Skip to content

chore(deps): bump the maven-dependencies group with 21 updates#4465

Merged
github-actions[bot] merged 2 commits intomainfrom
dependabot/maven/maven-dependencies-b7f56b1b86
Apr 28, 2026
Merged

chore(deps): bump the maven-dependencies group with 21 updates#4465
github-actions[bot] merged 2 commits intomainfrom
dependabot/maven/maven-dependencies-b7f56b1b86

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 26, 2026

Bumps the maven-dependencies group with 21 updates:

Package From To
org.hibernate.orm:hibernate-core 7.3.1.Final 7.3.2.Final
com.mysql:mysql-connector-j 9.6.0 9.7.0
commons-io:commons-io 2.21.0 2.22.0
org.javassist:javassist 3.30.2-GA 3.31.0-GA
com.google.code.gson:gson 2.13.2 2.14.0
org.springframework.boot:spring-boot-configuration-processor 3.5.13 3.5.14
org.springframework.boot:spring-boot-starter 3.5.13 3.5.14
org.springframework.boot:spring-boot-autoconfigure-processor 3.5.13 3.5.14
org.springframework.boot:spring-boot-starter-data-jpa 3.5.13 3.5.14
org.springframework.boot:spring-boot-actuator 3.5.13 3.5.14
org.springframework.boot:spring-boot-starter-test 3.5.13 3.5.14
org.springframework.boot:spring-boot-starter-validation 3.5.13 3.5.14
org.springframework.boot:spring-boot-docker-compose 3.5.13 3.5.14
org.springframework.boot:spring-boot-testcontainers 3.5.13 3.5.14
org.springframework.boot:spring-boot-starter-web 3.5.13 3.5.14
org.springframework.security:spring-security-bom 6.5.9 6.5.10
org.testcontainers:testcontainers-bom 2.0.4 2.0.5
org.openrewrite.recipe:rewrite-migrate-java 3.32.1 3.33.1
org.openrewrite:rewrite-test 8.79.5 8.80.1
org.projectlombok:lombok 1.18.44 1.18.46
org.springframework.boot:spring-boot-dependencies 3.5.13 3.5.14

Updates org.hibernate.orm:hibernate-core from 7.3.1.Final to 7.3.2.Final

Release notes

Sourced from org.hibernate.orm:hibernate-core's releases.

Release 7.3.2

Hibernate ORM 7.3.2.Final released

Today, we published a new release of Hibernate ORM 7.3: 7.3.2.Final.

You can find the full list of 7.3.2.Final changes here.

What's new

  • See the website for requirements and compatibilities.
  • See the What's New guide for details about new features and capabilities.
  • See the Migration Guide for details about migration.

Conclusion

For additional details, see:

See also the following resources related to supported APIs:

Visit the website for details on getting in touch with us.

Changelog

Sourced from org.hibernate.orm:hibernate-core's changelog.

Changes in 7.3.2.Final (April 20, 2026)

https://hibernate.atlassian.net/projects/HHH/versions/38725

** Bug * HHH-20321 import.sql not executed when there are no @​Entity classes * HHH-20320 detached versioned entity parameter triggers auto-flush transient check * HHH-20317 Envers does not reflect @​DiscriminatorOptions for history entities * HHH-20313 Criteria query comparing double path to integer expression containing integer parameter fails

** Task * HHH-20334 Upgrade to Log4j 2.25.4

Commits
  • 926b61c [Jenkins release job] Preparing release 7.3.2.Final
  • 70453b0 [Jenkins release job] changelog.txt updated by release build 7.3.2.Final
  • 25d93fc HHH-20313 Fix JPA Criteria parameter type inference TCK failure
  • 4f734ec HHH-20317 fix: Envers does not reflect @​DiscriminatorOptions for history enti...
  • 7e04d5f Allow running the TCK manually
  • aae3d0f Add BytecodeEnhancedTestEngine support for JUnit 5.13 and older for JPA
  • c0b7799 Update to Jakarta Persistence TCK version 3.2.1
  • 6c72319 HHH-20321 Remove pointless schema management in TransactionCommitFailureTest
  • 56cf9a1 HHH-20321 Schema actions skipped when Metadata has no contributors
  • 0c4f489 HHH-20334 Upgrade to Log4j 2.25.4
  • Additional commits viewable in compare view

Updates com.mysql:mysql-connector-j from 9.6.0 to 9.7.0

Changelog

Sourced from com.mysql:mysql-connector-j's changelog.

Changelog

https://dev.mysql.com/doc/relnotes/connector-j/en/

Version 9.7.0

  • Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durations in Binary Protocol (Cursor Mode).

  • WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.

  • Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them. (reopened)

  • Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF packet after column definitions when EOF is not deprecated.

Version 9.6.0

  • Fix for Bug#118002 (Bug#37843004), The setFetchSize() method in the Statement class may have a potential bug.

  • Fix for Bug#113130 (Bug#36043125), getGeneratedKeys() returns a zero resultset with non-key-generating statements.

  • Fix for Bug#113336 (Bug#36080226), Inconsistent getUpdateCount() Behavior with allowMultiQueries.

  • Fix for Bug#118234 (Bug#37975837), A potential bugs in Mysql Connector/J.

  • Fix for Bug#113413 (Bug#36107426), Connection.changeUser cannot be done after DriverManager.loginTimeout elapses. Thanks to Kazuhisa Kawashima for his contribution.

  • Fix for Bug#119271 (Bug#38599496), Connector/J fails to accept legacy value zeroDateTimeBehavior=convertToNull on multi-host URLs (failover).

  • Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into' in them.

Version 9.5.0

  • Fix for Bug#72036 (Bug#18403804), XA isSameRM() shouldn't take database into account.

  • Fix for Bug#62693 (Bug#16722068), XAConnection savepoint capability.

  • Fix for Bug#81128 (Bug#23146631), Master host list overwritten by slave list when loadBalanceConnectionGroup used.

  • Fix for Bug#19887224, RUNNING THE TEST SUITE WITH SOCKSPROXY* PROPERTIES HANGS IN TEST TESTBUG56429.

  • Fix for Bug#98699 (Bug#30932850), Allow empty keyStore file for keyStoreTypes that do not require files. Thanks to Kolbe Kegel for his contribution.

  • Fix for Bug#118938 (Bug#38396227), DatabaseMetaDataInformationSchema#getSchemas has a bug.

  • Fix for Bug#99292 (Bug#31195955), Contribution: Support Windows time zone 'Coordinated Universal Time'. Thanks to Frédéric Barrière for his contribution.

  • Fix for Bug#107094 (Bug#34104230), NullPointerException when calling equals with null on MultiHostConnectionProxy.

... (truncated)

Commits
  • 0aade1f Fix for Bug#119863 (Bug#38951042), Inaccurate decoding of negative TIME durat...
  • b6d5baa Update for GPL license book.
  • a7cc5a9 Fix for DateTimeTest failures after some of the work done for WL#16669 in MyS...
  • 6a0c818 WL#17215, Implement JDBC 4.3/4.5 Statement/Connection.enquote* methods.
  • 5f96e85 Fix for Bug#119245 (Bug#38599240), Select into fix breaks queries with 'into'...
  • 8d779fc Fix for Bug#119659 (Bug#38916595), BinaryResultsetReader fails to consume EOF...
  • 1391179 Copyright header year bump.
  • 5c764b4 Post-release version bump.
  • See full diff in compare view

Updates commons-io:commons-io from 2.21.0 to 2.22.0

Updates org.javassist:javassist from 3.30.2-GA to 3.31.0-GA

Release notes

Sourced from org.javassist:javassist's releases.

Javassist 3.31.0-GA

What's Changed

New Contributors

Full Changelog: jboss-javassist/javassist@rel_3_30_2_ga...rel_3_31_0_ga

Changelog

Sourced from org.javassist:javassist's changelog.

Changes

version 3.31.0 on April 20, 2026

version 3.30.2 on December 25, 2023

  • GitHub PR #473, 475, 476

version 3.30.1 on December 17, 2023

version 3.30 on December 17, 2023

  • GitHub PR #434, 448, 463 (Issue #462), 466, 467, 468, 469, 470,

version 3.29.2 on September 14, 2022

  • GitHub Issue #427.

version 3.29.1 on August 11, 2022

  • GitHub Issue #423.

  • Readme.html was deleted (GitHub Issue #414).

version 3.29 on May 13, 2022

version 3.28 on May 8, 2021

version 3.27 on March 19, 2020

version 3.26 on October 3, 2019

version 3.25 on April 16, 2019

version 3.24.1 on December 9, 2018

... (truncated)

Commits

Updates com.google.code.gson:gson from 2.13.2 to 2.14.0

Release notes

Sourced from com.google.code.gson:gson's releases.

Gson 2.14.0

What's Changed

  • Add type adapters for java.time classes by @​eamonnmcmanus in google/gson#2948

    When the java.time API is available, Gson automatically can read and write instances of classes like Instant and Duration. The format it uses essentially freezes the JSON representation that ReflectiveTypeAdapterFactory established by default, based on the private fields of java.time classes. That's not a great representation, but it is understandable. Changing it to anything else would break compatibility with systems that are expecting the current format.

    With this change, Gson no longer tries to access private fields of these classes using reflection. So it is no longer necessary to run with --add-opens for these classes on recent JDKs.

  • Remove com.google.gson.graph by @​eamonnmcmanus in google/gson#2990.

    This package was not part of any released artifact and depended on Gson internals in potentially problematic ways.

  • Validate that strings being parsed as integers consist of ASCII characters by @​eamonnmcmanus in google/gson#2995

    Previously, strings could contain non-ASCII Unicode digits and still be parsed as integers. That's inconsistent with how JSON numbers are treated.

  • Fix duplicate key detection when first value is null by @​andrewstellman in google/gson#3006

    This could potentially break code that was relying on the incorrect behaviour. For example, this JSON string was previously accepted but will no longer be: {"foo": null, "foo": bar}.

  • Remove Serializable from internal Type implementation classes. by @​eamonnmcmanus in google/gson#3011

    The nested classes ParameterizedTypeImpl, GenericArrayTypeImpl, and WildcardTypeImpl in GsonTypes are implementations of the corresponding types (without Impl) in java.lang.reflect. For some reason, they were serializable, even though the java.lang.reflect implementations are not. Having unnecessarily serializable classes could conceivably have been a security problem if they were part of a larger exploit using serialization. (We do not consider this a likely scenario and do not suggest that you need to update Gson just to get this change.)

  • Add LegacyProtoTypeAdapterFactory. by @​eamonnmcmanus in google/gson#3014

    This is not part of any released artifact, but may be of use when trying to fix code that is currently accessing the internals of protobuf classes via reflection.

  • Make AppendableWriter do flush and close if delegation object supports by @​MukjepScarlet in google/gson#2925

Other less visible changes

New Contributors

Full Changelog: google/gson@gson-parent-2.13.2...gson-parent-2.14.0

Commits
  • 3ff35d6 [maven-release-plugin] prepare release gson-parent-2.14.0
  • a3024fd Bump the maven group with 13 updates (#3002)
  • 5689ffe Bump the github-actions group across 1 directory with 3 updates (#3018)
  • 48db33c Add LegacyProtoTypeAdapterFactory. (#3014)
  • 53d703e Update outdated comment regarding serializable types (#3012)
  • 0189b72 Remove Serializable from internal Type implementation classes. (#3011)
  • f4d371d Fix duplicate key detection when first value is null (#3006)
  • 27d9ba1 Fix typo in README (JPMS dependencies section) (#3005)
  • 1fa9b7a Validate that strings being parsed as integers consist of ASCII characters (#...
  • b7d5954 Add iterator fail-fast tests for LinkedTreeMap.clear() (#2992)
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-configuration-processor from 3.5.13 to 3.5.14

Release notes

Sourced from org.springframework.boot:spring-boot-configuration-processor's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

... (truncated)

Commits
  • 7d7b3ac Release v3.5.14
  • 9dc5aa2 Polish
  • f533a45 Do not follow symlinks when writing PID file
  • f3b8eb0 Use SecureRandom in RandomValuePropertySource
  • e22083a Enable hostname verification for SSL connections to Cassandra
  • 5ceb1a2 Improve ApplicationTemp's temporary directory creation
  • 4b0862c Use constant-time comparison for remote DevTools secret
  • e4febe2 Apply verify-hostname consistently
  • 2c2ffe5 Fix Windows test failure
  • 0046a44 Protect against corrupt buildpack archives
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter from 3.5.13 to 3.5.14

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

... (truncated)

Commits
  • 7d7b3ac Release v3.5.14
  • 9dc5aa2 Polish
  • f533a45 Do not follow symlinks when writing PID file
  • f3b8eb0 Use SecureRandom in RandomValuePropertySource
  • e22083a Enable hostname verification for SSL connections to Cassandra
  • 5ceb1a2 Improve ApplicationTemp's temporary directory creation
  • 4b0862c Use constant-time comparison for remote DevTools secret
  • e4febe2 Apply verify-hostname consistently
  • 2c2ffe5 Fix Windows test failure
  • 0046a44 Protect against corrupt buildpack archives
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-autoconfigure-processor from 3.5.13 to 3.5.14

Release notes

Sourced from org.springframework.boot:spring-boot-autoconfigure-processor's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

... (truncated)

Commits
  • 7d7b3ac Release v3.5.14
  • 9dc5aa2 Polish
  • f533a45 Do not follow symlinks when writing PID file
  • f3b8eb0 Use SecureRandom in RandomValuePropertySource
  • e22083a Enable hostname verification for SSL connections to Cassandra
  • 5ceb1a2 Improve ApplicationTemp's temporary directory creation
  • 4b0862c Use constant-time comparison for remote DevTools secret
  • e4febe2 Apply verify-hostname consistently
  • 2c2ffe5 Fix Windows test failure
  • 0046a44 Protect against corrupt buildpack archives
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-data-jpa from 3.5.13 to 3.5.14

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

Description has been truncated

@dependabot
chore(deps): bump the maven-dependencies group with 21 updates
83c0e9a 
Bumps the maven-dependencies group with 21 updates:

| Package | From | To |
| --- | --- | --- |
| [org.hibernate.orm:hibernate-core](https://github.com/hibernate/hibernate-orm) | `7.3.1.Final` | `7.3.2.Final` |
| [com.mysql:mysql-connector-j](https://github.com/mysql/mysql-connector-j) | `9.6.0` | `9.7.0` |
| commons-io:commons-io | `2.21.0` | `2.22.0` |
| [org.javassist:javassist](https://github.com/jboss-javassist/javassist) | `3.30.2-GA` | `3.31.0-GA` |
| [com.google.code.gson:gson](https://github.com/google/gson) | `2.13.2` | `2.14.0` |
| [org.springframework.boot:spring-boot-configuration-processor](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-autoconfigure-processor](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-actuator](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-starter-validation](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-docker-compose](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-testcontainers](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.boot:spring-boot-starter-web](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |
| [org.springframework.security:spring-security-bom](https://github.com/spring-projects/spring-security) | `6.5.9` | `6.5.10` |
| [org.testcontainers:testcontainers-bom](https://github.com/testcontainers/testcontainers-java) | `2.0.4` | `2.0.5` |
| [org.openrewrite.recipe:rewrite-migrate-java](https://github.com/openrewrite/rewrite-migrate-java) | `3.32.1` | `3.33.1` |
| [org.openrewrite:rewrite-test](https://github.com/openrewrite/rewrite) | `8.79.5` | `8.80.1` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.44` | `1.18.46` |
| [org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot) | `3.5.13` | `3.5.14` |


Updates `org.hibernate.orm:hibernate-core` from 7.3.1.Final to 7.3.2.Final
- [Release notes](https://github.com/hibernate/hibernate-orm/releases)
- [Changelog](https://github.com/hibernate/hibernate-orm/blob/7.3.2/changelog.txt)
- [Commits](hibernate/hibernate-orm@7.3.1...7.3.2)

Updates `com.mysql:mysql-connector-j` from 9.6.0 to 9.7.0
- [Changelog](https://github.com/mysql/mysql-connector-j/blob/release/9.x/CHANGES)
- [Commits](mysql/mysql-connector-j@9.6.0...9.7.0)

Updates `commons-io:commons-io` from 2.21.0 to 2.22.0

Updates `org.javassist:javassist` from 3.30.2-GA to 3.31.0-GA
- [Release notes](https://github.com/jboss-javassist/javassist/releases)
- [Changelog](https://github.com/jboss-javassist/javassist/blob/master/Changes.md)
- [Commits](https://github.com/jboss-javassist/javassist/commits)

Updates `com.google.code.gson:gson` from 2.13.2 to 2.14.0
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.2...gson-parent-2.14.0)

Updates `org.springframework.boot:spring-boot-configuration-processor` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-autoconfigure-processor` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-actuator` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-testcontainers` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.security:spring-security-bom` from 6.5.9 to 6.5.10
- [Release notes](https://github.com/spring-projects/spring-security/releases)
- [Changelog](https://github.com/spring-projects/spring-security/blob/main/RELEASE.adoc)
- [Commits](spring-projects/spring-security@6.5.9...6.5.10)

Updates `org.testcontainers:testcontainers-bom` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@2.0.4...2.0.5)

Updates `org.springframework.boot:spring-boot-autoconfigure-processor` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-actuator` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-validation` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-testcontainers` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.springframework.boot:spring-boot-starter-web` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

Updates `org.openrewrite.recipe:rewrite-migrate-java` from 3.32.1 to 3.33.1
- [Release notes](https://github.com/openrewrite/rewrite-migrate-java/releases)
- [Commits](openrewrite/rewrite-migrate-java@v3.32.1...v3.33.1)

Updates `org.openrewrite:rewrite-test` from 8.79.5 to 8.80.1
- [Release notes](https://github.com/openrewrite/rewrite/releases)
- [Commits](openrewrite/rewrite@v8.79.5...v8.80.1)

Updates `org.projectlombok:lombok` from 1.18.44 to 1.18.46
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.44...v1.18.46)

Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.13 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.13...v3.5.14)

---
updated-dependencies:
- dependency-name: org.hibernate.orm:hibernate-core
  dependency-version: 7.3.2.Final
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.mysql:mysql-connector-j
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: commons-io:commons-io
  dependency-version: 2.22.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.javassist:javassist
  dependency-version: 3.31.0-GA
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-configuration-processor
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-autoconfigure-processor
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-actuator
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.5.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-testcontainers
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.security:spring-security-bom
  dependency-version: 6.5.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.testcontainers:testcontainers-bom
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-autoconfigure-processor
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-actuator
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-validation
  dependency-version: 3.5.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-testcontainers
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-web
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.openrewrite.recipe:rewrite-migrate-java
  dependency-version: 3.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.openrewrite:rewrite-test
  dependency-version: 8.80.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added this to the Release 5.1.0 milestone Apr 26, 2026
@dependabot dependabot Bot added Priority 1: Must Highest priority. A release cannot be made if this issue isn’t resolved. Type: Dependency Upgrade Use to signal an issue that adjusts the project’s dependencies. Typically used by dependabot only. labels Apr 26, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 26, 2026 03:06
@dependabot dependabot Bot requested review from MateuszNaKodach, hatzlj and hjohn and removed request for a team April 26, 2026 03:06
@github-actions github-actions Bot enabled auto-merge April 26, 2026 03:06
@smcvb smcvb self-assigned this Apr 28, 2026
@smcvb
Force version to SB 4
9586634 
Force version to SB 4, as this sample is specifically for SB4

#4465
smcvb
smcvb approved these changes Apr 28, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@smcvb smcvb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me 👍

@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Apr 28, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@github-actions github-actions Bot merged commit ac657ca into main Apr 28, 2026
8 checks passed
@dependabot dependabot Bot deleted the dependabot/maven/maven-dependencies-b7f56b1b86 branch April 28, 2026 08:44
smcvb added a commit that referenced this pull request Apr 28, 2026
@smcvb
Force version to SB 4
2a7f26b 
Force version to SB 4, as this sample is specifically for SB4

#4465

(cherry picked from commit 9586634)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@smcvb smcvb smcvb approved these changes

@github-actions github-actions[bot] github-actions[bot] approved these changes

@hjohn hjohn Awaiting requested review from hjohn hjohn is a code owner automatically assigned from AxonIQ/framework-developers

@hatzlj hatzlj Awaiting requested review from hatzlj hatzlj is a code owner automatically assigned from AxonIQ/framework-developers

@MateuszNaKodach MateuszNaKodach Awaiting requested review from MateuszNaKodach MateuszNaKodach is a code owner automatically assigned from AxonIQ/framework-developers

Assignees

@smcvb smcvb

Labels

Priority 1: Must Highest priority. A release cannot be made if this issue isn’t resolved. Type: Dependency Upgrade Use to signal an issue that adjusts the project’s dependencies. Typically used by dependabot only.

Projects

None yet

Milestone

Release 5.1.0

Development

Successfully merging this pull request may close these issues.

1 participant

@smcvb