Skip to content

chore(deps): bump the spring group across 1 directory with 3 updates - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/zero-spring/backend/spring-314a18d7c1
Open

chore(deps): bump the spring group across 1 directory with 3 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/zero-spring/backend/spring-314a18d7c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown

Bumps the spring group with 3 updates in the /zero-spring/backend directory: org.springframework.boot:spring-boot-starter-parent, org.springframework.modulith:spring-modulith-bom and org.springdoc:springdoc-openapi-starter-webmvc-ui.

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.5 to 3.5.16

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v3.5.16

🔨 Dependency Upgrades

v3.5.15

🐞 Bug Fixes

  • Artemis auto-configuration uses a predictable default location for the embedded broker's data #50743
  • MailSender auto-configuration does not enable hostname verification #50742
  • SSL should not be enabled when a SSL bundle is overridden to an empty string #50624
  • Layer written outside the output location of '//' exception is thrown when using extract layers in root directory #50501
  • Docker Compose support does not restore thread interrupt flag when catching InterruptedException #50451
  • RabbitProperties enables SSL even when spring.rabbitmq.ssl.bundle is overridden to an empty string #50429
  • GraphQL WebSocket support does not configure allowed origins #50391
  • Buildpack module does not validate long-to-int casts #50382
  • MappingsEndpoint reports the context's own ID as parentId when a parent exists #50373
  • Created StackTracePrinter instances have no access to the Environment #50303
  • NullPointerException in reactor-netty SniProvider when SSL bundle uses client-auth or server truststore without server-name-bundles #50301
  • Spring Boot Loader Does Not Support RSA and EC Signed Jars #50292
  • ConfigurationPropertiesReportEndpoint exposes AOP proxy internals #50273
  • Actuator's '/cloudfoundryapplication' endpoint does not work if restrictive CORS configuration is provided using a bean named corsConfigurationSource #50254
  • Meter registries are not removed from the global registry when the context is closed #50235
  • ThreadPoolTaskScheduleBuilder unnecessarily loses precision when configuring await termination time #50225
  • Apply HTML escaping to timestamp attribute in Whitelabel error page #50205
  • NimbusJwtDecoder silently accepts unknown values for spring.security.oauth2.resourceserver.jwt.jws-algorithms #50118
  • EndpointRequest links matcher unnecessarily matches HTTP methods other than GET #50095

📔 Documentation

  • Fix reference to Gradle documentation for module replacement #50641
  • Remove the use of Optional from Data Neo4j repository examples #50600
  • Fix typos in documentation #50593
  • Document Java 25 requirement for AOT cache #50482
  • Clarify dependency requirement for Bean Validation support #50290
  • Document SSL reloading with Let's Encrypt #50222
  • Polish InvalidConfigurationPropertyValueException constructor javadoc #50212
  • Document known testcontainers lifecycle issues #50210
  • Document configuring multiple connectors with Jetty #50206
  • Fix typo in Spring Security OAuth2 client registration documentation #50193

🔨 Dependency Upgrades

... (truncated)

Commits
  • 0566f69 Release v3.5.16
  • 93edd16 Next development version (v3.5.16-SNAPSHOT)
  • 5bafd0a Upgrade to Spring Integration 6.5.10
  • baf3290 Upgrade to Spring AMQP 3.2.12
  • 2c5964a Upgrade to Spring Data Bom 2025.0.13
  • dbb08aa Upgrade Antora dependencies
  • 9b281d5 Upgrade to actions/checkout 7.0.0
  • a854058 Upgrade to jfrog/setup-jfrog-cli 5.1.0
  • fc236ae Start building against Spring Integration 6.5.10 snapshots
  • 5271da7 Start building against Spring Data Bom 2025.0.13 snapshots
  • Additional commits viewable in compare view

Updates org.springframework.modulith:spring-modulith-bom from 1.4.5 to 1.4.13

Release notes

Sourced from org.springframework.modulith:spring-modulith-bom's releases.

1.4.13

🪲 Bugs

  • Ambiguous violation message when referring to a non-exposed type in a module generally available for access #1829
  • ConcurrentModificationException in TestExecutionCondition when running tests with JUnit parallel class execution #1826

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 3.5.16 #1819

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​arendomoda, @​kalayciburak

1.4.12

💡 Improvements

  • Fix typo in Javadoc of ApplicationModules #1697

🪲 Bugs

  • Avoid ConcurrentModificationException in ModuleEntryInterceptor #1721
  • Primitive types break FormattableType #1717

🔨 Dependency Upgrades

  • Upgrade to Spring Framework 6.2.19 #1746
  • Upgrade to Micrometer Tracing 1.5.12 #1745

1.4.11

💡 Improvements

  • Prefer @SpringBootApplication on explicitly declared classes in @ModuleSlicing #1646

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 3.5.14 #1678
  • Upgrade to Micrometer 1.15.11 #1677
  • Upgrade to Lombok 1.18.46 #1676
  • Upgrade to ArchUnit 1.4.2 #1673
  • Upgrade to Spring Framework 6.2.18 #1672
  • Upgrade to Micrometer Tracing 1.5.11 #1671

1.4.10

🔨 Dependency Upgrades

  • Upgrade to Spring Boot 3.5.13 #1633

... (truncated)

Commits

Updates org.springdoc:springdoc-openapi-starter-webmvc-ui from 2.8.5 to 2.9.0

Release notes

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's releases.

springdoc-openapi v2.9.0 released!

What's Changed

  • Upgrade Spring Boot to version 3.5.16
  • Upgrade swagger-core to version 2.2.52
  • Upgrade swagger-ui to version 5.32.11
  • Upgrade commons-lang to version 3.20.0
  • Act upon SonarQube warnings (#3306, #3307)

Added

  • Allow request-specific Swagger UI index transformation
  • Add a mechanism to disable nullable for Kotlin properties

Fixed

  • #3304 – Kotlin parent class's field is not properly marked as nullable
  • #3298 – Update Spring Boot to 3.5.16
  • #3294 – Duplicated path getting swagger-config
  • #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
  • #3291 – Fix vulnerabilities: upgrade Spring Boot to 3.5.14 and swagger-ui to 5.32.5
  • #3288 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
  • #3281 – Stabilize Spring Data Page schema property order
  • #3274 – Description disappears from the generated JSON after upgrade to 3.0.3
  • #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
  • #3263 – Null key for a Map not allowed in JSON
  • #3262 – Fix version mismatch in springdoc-openapi-tests modules

New Contributors

Full Changelog: springdoc/springdoc-openapi@v2.8.17...v2.9.0

springdoc-openapi v2.8.17 released!

Added

  • Add support for the @Range constraint validation annotation
  • Auto-set nullable: true for Kotlin nullable types in schema properties

Changed

... (truncated)

Changelog

Sourced from org.springdoc:springdoc-openapi-starter-webmvc-ui's changelog.

[2.9.0] - 2026-07-31

Added

  • Allow request-specific Swagger UI index transformation
  • Add a mechanism to disable nullable for Kotlin properties

Changed

  • Upgrade Spring Boot to version 3.5.16
  • Upgrade swagger-core to version 2.2.52
  • Upgrade swagger-ui to version 5.32.11
  • Upgrade commons-lang to version 3.20.0
  • Act upon SonarQube warnings (#3306, #3307)

Fixed

  • #3304 – Kotlin parent class's field is not properly marked as nullable
  • #3298 – Update Spring Boot to 3.5.16
  • #3294 – Duplicated path getting swagger-config
  • #3293 – Inconsistent OpenAPI schema naming with SNAKE_CASE: some Java record fields remain camelCase
  • #3291 – Fix vulnerabilities: upgrade Spring Boot to 3.5.14 and swagger-ui to 5.32.5
  • #3288 – Make WebProperties and WebMvcProperties optional in SwaggerConfig
  • #3281 – Stabilize Spring Data Page schema property order
  • #3274 – Description disappears from the generated JSON after upgrade to 3.0.3
  • #3270 – Validation annotation of ParameterObject property applied to PathVariable with the same name, even in unrelated endpoints
  • #3263 – Null key for a Map not allowed in JSON
  • #3262 – Fix version mismatch in springdoc-openapi-tests modules

[2.8.17] - 2026-04-12

Added

  • Add support for the @Range constraint validation annotation
  • Auto-set nullable: true for Kotlin nullable types in schema properties

Changed

  • Upgrade Spring Boot to version 3.5.13
  • Upgrade swagger-core to version 2.2.47
  • Upgrade swagger-ui to version 5.32.2

Fixed

  • #3259 – Fix an issue with annotated types with generics on parameters
  • #3255 – Handle $ref nullable wrapping and OAS 3.1 support
  • #3245 – Upgrade swagger-core from 2.2.43 to 2.2.45 (fixes schema resolution issues)
  • #3241 – Generic error responses from multiple @ControllerAdvice are still nondeterministic across OS
  • #3236 – Preserve YAML group URLs in Swagger UI
  • Fix PropertyResolverUtils to retain a JsonNode when reading an ExtensionProperty annotation

... (truncated)

Commits
  • 458b4d3 [maven-release-plugin] prepare release v2.9.0
  • 1840a5d CHANGELOG.md update
  • efa10ec swagger-ui upgrade to version 5.32.11
  • a60859e Fix sonarqube issues
  • aca2d43 fixed sonar issues
  • a6e0f23 chore: act upon SonarQube warnings #3307
  • 06f8e63 upgrade to commons-lang 3.20.0
  • 1910b1b Kotlin parent class's field is not properly marked as nullable. Fixes #3304
  • 72611bf Merge pull request #3306 from Mattias-Sehlstedt/sonar-qube
  • 1c4e1d8 chore: act upon SonarQube warnings
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 8, 2026
Bumps the spring group with 3 updates in the /zero-spring/backend directory: [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot), [org.springframework.modulith:spring-modulith-bom](https://github.com/spring-projects/spring-modulith) and [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi).


Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.5 to 3.5.16
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.5...v3.5.16)

Updates `org.springframework.modulith:spring-modulith-bom` from 1.4.5 to 1.4.13
- [Release notes](https://github.com/spring-projects/spring-modulith/releases)
- [Changelog](https://github.com/spring-projects/spring-modulith/blob/main/release-train-settings.xml)
- [Commits](spring-projects/spring-modulith@1.4.5...1.4.13)

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.5 to 2.9.0
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/v2.9.0/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.5...v2.9.0)

---
updated-dependencies:
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: spring
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
- dependency-name: org.springframework.modulith:spring-modulith-bom
  dependency-version: 1.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: spring
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the spring group in /zero-spring/backend with 3 updates chore(deps): bump the spring group across 1 directory with 3 updates Sep 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/zero-spring/backend/spring-314a18d7c1 branch from 9fd40c0 to 7802601 Compare September 1, 2026 18:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants