Skip to content

[CORE-69]: Bump the minor-and-patch-updates group across 1 directory with 23 updates#1098

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/minor-and-patch-updates-80517b6e87
Open

[CORE-69]: Bump the minor-and-patch-updates group across 1 directory with 23 updates#1098
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/minor-and-patch-updates-80517b6e87

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps the minor-and-patch-updates group with 23 updates in the / directory:

Package From To
org.springframework.boot 3.5.12 3.5.14
org.sonarqube 7.0.1.6134 7.3.0.8198
org.openapi.generator 7.17.0 7.22.0
com.gorylenko.gradle-git-properties 2.5.3 2.5.7
com.diffplug.spotless 8.0.0 8.4.0
com.google.guava:guava 33.5.0-jre 33.6.0-jre
io.sentry:sentry-logback 8.25.0 8.40.0
io.swagger.core.v3:swagger-annotations 2.2.40 2.2.49
com.squareup.okhttp3:okhttp 5.3.0 5.3.2
bio.terra:java-pfb-library 0.87.0 0.100.0
org.apache.parquet:parquet-common 1.16.0 1.17.0
org.apache.parquet:parquet-avro 1.16.0 1.17.0
org.apache.parquet:parquet-hadoop 1.16.0 1.17.0
org.apache.hadoop:hadoop-common 3.4.2 3.5.0
org.apache.hadoop:hadoop-mapreduce-client-core 3.4.2 3.5.0
org.webjars.npm:swagger-ui-dist 5.32.1 5.32.5
au.com.dius.pact.provider:spring 4.6.17 4.7.1
au.com.dius.pact.consumer:junit5 4.6.17 4.7.1
com.google.cloud:google-cloud-nio 0.128.7 0.131.0
org.apache.commons:commons-configuration2 2.12.0 2.14.0
org.apache.tomcat.embed:tomcat-embed-core 11.0.21 11.0.22
org.eclipse.jetty:jetty-server 12.0.32 12.1.9
au.com.dius.pact 4.6.17 4.7.1

Updates org.springframework.boot from 3.5.12 to 3.5.14

Release notes

Sourced from org.springframework.boot's releases.

v3.5.14

🐞 Bug Fixes

  • ApplicationPidFileWriter does not handle symlinks correctly #50173
  • RandomValuePropertySource is not suitable for secrets #50172
  • Cassandra auto-configuration misconfigures CqlSessionBuilder #50171
  • ApplicationTemp does not handle symlinks correctly #50170
  • Remote DevTools performs comparison incorrectly #50169
  • spring.rabbitmq.ssl.verify-hostname is applied inconsistently #50168
  • EnversRevisionRepositoriesRegistrar should reuse @EnableEnversRepositories rather than configuring the JPA counterpart #50035
  • Annotations like @Ssl don't work on @Bean methods when using @ServiceConnection #50033
  • Whole number values are ignored when configuring min and max expected values and SLO boundaries for a distribution summary meter #50021
  • WebFlux Cloud Foundry links endpoint includes query string from received request in resolved links #50008
  • 500 response from env endpoint when supplied pattern is invalid #49942
  • HTTP method is lost when configuring excludes in EndpointRequest #49885
  • Docker Compose support doesn't work with apache/artemis image #49865
  • Honor HttpMethod for reactive additional endpoint paths #49864
  • Docker Compose support doesn't work with apache/activemq image #49863
  • Imports on a containing test class are ignored when a nested class has imports #49860

📔 Documentation

  • Link to the observability section of the Lettuce documentation is broken #50092
  • Javadoc for StaticResourceLocation.FAVICON doesn't describe icons location #50083
  • MySamlRelyingPartyConfiguration is missing a Kotlin sample #50023
  • Incorrect default value for management.httpexchanges.recording.include in configuration metadata #50010
  • Link to the Kubernetes documentation when discussing startup probes #50007
  • Update docs to encourage Java fundamentals for beginners that prefer to learn that way #49895
  • Clarify that configuration property default values are not available through the Environment #49835

🔨 Dependency Upgrades

... (truncated)

Commits
  • 7d7b3ac Release v3.5.14
  • 9dc5aa2 Polish
  • f533a45 Do not follow symlinks when writing PID file
  • f3b8eb0 Use SecureRandom in RandomValuePropertySource
  • e22083a Enable hostname verification for SSL connections to Cassandra
  • 5ceb1a2 Improve ApplicationTemp's temporary directory creation
  • 4b0862c Use constant-time comparison for remote DevTools secret
  • e4febe2 Apply verify-hostname consistently
  • 2c2ffe5 Fix Windows test failure
  • 0046a44 Protect against corrupt buildpack archives
  • Additional commits viewable in compare view

Updates org.sonarqube from 7.0.1.6134 to 7.3.0.8198

Updates org.openapi.generator from 7.17.0 to 7.22.0

Updates com.gorylenko.gradle-git-properties from 2.5.3 to 2.5.7

Updates com.diffplug.spotless from 8.0.0 to 8.4.0

Updates com.google.guava:guava from 33.5.0-jre to 33.6.0-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.6.0

Maven

<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.6.0-jre</version>
  <!-- or, for Android: -->
  <version>33.6.0-android</version>
</dependency>

Jar files

Guava requires one runtime dependency, which you can download here:

Javadoc

JDiff

Changelog

  • Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. (786b619dd6, 7c6b17c, aeef90988d)
  • cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. (73f8b0bb84)
  • collect: Added toImmutableSortedMap collectors that use the natural comparator. (64d70b9f94)
  • collect: Changed ConcurrentHashMultiset, ImmutableMap and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. (8240c7e596, 046468055f)
  • graph: Removed @Beta from all APIs in the package. (dae9566b73)
  • graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. (2e13df25b2)
  • graph: Added an asNetwork() view to Graph and ValueGraph. (909c593c61)
  • hash: Added BloomFilter.serializedSize(). (df9bcc251a)
  • net: Added HttpHeaders.CDN_CACHE_CONTROL. (75331b5030)
Commits

Updates io.sentry:sentry-logback from 8.25.0 to 8.40.0

Release notes

Sourced from io.sentry:sentry-logback's releases.

8.40.0

Fixes

  • Fix NoSuchMethodError for LayoutCoordinates.localBoundingBoxOf$default on Compose touch dispatch with AGP 8.13 and minSdk < 24 (#5302)
  • Fix reporting OkHttp's synthetic 504 "Unsatisfiable Request" responses as errors for CacheControl.FORCE_CACHE cache misses (#5299)
  • Make SentryGestureDetector thread-safe and recycle VelocityTracker per gesture (#5301)
  • Fix duplicate ui.click breadcrumbs when another Window.Callback wraps SentryWindowCallback (#5300)

Dependencies

8.39.1

Fixes

  • Fix JsonObjectReader and MapObjectReader hanging indefinitely when deserialization errors leave the reader in an inconsistent state (#5293)
    • Failed collection values are now skipped so parsing can continue
    • Skipped collection values emit WARNING logs
    • Unknown-key failures and unrecoverable recovery failures emit ERROR logs

8.39.0

Fixes

  • Fix ANR caused by GestureDetectorCompat Handler/MessageQueue lock contention in SentryWindowCallback (#5138)

Internal

  • Bump AGP version from v8.6.0 to v8.13.1 (#5063)

Dependencies

8.38.0

Features

  • Prevent cross-organization trace continuation (#5136)
    • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
    • New option enableStrictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected. Configurable via code (setStrictTraceContinuation(true)), sentry.properties (enable-strict-trace-continuation=true), Android manifest (io.sentry.strict-trace-continuation.enabled), or Spring Boot (sentry.strict-trace-continuation=true).
    • New option orgId: allows explicitly setting the organization ID for self-hosted and Relay setups where it cannot be extracted from the DSN. Configurable via code (setOrgId("123")), sentry.properties (org-id=123), Android manifest (io.sentry.org-id), or Spring Boot (sentry.org-id=123).
  • Android: Attachments on the scope will now be synced to native (#5211)
  • Add THIRD_PARTY_NOTICES.md for vendored third-party code, bundled as SENTRY_THIRD_PARTY_NOTICES.md in the sentry JAR under META-INF (#5186)

... (truncated)

Changelog

Sourced from io.sentry:sentry-logback's changelog.

8.40.0

Fixes

  • Fix NoSuchMethodError for LayoutCoordinates.localBoundingBoxOf$default on Compose touch dispatch with AGP 8.13 and minSdk < 24 (#5302)
  • Fix reporting OkHttp's synthetic 504 "Unsatisfiable Request" responses as errors for CacheControl.FORCE_CACHE cache misses (#5299)
  • Make SentryGestureDetector thread-safe and recycle VelocityTracker per gesture (#5301)
  • Fix duplicate ui.click breadcrumbs when another Window.Callback wraps SentryWindowCallback (#5300)

Dependencies

8.39.1

Fixes

  • Fix JsonObjectReader and MapObjectReader hanging indefinitely when deserialization errors leave the reader in an inconsistent state (#5293)
    • Failed collection values are now skipped so parsing can continue
    • Skipped collection values emit WARNING logs
    • Unknown-key failures and unrecoverable recovery failures emit ERROR logs

8.39.0

Fixes

  • Fix ANR caused by GestureDetectorCompat Handler/MessageQueue lock contention in SentryWindowCallback (#5138)

Internal

  • Bump AGP version from v8.6.0 to v8.13.1 (#5063)

Dependencies

8.38.0

Features

  • Prevent cross-organization trace continuation (#5136)
    • By default, the SDK now extracts the organization ID from the DSN (e.g. o123.ingest.sentry.io) and compares it with the sentry-org_id value in incoming baggage headers. When the two differ, the SDK starts a fresh trace instead of continuing the foreign one. This guards against accidentally linking traces across organizations.
    • New option enableStrictTraceContinuation (default false): when enabled, both the SDK's org ID and the incoming baggage org ID must be present and match for a trace to be continued. Traces with a missing org ID on either side are rejected. Configurable via code (setStrictTraceContinuation(true)), sentry.properties (enable-strict-trace-continuation=true), Android manifest (io.sentry.strict-trace-continuation.enabled), or Spring Boot (sentry.strict-trace-continuation=true).

... (truncated)

Commits
  • 2f670da release: 8.40.0
  • 2fcda64 fix(gestures): Thread-safe SentryGestureDetector with per-gesture VelocityTra...
  • 952b180 fix(gestures): Prevent duplicate ui.click breadcrumbs from buried window call...
  • 40234a9 fix(sentry-okhttp): Skip synthetic 504 for FORCE_CACHE cache misses (#5299)
  • 0220a5c fix(security): Add integrity verification before chmod +x in btrace-perfetto ...
  • 16a07c4 fix(compose): NoSuchMethodError for `LayoutCoordinates.localBoundingBoxOf$d...
  • 35c8ffa build(deps): bump getsentry/craft/.github/workflows/changelog-preview.yml fro...
  • e442d80 build(deps): bump actions/cache from 5.0.4 to 5.0.5 (#5310)
  • 2dffe01 build(deps): bump getsentry/craft from 2.25.2 to 2.25.4 (#5309)
  • 6a9020c build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#5308)
  • Additional commits viewable in compare view

Updates io.swagger.core.v3:swagger-annotations from 2.2.40 to 2.2.49

Updates com.squareup.okhttp3:okhttp from 5.3.0 to 5.3.2

Changelog

Sourced from com.squareup.okhttp3:okhttp's changelog.

Version 5.3.2

2025-11-18

  • Fix: Don't delay triggering timeouts. In Okio 3.16.0 we introduced a regression that caused timeouts to fire later than they were supposed to.

  • Upgrade: [Okio 3.16.4][okio_3_16_4].

Version 5.3.1

2025-11-16

This release is the same as 5.3.0. Okio 3.16.3 didn't have a necessary fix!

  • Upgrade: [Okio 3.16.3][okio_3_16_3].
Commits

Updates bio.terra:java-pfb-library from 0.87.0 to 0.100.0

Updates org.apache.parquet:parquet-common from 1.16.0 to 1.17.0

Release notes

Sourced from org.apache.parquet:parquet-common's releases.

Apache Parquet 1.17.0

What's Changed

New Contributors

... (truncated)

Commits
  • fac0c74 [maven-release-plugin] prepare release apache-parquet-1.17.0-rc0
  • a8ead9d Bump protobuf.version from 4.33.1 to 4.33.2 (#3373)
  • 0ecd799 Allow reading dictionary encoded boolean (#3370)
  • 46218f2 Bump commons-io:commons-io from 2.18.0 to 2.21.0 (#3369)
  • 7ec3284 Exclude package-info.class from shaded fastutil (#3322)
  • 7453be4 Bump com.google.guava:guava from 33.4.0-jre to 33.5.0-jre (#3366)
  • 893ef11 Bump easymock 5.6.0 to support Java 25 (#3363)
  • 6b2940c Remove unused parquet-thrift dependencies (#3323)
  • 5040a63 Bump protobuf.version from 3.25.6 to 4.30.2 (#3182)
  • 2ccc243 MINOR: parquet-avro tests should not debug to stderr (#3329)
  • Additional commits viewable in compare view

Updates org.apache.parquet:parquet-avro from 1.16.0 to 1.17.0

Release notes

Sourced from org.apache.parquet:parquet-avro's releases.

Apache Parquet 1.17.0

What's Changed

New Contributors

... (truncated)

Commits
  • fac0c74 [maven-release-plugin] prepare release apache-parquet-1.17.0-rc0
  • a8ead9d Bump protobuf.version from 4.33.1 to 4.33.2 (#3373)
  • 0ecd799 Allow reading dictionary encoded boolean (#3370)
  • 46218f2 Bump commons-io:commons-io from 2.18.0 to 2.21.0 (#3369)
  • 7ec3284 Exclude package-info.class from shaded fastutil (#3322)
  • 7453be4 Bump com.google.guava:guava from 33.4.0-jre to 33.5.0-jre (#3366)
  • 893ef11 Bump easymock 5.6.0 to support Java 25 (#3363)
  • 6b2940c Remove unused parquet-thrift dependencies (#3323)
  • 5040a63 Bump protobuf.version from 3.25.6 to 4.30.2 (#3182)
  • 2ccc243 MINOR: parquet-avro tests should not debug to stderr (#3329)
  • Additional commits viewable in compare view

Updates org.apache.parquet:parquet-hadoop from 1.16.0 to 1.17.0

Release notes

Sourced from org.apache.parquet:parquet-hadoop's releases.

Apache Parquet 1.17.0

What's Changed

@dependabot
[CORE-69]: Bump the minor-and-patch-updates group across 1 directory …
8ea7b74 
…with 23 updates

Bumps the minor-and-patch-updates group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.5.12` | `3.5.14` |
| org.sonarqube | `7.0.1.6134` | `7.3.0.8198` |
| org.openapi.generator | `7.17.0` | `7.22.0` |
| com.gorylenko.gradle-git-properties | `2.5.3` | `2.5.7` |
| com.diffplug.spotless | `8.0.0` | `8.4.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre` | `33.6.0-jre` |
| [io.sentry:sentry-logback](https://github.com/getsentry/sentry-java) | `8.25.0` | `8.40.0` |
| io.swagger.core.v3:swagger-annotations | `2.2.40` | `2.2.49` |
| [com.squareup.okhttp3:okhttp](https://github.com/square/okhttp) | `5.3.0` | `5.3.2` |
| bio.terra:java-pfb-library | `0.87.0` | `0.100.0` |
| [org.apache.parquet:parquet-common](https://github.com/apache/parquet-mr) | `1.16.0` | `1.17.0` |
| [org.apache.parquet:parquet-avro](https://github.com/apache/parquet-mr) | `1.16.0` | `1.17.0` |
| [org.apache.parquet:parquet-hadoop](https://github.com/apache/parquet-mr) | `1.16.0` | `1.17.0` |
| org.apache.hadoop:hadoop-common | `3.4.2` | `3.5.0` |
| org.apache.hadoop:hadoop-mapreduce-client-core | `3.4.2` | `3.5.0` |
| [org.webjars.npm:swagger-ui-dist](https://github.com/swagger-api/swagger-ui) | `5.32.1` | `5.32.5` |
| [au.com.dius.pact.provider:spring](https://github.com/pact-foundation/pact-jvm) | `4.6.17` | `4.7.1` |
| [au.com.dius.pact.consumer:junit5](https://github.com/pact-foundation/pact-jvm) | `4.6.17` | `4.7.1` |
| [com.google.cloud:google-cloud-nio](https://github.com/googleapis/google-cloud-java) | `0.128.7` | `0.131.0` |
| org.apache.commons:commons-configuration2 | `2.12.0` | `2.14.0` |
| org.apache.tomcat.embed:tomcat-embed-core | `11.0.21` | `11.0.22` |
| org.eclipse.jetty:jetty-server | `12.0.32` | `12.1.9` |
| au.com.dius.pact | `4.6.17` | `4.7.1` |



Updates `org.springframework.boot` from 3.5.12 to 3.5.14
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.12...v3.5.14)

Updates `org.sonarqube` from 7.0.1.6134 to 7.3.0.8198

Updates `org.openapi.generator` from 7.17.0 to 7.22.0

Updates `com.gorylenko.gradle-git-properties` from 2.5.3 to 2.5.7

Updates `com.diffplug.spotless` from 8.0.0 to 8.4.0

Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)

Updates `io.sentry:sentry-logback` from 8.25.0 to 8.40.0
- [Release notes](https://github.com/getsentry/sentry-java/releases)
- [Changelog](https://github.com/getsentry/sentry-java/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-java@8.25.0...8.40.0)

Updates `io.swagger.core.v3:swagger-annotations` from 2.2.40 to 2.2.49

Updates `com.squareup.okhttp3:okhttp` from 5.3.0 to 5.3.2
- [Changelog](https://github.com/square/okhttp/blob/master/CHANGELOG.md)
- [Commits](square/okhttp@parent-5.3.0...parent-5.3.2)

Updates `bio.terra:java-pfb-library` from 0.87.0 to 0.100.0

Updates `org.apache.parquet:parquet-common` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.17.0)

Updates `org.apache.parquet:parquet-avro` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.17.0)

Updates `org.apache.parquet:parquet-hadoop` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.17.0)

Updates `org.apache.parquet:parquet-avro` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.17.0)

Updates `org.apache.parquet:parquet-hadoop` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/apache/parquet-mr/releases)
- [Changelog](https://github.com/apache/parquet-java/blob/master/CHANGES.md)
- [Commits](apache/parquet-java@apache-parquet-1.16.0...apache-parquet-1.17.0)

Updates `org.apache.hadoop:hadoop-common` from 3.4.2 to 3.5.0

Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.4.2 to 3.5.0

Updates `org.apache.hadoop:hadoop-mapreduce-client-core` from 3.4.2 to 3.5.0

Updates `org.webjars.npm:swagger-ui-dist` from 5.32.1 to 5.32.5
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.32.1...v5.32.5)

Updates `au.com.dius.pact.provider:spring` from 4.6.17 to 4.7.1
- [Release notes](https://github.com/pact-foundation/pact-jvm/releases)
- [Changelog](https://github.com/pact-foundation/pact-jvm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pact-foundation/pact-jvm/commits)

Updates `au.com.dius.pact.consumer:junit5` from 4.6.17 to 4.7.1
- [Release notes](https://github.com/pact-foundation/pact-jvm/releases)
- [Changelog](https://github.com/pact-foundation/pact-jvm/blob/master/CHANGELOG.md)
- [Commits](https://github.com/pact-foundation/pact-jvm/commits)

Updates `com.google.cloud:google-cloud-nio` from 0.128.7 to 0.131.0
- [Release notes](https://github.com/googleapis/google-cloud-java/releases)
- [Changelog](https://github.com/googleapis/google-cloud-java/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/google-cloud-java/commits)

Updates `org.apache.commons:commons-configuration2` from 2.12.0 to 2.14.0

Updates `org.apache.tomcat.embed:tomcat-embed-core` from 11.0.21 to 11.0.22

Updates `org.eclipse.jetty:jetty-server` from 12.0.32 to 12.1.9

Updates `au.com.dius.pact` from 4.6.17 to 4.7.1

---
updated-dependencies:
- dependency-name: org.springframework.boot
  dependency-version: 3.5.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: org.sonarqube
  dependency-version: 7.3.0.8198
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.openapi.generator
  dependency-version: 7.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.gorylenko.gradle-git-properties
  dependency-version: 2.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: com.diffplug.spotless
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.google.guava:guava
  dependency-version: 33.6.0-jre
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: io.sentry:sentry-logback
  dependency-version: 8.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: io.swagger.core.v3:swagger-annotations
  dependency-version: 2.2.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: com.squareup.okhttp3:okhttp
  dependency-version: 5.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: bio.terra:java-pfb-library
  dependency-version: 0.100.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-common
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-hadoop
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-avro
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.parquet:parquet-hadoop
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.hadoop:hadoop-common
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.hadoop:hadoop-mapreduce-client-core
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.webjars.npm:swagger-ui-dist
  dependency-version: 5.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: au.com.dius.pact.provider:spring
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: au.com.dius.pact.consumer:junit5
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: com.google.cloud:google-cloud-nio
  dependency-version: 0.131.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.commons:commons-configuration2
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: org.apache.tomcat.embed:tomcat-embed-core
  dependency-version: 11.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch-updates
- dependency-name: org.eclipse.jetty:jetty-server
  dependency-version: 12.1.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
- dependency-name: au.com.dius.pact
  dependency-version: 4.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file gradle Gradle dependency updates labels May 6, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 6, 2026 13:59
@dependabot dependabot Bot requested review from calypsomatic and snf2ye and removed request for a team May 6, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

@calypsomatic calypsomatic Awaiting requested review from calypsomatic calypsomatic is a code owner automatically assigned from DataBiosphere/manifold-data-management

@snf2ye snf2ye Awaiting requested review from snf2ye snf2ye is a code owner automatically assigned from DataBiosphere/manifold-data-management

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file gradle Gradle dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants