Skip to content

Bump the backend-minor-patch group in /backend with 15 updates - #11

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/backend/backend-minor-patch-4cf8b939f1
Open

Bump the backend-minor-patch group in /backend with 15 updates#11
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/backend/backend-minor-patch-4cf8b939f1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown

Bumps the backend-minor-patch group in /backend with 15 updates:

Package From To
org.springframework.boot:spring-boot-starter-parent 4.0.5 4.1.1
io.opentelemetry:opentelemetry-api 1.51.0 1.65.0
org.apache.kafka:kafka-clients 4.3.0 4.3.1
software.amazon.msk:aws-msk-iam-auth 2.3.2 2.3.8
software.amazon.awssdk:s3 2.48.3 2.54.13
software.amazon.awssdk:dynamodb 2.48.3 2.54.13
software.amazon.awssdk:sqs 2.48.3 2.54.13
software.amazon.awssdk:kafka 2.48.3 2.54.13
software.amazon.awssdk:cognitoidentityprovider 2.48.3 2.54.13
software.amazon.awssdk:bom 2.48.3 2.54.13
com.bucket4j:bucket4j_jdk17-core 8.14.0 8.19.0
com.bucket4j:bucket4j_jdk17-lettuce 8.14.0 8.19.0
org.testcontainers:junit-jupiter 1.21.3 1.21.4
org.testcontainers:postgresql 1.21.3 1.21.4
org.apache.maven:apache-maven 3.9.14 3.9.16

Updates org.springframework.boot:spring-boot-starter-parent from 4.0.5 to 4.1.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.1.1

⚠️ Attention Required

  • Spring Boot's Gradle plugin no longer automatically configures gRPC when the Protobuf plugin is applied. This behavior caused problems for those using Protobuf without gRPC. To opt in to the configuration of gRPC, configure the protobuf extension with the grpc plugin using an empty block. The Spring Boot Gradle plugin will then automatically configure the use of protoc-gen-grpc-java as before. #50822

🐞 Bug Fixes

  • Kafka consumer-specific security protocol is not taken into account #51369
  • Structured logging: a failed JSON encode corrupts the next log event written on the same thread #51156
  • Micrometer registries pin the application context #51135
  • Temporary file is not deleted when ExportedImageTar construction fails #51132
  • Metadata annotation processor ignores getter-level @NestedConfigurationProperty for records #51098
  • spring-boot-h2-console pulls servlet-api as transitive dependency #51095
  • PropertiesLauncher does not log nested archive paths #51089
  • Methods that return the result of Map#remove are not declared with a @Nullable return type #51087
  • NativeImageResourceProvider flattens Flyway migration paths in subdirectories #50964
  • Fix ordering of Kotlinx Serialization CodecCustomizer #50961
  • JarFile is not closed when finding main class from archive #50959
  • Application-managed JUL bridge handler should only be removed if installed #50950
  • CloudFoundry reactive auto-configuration should not require a WebClient.Builder bean to be defined #50944
  • Context refresh fails on reactive Cloud Foundry when using Actuator without spring-boot-health #50942
  • Resources are not cleaned up when resolving an image that is not yet present in the builder #50941
  • GraphQlWebMvcAutoConfiguration should apply customizers in order #50914
  • Auto-configured RedisMessageListenerContainer does not use virtual threads when spring.threads.virtual.enabled is true #50884
  • Context refresh fails when using Actuator on Jersey without spring-boot-health #50872
  • Context refresh fails on Cloud Foundry when using Actuator without spring-boot-health #50871
  • IllegalStateException when binding properties to a @Validated class that contains a map whose value type is a wildcard #50856
  • High number of connections due to Mongo health indicator #50852
  • Inconsistent handling of empty string values of spring.security.oauth2.resourceserver.jwt issuer-uri and jwk-set-uri #50849
  • Return type nullability of ApplicationContextAssert's getBean methods does not indicate that bean may be null #50845
  • PropertiesWebClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #50843
  • Exposing gRPC test server port should backoff if gRPC is not present #50825
  • JpaBaseConfiguration#entityManagerConfiguration can cause a dependency loop on beans declaring AsyncTaskExecutor #50801
  • spring.grpc.server.health.include-overall-health is not taken into account #50799
  • Setting 'server.servlet.session.cookie.partitioned' to false still emits the 'Partitioned' cookie attribute #50790
  • Managed version of Prometheus Client is not aligned with Micrometer's micrometer-registry-prometheus #50780
  • Map properties bound from empty strings fail with ConverterNotFoundException #50773
  • Protobuf Common Protos should not be a managed dependency #50772
  • An application that depends on spring-boot-security-oauth2-resource-server may fail to start with a ClassNotFoundException when Reactor is on the classpath but WebFlux is not #50764
  • W3CHeaderParser's decoding is not compliant with RFC 3986 #50650

📔 Documentation

  • Description of spring.graphql.websocket.connection-init-timeout does not render correctly in the reference guide #51348
  • spring.profiles.group should have a 'spring-profile-name' hint provider #51284
  • Remove reference to removed InfluxDB auto-configuration #51176
  • Use JacksonJsonSerde in Kafka Streams documentation #51161
  • Document alternatives to HttpMessageConverters #51129
  • Fix stale type reference for OTLP logging transport metadata #51119
  • Metadata for spring.test.mockmvc.htmlunit.url declares the wrong type #51115

... (truncated)

Commits
  • 6fdf67e Release 4.1.1
  • fde599b Upgrade to Spring Pulsar 2.0.7
  • 9daa58f Upgrade to Spring HATEOAS 3.1.2
  • 353993e Upgrade to Spring Data Bom 2026.0.1
  • 24ba596 Upgrade to Spring Session 4.1.1
  • 5cb5c29 Upgrade to Spring Security 7.1.1
  • 4adc8eb Upgrade to Spring LDAP 4.1.1
  • 4d9c19c Upgrade to Spring Kafka 4.1.1
  • f30f612 Upgrade to Spring Integration 7.1.1
  • b930283 Upgrade to Spring gRPC 1.1.1
  • Additional commits viewable in compare view

Updates io.opentelemetry:opentelemetry-api from 1.51.0 to 1.65.0

Release notes

Sourced from io.opentelemetry:opentelemetry-api's releases.

Version 1.65.0

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter.

API

  • Ignore empty baggage keys in ImmutableBaggage.put (#8658)
  • Use NumberFormatException in baggage decoder (#8593)
  • Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice (#8613)

Incubating

  • Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram, BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge, BoundDoubleGauge) to the incubator metrics API (#8527)

Extensions

  • Trace propagators: Fix JaegerPropagator baggage header key case sensitivity (#8496)
  • Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
  • Trace propagators: Skip empty baggage keys in OtTracePropagator extract (#8631)
  • Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed tokens (#8702)

SDK

  • Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based on string value of AttributeKey.getKey() (#8548)

Traces

  • Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements it to stop its polling executor (#8574)

Metrics

  • Gate PeriodicMetricReader self-observability metrics by internal telemetry version (#8597)
  • Record error.type on failed collections in PeriodicMetricReader (#8650)
  • Testing: Fix LongExemplarAssert.hasFilteredAttributesSatisfyingExactly to enforce exact attribute matching (#8518)

Logs

  • Fix ReadWriteLogRecord default getObservedTimestampEpochNanos returning the record timestamp (#8504)

Profiles

  • Fix profiles data model attribute count parameter name and timestamp doc unit (#8514)

Exporters

  • WARNING Zipkin: Delete opentelemetry-exporter-zipkin; the artifact is no longer published (#8677)
  • OTLP: Use HTTP error response bodies in HttpExporter warning logs (#8428)
  • OTLP: Fix OkHttpHttpSender mTLS when using the platform default trust store (#8565)
  • OTLP: Fix sign extension on LogRecord flags in the low-allocation log marshaler (#8493)
  • OTLP: Standardize OkHttpHttpSender, JdkHttpSender, and UpstreamGrpcSender shutdown to await executor/channel termination (#8495, #8627, #8624)
  • OTLP: Log the underlying except/ion when a gRPC response frame is invalid (#8626)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-api's changelog.

Version 1.65.0 (2026-08-07)

NOTE: The opentelemetry-exporter-zipkin artifact has stopped being published. It was deprecated in a prior release. Users should migrate to OTLP or use a Zipkin-compatible collector exporter.

API

  • Ignore empty baggage keys in ImmutableBaggage.put (#8658)
  • Use NumberFormatException in baggage decoder (#8593)
  • Fix TraceStateBuilder.remove corrupting the builder when the same key is removed twice (#8613)

Incubating

  • Add bound instrument APIs (BoundLongCounter, BoundDoubleCounter, BoundLongHistogram, BoundDoubleHistogram, BoundLongUpDownCounter, BoundDoubleUpDownCounter, BoundLongGauge, BoundDoubleGauge) to the incubator metrics API (#8527)

Extensions

  • Trace propagators: Fix JaegerPropagator baggage header key case sensitivity (#8496)
  • Trace propagators: Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
  • Trace propagators: Skip empty baggage keys in OtTracePropagator extract (#8631)
  • Trace propagators: Stop parsing a jaeger-baggage header after 64 tokens, including malformed tokens (#8702)

SDK

  • Update SDK attributes implementation (AttributesMap) to enforce last-value-win semantics based on string value of AttributeKey.getKey() (#8548)

Traces

  • Add Sampler shutdown lifecycle: Sampler now extends Closeable and exposes a default shutdown() invoked when the SdkTracerProvider is shut down; JaegerRemoteSampler implements it to stop its polling executor (#8574)

Metrics

  • Gate PeriodicMetricReader self-observability metrics by internal telemetry version (#8597)

... (truncated)

Commits
  • 7bc11ed [release/v1.65.x] Prepare release 1.65.0 (#8705)
  • 60d7ecf Prepare 1.65.0 (#8700)
  • 6d41aa4 Bound jaeger-baggage parsing work by tokens rather than accepted entries (#8702)
  • db1d6be Enforce last-value-wins semantics in AttributesMap without performance regres...
  • 995cb3c Avoid unsafe string encoder on Android (#8637)
  • 48b0185 Do not overwrite existing baggage with empty baggage in JaegerPropagator (#8632)
  • 2009d58 Avoid exposing configuration values in errors (#8669)
  • 3cafbbb Deprecate OpenCensus shim public API (#8674)
  • 0e033e2 Remove stray token from addLogRecordProcessorCustomizer Javadoc (#8641)
  • 3d1cce8 Fix ObfuscatedLoggerProvider Javadoc copy-paste example (#8639)
  • Additional commits viewable in compare view

Updates org.apache.kafka:kafka-clients from 4.3.0 to 4.3.1

Updates software.amazon.msk:aws-msk-iam-auth from 2.3.2 to 2.3.8

Release notes

Sourced from software.amazon.msk:aws-msk-iam-auth's releases.

2.3.8

What's changed in 2.3.8

  • Fix signing-region resolution for cluster names containing an AWS region id: the region is now anchored to the endpoint DNS suffix instead of matched as an unanchored substring (#245)
  • Upgrade the AWS SDK BOM from 2.44.12 to 2.51.2
  • Update jackson-databind to 2.22.1, resolving CVE-2026-54512, CVE-2026-54513, CVE-2026-54514 and CVE-2026-54515
  • Switch the synchronous HTTP client from apache-client to apache5-client, replacing Apache HttpClient 4.x with 5.x and removing commons-logging from the dependency tree
  • Constrain httpclient5 to 5.6.4, resolving CVE-2026-64607 and CVE-2026-71290
  • Exclude the unused netty-nio-client asynchronous HTTP client, which this library never instantiates, reducing the uber jar from roughly 14.4 MB to 10.2 MB and removing all 36 CVEs reported against Netty 4.1.133.Final across its ten modules
  • Update slf4j-api to 1.7.36
  • Raise the kafka-clients compile floor from 2.8.1 to 3.9.2
  • Upgrade the OWASP dependency-check plugin from 7.1.0.1 to 13.0.0. Releases 9.0.0 and later use the NVD API in place of the retired NVD data feeds, which the previous version could no longer reach

Maven Central

<dependency>
    <groupId>software.amazon.msk</groupId>
    <artifactId>aws-msk-iam-auth</artifactId>
    <version>2.3.8</version>
</dependency>

The attached aws-msk-iam-auth-2.3.8-all.jar is the self-contained uber jar for use on the Kafka client classpath.

2.3.7

Upgrade AWS SDK BOM to 2.44.12 to address Netty CVEs (CVE-2026-42581, CVE-2026-33870, and 9 others)

2.3.6

What's New

  • Configurable Signing Region: New awsMskRegionProvider JAAS config parameter for custom region resolution when broker hostnames don't contain region info (e.g., custom DNS/Route53 endpoints)
  • Route53RegionProvider: Built-in provider that resolves region via DNS TXT record lookup
  • Fix: Use public SignerConstant API path

2.3.5

  • Upgrade AWS SDK version to address CVE-2025-58056 and CVE-2025-58057
  • Updated dependencies to address build issues. It's now recommended to build the package using Gradle 8.0+ and JDK 17+.

2.3.4

  • Skip credential providers chain
  • Upgrade AWS SDK version

2.3.3

  • Upgrade AWS SDK version
Commits
  • a9850ea chore: Prepare release 2.3.8 (#250)
  • e471175 Merge pull request #249 from aws/fix/kafka-clients-compile-floor
  • 10b73f4 Merge pull request #247 from aws/fix/anchored-region-resolution
  • b190015 Merge pull request #244 from aws/fix/dependency-currency-2.3.8
  • db6eda1 docs: Document only the NVD_API_KEY environment variable for the scan key
  • 89dc120 fix: Publish the httpclient5 floor in the POM and exclude apache-client
  • 462873b fix: Anchor signing-region resolution to the endpoint DNS suffix
  • 6a84660 fix: Raise the kafka-clients compile floor to 3.9.2
  • 4a9cb31 chore: Tighten build script comments
  • 673cf0e fix: Restore the OWASP dependency-check scanner
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:s3 from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:dynamodb from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:sqs from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:kafka from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:cognitoidentityprovider from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:bom from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:dynamodb from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:sqs from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:kafka from 2.48.3 to 2.54.13

Updates software.amazon.awssdk:cognitoidentityprovider from 2.48.3 to 2.54.13

Updates com.bucket4j:bucket4j_jdk17-core from 8.14.0 to 8.19.0

Release notes

Sourced from com.bucket4j:bucket4j_jdk17-core's releases.

8.19.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.18.0...8.19.0

8.18.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.17.0...8.18.0

8.17.0

What's Changed

New Contributors

8.16.1

Full Changelog: bucket4j/bucket4j@8.16.0...8.16.1

8.16.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.15.0...8.16.0

8.15.0

... (truncated)

Commits
  • 3ce5abc #580 prepare release artifacts
  • d947c1c #580 prepare release artifacts
  • 1e8e08c Bump org.postgresql:postgresql in /backward-compatibility-tests/common (#583)
  • 6876d5a Bump org.postgresql:postgresql in /backward-compatibility-tests/previous (#584)
  • 0fb39ec docs: clarify Redis module dependencies (#582)
  • 3928ac3 fix(docs): add compare-and-swap retry mechanism docs (#579)
  • 1b84e9d Bump org.postgresql:postgresql in /bucket4j-examples (#585)
  • cb29610 Support backoff in CAS retry strategy (#580)
  • 9475388 Update README by removing Java 8 section and chats
  • a6b4ccd 8.18.0 release documentation
  • Additional commits viewable in compare view

Updates com.bucket4j:bucket4j_jdk17-lettuce from 8.14.0 to 8.19.0

Release notes

Sourced from com.bucket4j:bucket4j_jdk17-lettuce's releases.

8.19.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.18.0...8.19.0

8.18.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.17.0...8.18.0

8.17.0

What's Changed

New Contributors

8.16.1

Full Changelog: bucket4j/bucket4j@8.16.0...8.16.1

8.16.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.15.0...8.16.0

8.15.0

... (truncated)

Commits
  • 3ce5abc #580 prepare release artifacts
  • d947c1c #580 prepare release artifacts
  • 1e8e08c Bump org.postgresql:postgresql in /backward-compatibility-tests/common (#583)
  • 6876d5a Bump org.postgresql:postgresql in /backward-compatibility-tests/previous (#584)
  • 0fb39ec docs: clarify Redis module dependencies (#582)
  • 3928ac3 fix(docs): add compare-and-swap retry mechanism docs (#579)
  • 1b84e9d Bump org.postgresql:postgresql in /bucket4j-examples (#585)
  • cb29610 Support backoff in CAS retry strategy (#580)
  • 9475388 Update README by removing Java 8 section and chats
  • a6b4ccd 8.18.0 release documentation
  • Additional commits viewable in compare view

Updates com.bucket4j:bucket4j_jdk17-lettuce from 8.14.0 to 8.19.0

Release notes

Sourced from com.bucket4j:bucket4j_jdk17-lettuce's releases.

8.19.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.18.0...8.19.0

8.18.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.17.0...8.18.0

8.17.0

What's Changed

New Contributors

8.16.1

Full Changelog: bucket4j/bucket4j@8.16.0...8.16.1

8.16.0

What's Changed

New Contributors

Full Changelog: bucket4j/bucket4j@8.15.0...8.16.0

8.15.0

... (truncated)

Commits
  • 3ce5abc #580 prepare release artifacts
  • d947c1c #580 prepare release artifacts
  • 1e8e08c Bump org.postgresql:postgresql in /backward-compatibility-tests/common (#583)
  • 6876d5a Bump org.postgresql:postgresql in /backward-compatibility-tests/previous (#584)
  • 0fb39ec docs: clarify Redis module dependencies (#582)
  • 3928ac3 fix(docs): add compare-and-swap retry mechanism docs (#579)
  • 1b84e9d Bump org.postgresql:postgresql in /bucket4j-examples (#585)
  • cb29610 Support backoff in CAS retry strategy (#580)
  • 9475388 Update README by removing Java 8 section and chats
  • a6b4ccd 8.18.0 release documentation
  • Additional commits viewable in compare view

Updates org.testcontainers:junit-jupiter from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:junit-jupiter's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • See full diff in compare view

Updates org.testcontainers:postgresql from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • See full diff in compare view

Updates org.testcontainers:postgresql from 1.21.3 to 1.21.4

Release notes

Sourced from org.testcontainers:postgresql's releases.

1.21.4

This release makes version 1.21.x works with recent Docker Engine changes.

Commits
  • d509c81 Set version during jreleaserDeploy task
  • efa40ce Allow junit:junit dependency in checkPOMdependencies
  • 76b1364 Add JReleaser to deploy to Portal Publisher API
  • d6b6ff7 Fix compatibility with older Docker Engines by falling back to v1.32 (#11346)
  • See full diff in compare view

Updates software.amazon.awssdk:bom from 2.48.3 to 2.54.13

Updates org.apache.maven:apache-maven from 3.9.14 to 3.9.16

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the backend-minor-patch group in /backend with 15 updates
4751e74 
Bumps the backend-minor-patch group in /backend with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `4.0.5` | `4.1.1` |
| [io.opentelemetry:opentelemetry-api](https://github.com/open-telemetry/opentelemetry-java) | `1.51.0` | `1.65.0` |
| org.apache.kafka:kafka-clients | `4.3.0` | `4.3.1` |
| [software.amazon.msk:aws-msk-iam-auth](https://github.com/aws/aws-msk-iam-auth) | `2.3.2` | `2.3.8` |
| software.amazon.awssdk:s3 | `2.48.3` | `2.54.13` |
| software.amazon.awssdk:dynamodb | `2.48.3` | `2.54.13` |
| software.amazon.awssdk:sqs | `2.48.3` | `2.54.13` |
| software.amazon.awssdk:kafka | `2.48.3` | `2.54.13` |
| software.amazon.awssdk:cognitoidentityprovider | `2.48.3` | `2.54.13` |
| software.amazon.awssdk:bom | `2.48.3` | `2.54.13` |
| [com.bucket4j:bucket4j_jdk17-core](https://github.com/bucket4j/bucket4j) | `8.14.0` | `8.19.0` |
| [com.bucket4j:bucket4j_jdk17-lettuce](https://github.com/bucket4j/bucket4j) | `8.14.0` | `8.19.0` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [org.testcontainers:postgresql](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| org.apache.maven:apache-maven | `3.9.14` | `3.9.16` |


Updates `org.springframework.boot:spring-boot-starter-parent` from 4.0.5 to 4.1.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v4.0.5...v4.1.1)

Updates `io.opentelemetry:opentelemetry-api` from 1.51.0 to 1.65.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-java/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-java/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-java@v1.51.0...v1.65.0)

Updates `org.apache.kafka:kafka-clients` from 4.3.0 to 4.3.1

Updates `software.amazon.msk:aws-msk-iam-auth` from 2.3.2 to 2.3.8
- [Release notes](https://github.com/aws/aws-msk-iam-auth/releases)
- [Commits](aws/aws-msk-iam-auth@v2.3.2...v2.3.8)

Updates `software.amazon.awssdk:s3` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:dynamodb` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:sqs` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:kafka` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:cognitoidentityprovider` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:bom` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:dynamodb` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:sqs` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:kafka` from 2.48.3 to 2.54.13

Updates `software.amazon.awssdk:cognitoidentityprovider` from 2.48.3 to 2.54.13

Updates `com.bucket4j:bucket4j_jdk17-core` from 8.14.0 to 8.19.0
- [Release notes](https://github.com/bucket4j/bucket4j/releases)
- [Commits](bucket4j/bucket4j@8.14.0...8.19.0)

Updates `com.bucket4j:bucket4j_jdk17-lettuce` from 8.14.0 to 8.19.0
- [Release notes](https://github.com/bucket4j/bucket4j/releases)
- [Commits](bucket4j/bucket4j@8.14.0...8.19.0)

Updates `com.bucket4j:bucket4j_jdk17-lettuce` from 8.14.0 to 8.19.0
- [Release notes](https://github.com/bucket4j/bucket4j/releases)
- [Commits](bucket4j/bucket4j@8.14.0...8.19.0)

Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.testcontainers:postgresql` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.testcontainers:postgresql` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `software.amazon.awssdk:bom` from 2.48.3 to 2.54.13

Updates `org.apache.maven:apache-maven` from 3.9.14 to 3.9.16

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: io.opentelemetry:opentelemetry-api
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: org.apache.kafka:kafka-clients
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.msk:aws-msk-iam-auth
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:kafka
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:cognitoidentityprovider
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:dynamodb
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:sqs
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:kafka
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:cognitoidentityprovider
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: com.bucket4j:bucket4j_jdk17-core
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: com.bucket4j:bucket4j_jdk17-lettuce
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: com.bucket4j:bucket4j_jdk17-lettuce
  dependency-version: 8.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: org.testcontainers:postgresql
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: org.testcontainers:postgresql
  dependency-version: 1.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.54.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-minor-patch
- dependency-name: org.apache.maven:apache-maven
  dependency-version: 3.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants