fix(deps): update all non-major dependencies #16

Merged
oliver merged 2 commits from renovate/all-minor-patch into main 2025-03-09 22:33:42 +01:00
Member

This PR contains the following updates:

Package Type Update Change
org.graalvm.buildtools:native-maven-plugin build patch 0.10.4 -> 0.10.5
org.apache.maven.plugins:maven-compiler-plugin build minor 3.13.0 -> 3.14.0
com.github.spotbugs:spotbugs (source) build patch 4.9.0 -> 4.9.2
com.github.spotbugs:spotbugs-maven-plugin (source) build minor 4.8.6.6 -> 4.9.2.0
org.owasp:dependency-check-maven (source) build minor 12.0.2 -> 12.1.0
com.puppycrawl.tools:checkstyle (source) build patch 10.21.2 -> 10.21.4
org.apache.maven.plugins:maven-deploy-plugin build patch 3.1.3 -> 3.1.4
org.springframework.boot:spring-boot-maven-plugin (source) build patch 3.4.2 -> 3.4.3
org.springframework.boot:spring-boot-dependencies (source) import patch 3.4.2 -> 3.4.3

Release Notes

graalvm/native-build-tools (org.graalvm.buildtools:native-maven-plugin)

v0.10.5

Compare Source

What's Changed

New Contributors

Full Changelog: https://github.com/graalvm/native-build-tools/compare/0.10.4...0.10.5

spotbugs/spotbugs (com.github.spotbugs:spotbugs)

v4.9.2

Compare Source

Added
  • Reporting useless @SuppressFBWarnings annotations (#​641)
Fixed
  • Fixed html bug descriptions for AT_STALE_THREAD_WRITE_OF_PRIMITIVE and AT_NONATOMIC_64BIT_PRIMITIVE (#​3303)
  • Fixed an HSM_HIDING_METHOD false positive when ECJ generates a synthetic method for an enum switch (#​3305)
  • Fix AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD false negatives, detector depending on method order.
  • Fix THROWS_METHOD_THROWS_CLAUSE_THROWABLE reported in a method calling MethodHandle.invokeExact due to its polymorphic signature (#​3309)
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive in inner class (#​3310).
  • Fix AT_STALE_THREAD_WRITE_OF_PRIMITIVE false positive for ECJ compiled enum switches (#​3316)
  • Fix RC_REF_COMPARISON false positive with Lombok With annotation (#​3319)
  • Avoid calling File.getCanonicalPath twice to improve performance (#​3325)
  • Fix MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR and MC_OVERRIDABLE_METHOD_CALL_IN_CLONE false positive when the overridable method is outside the class (#​3328).
  • Fix NullPointerException thrown from ThrowingExceptions detector (#​3337).
Removed
  • Removed the TLW_TWO_LOCK_NOTIFY, LI_LAZY_INIT_INSTANCE, BRSA_BAD_RESULTSET_ACCESS, BC_NULL_INSTANCEOF, NP_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR and RCN_REDUNDANT_CHECKED_NULL_COMPARISON deprecated bug patterns.

v4.9.1

Compare Source

Added
  • New detector SharedVariableAtomicityDetector for new bug types AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE, AT_NONATOMIC_64BIT_PRIMITIVE and AT_STALE_THREAD_WRITE_OF_PRIMITIVE (See SEI CERT rules VNA00-J, VNA02-J and VNA05-J).
  • New detector FindHiddenMethod for bug type HSM_HIDING_METHOD. This bug is reported whenever a subclass method hides the static method of super class. (See SEI CERT MET07-J).
Fixed
  • Fixed the parsing of generics methods in ThrowingExceptions (#​3267)
  • Accept the 1st parameter of java.util.concurrent.CompletableFuture's completeOnTimeout(), getNow() and obtrudeValue() functions as nullable (#​1001).
  • Fixed the analysis error when FindReturnRef was checking instructions corresponding to a CFG branch that was optimized away (#​3266)
  • Added execute file permission to files in the distribution archive (#​3274)
  • Fixed a stack overflow in MultipleInstantiationsOfSingletons when a singleton initializer makes recursive calls (#​3280)
  • Fixed NPE in FindReturnRef on inner class fields (#​3283)
  • Fixed NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive when add edu.umd.cs.findbugs.annotations.Nullable (#​3243)
jeremylong/DependencyCheck (org.owasp:dependency-check-maven)

v12.1.0: Version 12.1.0

Compare Source

Refer to the CHANGELOG.md for information about improvements and upgrade notes.

spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)

v3.4.3

Compare Source

⚠️ Noteworthy
New Features
  • Add TWENTY_FOUR to JavaVersion enum #​44209
🐞 Bug Fixes
  • Console output may be lost when using Log4j2 with something that replaces System.out #​44380
  • Maven plugin does not consistently use ArgFile for classpath argument on Windows #​44328
  • Reactive Jetty web server does not fail fast when configured to use a server name bundle which Jetty does not support #​44319
  • When web server application context refresh fails, the original failure is lost if stopping or destroying the web server throws an exception #​44317
  • View resolver for Thymeleaf should back off if spring-webmvc is not present #​44296
  • WebServer is not destroyed when ReactiveWebServerApplicationContext refresh fails #​44294
  • Non-default DataSource candidates are not considered in H2ConsoleAutoConfiguration #​44293
  • Banner placeholder and defaults do not work during development #​44255
  • Mustache templates return with ISO-8859-1 charset rather than UTF-8 in Content-Type response header #​44193
  • Servlet EndpointRequest doesn't match web server namespace correctly #​44188
  • java.lang.ClassCastException when using default management security with WebFlux and health probes enabled #​44052
  • Logback configuration that relies on inner-classes does not work in a native image #​44025
  • IllegalStateException: Unable to register SSL bundle after 3.3.8 or 3.4.2 #​43989
  • Metrics and health do not include non-default candidate beans #​43481
📔 Documentation
  • Document that auto-configuration classes should be identified using their binary names #​44303
  • Correct typo in MVC security when explaining when UserDetailsService auto-configuration will back off #​44301
  • Link to JarLauncher's javadoc #​44170
  • When using observability annotations, recommend that care is taken to avoid double instrumentation #​44145
  • Fix typo in Running Your Application #​44035
  • Document Kubernetes preStop handler when using a Docker image without a shell #​44022
  • Source snippet in Developing Your First Spring Boot Application section uses the root package #​43983
  • Correct the location of MyApplication.java in "Developing Your First Spring Boot Application" #​43975
  • Add links to Jackson Javadoc #​43971
  • Warn that some Quartz database schema scripts must be modified before use #​43958
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Ru311, @​ashishkujoy, @​izeye, @​jearton, @​ngocnhan-tran1996, @​nosan, @​quaff, and @​timotheeandres


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools) | build | patch | `0.10.4` -> `0.10.5` | | [org.apache.maven.plugins:maven-compiler-plugin](https://maven.apache.org/plugins/) | build | minor | `3.13.0` -> `3.14.0` | | [com.github.spotbugs:spotbugs](https://spotbugs.github.io/) ([source](https://github.com/spotbugs/spotbugs)) | build | patch | `4.9.0` -> `4.9.2` | | [com.github.spotbugs:spotbugs-maven-plugin](https://spotbugs.github.io/spotbugs-maven-plugin/) ([source](https://github.com/spotbugs/spotbugs-maven-plugin)) | build | minor | `4.8.6.6` -> `4.9.2.0` | | [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck.git) ([source](https://github.com/jeremylong/DependencyCheck/tree/HEAD/maven)) | build | minor | `12.0.2` -> `12.1.0` | | [com.puppycrawl.tools:checkstyle](https://checkstyle.org/) ([source](https://github.com/checkstyle/checkstyle)) | build | patch | `10.21.2` -> `10.21.4` | | [org.apache.maven.plugins:maven-deploy-plugin](https://maven.apache.org/plugins/) | build | patch | `3.1.3` -> `3.1.4` | | [org.springframework.boot:spring-boot-maven-plugin](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | build | patch | `3.4.2` -> `3.4.3` | | [org.springframework.boot:spring-boot-dependencies](https://spring.io/projects/spring-boot) ([source](https://github.com/spring-projects/spring-boot)) | import | patch | `3.4.2` -> `3.4.3` | --- ### Release Notes <details> <summary>graalvm/native-build-tools (org.graalvm.buildtools:native-maven-plugin)</summary> ### [`v0.10.5`](https://github.com/graalvm/native-build-tools/releases/tag/0.10.5) [Compare Source](https://github.com/graalvm/native-build-tools/compare/0.10.4...0.10.5) #### What's Changed - Improve GraalVM version check. by [@&#8203;brunocaballero](https://github.com/brunocaballero) in https://github.com/graalvm/native-build-tools/pull/646 - Fix checkstyle errors by [@&#8203;sdeleuze](https://github.com/sdeleuze) in https://github.com/graalvm/native-build-tools/pull/657 - Fix Broken Maven Functional Tests when Using New Metadata Format by [@&#8203;dnestoro](https://github.com/dnestoro) in https://github.com/graalvm/native-build-tools/pull/660 - Fix sporadic failures with: access-filter.json already exists by [@&#8203;dnestoro](https://github.com/dnestoro) in https://github.com/graalvm/native-build-tools/pull/659 - Refactor Documentation by [@&#8203;dnestoro](https://github.com/dnestoro) in https://github.com/graalvm/native-build-tools/pull/645 - Fix SBOM integration test bug by [@&#8203;rudsberg](https://github.com/rudsberg) in https://github.com/graalvm/native-build-tools/pull/673 - bugfix for when config agent.metadataCopy.disabledStages have 2 custom stage elements other than main and test, it would never run correctly. by [@&#8203;XenoAmess](https://github.com/XenoAmess) in https://github.com/graalvm/native-build-tools/pull/630 - Add maven functional testing in github actions by [@&#8203;dnestoro](https://github.com/dnestoro) in https://github.com/graalvm/native-build-tools/pull/663 - Add missing getters by [@&#8203;melix](https://github.com/melix) in https://github.com/graalvm/native-build-tools/pull/667 - Redesign in GraalVM website style by [@&#8203;Y-Shcheholskyy](https://github.com/Y-Shcheholskyy) in https://github.com/graalvm/native-build-tools/pull/674 - Final review gradle-plugin.adoc and maven-plugin.adoc. by [@&#8203;olyagpl](https://github.com/olyagpl) in https://github.com/graalvm/native-build-tools/pull/679 - Fix type issue in SBOM integration test by [@&#8203;rudsberg](https://github.com/rudsberg) in https://github.com/graalvm/native-build-tools/pull/681 - Parse JSON with openjson by [@&#8203;sdeleuze](https://github.com/sdeleuze) in https://github.com/graalvm/native-build-tools/pull/662 - Prepare Repository for the next release by [@&#8203;dnestoro](https://github.com/dnestoro) in https://github.com/graalvm/native-build-tools/pull/675 - Upgrade Maven dependencies by [@&#8203;melix](https://github.com/melix) in https://github.com/graalvm/native-build-tools/pull/686 #### New Contributors - [@&#8203;brahimhaddou](https://github.com/brahimhaddou) made their first contribution in https://github.com/graalvm/native-build-tools/pull/647 - [@&#8203;brunocaballero](https://github.com/brunocaballero) made their first contribution in https://github.com/graalvm/native-build-tools/pull/646 - [@&#8203;XenoAmess](https://github.com/XenoAmess) made their first contribution in https://github.com/graalvm/native-build-tools/pull/630 - [@&#8203;Y-Shcheholskyy](https://github.com/Y-Shcheholskyy) made their first contribution in https://github.com/graalvm/native-build-tools/pull/674 **Full Changelog**: https://github.com/graalvm/native-build-tools/compare/0.10.4...0.10.5 </details> <details> <summary>spotbugs/spotbugs (com.github.spotbugs:spotbugs)</summary> ### [`v4.9.2`](https://github.com/spotbugs/spotbugs/blob/HEAD/CHANGELOG.md#492---2025-03-01) [Compare Source](https://github.com/spotbugs/spotbugs/compare/4.9.1...4.9.2) ##### Added - Reporting useless `@SuppressFBWarnings` annotations ([#&#8203;641](https://github.com/spotbugs/spotbugs/issues/641)) ##### Fixed - Fixed html bug descriptions for AT_STALE_THREAD_WRITE_OF_PRIMITIVE and AT_NONATOMIC\_64BIT_PRIMITIVE ([#&#8203;3303](https://github.com/spotbugs/spotbugs/issues/3303)) - Fixed an `HSM_HIDING_METHOD` false positive when ECJ generates a synthetic method for an enum switch ([#&#8203;3305](https://github.com/spotbugs/spotbugs/issues/3305)) - Fix `AT_UNSAFE_RESOURCE_ACCESS_IN_THREAD` false negatives, detector depending on method order. - Fix `THROWS_METHOD_THROWS_CLAUSE_THROWABLE` reported in a method calling `MethodHandle.invokeExact` due to its polymorphic signature ([#&#8203;3309](https://github.com/spotbugs/spotbugs/issues/3309)) - Fix `AT_STALE_THREAD_WRITE_OF_PRIMITIVE` false positive in inner class ([#&#8203;3310](https://github.com/spotbugs/spotbugs/issues/3310)). - Fix `AT_STALE_THREAD_WRITE_OF_PRIMITIVE` false positive for ECJ compiled enum switches ([#&#8203;3316](https://github.com/spotbugs/spotbugs/issues/3316)) - Fix `RC_REF_COMPARISON` false positive with Lombok With annotation ([#&#8203;3319](https://github.com/spotbugs/spotbugs/pull/3319)) - Avoid calling File.getCanonicalPath twice to improve performance ([#&#8203;3325](https://github.com/spotbugs/spotbugs/pull/3325)) - Fix `MC_OVERRIDABLE_METHOD_CALL_IN_CONSTRUCTOR` and `MC_OVERRIDABLE_METHOD_CALL_IN_CLONE` false positive when the overridable method is outside the class ([#&#8203;3328](https://github.com/spotbugs/spotbugs/issues/3328)). - Fix NullPointerException thrown from `ThrowingExceptions` detector ([#&#8203;3337](https://github.com/spotbugs/spotbugs/pull/3337)). ##### Removed - Removed the `TLW_TWO_LOCK_NOTIFY`, `LI_LAZY_INIT_INSTANCE`, `BRSA_BAD_RESULTSET_ACCESS`, `BC_NULL_INSTANCEOF`, `NP_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR` and `RCN_REDUNDANT_CHECKED_NULL_COMPARISON` deprecated bug patterns. ### [`v4.9.1`](https://github.com/spotbugs/spotbugs/blob/HEAD/CHANGELOG.md#491---2025-02-02) [Compare Source](https://github.com/spotbugs/spotbugs/compare/4.9.0...4.9.1) ##### Added - New detector `SharedVariableAtomicityDetector` for new bug types `AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE`, `AT_NONATOMIC_64BIT_PRIMITIVE` and `AT_STALE_THREAD_WRITE_OF_PRIMITIVE` (See SEI CERT rules [VNA00-J](https://wiki.sei.cmu.edu/confluence/display/java/VNA00-J.+Ensure+visibility+when+accessing+shared+primitive+variables), [VNA02-J](https://wiki.sei.cmu.edu/confluence/display/java/VNA02-J.+Ensure+that+compound+operations+on+shared+variables+are+atomic) and [VNA05-J](https://wiki.sei.cmu.edu/confluence/display/java/VNA05-J.+Ensure+atomicity+when+reading+and+writing+64-bit+values)). - New detector `FindHiddenMethod` for bug type `HSM_HIDING_METHOD`. This bug is reported whenever a subclass method hides the static method of super class. (See [SEI CERT MET07-J](https://wiki.sei.cmu.edu/confluence/display/java/MET07-J.+Never+declare+a+class+method+that+hides+a+method+declared+in+a+superclass+or+superinterface)). ##### Fixed - Fixed the parsing of generics methods in `ThrowingExceptions` ([#&#8203;3267](https://github.com/spotbugs/spotbugs/issues/3267)) - Accept the 1st parameter of `java.util.concurrent.CompletableFuture`'s `completeOnTimeout()`, `getNow()` and `obtrudeValue()` functions as nullable ([#&#8203;1001](https://github.com/spotbugs/spotbugs/issues/1001)). - Fixed the analysis error when `FindReturnRef` was checking instructions corresponding to a CFG branch that was optimized away ([#&#8203;3266](https://github.com/spotbugs/spotbugs/issues/3266)) - Added execute file permission to files in the distribution archive ([#&#8203;3274](https://github.com/spotbugs/spotbugs/issues/3274)) - Fixed a stack overflow in `MultipleInstantiationsOfSingletons` when a singleton initializer makes recursive calls ([#&#8203;3280](https://github.com/spotbugs/spotbugs/issues/3280)) - Fixed NPE in `FindReturnRef` on inner class fields ([#&#8203;3283](https://github.com/spotbugs/spotbugs/issues/3283)) - Fixed NP_NULL_ON_SOME_PATH_FROM_RETURN_VALUE false positive when add edu.umd.cs.findbugs.annotations.Nullable ([#&#8203;3243](https://github.com/spotbugs/spotbugs/issues/3243)) </details> <details> <summary>jeremylong/DependencyCheck (org.owasp:dependency-check-maven)</summary> ### [`v12.1.0`](https://github.com/jeremylong/DependencyCheck/releases/tag/v12.1.0): Version 12.1.0 [Compare Source](https://github.com/jeremylong/DependencyCheck/compare/v12.0.2...v12.1.0) Refer to the [CHANGELOG.md](https://github.com/dependency-check/DependencyCheck/blob/main/CHANGELOG.md#change-log) for information about improvements and upgrade notes. </details> <details> <summary>spring-projects/spring-boot (org.springframework.boot:spring-boot-maven-plugin)</summary> ### [`v3.4.3`](https://github.com/spring-projects/spring-boot/releases/tag/v3.4.3) [Compare Source](https://github.com/spring-projects/spring-boot/compare/v3.4.2...v3.4.3) ##### :warning: Noteworthy - Due to the [upgrade to Prometheus Client 1.3.6](https://github.com/spring-projects/spring-boot/issues/44280), dependency management for Guava is [no longer provided](https://github.com/prometheus/client_java/pull/1269). If you are affected by this change, configure your build with a version of Guava that meets your application's needs. ##### :star: New Features - Add TWENTY_FOUR to JavaVersion enum [#&#8203;44209](https://github.com/spring-projects/spring-boot/issues/44209) ##### :lady_beetle: Bug Fixes - Console output may be lost when using Log4j2 with something that replaces System.out [#&#8203;44380](https://github.com/spring-projects/spring-boot/pull/44380) - Maven plugin does not consistently use ArgFile for classpath argument on Windows [#&#8203;44328](https://github.com/spring-projects/spring-boot/issues/44328) - Reactive Jetty web server does not fail fast when configured to use a server name bundle which Jetty does not support [#&#8203;44319](https://github.com/spring-projects/spring-boot/issues/44319) - When web server application context refresh fails, the original failure is lost if stopping or destroying the web server throws an exception [#&#8203;44317](https://github.com/spring-projects/spring-boot/issues/44317) - View resolver for Thymeleaf should back off if spring-webmvc is not present [#&#8203;44296](https://github.com/spring-projects/spring-boot/issues/44296) - WebServer is not destroyed when ReactiveWebServerApplicationContext refresh fails [#&#8203;44294](https://github.com/spring-projects/spring-boot/issues/44294) - Non-default DataSource candidates are not considered in H2ConsoleAutoConfiguration [#&#8203;44293](https://github.com/spring-projects/spring-boot/pull/44293) - Banner placeholder and defaults do not work during development [#&#8203;44255](https://github.com/spring-projects/spring-boot/issues/44255) - Mustache templates return with ISO-8859-1 charset rather than UTF-8 in Content-Type response header [#&#8203;44193](https://github.com/spring-projects/spring-boot/issues/44193) - Servlet EndpointRequest doesn't match web server namespace correctly [#&#8203;44188](https://github.com/spring-projects/spring-boot/issues/44188) - java.lang.ClassCastException when using default management security with WebFlux and health probes enabled [#&#8203;44052](https://github.com/spring-projects/spring-boot/issues/44052) - Logback configuration that relies on inner-classes does not work in a native image [#&#8203;44025](https://github.com/spring-projects/spring-boot/issues/44025) - IllegalStateException: Unable to register SSL bundle after 3.3.8 or 3.4.2 [#&#8203;43989](https://github.com/spring-projects/spring-boot/issues/43989) - Metrics and health do not include non-default candidate beans [#&#8203;43481](https://github.com/spring-projects/spring-boot/issues/43481) ##### :notebook_with_decorative_cover: Documentation - Document that auto-configuration classes should be identified using their binary names [#&#8203;44303](https://github.com/spring-projects/spring-boot/issues/44303) - Correct typo in MVC security when explaining when UserDetailsService auto-configuration will back off [#&#8203;44301](https://github.com/spring-projects/spring-boot/issues/44301) - Link to JarLauncher's javadoc [#&#8203;44170](https://github.com/spring-projects/spring-boot/issues/44170) - When using observability annotations, recommend that care is taken to avoid double instrumentation [#&#8203;44145](https://github.com/spring-projects/spring-boot/issues/44145) - Fix typo in Running Your Application [#&#8203;44035](https://github.com/spring-projects/spring-boot/issues/44035) - Document Kubernetes preStop handler when using a Docker image without a shell [#&#8203;44022](https://github.com/spring-projects/spring-boot/issues/44022) - Source snippet in Developing Your First Spring Boot Application section uses the root package [#&#8203;43983](https://github.com/spring-projects/spring-boot/issues/43983) - Correct the location of MyApplication.java in "Developing Your First Spring Boot Application" [#&#8203;43975](https://github.com/spring-projects/spring-boot/issues/43975) - Add links to Jackson Javadoc [#&#8203;43971](https://github.com/spring-projects/spring-boot/issues/43971) - Warn that some Quartz database schema scripts must be modified before use [#&#8203;43958](https://github.com/spring-projects/spring-boot/issues/43958) ##### :hammer: Dependency Upgrades - Upgrade to Commons Pool2 2.12.1 [#&#8203;44173](https://github.com/spring-projects/spring-boot/issues/44173) - Upgrade to Couchbase Client 3.7.8 [#&#8203;44269](https://github.com/spring-projects/spring-boot/issues/44269) - Upgrade to Groovy 4.0.25 [#&#8203;44174](https://github.com/spring-projects/spring-boot/issues/44174) - Upgrade to Hibernate 6.6.8.Final [#&#8203;44332](https://github.com/spring-projects/spring-boot/issues/44332) - Upgrade to HttpClient5 5.4.2 [#&#8203;44176](https://github.com/spring-projects/spring-boot/issues/44176) - Upgrade to HttpCore5 5.3.3 [#&#8203;44177](https://github.com/spring-projects/spring-boot/issues/44177) - Upgrade to Infinispan 15.0.13.Final [#&#8203;44178](https://github.com/spring-projects/spring-boot/issues/44178) - Upgrade to jOOQ 3.19.19 [#&#8203;44368](https://github.com/spring-projects/spring-boot/issues/44368) - Upgrade to Json-smart 2.5.2 [#&#8203;44264](https://github.com/spring-projects/spring-boot/issues/44264) - Upgrade to Maven Clean Plugin 3.4.1 [#&#8203;44349](https://github.com/spring-projects/spring-boot/issues/44349) - Upgrade to Micrometer 1.14.4 [#&#8203;44115](https://github.com/spring-projects/spring-boot/issues/44115) - Upgrade to Micrometer Tracing 1.4.3 [#&#8203;44116](https://github.com/spring-projects/spring-boot/issues/44116) - Upgrade to Native Build Tools Plugin 0.10.5 [#&#8203;44179](https://github.com/spring-projects/spring-boot/issues/44179) - Upgrade to Neo4j Java Driver 5.28.1 [#&#8203;44195](https://github.com/spring-projects/spring-boot/issues/44195) - Upgrade to Netty 4.1.118.Final [#&#8203;44221](https://github.com/spring-projects/spring-boot/issues/44221) - Upgrade to Prometheus Client 1.3.6 [#&#8203;44280](https://github.com/spring-projects/spring-boot/issues/44280) - Upgrade to R2DBC MySQL 1.3.2 [#&#8203;44180](https://github.com/spring-projects/spring-boot/issues/44180) - Upgrade to Reactor Bom 2024.0.3 [#&#8203;44117](https://github.com/spring-projects/spring-boot/issues/44117) - Upgrade to REST Assured 5.5.1 [#&#8203;44281](https://github.com/spring-projects/spring-boot/issues/44281) - Upgrade to RSocket 1.1.5 [#&#8203;44181](https://github.com/spring-projects/spring-boot/issues/44181) - Upgrade to Spring AMQP 3.2.3 [#&#8203;44278](https://github.com/spring-projects/spring-boot/issues/44278) - Upgrade to Spring Authorization Server 1.4.2 [#&#8203;44118](https://github.com/spring-projects/spring-boot/issues/44118) - Upgrade to Spring Data Bom 2024.1.3 [#&#8203;44119](https://github.com/spring-projects/spring-boot/issues/44119) - Upgrade to Spring Framework 6.2.3 [#&#8203;44120](https://github.com/spring-projects/spring-boot/issues/44120) - Upgrade to Spring GraphQL 1.3.4 [#&#8203;44121](https://github.com/spring-projects/spring-boot/issues/44121) - Upgrade to Spring Integration 6.4.2 [#&#8203;44122](https://github.com/spring-projects/spring-boot/issues/44122) - Upgrade to Spring Kafka 3.3.3 [#&#8203;44123](https://github.com/spring-projects/spring-boot/issues/44123) - Upgrade to Spring LDAP 3.2.11 [#&#8203;44124](https://github.com/spring-projects/spring-boot/issues/44124) - Upgrade to Spring Pulsar 1.2.3 [#&#8203;44125](https://github.com/spring-projects/spring-boot/issues/44125) - Upgrade to Spring Security 6.4.3 [#&#8203;44126](https://github.com/spring-projects/spring-boot/issues/44126) - Upgrade to Spring Session 3.4.2 [#&#8203;44127](https://github.com/spring-projects/spring-boot/issues/44127) - Upgrade to Testcontainers 1.20.5 [#&#8203;44369](https://github.com/spring-projects/spring-boot/issues/44369) - Upgrade to Testcontainers Redis Module 2.2.4 [#&#8203;44370](https://github.com/spring-projects/spring-boot/issues/44370) - Upgrade to Tomcat 10.1.36 [#&#8203;44333](https://github.com/spring-projects/spring-boot/issues/44333) ##### :heart: Contributors Thank you to all the contributors who worked on this release: [@&#8203;Ru311](https://github.com/Ru311), [@&#8203;ashishkujoy](https://github.com/ashishkujoy), [@&#8203;izeye](https://github.com/izeye), [@&#8203;jearton](https://github.com/jearton), [@&#8203;ngocnhan-tran1996](https://github.com/ngocnhan-tran1996), [@&#8203;nosan](https://github.com/nosan), [@&#8203;quaff](https://github.com/quaff), and [@&#8203;timotheeandres](https://github.com/timotheeandres) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOTAuMCIsInVwZGF0ZWRJblZlciI6IjM5LjE5MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
renovatebot added 1 commit 2025-03-09 21:02:05 +01:00
fix(deps): update all non-major dependencies
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 3m37s
cd97b69aed
Signed-off-by: RenovateBot <renovatebot@w9r.dev>
oliver was assigned by renovatebot 2025-03-09 21:02:05 +01:00
requested review from oliver 2025-03-09 21:02:05 +01:00
Owner

This PR contains the following updates:

Package Type Update Change org.graalvm.buildtools:native-maven-plugin ( https://github.com/graalvm/native-build-tools ) build patch 0.10.4 -> 0.10.5 org.apache.maven.plugins:maven-compiler-plugin ( https://maven.apache.org/plugins/ ) build minor 3.13.0 -> 3.14.0 com.github.spotbugs:spotbugs ( https://spotbugs.github.io/ ) ( source ( https://github.com/spotbugs/spotbugs ) ) build patch 4.9.0 -> 4.9.2 com.github.spotbugs:spotbugs-maven-plugin ( https://spotbugs.github.io/spotbugs-maven-plugin/ ) ( source ( https://github.com/spotbugs/spotbugs-maven-plugin ) ) build minor 4.8.6.6 -> 4.9.2.0 org.owasp:dependency-check-maven ( https://github.com/jeremylong/DependencyCheck.git ) ( source ( https://github.com/jeremylong/DependencyCheck/tree/HEAD/maven ) ) build minor 12.0.2 -> 12.1.0 com.puppycrawl.tools:checkstyle ( https://checkstyle.org/ ) ( source ( https://github.com/checkstyle/checkstyle ) ) build patch 10.21.2 -> 10.21.4 org.apache.maven.plugins:maven-deploy-plugin ( https://maven.apache.org/plugins/ ) build patch 3.1.3 -> 3.1.4 org.springframework.boot:spring-boot-maven-plugin ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) build patch 3.4.2 -> 3.4.3 org.springframework.boot:spring-boot-dependencies ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) import patch 3.4.2 -> 3.4.3

Release Notes

This PR contains the following updates: Package Type Update Change org.graalvm.buildtools:native-maven-plugin ( https://github.com/graalvm/native-build-tools ) build patch 0.10.4 -> 0.10.5 org.apache.maven.plugins:maven-compiler-plugin ( https://maven.apache.org/plugins/ ) build minor 3.13.0 -> 3.14.0 com.github.spotbugs:spotbugs ( https://spotbugs.github.io/ ) ( source ( https://github.com/spotbugs/spotbugs ) ) build patch 4.9.0 -> 4.9.2 com.github.spotbugs:spotbugs-maven-plugin ( https://spotbugs.github.io/spotbugs-maven-plugin/ ) ( source ( https://github.com/spotbugs/spotbugs-maven-plugin ) ) build minor 4.8.6.6 -> 4.9.2.0 org.owasp:dependency-check-maven ( https://github.com/jeremylong/DependencyCheck.git ) ( source ( https://github.com/jeremylong/DependencyCheck/tree/HEAD/maven ) ) build minor 12.0.2 -> 12.1.0 com.puppycrawl.tools:checkstyle ( https://checkstyle.org/ ) ( source ( https://github.com/checkstyle/checkstyle ) ) build patch 10.21.2 -> 10.21.4 org.apache.maven.plugins:maven-deploy-plugin ( https://maven.apache.org/plugins/ ) build patch 3.1.3 -> 3.1.4 org.springframework.boot:spring-boot-maven-plugin ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) build patch 3.4.2 -> 3.4.3 org.springframework.boot:spring-boot-dependencies ( https://spring.io/projects/spring-boot ) ( source ( https://github.com/spring-projects/spring-boot ) ) import patch 3.4.2 -> 3.4.3 Release Notes
oliver added 1 commit 2025-03-09 22:26:18 +01:00
fix: update dependencies
All checks were successful
SonarQube Scan / SonarQube Trigger (pull_request) Successful in 1m24s
SonarQube Scan / SonarQube Trigger (push) Successful in 1m19s
release / Release (push) Successful in 2m26s
2cde77e8ac
# Conflicts:
#	pom.xml
oliver merged commit 2cde77e8ac into main 2025-03-09 22:33:42 +01:00
oliver deleted branch renovate/all-minor-patch 2025-03-09 22:33:42 +01:00
Owner

@oliver hat #16 in main zusammengeführt.


Auf Forgejo: Beyond coding. We Forge. ansehen ( #16 ) oder antworte direkt auf diese E-Mail.

*@oliver* hat #16 in main zusammengeführt. --- Auf Forgejo: Beyond coding. We Forge. ansehen ( https://w9r.dev/pom/spring-boot-starter/pulls/16 ) oder antworte direkt auf diese E-Mail.
Sign in to join this conversation.
No reviewers
No labels
released
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: pom/spring-boot-starter#16
No description provided.