buffer leaks by @​yawkat in #​11848
• Backport 4.8.x leak fixes to 4.7.x by @​yawkat in #​11918
• Avoid double completion when buffer limits are exceeded by @​yawkat in #​11999

Improvements ⭐

• remove duplicated files by @​sdelamo in #​11602
• More hints for SharedBuffer leak detection by @​yawkat in #​11910

Docs 📖

• Update snapshot instructions by @​alvarosanchez in #​11947

Other Changes 💡

• 4.7.x -> 4.8.x merge by @​yawkat in #​11919
• Fix flaky test by @​dstepanov in #​12005
• 4.7.x -> 4.8.x by @​yawkat in #​12028
• 4.8.x -> 4.9.x by @​yawkat in #​12029

Full Changelog: micronaut-projects/micronaut-core@v4.9.10...v4.9.11

v4.9.10

What's Changed

Bug Fixes 🐞

• Fix non-accessible interceptors from private-package by @​dstepanov in #​11990
• Upgrade to Netty 4.2.4.Final #​11996

Full Changelog: micronaut-projects/micronaut-core@v4.9.9...v4.9.10

v4.9.9: Micronaut Core 4.9.9

What's Changed

Bug Fixes 🐞

• Fix Groovy empty package by @​dstepanov in #​11966

Full Changelog: micronaut-projects/micronaut-core@v4.9.8...v4.9.9

v4.9.8: Micronaut Core 4.9.8

What's Changed

Bug Fixes 🐞

• KSP: Write bean definitions in the processing round by @​dstepanov in #​11936

Dependency updates 🚀

• [4.9.x] fix(deps): update netty monorepo to v4.2.3.final by @​yawkat in #​11948

Full Changelog: micronaut-projects/micronaut-core@v4.9.7...v4.9.8

v4.9.7: Micronaut Core 4.9.7

What's Changed

Improvements ⭐

• fix: Allow other executor instrumentations than context propagation by @​hauke-d in #​11863
• add logs if encoded cookie exceeds 4096 byte limit by @​sdelamo in #​11917

Other Changes 💡

• Fix: snapshot repo has moved, docs need to be updated. by @​mikehearn in #​11925
• Fix: delete the "What's New" section from the docs. by @​mikehearn in #​11926

New Contributors

• @​hauke-d made their first contribution in #​11863

Full Changelog: micronaut-projects/micronaut-core@v4.9.6...v4.9.7

v4.9.6

What's Changed

Bug Fixes 🐞

• Avoid double completion in DefaultHttpClient by @​yawkat in #​11894
• Fix StreamingFileUpload leak by @​yawkat in #​11898
• Do state transitions immediately on error by @​yawkat in #​11900

GraalVM 🏆

• Update deletions for GraalVM 23/24 by @​yawkat in #​11907

Other Changes 💡

• 4.9.x merge by @​yawkat in #​11912

Full Changelog: micronaut-projects/micronaut-core@v4.9.5...v4.9.6

v4.9.5: Micronaut Core 4.9.5

What's Changed

Bug Fixes 🐞

• Remove regex anchors from CacheControlTest by @​yawkat in #​11891

Improvements ⭐

• test: GraphQLResponseBodySerialization by @​sdelamo in #​11886

Docs 📖

• doc: document how to Disable hostname verification in ssl config by @​sdelamo in #​11526

Dependency updates 🚀

• JUnit 5.12.2 by @​sdelamo in #​11883

Other Changes 💡

• Jackson 2.19.1 by @​dstepanov in #​11893

Full Changelog: micronaut-projects/micronaut-core@v4.9.4...v4.9.5

v4.9.4: Micronaut Core 4.9.4

What's Changed

Bug Fixes 🐞

• fix bug aggregating processing that has postponed elements by @​graemerocher in #​11879

Full Changelog: micronaut-projects/micronaut-core@v4.9.3...v4.9.4

---

Configuration

📅 Schedule: (in timezone Europe/Prague)

• Branch creation
  • "after 10pm"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud