Skip to content

Bump the maven-dependencies group across 1 directory with 33 updates - #455

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-7e98add49d
Open

Bump the maven-dependencies group across 1 directory with 33 updates#455
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/maven-dependencies-7e98add49d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the maven-dependencies group with 32 updates in the / directory:

Package From To
org.axonframework:axon-bom 4.12.1 4.13.3
io.axoniq:axonserver-connector-java 2025.2.0-EAP 2026.0.0
org.axonframework:axon-server-connector 4.12.1 5.0.5
org.axonframework:axon-messaging 4.12.1 5.3.0
org.axonframework:axon-spring-boot-autoconfigure 4.12.1 4.13.2
org.springframework.boot:spring-boot-starter-parent 3.5.6 4.1.0
org.springframework.boot:spring-boot-starter-webflux 3.5.6 4.1.0
org.springframework.boot:spring-boot-maven-plugin 3.5.6 4.1.0
org.springframework.boot:spring-boot-starter 3.5.6 4.1.0
org.springframework.boot:spring-boot-starter-data-jpa 3.5.6 4.1.0
org.springframework.boot:spring-boot-docker-compose 3.5.6 4.1.0
io.projectreactor:reactor-core 3.7.11 3.8.6
org.hibernate:hibernate-core 6.2.6.Final 7.4.5.Final
org.junit.jupiter:junit-jupiter 6.0.0 6.1.3
org.testcontainers:junit-jupiter 1.21.3 1.21.4
org.mockito:mockito-core 5.20.0 5.23.0
org.apache.maven.plugins:maven-surefire-plugin 3.5.4 3.5.6
org.apache.maven.plugins:maven-compiler-plugin 3.14.1 3.15.0
org.jetbrains.kotlin:kotlin-stdlib-jdk8 2.2.20 2.4.10
org.jetbrains.kotlin:kotlin-reflect 2.2.20 2.4.10
org.jetbrains.kotlin:kotlin-maven-allopen 2.2.20 2.4.10
org.jetbrains.kotlin:kotlin-maven-plugin 2.2.20 2.4.10
com.vaadin:vaadin-bom 24.9.2 25.2.6
com.vaadin:vaadin-maven-plugin 24.9.2 25.2.6
org.flywaydb:flyway-core 11.13.2 13.2.0
org.axonframework:axon-framework-bom 5.1.0 5.3.0
io.axoniq.framework:axoniq-framework-bom 5.1.0 5.3.0
org.apache.maven.plugins:maven-failsafe-plugin 3.5.4 3.5.6
com.fasterxml.jackson.core:jackson-annotations 2.20 2.22
org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.13 3.1.0
org.apache.maven:apache-maven 3.9.3 3.9.16
org.apache.maven.wrapper:maven-wrapper 3.2.0 3.3.4

Updates org.axonframework:axon-bom from 4.12.1 to 4.13.3

Release notes

Sourced from org.axonframework:axon-bom's releases.

Axon Bill of Materials v4.13.3

🪲 Bug Fixes

  • Upgrade AxonServer Connector version to 2026.0.0 #215

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.13.2

🛠️ Dependency Upgrade

  • Upgrade AF, Kafka Ext., and Spring Cloud Ext #214

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.13.1

🛠️ Dependency Upgrade

  • Upgrade Axon Framework version to 4.13.1 #213

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.13.0

🛠️ Dependency Upgrade

  • Upgrade Axon Framework to 4.13.0 and Axon Server Connector for Java to 2025.2.1 #212

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.12.3

🛠️ Dependency Upgrade

  • Upgrade AF to 4.12.3 and Connector to 2024.2.5 #210

❤️ Contributors

... (truncated)

Commits
  • 8462899 [maven-release-plugin] prepare release axon-4.13.3
  • 64a49a2 Merge pull request #215 from AxonFramework/dependency-upgrade/connector-2026.0.0
  • 32eea8a Upgrade AxonServer Connector version to 2026.0.0
  • 50914d3 [maven-release-plugin] prepare for next development iteration
  • 317df4a [maven-release-plugin] prepare release axon-4.13.2
  • 46f1c20 Merge pull request #214 from AxonFramework/dependency-upgrade/af-4.13.2
  • 0c267ec Upgrade springcloud ext version to 4.12.1
  • 4ce2ac3 Upgrade kafka ext version to 4.12.1
  • f17224b Upgrade framework version to 4.13.2
  • c743c6d [maven-release-plugin] prepare for next development iteration
  • Additional commits viewable in compare view

Updates io.axoniq:axonserver-connector-java from 2025.2.0-EAP to 2026.0.0

Release notes

Sourced from io.axoniq:axonserver-connector-java's releases.

Axon Server Connector for Java version 2026.0.0

⭐ Features

  • Upgrade axonserver API usage to 2026.0.0-snapshot #483

📈 Enhancements

  • Port 2025.2.2 to 2026.0.0 #485
  • Add clientId header to all GRPC calls #477

🛠️ Dependency Upgrade

  • Upgrade the Axon Server API version to 2026.0.0 #486
  • Bump the maven-dependencies group with 3 updates #484
  • Bump org.apache.maven.plugins:maven-resources-plugin from 3.4.0 to 3.5.0 in the maven-dependencies group #482
  • Bump the maven-dependencies group with 3 updates #480
  • Bump the maven-dependencies group across 1 directory with 6 updates #479
  • Bump the maven-dependencies group across 1 directory with 5 updates #478
  • Bump actions/setup-java from 5.1.0 to 5.2.0 in the github-dependencies group #475
  • Bump the maven-dependencies group with 3 updates #471
  • Bump the maven-dependencies group with 4 updates #470
  • Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 #469
  • Bump the maven-dependencies group with 4 updates #468
  • Bump the maven-dependencies group with 2 updates #467
  • Bump actions/setup-java from 5.0.0 to 5.1.0 in the github-dependencies group #466
  • Bump the maven-dependencies group with 3 updates #465
  • Bump actions/checkout from 5 to 6 in the github-dependencies group #457

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Server Connector for Java version 2025.2.2

📈 Enhancements

  • Update the issue templates #464

🪲 Bug Fixes

  • #461 Fix logging on channel registration #462

🛠️ Dependency Upgrade

... (truncated)

Commits
  • 82ffc42 [maven-release-plugin] prepare release 2026.0.0
  • 5554b3d Merge pull request #486 from AxonIQ/dependency-upgrade/api-version-2026.0.0
  • b6385fb Upgrade the Axon Server API version to 2026.0.0
  • 5333a56 Merge pull request #485 from AxonIQ/enhancement/port-2025.2.2
  • 4e6a150 Fix incorrect auto merge resolution
  • fbc5a95 Merge branch 'connector-2025.2.x' into enhancement/port-2025.2.2
  • 613179c [maven-release-plugin] prepare for next development iteration
  • b6a395f [maven-release-plugin] prepare release 2025.2.2
  • c44a938 Merge pull request #484 from AxonIQ/dependabot/maven/maven-dependencies-fda89...
  • 8d38243 Bump the maven-dependencies group with 3 updates
  • Additional commits viewable in compare view

Updates org.axonframework:axon-server-connector from 4.12.1 to 5.0.5

Updates org.axonframework:axon-messaging from 4.12.1 to 5.3.0

Updates org.axonframework:axon-spring-boot-autoconfigure from 4.12.1 to 4.13.2

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-starter from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-starter-data-jpa from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50618
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50612
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50610
  • SpringJtaPlatform should have been deprecated since 4.1.0-M3 #50592
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50510
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50417
  • Created StackTracePrinter instances have no access to the Environment #50414
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50412
  • Buildpack module does not validate long-to-int casts #50410
  • Gradle gRPC support fails if protobuf-java dependency is used instead of protobuf-java-util #50405
  • GraphQL WebSocket support does not configure allowed origins #50394
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50298
  • Meter registries are not removed from the global registry when the context is closed #50287
  • DataSourceBuilder cannot derive a DataSource from a lazy connection proxy #50271
  • Nullable annotations from AbstractErrorController.getErrorAttributes are not aligned with implementation #50266
  • Bean definitions can be added with an initializer before setAllowBeanDefinitionOverriding is called #50264
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50261
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50258
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50234
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50228
  • Missing dependency management for spring-boot-web-server-test #50224
  • Spring Batch support for MongoDB modules are not included in dependency management #50223
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50216
  • GrpcServerHealthScheduler is not started in servlet environments #50209
  • Setting server.servlet.session.cookie.partitioned=true has no effect when using Tomcat #50204

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50647
  • Document SSL reloading with Let's Encrypt #50630
  • Remove the use of Optional from Data Neo4j repository examples #50622
  • Fix typos in documentation #50620

... (truncated)

Commits

Updates org.springframework.boot:spring-boot-docker-compose from 3.5.6 to 4.1.0

Release notes

Sourced from org.springframework.boot:spring-boot-docker-compose's releases.

v4.1.0

Full release notes for Spring Boot 4.1 are available on the wiki.

⭐ New Features

  • Add public constructor to InvalidConfigurationPropertyValueException that accepts a cause #50211
  • Reduce memory consumption when repeatedly calling WritableJson.toByteArray #49428

🐞 Bug Fixes

  • MailSender auto-configuration does not enable hostname verification #50747
  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50745
  • Embedded LDAP SSL should not be enabled when its bundle is empty #50700
  • InetAddressFilter.externalAddresses does not exclude special purpose addresses from RFC 6890 #50668
  • NullPointerException in reactor-netty SniProvider and unmapped SSL bundle with RSocket #50645
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50635
  • Test auto-configuration no longer integrates Spring Security with HtmlUnitDriver #50633
  • Configuration property metadata includes incorrect class references #50632
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException ...

    Description has been truncated

@dependabot
Bump the maven-dependencies group across 1 directory with 33 updates
5b824c6 
Bumps the maven-dependencies group with 32 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.axonframework:axon-bom](https://github.com/AxonFramework/axon-bom) | `4.12.1` | `4.13.3` |
| [io.axoniq:axonserver-connector-java](https://github.com/AxonIQ/axonserver-connector-java) | `2025.2.0-EAP` | `2026.0.0` |
| org.axonframework:axon-server-connector | `4.12.1` | `5.0.5` |
| org.axonframework:axon-messaging | `4.12.1` | `5.3.0` |
| org.axonframework:axon-spring-boot-autoconfigure | `4.12.1` | `4.13.2` |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-starter-webflux](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [org.springframework.boot:spring-boot-docker-compose](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.1.0` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.7.11` | `3.8.6` |
| [org.hibernate:hibernate-core](https://github.com/hibernate/hibernate-orm) | `6.2.6.Final` | `7.4.5.Final` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.1.3` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.20.0` | `5.23.0` |
| [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.6` |
| [org.apache.maven.plugins:maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) | `3.14.1` | `3.15.0` |
| [org.jetbrains.kotlin:kotlin-stdlib-jdk8](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.4.10` |
| [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.4.10` |
| org.jetbrains.kotlin:kotlin-maven-allopen | `2.2.20` | `2.4.10` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.2.20` | `2.4.10` |
| com.vaadin:vaadin-bom | `24.9.2` | `25.2.6` |
| [com.vaadin:vaadin-maven-plugin](https://github.com/vaadin/platform) | `24.9.2` | `25.2.6` |
| org.flywaydb:flyway-core | `11.13.2` | `13.2.0` |
| [org.axonframework:axon-framework-bom](https://github.com/AxonFramework/AxonFramework) | `5.1.0` | `5.3.0` |
| io.axoniq.framework:axoniq-framework-bom | `5.1.0` | `5.3.0` |
| [org.apache.maven.plugins:maven-failsafe-plugin](https://github.com/apache/maven-surefire) | `3.5.4` | `3.5.6` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.20` | `2.22` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.13` | `3.1.0` |
| org.apache.maven:apache-maven | `3.9.3` | `3.9.16` |
| [org.apache.maven.wrapper:maven-wrapper](https://github.com/apache/maven-wrapper) | `3.2.0` | `3.3.4` |



Updates `org.axonframework:axon-bom` from 4.12.1 to 4.13.3
- [Release notes](https://github.com/AxonFramework/axon-bom/releases)
- [Commits](AxonFramework/axon-bom@axon-4.12.1...axon-4.13.3)

Updates `io.axoniq:axonserver-connector-java` from 2025.2.0-EAP to 2026.0.0
- [Release notes](https://github.com/AxonIQ/axonserver-connector-java/releases)
- [Commits](AxonIQ/axonserver-connector-java@2025.2.0-EAP...2026.0.0)

Updates `org.axonframework:axon-server-connector` from 4.12.1 to 5.0.5

Updates `org.axonframework:axon-messaging` from 4.12.1 to 5.3.0

Updates `org.axonframework:axon-spring-boot-autoconfigure` from 4.12.1 to 4.13.2

Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `io.projectreactor:reactor-core` from 3.7.11 to 3.8.6
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.7.11...v3.8.6)

Updates `org.hibernate:hibernate-core` from 6.2.6.Final to 7.4.5.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.4.5/changelog.txt)
- [Commits](hibernate/hibernate-orm@6.2.6...7.4.5)

Updates `org.junit.jupiter:junit-jupiter` from 6.0.0 to 6.1.3
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.1.3)

Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.mockito:mockito-core` from 5.20.0 to 5.23.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.23.0)

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.5.4 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.6)

Updates `org.apache.maven.plugins:maven-compiler-plugin` from 3.14.1 to 3.15.0
- [Release notes](https://github.com/apache/maven-compiler-plugin/releases)
- [Commits](apache/maven-compiler-plugin@maven-compiler-plugin-3.14.1...maven-compiler-plugin-3.15.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.2.20 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.20 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.20 to 2.4.10

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.20 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.4.10)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.20 to 2.4.10

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.20 to 2.4.10

Updates `com.vaadin:vaadin-bom` from 24.9.2 to 25.2.6

Updates `com.vaadin:vaadin-maven-plugin` from 24.9.2 to 25.2.6
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.2...25.2.6)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.flywaydb:flyway-core` from 11.13.2 to 13.2.0

Updates `com.vaadin:vaadin-maven-plugin` from 24.9.2 to 25.2.6
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.2...25.2.6)

Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.6...v4.1.0)

Updates `org.axonframework:axon-framework-bom` from 5.1.0 to 5.3.0
- [Release notes](https://github.com/AxonFramework/AxonFramework/releases)
- [Commits](AxonIQ/AxonFramework@axon-5.1.0...axon-5.3.0)

Updates `io.axoniq.framework:axoniq-framework-bom` from 5.1.0 to 5.3.0

Updates `org.apache.maven.plugins:maven-failsafe-plugin` from 3.5.4 to 3.5.6
- [Release notes](https://github.com/apache/maven-surefire/releases)
- [Commits](apache/maven-surefire@surefire-3.5.4...surefire-3.5.6)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.20 to 2.22
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.6 to 4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.1.0)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.13 to 3.1.0
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/main/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.13...v3.1.0)

Updates `org.apache.maven:apache-maven` from 3.9.3 to 3.9.16

Updates `org.apache.maven.wrapper:maven-wrapper` from 3.2.0 to 3.3.4
- [Release notes](https://github.com/apache/maven-wrapper/releases)
- [Commits](apache/maven-wrapper@maven-wrapper-3.2.0...maven-wrapper-3.3.4)

---
updated-dependencies:
- dependency-name: org.axonframework:axon-bom
  dependency-version: 4.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.axoniq:axonserver-connector-java
  dependency-version: 2026.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-server-connector
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-messaging
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-spring-boot-autoconfigure
  dependency-version: 4.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.hibernate:hibernate-core
  dependency-version: 7.4.5.Final
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-surefire-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-compiler-plugin
  dependency-version: 3.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib-jdk8
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.4.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.4.10
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.2.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.2.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 13.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.2.6
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-framework-bom
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: io.axoniq.framework:axoniq-framework-bom
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.plugins:maven-failsafe-plugin
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.maven.wrapper:maven-wrapper
  dependency-version: 3.3.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from smcvb as a code owner August 16, 2026 05:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@smcvb smcvb Awaiting requested review from smcvb smcvb is a code owner

Assignees

No one assigned

Labels

Priority 1: Must Type: Dependency Upgrade

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants