Skip to content

Bump the other-dependencies group across 1 directory with 29 updates #1408

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the other-dependencies group across 1 directory with 29 updates #1408

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 6, 2025 •
edited
Loading

Bumps the other-dependencies group with 29 updates in the / directory:

Package From To
com.nimbusds:nimbus-jose-jwt 10.0.2 10.5
io.swagger.core.v3:swagger-integration-jakarta 2.2.28 2.2.38
org.mapstruct:mapstruct 1.6.2 1.6.3
org.mapstruct:mapstruct-processor 1.6.2 1.6.3
org.openapitools:jackson-databind-nullable 0.2.6 0.2.7
org.apache.commons:commons-lang3 3.18.0 3.19.0
org.apache.commons:commons-text 1.13.1 1.14.0
org.apache.commons:commons-compress 1.26.0 1.28.0
org.apache.avro:avro 1.11.4 1.12.0
software.amazon.msk:aws-msk-iam-auth 2.3.0 2.3.4
com.azure:azure-identity 1.15.4 1.18.0
dev.cel:cel 0.3.0 0.11.0
org.testcontainers:testcontainers 1.20.6 1.21.3
org.testcontainers:kafka 1.20.6 1.21.3
org.testcontainers:junit-jupiter 1.20.6 1.21.3
net.bytebuddy:byte-buddy 1.14.19 1.17.7
org.assertj:assertj-core 3.25.3 3.27.6
org.bouncycastle:bcpkix-jdk18on 1.80 1.82
com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler 1.0.5 1.0.6
io.modelcontextprotocol.sdk:mcp-spring-webflux 0.10.0 0.14.0
io.prometheus:prometheus-metrics-core 1.3.6 1.4.1
io.prometheus:prometheus-metrics-exposition-textformats 1.3.6 1.4.1
io.prometheus:prometheus-metrics-exporter-pushgateway 1.3.6 1.4.1
org.apache.lucene:lucene-core 10.2.2 10.3.0
org.apache.lucene:lucene-queryparser 10.2.2 10.3.0
org.apache.lucene:lucene-analysis-common 10.2.2 10.3.0
org.openapitools.openapistylevalidator 1.10 1.11
org.openapi.generator 7.13.0 7.16.0
org.sonarqube 6.0.1.5171 6.3.1.5724

Updates com.nimbusds:nimbus-jose-jwt from 10.0.2 to 10.5

Changelog

Sourced from com.nimbusds:nimbus-jose-jwt's changelog.

10.0.2 (2025-02-25) * Updates JSONObjectUtils.parse and JSONArrayUtils.parse to reject JSON strings with object and array nesting deeper than 255. This is intended to prevent StackOverflowError's in Gson when a parsed JSON string with excessive nesting is serialised, for example to log the claims of a parsed JWT. Note that in Gson the JSON reader is not susceptible to StackOverflowError's, only the serialisation. The nesting limit of depth 255 is introduced in Gson 2.12.0 (iss #583). * Updates GSon to 2.12.1.

10.1 (2025-04-03) * Restores module-info.java. * Adds ExpiredJWTException extends BadJWTException to enable easy programmatic detection whether a JWT has expired (iss #585). * Adds URLBasedJWKSetSource getJWKSetURL and getResourceRetriever methods to ease class extension.

10.2 (2025-04-07) * Gson is made a direct instead of a shaded dependency to address module issues introduced in 10.1 (iss #550).

10.3 (2025-05-09) * Restores the Gson shading, adding placeholder interfaces to prevent NoClassDefFoundError occurrences at runtime when the JAR is used on a module path (iss #550).

10.3.1 (2025-07-01) * OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom (iss #590).

10.4 (2025-07-19) * Creates a hierarchy of Option interfaces, extended by JWSSignerOption, JWEEncrypterOption and JWEDecrypterOption. Intended to provide optional configuration parameters to RSASSASigner, ECDSASigner, RSADecrypter, etc. * Introduces CipherMode implementing JWEEncrypterOption and JWEDecrypterOption, to specify a preferred JCA Cipher mode, such as MODE_ENCRYPT / MODE_DECRYPT when the default MODE_WRAP / MODE_UNWRAP is not supported by the JCA provider (iss #576). * Updates RSAEncrypter and RSADecrypter to support the JWEEncrypterOption CipherMode.ENCRYPT_DECRYPT (iss #576). * Factors out OptionUtils.ensureMinRSAPrivateKeySize. * Deprecates OptionUtils.optionIsPresent.

10.4.1 (2025-08-05) * Adds "requires java.sql" to module com.nimbusds.jose.jwt (iss #595).

10.4.2 (2025-08-14) * Updates GSon to 2.13.1. * Updates BouncyCastle to 1.81.

... (truncated)

Commits
  • 1690d5a Clarifies 10.2 iss #550 fix
  • 3fbd750 [maven-release-plugin] prepare release 10.2
  • a988a2d [maven-release-plugin] prepare for next development iteration
  • 5fa1dc9 shade gson again
  • 800db7b Merged in feature/shaded-gson (pull request #127)
  • f474bcf Adds change log entry for 10.3 (iss #550)
  • c1f3c44 [maven-release-plugin] prepare release 10.3
  • 93076c1 [maven-release-plugin] prepare for next development iteration
  • 0b56cf0 OctetKeyPairGenerator with Curve.Ed25519 should use the provided SecureRandom...
  • 584951f Adds support for specifying the ScheduledExecutorService-instance in RefreshA...
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-integration-jakarta from 2.2.28 to 2.2.38

Updates org.mapstruct:mapstruct from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.mapstruct:mapstruct-processor from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.mapstruct:mapstruct-processor from 1.6.2 to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)
Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • See full diff in compare view

Updates org.openapitools:jackson-databind-nullable from 0.2.6 to 0.2.7

Release notes

Sourced from org.openapitools:jackson-databind-nullable's releases.

v0.2.7 released

What's Changed

New Contributors

Full Changelog: OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7

Commits

Updates org.apache.commons:commons-lang3 from 3.18.0 to 3.19.0

Updates org.apache.commons:commons-text from 1.13.1 to 1.14.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.14.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.14.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.14.0. Requires Java 8 or above.

New features

  •        Interface StringLookup now extends UnaryOperator<String>. Thanks to Gary Gregory.

  •        Interface TextRandomProvider extends IntUnaryOperator. Thanks to Gary Gregory.

  •        Add RandomStringGenerator.Builder.usingRandom(IntUnaryOperator). Thanks to Gary Gregory.

  •        Add PMD check to default Maven goal. Thanks to Gary Gregory.

  •        Add org.apache.commons.text.RandomStringGenerator.Builder.setAccumulate(boolean). Thanks to Gary Gregory.

Fixed Bugs

  •        Fix PMD UnnecessaryFullyQualifiedName in StringLookupFactory. Thanks to Gary Gregory.

  •        Fix PMD UnnecessaryFullyQualifiedName in DefaultStringLookupsHolder. Thanks to Gary Gregory.

  •        Fix PMD UnnecessaryFullyQualifiedName in PropertiesStringLookup. Thanks to Gary Gregory.

  •        Fix PMD UnnecessaryFullyQualifiedName in JavaPlatformStringLookup. Thanks to Gary Gregory.

  •        Fix PMD UnnecessaryFullyQualifiedName in StringSubstitutor. Thanks to Gary Gregory.

  •        Fix PMD UnnecessaryFullyQualifiedName in StrSubstitutor. Thanks to Gary Gregory.

  •        Fix PMD UnnecessaryFullyQualifiedName in AlphabetConverter. Thanks to Gary Gregory.

  •        Fix PMD AvoidBranchingStatementAsLastInLoop in TextStringBuilder. Thanks to Gary Gregory.

  •        Fix PMD AvoidBranchingStatementAsLastInLoop in StrBuilder. Thanks to Gary Gregory.

  •        org.apache.commons.text.translate.LookupTranslator.LookupTranslator(Map CharSequence>) now throws NullPointerException instead of java.security.InvalidParameterException. Thanks to Gary Gregory.

Changes

  •        Bump org.apache.commons:commons-parent from 81 to 85 [#668](https://github.com/apache/commons-text/issues/668). Thanks to Dependabot, Gary Gregory.

  •        Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.

  •        Bump graalvm.version from 24.2.0 to 24.2.2 [#665](https://github.com/apache/commons-text/issues/665), [#681](https://github.com/apache/commons-text/issues/681). Thanks to Dependabot, Gary Gregory.

  •        Bump commons.bytebuddy.version from 1.17.5 to 1.17.6 ([#677](https://github.com/apache/commons-text/issues/677)). Thanks to Dependabot.

  •        Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#680](https://github.com/apache/commons-text/issues/680). Thanks to Dependabot.

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

... (truncated)

Commits

Updates org.apache.commons:commons-compress from 1.26.0 to 1.28.0

Changelog

Sourced from org.apache.commons:commons-compress's changelog.

Apache Commons Compress 1.28.0 Release Notes

The Apache Commons Compress team is pleased to announce the release of Apache Commons Compress 1.28.0.

Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

This is a feature and maintenance release. Java 8 or later is required.

This release updates Apache Commons Lang to 3.18.0 to pick up the fix for CVE-2025-48924 (https://nvd.nist.gov/vuln/detail/CVE-2025-48924), but is not affected by it.

Changes in this version

Changes in this version include the following.

New Features

  •        Add GzipParameters.getModificationInstant(). Thanks to Gary Gregory. 

  •        Add GzipParameters.setModificationInstant(Instant). Thanks to Gary Gregory. 

  •        Add GzipParameters.OS, setOS(OS), getOS(). Thanks to Gary Gregory. 

  •        Add GzipParameters.toString(). Thanks to Gary Gregory.
  • COMPRESS-638: Add GzipParameters.setFileNameCharset(Charset) and getFileNameCharset() to override the default ISO-8859-1 Charset #602. Thanks to vincexjl, Gary Gregory, Piotr P. Karwasz.
  •        Add support for gzip extra subfields, see GzipParameters.setExtra(HeaderExtraField) [#604](https://github.com/apache/commons-compress/issues/604). Thanks to ddeschenes-1, Gary Gregory. 

  •        Add CompressFilterOutputStream and refactor to use. Thanks to Gary Gregory. 

  •        Add ZipFile.stream(). Thanks to Gary Gregory. 

  •        GzipCompressorInputStream reads the modification time (MTIME) and stores its value incorrectly multiplied by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        GzipCompressorInputStream writes the modification time (MTIME) the value incorrectly divided by 1,000. Thanks to Danny Deschenes, Gary Gregory. 

  •        Add optional FHCRC to GZIP header [#627](https://github.com/apache/commons-compress/issues/627). Thanks to Danny Deschenes, Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder allowing to customize the file name and comment Charsets. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberStart(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add GzipCompressorInputStream.Builder.setOnMemberEnd(IOConsumer) to monitor member parsing. Thanks to Gary Gregory. 

  •        Add PMD check to default Maven goal. Thanks to Gary Gregory. 

  •        Add SevenZFile.Builder.setMaxMemoryLimitKiB(int). Thanks to Gary Gregory. 

  •        Add MemoryLimitException.MemoryLimitException(long, int, Throwable) and deprecate MemoryLimitException.MemoryLimitException(long, int, Exception). Thanks to Gary Gregory.
  • COMPRESS-692: Add support for zstd compression in zip archives. Thanks to Mehmet Karaman, Andrey Loskutov, Gary Gregory.
  •        Add support for XZ compression in ZIP archives. Thanks to Gary Gregory.
  • COMPRESS-695: Add ZipArchiveInputStream.createZstdInputStream(InputStream) to provide a different InputStream implementation for Zstandard (Zstd) #649. Thanks to Gary Gregory.
  •        Add org.apache.commons.compress.harmony.pack200.Pack200Exception.Pack200Exception(String, Throwable). Thanks to Gary Gregory.
  • COMPRESS-697: Move BitStream.nextBit() method to BitInputStream #663. Thanks to Fredrik Kjellberg, Gary Gregory.
  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.lzma.LZMACompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorInputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.XZCompressorOutputStream.builder/Builder(). Thanks to Gary Gregory. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdCompressorOutputStream.builder/Builder() [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz. 

  •        Add org.apache.commons.compress.compressors.xz.ZstdConstants [#666](https://github.com/apache/commons-compress/issues/666). Thanks to Gary Gregory, David Walluck, Piotr P. Karwasz.

... (truncated)

Commits

Updates org.apache.avro:avro from 1.11.4 to 1.12.0

Updates software.amazon.msk:aws-msk-iam-auth from 2.3.0 to 2.3.4

Release notes

Sourced from software.amazon.msk:aws-msk-iam-auth's releases.

2.3.4

  • Skip credential providers chain
  • Upgrade AWS SDK version

2.3.3

  • Upgrade AWS SDK version

2.3.2

  • Fix unreleased file lock issue in Gradle
  • Enable FIPS endpoint support

2.3.1

  • Upgrade Jackson Databind version
Commits

Updates com.azure:azure-identity from 1.15.4 to 1.18.0

Commits
  • 49f5c08 Fix Metrics Advisor Readme issues (#22694)
  • a2212c9 Update Core Library Changelog Release Dates (#22724)
  • 549b834 Update docs metadata mutation logic (#22700)
  • a410b47 [Service Bus] Add Dead Letter Queues Sample (#22142)
  • c5a7398 fix service bus readme issue (#22320)
  • d956dde create Subscription Rule with CorrelationFilter does not create respect prope...
  • 525606e Added support for file share reliable download (#22504)
  • fa07d23 fix sample controller (#22679)
  • e83ac1b Limit the size of cached URL builders (#22697)
  • f6fc9ec Prepare to release a patch version for azure-security-keyvault-jca and azure...
  • Additional commits viewable in compare view

Updates dev.cel:cel from 0.3.0 to 0.11.0

Release notes

Sourced from dev.cel:cel's releases.

v0.11.0

Features

Breaking Changes

  • PR #769 removes setContainer(String) method on the Cel, CelCompiler, and CelChecker builders. Callers must use setContainer(CelContainer) instead, which supports aliasing and abbreviations in addition to existing container resolution. For a migration that preserves existing behavior, simply provide CelContainer.ofName(string).

  • PR #789 changes the internal representation of CEL's null and bytes literals (e.g., b'foo') to their CEL-native Java type equivalents (dev.cel.common.Values.NullValue and dev.cel.common.values.CelByteString) instead of their Protobuf counterparts (com.google.protobuf.NullValue and com.google.protobuf.ByteString). This is currently a breaking change only if your codebase references these literals through the CelConstant AST node. There are no observable changes in evaluation behavior, as this is currently controlled by a feature flag. We plan on enabling this by default in a future release.

Bug fixes

  • Fixed the filter/map macro to be linear in time and space complexity in #746.
  • Fixed unknown merging to be linear in space complexity when referenced in binds in #770.
  • Prevented comprehension identifiers from being mangled if the AST was not optimized in #792.
  • Fixed replaceSubtree to properly populate source info for the three-argument map macro in #794.
  • Corrected CelContainer.toBuilder() to properly copy aliases in #775.
  • Excluded protobuf-javalite from the public artifacts for CEL in #777.

What's Changed

Aliasing and Abbreviations

  • Add aliasing support to type-checker in #757
  • Add abbreviation support to type-checker in #760

CEL Policy Compiler

  • Optimize composed policies using Constant Folding and Common Subexpression Elimination in #793
  • Add display_name field to CelPolicy.Variable element in #741
  • Adding description and display name at Cel Policy level in #744
  • Support for typename import aliases in policy compiler in #771

CEL Environment

  • Add support for stdlib subsetting via CelEnvironment in #736
  • Add support for macro inclusion/exclusion to CelEnvironmentExporter in #756
  • Add support for extension versions in #739
  • Implement CelEnvironmentExporter in #753
  • Update the "encoders" extension to be compatible with CelEnvironmentExporter in #763
  • Update the "protos" extension to be compatible with CelEnvironmentExporter in #764
  • Update the "regex" extension to be compatible with CelEnvironmentExporter in #765
  • Update the "sets" extension to be compatible with CelEnvironmentExporter in #766
  • Update the "strings" extension to be compatible with CelEnvironmentExporter in #767

... (truncated)

Commits
  • f4cb7c0 Prepare 0.11.0 release
  • 361c802 Properly retain celStandardDeclarations when invoking toBuilder on checker
  • 8363a89 Internal Changes
  • fd2f721 Remove unused replaceSubtreeWithNewBindMacro method
  • 019ae76 Remove cel.bind option from SubexpressionOptimizer
  • 8fc7387 Optimize composed policies using Constant Folding and Common Subexpression El...
  • aa20b5d Updating the README.md with CelComprehensionsExtensions docs
  • a138ce3 Adding transformMap and transformMapEntry macros
  • e73283b Adding runtime support for two variable comprehensions
  • 1ee7d1d Add missing entires to REVERSE_OPERATORS
  • Additional commits viewable in compare view

Updates org.testcontainers:testcontainers from 1.20.6 to 1.21.3

Release notes

Sourced from org.testcontainers:testcontainers's releases.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

1.21.0

What's Changed

... (truncated)

Commits

Updates org.testcontainers:kafka from 1.20.6 to 1.21.3

Release notes

Sourced from org.testcontainers:kafka's releases.

1.21.3

What's Changed

1.21.2

What's Changed

📖 Documentation

📦 Dependency updates

1.21.1

What's Changed

🚀 Features & Enhancements

🐛 Bug Fixes

  • Use generic init script filename when copying it into a Cassandra container (#9606) @​maximevw

📖 Documentation

📦 Dependency updates

1.21.0

What's Changed

... (truncated)

Commits

Updates org.testcontainers:junit-jupiter from 1.20.6 to 1.21.3

Release notes

Sourced from org.testcontainers:junit-jupiter's releases.

1.21.3

What's Changed

1.21.2

What's Changed

@dependabot dependabot bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Oct 6, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 6, 2025 09:29
@dependabot dependabot bot added scope/backend Related to backend changes type/dependencies A pull request/issue dedicated to updating the dependency(-ies) labels Oct 6, 2025
@kapybro kapybro bot added status/triage Issues pending maintainers triage status/triage/manual Manual triage in progress status/triage/completed Automatic triage completed and removed status/triage Issues pending maintainers triage labels Oct 6, 2025
@dependabot
Bump the other-dependencies group across 1 directory with 29 updates
97dc4f2 
Bumps the other-dependencies group with 29 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) | `10.0.2` | `10.5` |
| io.swagger.core.v3:swagger-integration-jakarta | `2.2.28` | `2.2.38` |
| [org.mapstruct:mapstruct](https://github.com/mapstruct/mapstruct) | `1.6.2` | `1.6.3` |
| [org.mapstruct:mapstruct-processor](https://github.com/mapstruct/mapstruct) | `1.6.2` | `1.6.3` |
| [org.openapitools:jackson-databind-nullable](https://github.com/OpenAPITools/jackson-databind-nullable) | `0.2.6` | `0.2.7` |
| org.apache.commons:commons-lang3 | `3.18.0` | `3.19.0` |
| [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.13.1` | `1.14.0` |
| [org.apache.commons:commons-compress](https://github.com/apache/commons-compress) | `1.26.0` | `1.28.0` |
| org.apache.avro:avro | `1.11.4` | `1.12.0` |
| [software.amazon.msk:aws-msk-iam-auth](https://github.com/aws/aws-msk-iam-auth) | `2.3.0` | `2.3.4` |
| [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) | `1.15.4` | `1.18.0` |
| [dev.cel:cel](https://github.com/google/cel-java) | `0.3.0` | `0.11.0` |
| [org.testcontainers:testcontainers](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.3` |
| [org.testcontainers:kafka](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.3` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.20.6` | `1.21.3` |
| [net.bytebuddy:byte-buddy](https://github.com/raphw/byte-buddy) | `1.14.19` | `1.17.7` |
| [org.assertj:assertj-core](https://github.com/assertj/assertj) | `3.25.3` | `3.27.6` |
| [org.bouncycastle:bcpkix-jdk18on](https://github.com/bcgit/bc-java) | `1.80` | `1.82` |
| [com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler](https://github.com/googleapis/managedkafka) | `1.0.5` | `1.0.6` |
| [io.modelcontextprotocol.sdk:mcp-spring-webflux](https://github.com/modelcontextprotocol/java-sdk) | `0.10.0` | `0.14.0` |
| io.prometheus:prometheus-metrics-core | `1.3.6` | `1.4.1` |
| io.prometheus:prometheus-metrics-exposition-textformats | `1.3.6` | `1.4.1` |
| io.prometheus:prometheus-metrics-exporter-pushgateway | `1.3.6` | `1.4.1` |
| org.apache.lucene:lucene-core | `10.2.2` | `10.3.0` |
| org.apache.lucene:lucene-queryparser | `10.2.2` | `10.3.0` |
| org.apache.lucene:lucene-analysis-common | `10.2.2` | `10.3.0` |
| [org.openapitools.openapistylevalidator](https://github.com/openapitools/openapi-style-validator) | `1.10` | `1.11` |
| org.openapi.generator | `7.13.0` | `7.16.0` |
| org.sonarqube | `6.0.1.5171` | `6.3.1.5724` |



Updates `com.nimbusds:nimbus-jose-jwt` from 10.0.2 to 10.5
- [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt)
- [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.5..10.0.2)

Updates `io.swagger.core.v3:swagger-integration-jakarta` from 2.2.28 to 2.2.38

Updates `org.mapstruct:mapstruct` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Changelog](https://github.com/mapstruct/mapstruct/blob/main/NEXT_RELEASE_CHANGELOG.md)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Changelog](https://github.com/mapstruct/mapstruct/blob/main/NEXT_RELEASE_CHANGELOG.md)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.6.2 to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Changelog](https://github.com/mapstruct/mapstruct/blob/main/NEXT_RELEASE_CHANGELOG.md)
- [Commits](mapstruct/mapstruct@1.6.2...1.6.3)

Updates `org.openapitools:jackson-databind-nullable` from 0.2.6 to 0.2.7
- [Release notes](https://github.com/OpenAPITools/jackson-databind-nullable/releases)
- [Commits](OpenAPITools/jackson-databind-nullable@v0.2.6...v0.2.7)

Updates `org.apache.commons:commons-lang3` from 3.18.0 to 3.19.0

Updates `org.apache.commons:commons-text` from 1.13.1 to 1.14.0
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-text@rel/commons-text-1.13.1...rel/commons-text-1.14.0)

Updates `org.apache.commons:commons-compress` from 1.26.0 to 1.28.0
- [Changelog](https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-compress@rel/commons-compress-1.26.0...rel/commons-compress-1.28.0)

Updates `org.apache.avro:avro` from 1.11.4 to 1.12.0

Updates `software.amazon.msk:aws-msk-iam-auth` from 2.3.0 to 2.3.4
- [Release notes](https://github.com/aws/aws-msk-iam-auth/releases)
- [Commits](aws/aws-msk-iam-auth@v2.3.0...v2.3.4)

Updates `com.azure:azure-identity` from 1.15.4 to 1.18.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-identity_1.15.4...azure-core_1.18.0)

Updates `dev.cel:cel` from 0.3.0 to 0.11.0
- [Release notes](https://github.com/google/cel-java/releases)
- [Commits](google/cel-java@v0.3.0...v0.11.0)

Updates `org.testcontainers:testcontainers` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:kafka` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:junit-jupiter` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:kafka` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `org.testcontainers:junit-jupiter` from 1.20.6 to 1.21.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.6...1.21.3)

Updates `net.bytebuddy:byte-buddy` from 1.14.19 to 1.17.7
- [Release notes](https://github.com/raphw/byte-buddy/releases)
- [Changelog](https://github.com/raphw/byte-buddy/blob/master/release-notes.md)
- [Commits](raphw/byte-buddy@byte-buddy-1.14.19...byte-buddy-1.17.7)

Updates `org.assertj:assertj-core` from 3.25.3 to 3.27.6
- [Release notes](https://github.com/assertj/assertj/releases)
- [Commits](assertj/assertj@assertj-build-3.25.3...assertj-build-3.27.6)

Updates `org.bouncycastle:bcpkix-jdk18on` from 1.80 to 1.82
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

Updates `com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/googleapis/managedkafka/releases)
- [Commits](googleapis/managedkafka@v1.0.5...v1.0.6)

Updates `io.modelcontextprotocol.sdk:mcp-spring-webflux` from 0.10.0 to 0.14.0
- [Release notes](https://github.com/modelcontextprotocol/java-sdk/releases)
- [Commits](modelcontextprotocol/java-sdk@v0.10.0...v0.14.0)

Updates `io.prometheus:prometheus-metrics-core` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exposition-textformats` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exposition-textformats` from 1.3.6 to 1.4.1

Updates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.3.6 to 1.4.1

Updates `org.apache.lucene:lucene-core` from 10.2.2 to 10.3.0

Updates `org.apache.lucene:lucene-queryparser` from 10.2.2 to 10.3.0

Updates `org.apache.lucene:lucene-analysis-common` from 10.2.2 to 10.3.0

Updates `org.apache.lucene:lucene-queryparser` from 10.2.2 to 10.3.0

Updates `org.apache.lucene:lucene-analysis-common` from 10.2.2 to 10.3.0

Updates `org.openapitools.openapistylevalidator` from 1.10 to 1.11
- [Release notes](https://github.com/openapitools/openapi-style-validator/releases)
- [Commits](https://github.com/openapitools/openapi-style-validator/commits)

Updates `org.openapi.generator` from 7.13.0 to 7.16.0

Updates `org.sonarqube` from 6.0.1.5171 to 6.3.1.5724

---
updated-dependencies:
- dependency-name: com.nimbusds:nimbus-jose-jwt
  dependency-version: '10.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.swagger.core.v3:swagger-integration-jakarta
  dependency-version: 2.2.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mapstruct:mapstruct
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.openapitools:jackson-databind-nullable
  dependency-version: 0.2.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.commons:commons-compress
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.avro:avro
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: software.amazon.msk:aws-msk-iam-auth
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: com.azure:azure-identity
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: dev.cel:cel
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:testcontainers
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:kafka
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:kafka
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: net.bytebuddy:byte-buddy
  dependency-version: 1.17.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.assertj:assertj-core
  dependency-version: 3.27.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.bouncycastle:bcpkix-jdk18on
  dependency-version: '1.82'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: com.google.cloud.hosted.kafka:managed-kafka-auth-login-handler
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-dependencies
- dependency-name: io.modelcontextprotocol.sdk:mcp-spring-webflux
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-core
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exposition-textformats
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exposition-textformats
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: io.prometheus:prometheus-metrics-exporter-pushgateway
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-core
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-queryparser
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-analysis-common
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-queryparser
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.apache.lucene:lucene-analysis-common
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.openapitools.openapistylevalidator
  dependency-version: '1.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.openapi.generator
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
- dependency-name: org.sonarqube
  dependency-version: 6.3.1.5724
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/gradle/other-dependencies-c2798be86e branch from 2680607 to 97dc4f2 Compare October 13, 2025 10:01
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 20, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 20, 2025
@dependabot dependabot bot deleted the dependabot/gradle/other-dependencies-c2798be86e branch October 20, 2025 09:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

scope/backend Related to backend changes status/triage/completed Automatic triage completed status/triage/manual Manual triage in progress type/dependencies A pull request/issue dedicated to updating the dependency(-ies)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants