fix(deps): update dependency org.http4k:http4k-bom to v6.31.1.0

[svc-secops]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.http4k:http4k-bom (source)	6.21.0.0 -> 6.31.1.0

---

Release Notes

http4k/http4k (org.http4k:http4k-bom)

v6.31.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-sdk: [Fix] Add missing ToolUseId type to MCP JSON

v6.31.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-core: [Unlikely break] Header lenses now strip quotes from header values (RFC 2045). H/T @​andy-barlow
• http4k-multipart: [Unlikely break] Default to using application/octet-stream for unknown content types. H/T @​andy-barlow
• http4k-ai-mcp-sdk: Add convenience function asServer() to convert any singular ServerCapability into a server

v6.30.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-testing-webdriver: [Fix] Respect the formaction and formmethod of the used submit input H/T @​tamj0rd2
• http4k-ai-mcp-testing: Fixed test MCP Apps host to accept non-string arguments from hosted app.
• http4k-ai-mcp-testing: Honour CSP headers when running MCP Apps host.

v6.30.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-sdk: [Breaking] Adding support for serverside OpenTelemetry Conventions MCP spans. API changes to allow for this change.

v6.29.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-client: [Breaking] Alteration to ToolResponse.Error to have content instead of just a string
• http4k-ai-mcp-sdk: [Breaking] Alteration to ToolResponse.Error to have content instead of just a string
• http4k-ops-opentelemetry: Added SSE filters to capture OTel traces
• http4k-ops-opentelemetry: Add support for OpenTelemetry Semantic Conventions (1.38.0)

v6.28.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-testing: Remove unnecessary dependencies, various fixes to the MCP App test host

v6.28.0.0

Compare Source

• http4k-*: Upgrade versions, including Kotlin to 2.3.10
• http4k-ai-mcp-sdk: [Pro: Breaking] - Update MCP SDK to support latest MCP specification (2025-11-25), including support for Tasks, expanded Tool support,
  URL Form Elicitations and Sampling upgrades. Plus conformance updates to the latest MCP conformance tests. Also support for MCP Apps spec, allowing UIs to be
  usable inside Claude Code and friends. Small tweaks to the API surface which should be simple to fix.
• http4k-ai-mcp-client: [Pro: Breaking] - Updated client to support MCP 2025-11-25 features.
• http4k-ai-mcp-testing: [Pro: New module!] - Clients for testing MCP servers and a basic MCP Apps host to test out MCP Apps (UIs which can live in Claude
  and co)

v6.27.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-connect-amazon-dynamo-fake:[Fix #​1477] Fake DynamoDB KeyConditionExpression sometimes fails with floating-point values
• http4k-*: [Breaking] Upgrades to Exposed v1.0.0 will mean API changes are required for modules relying on that library. See the Exposed docs for details
• http4k-testing-webdriver: [Fix] Was throwing wrong NoSuchElementException.

v6.26.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-connect-amazon-secretsmanager: Add the SecretsManagerRotationEvent. H/T @​oharaandrew314
• http4k-server-undertow: [Fix] CVE-2024-3884 CVE-2024-4027 CVE-2025-12543
• http4k-template-*: Templates report underlying cause when ViewNotFound. H/T @​npryce

v6.26.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-web-datastar*: [Unlikely break] #​1467: Only include useViewTransition and mode fields in events if values are overridden. H/T @​Christian-Broomfield
• http4k-format-argo*: [Breaking] Changes to object hashcodes generated by Argo

v6.25.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-connect-amazon-cognito*: Implement additional AWS Cognito actions H/T @​torfinnberset
• http4k-connect-slack: Support better BlockKit options H/T @​torfinnberset
• http4k-core: [Fix] ClientFilters.FollowRedirects handles relative URLs in the Location header. H/T @​npryce

v6.25.0.0

Compare Source

• http4k-*: Upgrade versions, including Kotlin to 2.3.0

v6.24.1.0

Compare Source

• http4k-connect-amazon-scheduler: [New module!] AWS EventBridge Scheduler client. H/T @​aharin
• http4k-connect-amazon-scheduler-fake: [New module!] AWS EventBridge Scheduler fake. H/T @​aharin

v6.24.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-platform-azure: [Fix #​1453] AzureHttpClient blocks forever.
• http4k-platform-docker*: [New module!] Utility module for working with Docker configurations H/T @​time4tea
• http4k-format-toon*: [New module!] Support for compact Toon format. Includes auto-marshalling capabilities.

v6.23.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-sdk*: [Fix] Wire in outputSchema for MCP tools

v6.23.0.0

Compare Source

• http4k-*: Upgrade versions, including Kotlin to 2.2.21
• http4k-multipart: [Fix #​1446] Added length field to MultipartFormFile.
• http4k-format-kondor: Simpler API for registering converters. H/T @​npryce

v6.22.0.0

Compare Source

• http4k-*: Upgrade versions
• http4k-core*: [Unlikely break] Introduce QUERY HTTP method as RFC has been approved. H/T @​npryce
• http4k-core*: [Fix #​1438] URL encode Flash cookie content. H/T @​cies
• http4k-core*: [Fix #​1426] Avoiding repeated copies of HttpMessage.bodyString(). H/T @​hermannm

v6.21.1.0

Compare Source

• http4k-*: Upgrade versions
• http4k-ai-mcp-conformance: [New module!] Published MCP SDK Conformance test server as a separate example module. This allows for wider deployment against
  the MCP conformance tests.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - "after 8am and before 4pm on tuesday" in timezone Etc/UTC.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

This PR has been generated by Renovate Bot.