Skip to content

Bump the gradle-version-updates group across 1 directory with 9 updates#3299

Closed
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-e0f8827b91
Closed

Bump the gradle-version-updates group across 1 directory with 9 updates#3299
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-e0f8827b91

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025

Bumps the gradle-version-updates group with 6 updates in the /hooks/persistence-defectdojo/hook directory:

Package From To
org.springframework:spring-web 6.2.10 6.2.11
com.fasterxml.jackson.core:jackson-core 2.19.2 2.20.0
com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.19.2 2.20.0
org.mockito:mockito-core 5.19.0 5.20.0
io.freefair.lombok 8.14.2 9.0.0
com.github.ben-manes.versions 0.52.0 0.53.0

Updates org.springframework:spring-web from 6.2.10 to 6.2.11

Release notes

Sourced from org.springframework:spring-web's releases.

v6.2.11

⭐ New Features

  • Missing @Nullable on JsonPathAssertions.isEqualTo #35445
  • Graceful fallback for non-default NIO.2 FileSystems #35443
  • Avoid thread pinning in SseEmitter, ResponseBodyEmitter #35423
  • Detect Informix error codes as DuplicateKeyException #35400
  • Inconsistent nullability for String value arguments in ResponseCookie from*() factory methods #35377
  • Revisit taskTerminationTimeout semantics on SimpleAsyncTaskExecutor/Scheduler #35372
  • StandardEvaluationContext.setBeanResolver should allow @Nullable BeanResolver #35371

🐞 Bug Fixes

  • "mainThreadPrefix = null " Causing multiple background bean locks to be blocked #35409
  • Annotation not found on parameter in overridden method unless method is public #35349
  • Annotations on overridden methods not found in type hierarchy with unresolved generics #35342
  • Performance degradation when using singleton beans with Provider #35330
  • JettyClientHttpConnector buffer leak in Spring Framework 6.2 #35319
  • Spring application hangs on shutdown with @Scheduled(cron=…) when custom ScheduledExecutorService bean is defined (Java 19+) #35316

📔 Documentation

  • Document potential need to use Mockito.doXxx() to stub a @MockitoSpyBean #35410
  • Fix links to Reactive Libraries and RestTemplate #35392
  • Fix broken link in WebDriver docs #35374
  • Document Web DataBinder support for RouterFunction #35367
  • Improve documentation for ApplicationEvents to clarify recommended usage #35335
  • Document terms and units in DataSize.parse() #35298
  • Refine @Contract Javadoc #35285
  • Correct the default value of nestedTransactionAllowed in JpaTransactionManager javadoc #35212

🔨 Dependency Upgrades

  • Upgrade to Micrometer 1.14.11 #35455
  • Upgrade to Reactor 2024.0.10 #35454

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Dockerel, @​Kehrlann, @​acktsap, @​khj68, @​ngocnhan-tran1996, @​scordio, and @​sgflt

Commits
  • 4c13425 Release v6.2.11
  • d17601e Upgrade to Undertow 2.3.19, RxJava 3.1.11, Aalto 1.3.3
  • 5b38761 Clarify intended nestedTransactionAllowed default in JpaTransactionManager
  • 0e3e34b Find annotations on parameters in overridden non-public methods
  • 4745c7c Name local variables consistently
  • 275fb52 Upgrade to Reactor 2024.0.10 and Micrometer 1.14.11
  • 7f9aa39 Polishing
  • c788554 Avoid thread pinning in SseEmitter, ResponseBodyEmitter
  • 9e8c640 Make JsonPathAssertions#isEqualTo parameter nullable
  • ebb8e34 Upgrade to Jetty 12.0.26, Jetty Reactive HttpClient 4.0.11, Netty 4.1.127, Ht...
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.20.0

Commits
  • ea0830a [maven-release-plugin] prepare release jackson-core-2.20.0
  • e16733a Prep for 2.20.0
  • 93deb38 Drop RC from version pre-2.20.0 release
  • f0bcc3c Handle deprecation warnings
  • 6e70d08 Fix #1462: deprecate JsonFactory.createParser(URL) (#1464)
  • 588cc76 Post release version bump
  • 018f9e1 [maven-release-plugin] prepare for next development iteration
  • 360e498 [maven-release-plugin] prepare release jackson-core-2.20.0-rc1
  • 538ac44 Prep for 2.20.0-rc1
  • dfbf47b Merge branch '2.19' into 2.x
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.core:jackson-annotations from 2.19.2 to 2.20.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.2 to 2.20.0

Commits

Updates com.fasterxml.jackson.datatype:jackson-datatype-jsr310 from 2.19.2 to 2.20.0

Updates org.mockito:mockito-core from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-core's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

Commits
  • 3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
  • f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
  • 3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
  • 6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
  • c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
  • 54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
  • bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
  • a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
  • 37bb3e5 Fix metadata generation on GraalVM (#3710)
  • ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
  • Additional commits viewable in compare view

Updates org.mockito:mockito-junit-jupiter from 5.19.0 to 5.20.0

Release notes

Sourced from org.mockito:mockito-junit-jupiter's releases.

v5.20.0

Changelog generated by Shipkit Changelog Gradle Plugin

5.20.0

Commits
  • 3a1a19e Add support for generic types in MockedConstruction and MockedStatic (#3729)
  • f3c957a Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 (#3730)
  • 3cfbd42 Bump graalvm/setup-graalvm from 1.3.6 to 1.3.7 (#3725)
  • 6f9a04b Bump com.gradle.develocity from 4.1.1 to 4.2 (#3726)
  • c75dfb8 Bump org.eclipse.platform:org.eclipse.osgi from 3.23.100 to 3.23.200 (#3720)
  • 54474fa Bump graalvm/setup-graalvm from 1.3.5 to 1.3.6 (#3719)
  • bc06f21 Use Assume.assumeThat for SequencedCollection tests (#3711)
  • a10aed0 Bump actions/setup-java from 4 to 5 (#3715)
  • 37bb3e5 Fix metadata generation on GraalVM (#3710)
  • ef2fd6f Bump com.gradle.develocity from 4.1 to 4.1.1 (#3713)
  • Additional commits viewable in compare view

Updates io.freefair.lombok from 8.14.2 to 9.0.0

Release notes

Sourced from io.freefair.lombok's releases.

9.0.0

What's Changed

Full Changelog: freefair/gradle-plugins@8.14.2...9.0.0

9.0.0-rc2

Full Changelog: freefair/gradle-plugins@9.0.0-rc1...9.0.0-rc2

9.0.0-rc1

... (truncated)

Commits
  • 786f564 Update to Spring Boot 3.5.6
  • fe43572 Merge branch '8.x' of github.com:freefair/gradle-plugins
  • 3da1f86 Bump org.mockito.kotlin:mockito-kotlin from 5.4.0 to 6.0.0 (#1469)
  • b39aef5 Bump org.mockito:mockito-core from 5.19.0 to 5.20.0 (#1487)
  • 4b0917a Merge branch '8.x' of github.com:freefair/gradle-plugins
  • d413a0a remove gradle build cache
  • f5e37df Update to Gradle 9.1.0
  • 10d1d3a Merge branch '8.x' of github.com:freefair/gradle-plugins
  • 047a17d Bump org.sonarsource.scanner.gradle:sonarqube-gradle-plugin (#1488)
  • fd0b3fa Bump org.assertj:assertj-core from 3.27.3 to 3.27.6 in /examples (#1491)
  • Additional commits viewable in compare view

Updates com.github.ben-manes.versions from 0.52.0 to 0.53.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gradle-version-updates group with 6 updates in the /hooks/persistence-defectdojo/hook directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.2.10` | `6.2.11` |
| [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) | `2.19.2` | `2.20.0` |
| com.fasterxml.jackson.datatype:jackson-datatype-jsr310 | `2.19.2` | `2.20.0` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.19.0` | `5.20.0` |
| [io.freefair.lombok](https://github.com/freefair/gradle-plugins) | `8.14.2` | `9.0.0` |
| com.github.ben-manes.versions | `0.52.0` | `0.53.0` |



Updates `org.springframework:spring-web` from 6.2.10 to 6.2.11
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.2.10...v6.2.11)

Updates `com.fasterxml.jackson.core:jackson-core` from 2.19.2 to 2.20.0
- [Commits](FasterXML/jackson-core@jackson-core-2.19.2...jackson-core-2.20.0)

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.19.2 to 2.20.0

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.2 to 2.20.0
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.datatype:jackson-datatype-jsr310` from 2.19.2 to 2.20.0

Updates `org.mockito:mockito-core` from 5.19.0 to 5.20.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.19.0...v5.20.0)

Updates `org.mockito:mockito-junit-jupiter` from 5.19.0 to 5.20.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.19.0...v5.20.0)

Updates `io.freefair.lombok` from 8.14.2 to 9.0.0
- [Release notes](https://github.com/freefair/gradle-plugins/releases)
- [Commits](freefair/gradle-plugins@8.14.2...9.0.0)

Updates `com.github.ben-manes.versions` from 0.52.0 to 0.53.0

---
updated-dependencies:
- dependency-name: org.springframework:spring-web
  dependency-version: 6.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: com.fasterxml.jackson.datatype:jackson-datatype-jsr310
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-version: 5.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
- dependency-name: io.freefair.lombok
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gradle-version-updates
- dependency-name: com.github.ben-manes.versions
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gradle-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 29, 2025
@netlify
Copy link

netlify bot commented Sep 29, 2025

Deploy Preview for docs-securecodebox ready!

Name Link
🔨 Latest commit b90ba2a
🔍 Latest deploy log https://app.netlify.com/projects/docs-securecodebox/deploys/68dd12ec050772000899b7e1
😎 Deploy Preview https://deploy-preview-3299--docs-securecodebox.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@Weltraumschaf Weltraumschaf moved this from Triage to To Review in secureCodeBox Sep 30, 2025
@Weltraumschaf Weltraumschaf moved this from To Review to Todo in secureCodeBox Sep 30, 2025
@Weltraumschaf
Copy link
Member

From the project readme:

One exception to this is jackson-annotations which has a different versioning starting from 2.20 -- 2.20 instead of 2.20.0 (no patch digit)

@github-project-automation github-project-automation bot moved this from Todo to To Review in secureCodeBox Sep 30, 2025
@Weltraumschaf Weltraumschaf moved this from To Review to In Progress in secureCodeBox Sep 30, 2025
Signed-off-by: Sven Strittmatter <ich@weltraumschaf.de>
@github-project-automation github-project-automation bot moved this from In Progress to Reviewer Approved in secureCodeBox Oct 1, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented Oct 1, 2025

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 1, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/gradle/hooks/persistence-defectdojo/hook/gradle-version-updates-e0f8827b91 branch October 1, 2025 11:55
@Weltraumschaf
Copy link
Member

Fixed in other PR with BOM-POM.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant