Skip to content

fix(deps): bump the prod-deps group across 1 directory with 11 updates#1135

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/prod-deps-095b7321c7
Open

fix(deps): bump the prod-deps group across 1 directory with 11 updates#1135
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/prod-deps-095b7321c7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the prod-deps group with 11 updates in the / directory:

Package From To
org.springframework.boot:spring-boot-starter-parent 3.5.0 4.0.1
org.projectlombok:lombok 1.18.30 1.18.42
org.postgresql:postgresql 42.5.4 42.7.9
org.jooq:jooq 3.20.9 3.20.10
org.apache.commons:commons-collections4 4.4 4.5.0
org.apache.commons:commons-lang3 3.17.0 3.20.0
org.mapstruct:mapstruct 1.5.2.Final 1.6.3
org.mapstruct:mapstruct-processor 1.5.2.Final 1.6.3
org.springframework.retry:spring-retry 2.0.10 2.0.12
com.jayway.jsonpath:json-path 2.9.0 2.10.0
org.yaml:snakeyaml 2.0 2.5

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.0 to 4.0.1

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.1

⚠️ Noteworthy Changes

  • Hibernate has been upgraded to 7.2.0.Final in response to Hibernate 7.1 moving to limited support
  • spring-boot-starter-kotlin-serialization has been renamed to to spring-boot-starter-kotlinx-serialization-json and spring-boot-starter-kotlin-serialization-test has been renamed to spring-boot-starter-kotlinx-serialization-json-test. This change aligns the starters' names with those of their respective modules
  • Using TestRestTemplate now requires a dependency on spring-boot-restclient

🐞 Bug Fixes

  • JsonMixinModuleEntriesBeanRegistrationAotProcessor does not handle deprecated code #48564
  • JdbcSessionAutoConfiguration may not match when using the auto-configured DataSource #48552
  • @ServiceConnection for LgtmStackContainer fails when logging endpoint is configured due to multiple OtlpLoggingConnectionDetails beans #48536
  • WebApplicationType does not consider modules when deduced from classpath #48517
  • Spring Session auto-configuration fails in a war deployment as ServerProperties is not available #48493
  • Opentelemetry logging export requires actuator module #48488
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #48487
  • Actuator Info class has inconsistent nullability annotations and cannot be built with null value #48480
  • Profiles retained during AOT processing are not configured in a native image #48476
  • Security matchers and WebServerNamespace resolution can fail with NoClassDefFoundError when used in a traditional WAR deployment #48388
  • HealthEndpointGroupMembershipValidator does not consider reactive health indicators causing NoSuchHealthContributorException to be thrown #48387
  • spring.jackson.default-property-inclusion is not applied to content inclusion #48343
  • TestRestTemplate.getRootUri() returns empty string #48330
  • Redis health check reports an error when redis_version is missing from the INFO response #48328
  • Parent's MeterRegistry beans are closed when child context closes #48325
  • HttpMessageConverters picks up converter beans for both client and server #48310
  • Conditions to auto-configure a RestClient are outdated with the modularization #48308
  • A custom JwtTypeValidator that replaces the default can no longer be configured #48301
  • PropertiesRestClientHttpServiceGroupConfigurer has highest precedence, preventing other configurers from being ordered ahead of it #48296
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #48275
  • Conditions to auto-configure RestClient-based HTTP service clients are outdated with the modularization #48274
  • Starter for Kotlinx Serialization Json is misnamed #48262
  • ApplicationServletEnvironment is no longer configured in war deployments #48254
  • RestClient.Builder bean present in @SpringBootTest due to spring-boot-starter-webmvc-test, but missing at runtime without restclient starter #48253
  • ProblemDetail is rendered to XML incorrectly #48222

📔 Documentation

  • Harmonize Kotlin example for HTTP Service client support #48577
  • Document HttpMessageConverters detection changes in 4.0.1 #48574
  • Improve javadoc for when to use class names rather than class references #48569
  • Documentation has an outdated reference to the Jackson Kotlin Module #48534
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #48532
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #48527
  • Review documentation and migration guide about changes in @AutoConfigureCache #48522
  • License header in build samples is displayed in the reference documentation #48478
  • Configuring Two DataSources How-To code sample is inconsistent #48449
  • Fix links to source files on GitHub #48398
  • Documentation contains broken links to GitHub source files #48394
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #48360
  • Correct the annotation in the Kotlin @ConfigurationPropertiesSource example #48357
  • Polish TestRestTemplate examples in the reference guide #48336

... (truncated)

Commits
  • b2bc463 Release v4.0.1
  • 252b218 Correct renaming of Kotlinx Serialization JSON starters
  • 2fa73c2 Merge pull request #48577 from jwalter
  • 3e68988 Polish "Harmonize Kotlin example for HTTP Service client support"
  • 423373b Harmonize Kotlin example for HTTP Service client support
  • f61ac29 Document HttpMessageConverters detection changes
  • 2519a5d Merge branch '3.5.x'
  • 4fc3ca3 Next development version (v3.5.10-SNAPSHOT)
  • aaf66f4 Merge branch '3.5.x'
  • 08e2cab Polish javadoc for when to use class names rather than class references
  • Additional commits viewable in compare view

Updates org.projectlombok:lombok from 1.18.30 to 1.18.42

Changelog

Sourced from org.projectlombok:lombok's changelog.

v1.18.42 (September 18th, 2025)

  • FEATURE: All the various @Log annotations now allow you to change their access level (they still default to private). #2280. Thanks to new contributor Liam Pace!
  • BUGFIX: Javadoc parsing was broken in Netbeans and ErrorProne for JDK25 #3940.

v1.18.40 (September 4th, 2025)

  • PLATFORM: JDK25 support added #3859.
  • BUGFIX: Recent versions of eclipse (or the eclipse-based java lang server for VSCode) caused java.lang.IllegalArgumentException: Document does not match the AST. [Issue #3886](projectlombok/lombok#3886).
  • PERFORMANCE: @ExtensionMethod is now significantly faster [Issue #3866](projectlombok/lombok#3866).
  • BUGFIX: the command line config tool would emit incorrect output for nullity annotations. [Issue #3931](projectlombok/lombok#3931).
  • FEATURE: @Jacksonized @Accessors(fluent=true) automatically creates the relevant annotations such that Jackson correctly identifies fluent accessors. [Issue #3265](projectlombok/lombok#3265), [Issue #3270](projectlombok/lombok#3270).
  • IMPROBABLE BREAKING CHANGE: From versions 1.18.16 to 1.18.38, lombok automatically copies certain Jackson annotations (e.g., @JsonProperty) from fields to the corresponding accessors (getters/setters). However, it turned out to be harmful in certain situations. Thus, Lombok does not automatically copy those annotations any more. You can restore the old behavior using the config key lombok.copyJacksonAnnotationsToAccessors = true.

v1.18.38 (March 31st, 2025)

  • PLATFORM: JDK24 support added.
  • FEATURE: Lombok's nullity annotation now supports JSpecify out of the box, using config key jspecify.
  • BUGFIX: Recent eclipse releases would get you 'negative length' error. The bug had always been in lombok but didn't matter until recent releases. [Issue #3823](projectlombok/lombok#3823).
  • BUGFIX: The 'extract local variable' refactor script of VSCode wouldn't replace all occurrences if run on a method call to a lombok generated method. [Issue #3783](projectlombok/lombok#3783).

v1.18.36 (November 15th, 2024)

  • PLATFORM: JDK23 support added.
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-maven-plugin will now compile.

v1.18.34 (June 28th, 2024)

  • PLATFORM: Added support for Eclipse 2024-06; you'd get some NoSuchMethodError traces in your logs if using @Builder or @Singular prior to this fix. [Issue #3638](projectlombok/lombok#3638).
  • IMPROBABLE BREAKING CHANGE: Lombok now adds @lombok.Generated by default to methods and types it generates. This may result in accidentally increasing your test coverage percentage. [Issue #3667](projectlombok/lombok#3667).
  • IMPROBABLE BREAKING CHANGE: When lombok.config contains lombok.onX.flagUsage = WARNING, from now on warnings will actually be generated if onX is used.[Issue #2848](projectlombok/lombok#2848)
  • BUGFIX: When @SuperBuilder was used on a type with an generic array type, it would error wrong number of type arguments. [Issue #3694](projectlombok/lombok#3694).
  • FEATURE: Lombok generates javadoc for you for most of the methods it adds; with this release, javadoc is also added to generated constructors. [Issue #933](projectlombok/lombok#933).

v1.18.32 (March 20th, 2024)

  • PLATFORM: Initial JDK22 support added.
  • PLAFTORM Added support for Eclipse 2024-03. [Issue #3620](projectlombok/lombok#3620).
  • PLATFORM: Added support for recent versions of eclipse (released Q4 2023 or later or so) which would cause failures in the eclipse logs such as java.lang.NoSuchMethodError: 'java.lang.StringBuffer org.eclipse.jdt…. [Issue #3564](projectlombok/lombok#3564).
  • FEATURE: @Locked has been introduced. Like @Synchronized but with java.util.concurrent.locks locks instead of the synchronized primitive. Thanks, Pim van der Loos for the PR! [Issue #3506](projectlombok/lombok#3506).
  • NECROMANCY: Inlining a generated getter in eclipse would result in eclipse incorrectly replacing calls with @Getter instead of the actual field's name. [Issue #562](projectlombok/lombok#562). This issue is almost old enough to drink. Points for dedication go to Rawi for fixing this one.
  • BUGFIX: When @SuperBuilder was used on a type with an annotated generic type, it would error wrong number of type arguments. [Issue #3592](projectlombok/lombok#3592).
  • BUGFIX: It was possible to create an infinite build loop using @ExtensionMethod. [Issue #3225](projectlombok/lombok#3225).
  • BUGFIX: Using @Getter(lazy=true) would fail if the expression contained a variable called value. [Issue #2917](projectlombok/lombok#2917).
  • BUGFIX: Many lombok features wouldn't work properly on records contained within an outer type unless you explicitly marked it static. [Issue #3497](projectlombok/lombok#3497) [Issue #3559](projectlombok/lombok#3559).
  • BUGFIX: Eclipse projects using the com.pro-crafting.tools:jasperreports-plugin will now compile.
  • BUGFIX: @FieldNameConstants now works when generated fields are involved. [Issue #3529](projectlombok/lombok#3529).
  • IMPROBABLE BREAKING CHANGE: For JSpecify, the package name changed from org.jspecify.nullness to org.jspecify.annotations, which might lead to a different null analysis. [Issue #3608](projectlombok/lombok#3608).
Commits
  • 2031eb0 [release] pre-release version bump for v1.18.42
  • c95a6c1 Merge branch 'logger-access'
  • 71d85ca #2280 Add delivery of this 'access for logging' to the changelog.
  • 99ba3e3 [trivial] Slightly reworded the javadoc on each @Log annotation's `access()...
  • e9cf11e [trivial][style]
  • a6d5568 [deprecation] Marked AccessLevel.MODULE as deprecated. It was written for a...
  • 492011d Refactored to use Javac/Eclipse utility function
  • c1f7f66 Update copyright in logger files
  • f63f40a Add myself to AUTHORS
  • 9152c34 Fix failing tests
  • Additional commits viewable in compare view

Updates org.postgresql:postgresql from 42.5.4 to 42.7.9

Release notes

Sourced from org.postgresql:postgresql's releases.

v42.7.9

Changes

🐛 Bug Fixes

  • fix: close temporary lob descriptors that are used internally in PreparedStatement#setBlob @​vlsi (#3903)
  • fix: avoid memory leaks in Java <= 21 caused by Thread.inheritedAccessControlContext @​vlsi (#3886)

📝 Documentation

  • doc: add the new PGP signing key to the official documentation @​vlsi (#3813)

🧰 Maintenance

  • chore: remove unused com.github.spotbugs Gradle plugin dependency @​vlsi (#3868)
  • chore: drop SpotBugs as we do not seem to use it @​vlsi (#3834)
  • chore: bump version to 42.7.9 after 42.7.8 release @​vlsi (#3810)

⬆️ Dependencies

... (truncated)

Changelog

Sourced from org.postgresql:postgresql's changelog.

[42.7.9] (2026-01-14)

Added

Changed

  • perf: optimize PGInterval.getValue() by replacing String.format with StringBuilder
  • doc: update property quoteReturningIdentifiers default value [PR #3847](pgjdbc/pgjdbc#3847)
  • security: Use a static method forName to load all user supplied classes. Use the Class.forName 3 parameter method and do not initilize it unless it is a subclass of the expected class

Fixed

[42.7.8] (2025-09-18)

Added

Changed

  • perf: remove QUERY_ONESHOT flag when calling getMetaData [PR #3783](pgjdbc/pgjdbc#3783)
  • perf: use BufferedInputStream with FileInputStream [PR #3750](pgjdbc/pgjdbc#3750)
  • perf: enable server-prepared statements for DatabaseMetaData

Fixed

  • fix: avoid NullPointerException when cancelling a query if cancel key is not known yet
  • fix: Change "PST" timezone in TimestampTest to "Pacific Standard Time" [PR #3774](pgjdbc/pgjdbc#3774)
  • fix: traverse the current dimension to get the correct pos in PgArray#calcRemainingDataLength [PR #3746](pgjdbc/pgjdbc#3746)
  • fix: make sure getImportedExportedKeys returns columns in consistent order
  • fix: Add "SELF_REFERENCING_COL_NAME" field to getTables' ResultSetMetaData to fix NullPointerException [PR #3660](pgjdbc/pgjdbc#3660)
  • fix: unable to open replication connection to servers < 12
  • fix: avoid closing statement caused by driver's internal ResultSet#close()
  • fix: return empty metadata for empty catalog names as it was before
  • fix: Incorrect class comparison in PGXmlFactoryFactory validation

[42.7.7] (2025-06-10)

Security

  • security: Client Allows Fallback to Insecure Authentication Despite channelBinding=require configuration. Fix channel binding required handling to reject non-SASL authentication Previously, when channel binding was set to "require", the driver would silently ignore this requirement for non-SASL authentication methods. This could lead to a false sense of security

... (truncated)

Commits
  • 79b784e Added changelogs for version 42.7.9 (#3908)
  • 1c00ffc doc: add the new PGP signing key to the official documentation
  • f774000 chore(deps): update actions/create-github-app-token digest to 29824e6
  • 27daf3b chore(deps): update actions/setup-java digest to c1e3236
  • 6eb01ff chore(deps): update codecov/codecov-action digest to 671740a
  • dbf1e57 the classloader is nullable, and remove a space (#3907)
  • 6a20574 Merge commit from fork
  • c07721a fix: incorrect pg_stat_replication.reply_time calculation (#3906)
  • 83023f3 fix: close temporary lob descriptors that are used internally in PreparedStat...
  • 62c9805 fix: issue #3892, PGXAConnection.prepare(Xid) should return XA_RDONLY if the ...
  • Additional commits viewable in compare view

Updates org.jooq:jooq from 3.20.9 to 3.20.10

Updates org.apache.commons:commons-collections4 from 4.4 to 4.5.0

Updates org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0

Updates org.mapstruct:mapstruct from 1.5.2.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.2.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.mapstruct:mapstruct-processor from 1.5.2.Final to 1.6.3

Release notes

Sourced from org.mapstruct:mapstruct-processor's releases.

1.6.3

Bugs

  • Redundant if condition in Java record mapping with RETURN_DEFAULT strategy (#3747)
  • Stackoverflow with Immutables custom builder (#3370)
  • Unused import of java.time.LocalDate when mapping source LocalDateTime to target LocalDate (#3732)

Documentation

  • Add section to README.md comparing mapstruct with Java Records (#3751)

1.6.2

Bugs

  • Regression from 1.6.1: ClassCastException when using records (#3717)

1.6.1

Enhancements

  • Use Java LinkedHashSet and LinkedHashMap new factory method with known capacity when on Java 19 or later (#3113)

Bugs

  • Inverse Inheritance Strategy not working for ignored mappings only with target (#3652)
  • Inconsistent ambiguous mapping method error when using SubclassMapping: generic vs raw types (#3668)
  • Fix regression when using InheritInverseConfiguration with nested target properties and reversing target = "." (#3670)
  • Deep mapping with multiple mappings broken in 1.6.0 (#3667)
  • Two different constants are ignored in 1.6.0 (#3673)
  • Inconsistent ambiguous mapping method error: generic vs raw types in 1.6.0 (#3668)
  • Fix cross module records with interfaces not recognizing accessors (#3661)
  • @AfterMapping methods are called twice when using target with builder (#3678)
  • Compile error when using @AfterMapping method with Builder and TargetObject (#3703)

Behaviour change

Inverse Inheritance Strategy not working for ignored mappings only with target

Prior to this fix @Mapping(target = "myProperty", ignore = true) was being ignored when using @InheritInverseConfiguration.

e.g.

@Mapper
public interface ModelMapper {
@Mapping(target = &quot;creationDate&quot;, ignore = true)
Entity toEntity(Model model);    
@InheritInverseConfiguration
Model toModel(Entity entity);

</tr></table>

... (truncated)

Commits
  • b4e25e4 Releasing version 1.6.3
  • 772fae4 Prepare release notes for 1.6.3
  • efdf435 #3751 Improve readme to include support for Java 16+ records
  • c2bd847 #3732 Do not generate obsolete imports for LocalDateTime <-> LocalDate conver...
  • 21fdaa0 #3747 Do not generate redundant if condition with constructor mapping and RET...
  • 32f1fea #3370 Prevent stack overflow error for Immutables with custom builder
  • 26c5bcd Update readme with 1.6.2
  • 4e0d73d Next version 1.7.0-SNAPSHOT
  • 212607b Releasing version 1.6.2
  • 4fd22d6 Prepare release notes for 1.6.2
  • Additional commits viewable in compare view

Updates org.springframework.retry:spring-retry from 2.0.10 to 2.0.12

Release notes

Sourced from org.springframework.retry:spring-retry's releases.

v2.0.12

⭐ New Features

  • Retryable with not simple expressions #488
  • Inconsistent validation of exponential backoff #352

🐞 Bug Fixes

  • A NullPointerException in the MetricsRetryListener when provided RetryCallback comes without proper getLabel() implementation #491
  • Fix proxy attribute name mismatch in RetryOperationsInterceptor #490
  • Polish #486

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​junhyeongkim2 and @​ngocnhan-tran1996

v2.0.11

⭐ New Features

  • Version in pom.xml contains "${revision}" #474

🐞 Bug Fixes

  • MetricsRetryListener problems #477

📔 Documentation

  • Documentation is no longer published #476
Commits
  • 802c445 Release v2.0.12
  • f4cd357 Upgrade test and dev dependencies; prepare for release
  • a05e3a1 GH-352: Warning aboiut invalid values in ExponentialBackoffPolicy
  • 47a2359 GH-491: Fix NPE in the MetricsRetryListener when label is null
  • 936e720 Fix proxy attribute name mismatch in RetryOperationsInterceptor
  • 544b24e Upgrade to github-changelog-generator 0.0.12
  • 91d96e7 Run spring-javaformat:apply
  • bded8e6 GH-488: Improve warning in the ExpressionRetryPolicy
  • 4f34e36 Fix some typos in the project
  • 8918c36 Migrate to DCO from CLA
  • Additional commits viewable in compare view

Updates com.jayway.jsonpath:json-path from 2.9.0 to 2.10.0

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-2.10.0

What's Changed

  • Bumps dependency versions by @​kallestenflo in json-path/JsonPath#1057
    • net.minidev:json-smart:2.6.0
    • org.slf4j:slf4j-api:2.0.17
    • com.google.code.gson:gson:2.13.2
    • org.hamcrest:hamcrest:3.0
    • com.fasterxml.jackson.core:jackson-databind:2.19.2
    • org.json:json:20250517
    • org.apache.tapestry:tapestry-json:5.9.0
    • jakarta.json:jakarta.json-api:2.1.3
    • jakarta.json.bind:jakarta.json.bind-api:2.0.0

Full Changelog: json-path/JsonPath@json-path-2.9.0...json-path-2.10.0

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 19, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 19, 2026 19:55
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jan 19, 2026
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-095b7321c7 branch from 1b503ca to 994dc88 Compare January 26, 2026 20:04
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-095b7321c7 branch 3 times, most recently from dd68134 to 3ebe4d3 Compare February 9, 2026 21:37
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-095b7321c7 branch 2 times, most recently from 8e23702 to 9cf7cdc Compare February 16, 2026 18:57
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-095b7321c7 branch from 9cf7cdc to a224a1c Compare February 23, 2026 20:06
Bumps the prod-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.0` | `4.0.1` |
| [org.projectlombok:lombok](https://github.com/projectlombok/lombok) | `1.18.30` | `1.18.42` |
| [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.5.4` | `42.7.9` |
| org.jooq:jooq | `3.20.9` | `3.20.10` |
| org.apache.commons:commons-collections4 | `4.4` | `4.5.0` |
| org.apache.commons:commons-lang3 | `3.17.0` | `3.20.0` |
| [org.mapstruct:mapstruct](https://github.com/mapstruct/mapstruct) | `1.5.2.Final` | `1.6.3` |
| [org.mapstruct:mapstruct-processor](https://github.com/mapstruct/mapstruct) | `1.5.2.Final` | `1.6.3` |
| [org.springframework.retry:spring-retry](https://github.com/spring-projects/spring-retry) | `2.0.10` | `2.0.12` |
| [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) | `2.9.0` | `2.10.0` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.0` | `2.5` |



Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.0 to 4.0.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.0...v4.0.1)

Updates `org.projectlombok:lombok` from 1.18.30 to 1.18.42
- [Changelog](https://github.com/projectlombok/lombok/blob/master/doc/changelog.markdown)
- [Commits](projectlombok/lombok@v1.18.30...v1.18.42)

Updates `org.postgresql:postgresql` from 42.5.4 to 42.7.9
- [Release notes](https://github.com/pgjdbc/pgjdbc/releases)
- [Changelog](https://github.com/pgjdbc/pgjdbc/blob/master/CHANGELOG.md)
- [Commits](pgjdbc/pgjdbc@REL42.5.4...REL42.7.9)

Updates `org.jooq:jooq` from 3.20.9 to 3.20.10

Updates `org.apache.commons:commons-collections4` from 4.4 to 4.5.0

Updates `org.apache.commons:commons-lang3` from 3.17.0 to 3.20.0

Updates `org.mapstruct:mapstruct` from 1.5.2.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.2.Final...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.5.2.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.2.Final...1.6.3)

Updates `org.mapstruct:mapstruct-processor` from 1.5.2.Final to 1.6.3
- [Release notes](https://github.com/mapstruct/mapstruct/releases)
- [Commits](mapstruct/mapstruct@1.5.2.Final...1.6.3)

Updates `org.springframework.retry:spring-retry` from 2.0.10 to 2.0.12
- [Release notes](https://github.com/spring-projects/spring-retry/releases)
- [Commits](spring-projects/spring-retry@v2.0.10...v2.0.12)

Updates `com.jayway.jsonpath:json-path` from 2.9.0 to 2.10.0
- [Release notes](https://github.com/jayway/JsonPath/releases)
- [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md)
- [Commits](json-path/JsonPath@json-path-2.9.0...json-path-2.10.0)

Updates `org.yaml:snakeyaml` from 2.0 to 2.5
- [Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.5..snakeyaml-2.0)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: org.projectlombok:lombok
  dependency-version: 1.18.42
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.postgresql:postgresql
  dependency-version: 42.7.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.jooq:jooq
  dependency-version: 3.20.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-collections4
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.mapstruct:mapstruct
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.mapstruct:mapstruct-processor
  dependency-version: 1.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.springframework.retry:spring-retry
  dependency-version: 2.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: com.jayway.jsonpath:json-path
  dependency-version: 2.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.yaml:snakeyaml
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/prod-deps-095b7321c7 branch from a224a1c to 3b862dd Compare March 2, 2026 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants