Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 7 updates#69

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/all-dependencies-9a90a19879
Closed

chore(deps): bump the all-dependencies group across 1 directory with 7 updates#69
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/all-dependencies-9a90a19879

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 13, 2025

Bumps the all-dependencies group with 6 updates in the / directory:

Package From To
io.swagger.core.v3:swagger-core 2.2.34 2.2.35
com.azure:azure-monitor-opentelemetry-autoconfigure 1.2.0 1.3.0
org.apache.commons:commons-text 1.13.1 1.14.0
com.fasterxml.jackson.core:jackson-databind 2.19.1 2.19.2
org.junit:junit-bom 5.13.3 5.13.4
org.springframework.boot:spring-boot-starter-test 3.5.3 3.5.4

Updates io.swagger.core.v3:swagger-core from 2.2.34 to 2.2.35

Release notes

Sourced from io.swagger.core.v3:swagger-core's releases.

Swagger-core 2.2.35 released!

  • chore: bump jackson versions to 2.19.2 (#4943)
  • Bump github classgraph version to 4.8.181 (#4940)
  • chore: update common lang3 to 3.18 (#4938)
  • chore: add GitHub issue and pull request templates (#4934)
  • docs: provide a better formatting for README (#4930)
  • Revert temp workarounds for sonatype 502 (#4922)
  • Ticket-4910 | Added FailedApiResponse.java (#4911)
Commits
  • f8b720f prepare release 2.2.35
  • d2e27c0 chore: bump jackson versions to 2.19.2
  • 9386fed Bump github classgraph version to 4.8.181
  • 028ffbb chore: update common lang3 to 3.18
  • b16924c chore: add GitHub issue and pull request templates
  • 045c8a3 Provide a better formatting for README
  • 9114db4 Added FailedApiResponse.java
  • d80a272 Revert "temporary workaround for sonatype 502 response pt.2 - provide pipelin...
  • 94d4e6e bump snapshot 2.2.35-SNAPSHOT
  • See full diff in compare view

Updates com.azure:azure-monitor-opentelemetry-autoconfigure from 1.2.0 to 1.3.0

Commits
  • a0f8333 [maven-release-plugin] prepare release v1.3.0
  • fc7ca52 Update VerifyNetworkPeeringWithNetworkWatcher.java
  • 5e38f06 Rename authorization -> locks
  • aceddc3 Expose refreshInstanceViewAsync in VirtualMachineScaleSetVM (#1901)
  • 9f30395 Virtual Network Gateway samples (#1923)
  • 2cdc188 Add locks manager stub (#1922)
  • 254c4e4 Merge pull request #1915 from jianghaolu/prwork
  • d46907e Resolve merge conflict
  • 2100d2a Merge branch 'master' of github.com:Azure/azure-sdk-for-java into prwork
  • 1de40d8 Initial check in for FunctionApp deployment slots. (#1130)
  • Additional commits viewable in compare view

Updates org.apache.commons:commons-text from 1.13.1 to 1.14.0

Changelog

Sourced from org.apache.commons:commons-text's changelog.

Apache Commons Text 1.14.0 Release Notes

The Apache Commons Text team is pleased to announce the release of Apache Commons Text 1.14.0.

Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.

Release 1.14.0. Requires Java 8 or above.

New features

  •        Interface StringLookup now extends UnaryOperator<String>. Thanks to Gary Gregory.
    
  •        Interface TextRandomProvider extends IntUnaryOperator. Thanks to Gary Gregory.
    
  •        Add RandomStringGenerator.Builder.usingRandom(IntUnaryOperator). Thanks to Gary Gregory.
    
  •        Add PMD check to default Maven goal. Thanks to Gary Gregory.
    
  •        Add org.apache.commons.text.RandomStringGenerator.Builder.setAccumulate(boolean). Thanks to Gary Gregory.
    

Fixed Bugs

  •        Fix PMD UnnecessaryFullyQualifiedName in StringLookupFactory. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in DefaultStringLookupsHolder. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in PropertiesStringLookup. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in JavaPlatformStringLookup. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in StringSubstitutor. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in StrSubstitutor. Thanks to Gary Gregory.
    
  •        Fix PMD UnnecessaryFullyQualifiedName in AlphabetConverter. Thanks to Gary Gregory.
    
  •        Fix PMD AvoidBranchingStatementAsLastInLoop in TextStringBuilder. Thanks to Gary Gregory.
    
  •        Fix PMD AvoidBranchingStatementAsLastInLoop in StrBuilder. Thanks to Gary Gregory.
    
  •        org.apache.commons.text.translate.LookupTranslator.LookupTranslator(Map CharSequence>) now throws NullPointerException instead of java.security.InvalidParameterException. Thanks to Gary Gregory.
    

Changes

  •        Bump org.apache.commons:commons-parent from 81 to 85 [#668](https://github.com/apache/commons-text/issues/668). Thanks to Dependabot, Gary Gregory.
    
  •        Bump commons-io:commons-io from 2.18.0 to 2.20.0. Thanks to Gary Gregory.
    
  •        Bump graalvm.version from 24.2.0 to 24.2.2 [#665](https://github.com/apache/commons-text/issues/665), [#681](https://github.com/apache/commons-text/issues/681). Thanks to Dependabot, Gary Gregory.
    
  •        Bump commons.bytebuddy.version from 1.17.5 to 1.17.6 ([#677](https://github.com/apache/commons-text/issues/677)). Thanks to Dependabot.
    
  •        Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 [#680](https://github.com/apache/commons-text/issues/680). Thanks to Dependabot.
    

Historical list of changes: https://commons.apache.org/proper/commons-text/changes.html

For complete information on Apache Commons Text, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Text website:

https://commons.apache.org/proper/commons-text

... (truncated)

Commits

Updates com.fasterxml.jackson.core:jackson-databind from 2.19.1 to 2.19.2

Commits

Updates org.junit:junit-bom from 5.13.3 to 5.13.4

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.13.4 = Platform 1.13.4 + Jupiter 5.13.4 + Vintage 5.13.4

See Release Notes.

Full Changelog: junit-team/junit-framework@r5.13.3...r5.13.4

Commits
  • 8a21048 Release 5.13.4
  • 9a38789 Finalize 5.13.4 release notes
  • 458325c Log only once per implementation type for CloseableResource types
  • 976a110 Protect against potential problems when converting file-based selectors
  • e94f728 Allow default package for PackageSource
  • b60fecf Fail on classpath resource names that are blank after removing leading /
  • 6378c88 Remove java.* packages from Import-Package headers in all jars (#4738)
  • 1a360f3 Create initial 5.13.4 release notes from template
  • 806fc9a Document #4689 in release notes
  • 1653839 Document #4686 in release notes
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-test from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot:spring-boot-starter-test's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Updates org.springframework.boot from 3.5.3 to 3.5.4

Release notes

Sourced from org.springframework.boot's releases.

v3.5.4

🐞 Bug Fixes

  • LambdaSafe.withFilter is not public #46474
  • Executable JAR application class encounters performance issues when used with Palo Alto Network Cortex XDR agent #46402
  • Runtime dependencies are missing from aotCompileClasspath and aotTestCompileClasspath when using Kotlin #46398
  • Additional fields for structured JSON logging incompatible with nested ecs logging in 3.5.x #46351
  • Change in DefaultErrorAttributes alters the shape of API validation error responses #46260
  • jdbc.connections.active and jdbc.connections.idle metrics are not available when using Hikari in a native image #46225
  • developmentOnly and testAndDevelopmentOnly dependencies may prevent implementation dependencies from being included in the uber-jar #46205
  • Hash calculation for uber archive entries that require unpacking is inefficient #46203
  • Permissions are applied inconsistently when building uber archives with Gradle #46194
  • Environment variables using legacy dash format can no longer be bound #46184
  • EmbeddedWebServerFactoryCustomizerAutoConfiguration fails when undertow-core is on the classpath and undertow-servlet is not #46180
  • Executable JAR application class encounters performance issues #46177
  • Executable JAR application class encounters performance issues #46176
  • Setting spring.reactor.context-propagation has no effect when lazy initialization is enabled #46174
  • Setting spring.netty.leak-detection has no effect when lazy initialization is enabled #46170
  • SslInfo does not use its Clock when checking certificate validity #46011

📔 Documentation

  • Fix description of spring.batch.job.enabled #46247
  • Fix broken Kotlin examples in reference documentation #46168
  • Add Logback Access Reactor Netty to community starters #46060

🔨 Dependency Upgrades

  • Upgrade to ActiveMQ 6.1.7 #46373
  • Upgrade to Caffeine 3.2.2 #46432
  • Upgrade to Couchbase Client 3.8.2 #46460
  • Upgrade to GraphQL Java 24.1 #46395
  • Upgrade to Groovy 4.0.28 #46516
  • Upgrade to Hibernate 6.6.22.Final #46492
  • Upgrade to HikariCP 6.3.1 #46493
  • Upgrade to Infinispan 15.2.5.Final #46461
  • Upgrade to Jackson Bom 2.19.2 #46494
  • Upgrade to Jetty 12.0.23 #46375
  • Upgrade to MariaDB 3.5.4 #46376
  • Upgrade to Maven Invoker Plugin 3.9.1 #46377
  • Upgrade to Micrometer 1.15.2 #46280
  • Upgrade to Micrometer Tracing 1.5.2 #46281
  • Upgrade to MSSQL JDBC 12.10.1.jre11 #46378
  • Upgrade to MySQL 9.3.0 #46371
  • Upgrade to Neo4j Java Driver 5.28.9 #46434
  • Upgrade to Netty 4.1.123.Final #46435
  • Upgrade to Prometheus Client 1.3.10 #46379
  • Upgrade to Reactor Bom 2024.0.8 #46282
  • Upgrade to RxJava3 3.1.11 #46380
  • Upgrade to Spring AMQP 3.2.6 #46283

... (truncated)

Commits
  • 925f9bc Release v3.5.4
  • d82fb35 Merge branch '3.4.x' into 3.5.x
  • 4b6064f Next development version (v3.4.9-SNAPSHOT)
  • a39c8f0 Merge branch '3.4.x' into 3.5.x
  • 99d53de Upgrade to Spring Integration 6.5.1
  • 1b4aad5 Upgrade to Groovy 4.0.28
  • 3f0f79b Upgrade to Spring Integration 6.4.6
  • ff8443c Upgrade to Groovy 4.0.28
  • aed8550 Merge branch '3.4.x' into 3.5.x
  • 5406976 Apply commercial input consistently
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies java Pull requests that update java code labels Aug 13, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 13, 2025 10:24
@dependabot dependabot bot added dependencies java Pull requests that update java code labels Aug 13, 2025
@dependabot dependabot bot force-pushed the dependabot/gradle/all-dependencies-9a90a19879 branch from ba17793 to ee112f6 Compare August 13, 2025 19:18
…7 updates

Bumps the all-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [io.swagger.core.v3:swagger-core](https://github.com/swagger-api/swagger-core) | `2.2.34` | `2.2.35` |
| [com.azure:azure-monitor-opentelemetry-autoconfigure](https://github.com/Azure/azure-sdk-for-java) | `1.2.0` | `1.3.0` |
| [org.apache.commons:commons-text](https://github.com/apache/commons-text) | `1.13.1` | `1.14.0` |
| [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) | `2.19.1` | `2.19.2` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) | `5.13.3` | `5.13.4` |
| [org.springframework.boot:spring-boot-starter-test](https://github.com/spring-projects/spring-boot) | `3.5.3` | `3.5.4` |



Updates `io.swagger.core.v3:swagger-core` from 2.2.34 to 2.2.35
- [Release notes](https://github.com/swagger-api/swagger-core/releases)
- [Commits](swagger-api/swagger-core@v2.2.34...v2.2.35)

Updates `com.azure:azure-monitor-opentelemetry-autoconfigure` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@v1.2.0...v1.3.0)

Updates `org.apache.commons:commons-text` from 1.13.1 to 1.14.0
- [Changelog](https://github.com/apache/commons-text/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-text@rel/commons-text-1.13.1...rel/commons-text-1.14.0)

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.19.1 to 2.19.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.junit:junit-bom` from 5.13.3 to 5.13.4
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r5.13.3...r5.13.4)

Updates `org.springframework.boot:spring-boot-starter-test` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

Updates `org.springframework.boot` from 3.5.3 to 3.5.4
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.3...v3.5.4)

---
updated-dependencies:
- dependency-name: io.swagger.core.v3:swagger-core
  dependency-version: 2.2.35
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: com.azure:azure-monitor-opentelemetry-autoconfigure
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: org.apache.commons:commons-text
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.junit:junit-bom
  dependency-version: 5.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-test
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot
  dependency-version: 3.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/gradle/all-dependencies-9a90a19879 branch from ee112f6 to b904c67 Compare August 14, 2025 20:17
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 15, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 15, 2025
@dependabot dependabot bot deleted the dependabot/gradle/all-dependencies-9a90a19879 branch August 15, 2025 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants