Update all patch/minor versions (master)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.junit.jupiter:junit-jupiter-api (source)	6.1.1 → 6.1.2
org.junit.jupiter:junit-jupiter (source)	6.1.1 → 6.1.2
com.twelvemonkeys.imageio:imageio-webp (source)	3.13.1 → 3.14.0
org.apache.groovy:groovy-all (source)	5.0.7 → 5.0.8
joda-time:joda-time (source)	2.14.2 → 2.14.3
io.sentry:sentry-logback	8.47.0 → 8.50.1
ch.qos.logback:logback-classic (source, changelog)	1.5.38 → 1.6.1
com.itextpdf:itextpdf (source)	5.5.13.5 → 5.5.13.6
org.apache.httpcomponents.client5:httpclient5 (source)	5.6.2 → 5.6.3
com.ibm.icu:icu4j (source)	78.1 → 78.3
org.checkerframework:checker-qual (source)	3.52.0 → 3.55.1
org.postgresql:postgresql (source)	42.7.12 → 42.7.13
org.springframework.security:spring-security-web (source)	7.0.5 → 7.1.0
org.springframework.security:spring-security-config (source)	7.0.5 → 7.1.0
org.apache.groovy:groovy-json (source)	5.0.7 → 5.0.8
org.apache.groovy:groovy-xml (source)	5.0.7 → 5.0.8
com.github.spotbugs	6.5.8 → 6.5.9

---

Release Notes

junit-team/junit-framework (org.junit.jupiter:junit-jupiter-api)

v6.1.2

JodaOrg/joda-time (joda-time:joda-time)

v2.14.3

Compare Source

See the change notes for more information.

What's Changed

• Update time zone data to 2026cgtz by @​jodastephen in #​833

Full Changelog: JodaOrg/joda-time@v2.14.2...v2.14.3

getsentry/sentry-java (io.sentry:sentry-logback)

v8.50.1

Compare Source

Fixes

• Pin the published Sentry Android SDK's AAR metadata minCompileSdk to our minSdk (21) instead of AGP 9's new default of the SDK's own compileSdk (37), so apps that depend on the SDK aren't forced to raise their compileSdk (#​5823)

v8.50.0

Compare Source

Android 17 support

• We've put Android 17 through a set of rigorous tests. We're now officially giving it the Sentry stamp of compatibility .(#​5796)

Fixes

• Reduce main-thread work during Sentry.init by resolving the shake-detector accelerometer off the main thread (~1.75ms on a Pixel 10) (#​5784)
• Backfill release, environment, distribution, tags, and app version/build—and use the matching replay-on-error sample rate—for ApplicationExitInfo ANR and native crash events captured before SDK initialization, without reusing options cached by a later app update (#​5762)
• SentryTagModifierNode.isImportantForBounds now matches the default behavior and returns true (#​5789)
• Prevent a StackOverflowError when a beforeSend, beforeBreadcrumb, beforeSendLog, or beforeEnvelope callback triggers another capture (directly or through a logging integration such as Timber) (#​5737)
  • Captures made from within a user callback (event, transaction, breadcrumb, log, envelope, or check-in) are now dropped while that callback runs, instead of recursing. Captures made by event processors are unaffected.
• Replace deprecated ThrowableProxy with LogEvent#getThrown() in sentry-log4j2 (#​5751)

Dependencies

• Bump Native SDK from v0.15.3 to v0.15.4 (#​5793)
  • changelog
  • diff
• The SDK is now compiled with Android Gradle Plugin 9.2.1 (#​5779)

v8.49.0

Compare Source

Features

• Session Replay: Record segment names (transaction names) (#​5763)

• Add io.sentry:sentry-opentelemetry-bom to align Sentry OpenTelemetry modules with tested OpenTelemetry dependencies (#​5629)

  • Spring Boot Gradle plugin: add the Sentry BOM to dependencyManagement; explicit imports are applied after Spring Boot's implicit BOM

    dependencyManagement {
      imports {
        mavenBom("io.sentry:sentry-opentelemetry-bom:<sentry-version>")
      }
    }

  • Gradle: import it as a platform and omit versions from Sentry OpenTelemetry and OpenTelemetry dependencies

    implementation(platform("io.sentry:sentry-opentelemetry-bom:<sentry-version>"))

  • Maven: import it before Spring Boot's BOM in the same <dependencyManagement> block, or in the child POM when using spring-boot-starter-parent

    <dependency>
      <groupId>io.sentry</groupId>
      <artifactId>sentry-opentelemetry-bom</artifactId>
      <version>${sentry.version}</version>
      <type>pom</type>
      <scope>import</scope>
    </dependency>

Fixes

• Session Replay: Fix first recording segment missing for replays in buffer mode (#​5753)
• Session Replay: Fix error-to-replay linkage in buffer mode (#​5754)
• Prevent logs and metrics from remaining queued after a flush scheduling race (#​5756)
• Fix main thread identification for tombstone (native crash) events (#​5742)
• Prevent malformed JDBC URLs, which may contain credentials, from being printed to stdout (#​5656)
• Restrict JVM-global proxy authentication credentials to challenges from the configured proxy host (#​5656)
• Sanitize Spring 7 and Spring Jakarta WebClient span descriptions to prevent embedded URL credentials from being sent to Sentry (#​5656)
• Respect tracePropagationTargets when injecting Sentry tracing headers through the OpenTelemetry OTLP propagator (#​5656)

Performance

• Schedule transaction idle/deadline timeouts on a shared, dedicated executor instead of spawning a Timer thread per transaction (#​5670)

Dependencies

• Bump OpenTelemetry to support Spring Boot 4.1 (#​5573)
  • If this causes issues for you because you are also using Spring Boot Dependency Management Plugin (io.spring.dependency-management),
    which may downgrade the OpenTelemetry SDK, please have a look at the changelog entry above that explains how to use sentry-opentelemetry-bom.
  • OpenTelemetry to 1.63.0 (was 1.60.1)
  • OpenTelemetry Instrumentation to 2.29.0 (was 2.26.0)
  • OpenTelemetry Instrumentation Alpha to 2.29.0-alpha (was 2.26.0-alpha)
  • OpenTelemetry Semantic Conventions to 1.42.0 (was 1.40.0)
  • OpenTelemetry Semantic Conventions Alpha to 1.42.0-alpha (was 1.40.0-alpha)
• Bump Native SDK from v0.15.2 to v0.15.3 (#​5728)
  • changelog
  • diff

v8.48.0

Compare Source

Features

• Add Sentry.extendAppStart(), Sentry.finishExtendedAppStart(), and Sentry.getExtendedAppStartSpan() to extend the app start measurement past the first frame for extra launch-time work on Android (#​5604)

  • Requires standalone app start tracing (options.isEnableStandaloneAppStartTracing). Call extendAppStart() in Application.onCreate after SDK init and finishExtendedAppStart() when done:

  Sentry.extendAppStart()
  
  // Optionally, retrieve the extended app start span to attach your own child spans
  val child = Sentry.getExtendedAppStartSpan()?.startChild("preload", "Preload resources")
  // ... extra launch-time work ...
  child?.finish()
  
  Sentry.finishExtendedAppStart()

• Add trace_metric_byte data category and record byte-level client reports when trace metrics are discarded (#​5626)

• Expose sentry-native's heartbeat-based app-hang detection through SentryAndroidOptions (#​5623)

  • Enable via setEnableNdkAppHangTracking(true) (disabled by default) and tune the timeout with setNdkAppHangTimeoutIntervalMillis(...) (default 5000 ms), or the io.sentry.ndk.app-hang.enable / io.sentry.ndk.app-hang.timeout-interval-millis manifest entries
  • Intended for hybrid SDKs: emit the heartbeat by calling the native sentry_app_hang_heartbeat() from the thread you want monitored. Independent of the JVM-based ANR detection (setAnrEnabled)

• Support the io.sentry.tombstone.report-historical manifest option to enable historical tombstone reporting via AndroidManifest.xml <meta-data> (#​5683)

Fixes

• Fix NoSuchMethodError from using Math.floorDiv/Math.floorMod overloads that are unavailable on Java 8 (#​5743)
• Fix main thread identification parsing for ApplicationExitInfo ANRs (#​5733)
• Do not send threads without stacktraces for ApplicationExitInfo ANRs (#​5733)
• Record byte-level client reports when event processors discard logs or trace metrics (#​5718)
• Name the device-info caching thread SentryDeviceInfoCache so all threads spawned by the SDK are identifiable (#​5684)
• Apply byte-category rate limits to log and trace metric envelope items (#​5716)

Performance

• Skip Hint allocation in Scope.addBreadcrumb when no beforeBreadcrumb callback is set (#​5689)
• Speed up scope persistence by detecting the Sentry executor thread via a marker instead of a Thread.getName() name scan on every scope mutation (#​5691)
• Remove executor prewarm during SDK init (#​5681)
  • The single-threaded SentryExecutorService queued the prewarm work ahead of the first useful task, so it could only delay init work, never speed it up; the thread and class loading it warmed are paid identically by the first real task submitted right after.

Dependencies

• Bump Native SDK from v0.15.2 to v0.15.3 (#​5623)
  • changelog
  • diff

itext/itextpdf (com.itextpdf:itextpdf)

v5.5.13.6: iText 5.5.13.6

Compare Source

Since the release of iText 5.5.13 the iText 5 product line has transitioned to be in maintenance mode, meaning it only receives security related releases. While iText 5 is now EOL, we want to make sure that our users who have developed their solutions using iText 5 can safely continue using it.

For this release, we have backported the single-layered decompression bomb scenario fix from iText Core 9.7.0.

In addition, the Bouncy Castle cryptography libraries were updated to 1.84 to address CVE-2026-5588.

apache/httpcomponents-client (org.apache.httpcomponents.client5:httpclient5)

v5.6.3

unicode-org/icu (com.ibm.icu:icu4j)

v78.3

Compare Source

v78.2

Compare Source

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.13

Added

• feat: invalidate the prepared-statement cache when the server reports a search_path change via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema PR #​4259
• feat: reWriteBatchedInserts now merges up to 32768 rows into one multi-values INSERT (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new reWriteBatchedInsertsSize connection property lowers that cap when set; the default of 0 uses that maximum. PR #​4207
• feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into autosave=ALWAYS. Controlled by the new flushCacheOnDdl connection property (default true); set to false for the prior behaviour. PR #​4067
• feat: add connectExecutor connection property to customize the Executor used to run the worker task that performs the connection attempt when loginTimeout is in effect. The value is the fully qualified name of a class implementing java.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named "PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. PR #​4165
• feat: add classLoaderStrategy connection property to control which classloaders the driver searches when loading a class named by a connection property, for example socketFactory. The default driver-first now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set driver to keep the previous driver-classloader-only behaviour, or context-first to prefer the thread context classloader Issue #​2112 PR #​4167
• feat: add OID constants for geometric arrays, RECORD, and refcursor PR #​4220
• feat: LargeObject BlobInputStream now skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available PR #​4204

Changed

• refactor: the worker that runs the connection attempt under loginTimeout is now a FutureTask (ConnectTask) instead of the hand-rolled ConnectThread. When the caller hits the timeout, the task is now cancelled with cancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so loginTimeout can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. PR #​4120
• chore: PGXAConnection.ConnectionHandler now rejects setAutoCommit(false) and setSavepoint(...) during an active XA branch, in addition to the long-rejected setAutoCommit(true) / commit() / rollback(). The setSavepoint rejection was already meant to be in place but the guard misspelled the method name as setSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. PR #​4114
• chore: commitPrepared / rollback-of-prepared now return XAER_RMFAIL instead of XAER_RMERR when the underlying connection is left in a non-idle TransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treat XAER_RMFAIL as retryable on a fresh XAResource; the prepared transaction is no longer abandoned. PR #​4114
• refactor: derive getPrimaryKeys from pg_constraint.conkey PR #​4202

Fixed

• fix: the published GitHub release now ships the released postgresql-<version>.jar and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar Issue #​3812 PR #​3814
• fix: simplify the Statement#cancel state machine by dropping the redundant CANCELLED state. killTimerTask now waits for the state to return to IDLE directly, which removes a spin-forever case when more than one thread observes the cancel completing PR #​1827.
• perf: defer simple-query flushes until the driver reads the response, allowing BEGIN and the following query to share a network flush Issue #​3894 PR #​4196
• fix: reWriteBatchedInserts no longer throws IllegalArgumentException when batching a parameterless INSERT (for example INSERT INTO t VALUES (1, 2)) of 256 rows or more PR #​4207
• fix: a comment before CALL in a CallableStatement no longer hides the native call, so OUT parameter registration works for /* comment */ call proc(?, ?) and similar. Parser.modifyJdbcCall now skips leading whitespace and SQL comments (both -- and /* */) before the call, tolerates a trailing comment after a { ... } escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment Issue #​2538 PR #​4209
• fix: PreparedStatement.toString() no longer throws for a bytea value supplied as text via PGobject. Hex-format values (\x...) are validated and rendered as a bytea literal, and escape-format values are quoted and cast like any other literal Issue #​3757 PR #​4201
• fix: the driver no longer nulls the contextClassLoader of shared ForkJoinPool.commonPool() worker threads, which previously left unrelated tasks on those threads running with a null classloader Issue #​4155 PR #​4156
• fix: PgResultSet#getCharacterStream wraps String in a StringReader PR #​4063
• fix: PGXAConnection no longer saves and restores the underlying connection's JDBC autoCommit flag. All XA-protocol SQL (BEGIN, PREPARE TRANSACTION, COMMIT, ROLLBACK, COMMIT PREPARED, ROLLBACK PREPARED, the recover() SELECT) is sent through QUERY_SUPPRESS_BEGIN, so the caller's autoCommit value is invariant across every XAResource call. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections with autoCommit=false (TomEE, WildFly, WebSphere Liberty) PR #​4114
• fix: PGXAConnection.prepare() now mutates XA state only after PREPARE TRANSACTION succeeds. A failed PREPARE previously left the driver thinking the branch was already prepared, so the follow-up rollback(xid) tried ROLLBACK PREPARED against a non-existent gid and returned XAER_RMERR. Transaction managers (Narayana) escalated this to HeuristicMixedException. With the fix, rollback(xid) takes the active-branch path and issues a plain ROLLBACK, which the server accepts cleanly. Fixes Issue #​3153, Issue #​3123. PR #​4114
• fix: an updatable result set over an unqualified table name is now classified using only the table visible through search_path. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable PR #​4214. Supersedes PR #​3400.
• fix: LargeObject.close() now flushes a buffered output stream before marking the object closed, so closing a large object without an explicit flush() no longer drops buffered writes. The flush runs while the object is still open (it calls back into LargeObject.write()), and lo_close always runs afterward; a failure from lo_close no longer masks an earlier flush error, and the transaction is not committed when the flush failed Issue #​4247 PR #​4248.
• fix: reject empty timestamp, timestamptz, and date text with a clear SQLException (SQLState 22007) instead of an ArrayIndexOutOfBoundsException PR #​4278
• fix: return null CHAR_OCTET_LENGTH for non-character columns PR #​4231
• fix: honor scale in ResultSet.getBigDecimal(int, int) PR #​4211
• fix: support java.time values in an updatable ResultSet updateRow() / insertRow() PR #​3848
• fix: improve batching when the RETURNING clause contains varchar or numeric types PR #​4014
• fix: correct estimatedReceiveBufferBytes accounting after a forced Sync PR #​4014
• fix: avoid creating a transient ResultSet for describe-statement purposes, and restore the pre-describe path for generated-key batches PR #​4014
• fix: add an explicit failure message when a multi-statement command executes in a batch PR #​4014
• fix: detect search_path changes case-insensitively PR #​4216
• fix: auto-detect the SSL key format instead of relying on the .key extension PR #​3946
• fix: build PKIX trust anchors without a KeyStore so FIPS JVMs work PR #​4193
• fix: use gssResponseTimeout rather than sslResponseTimeout for GSS connections PR #​4076
• fix: skip the autosave savepoint for SET LOCAL / SET SESSION TRANSACTION PR #​4203
• fix: do not throw AssertionError from BatchResultHandler on a closed connection PR #​4187
• fix: reject SQL_TSI_FRAC_SECOND with an explicit, explained error PR #​4229
• fix: reject a null URL in Driver.acceptsURL with a clear NullPointerException PR #​4205
• fix: reject overlong inputs in NumberParser.getFastLong instead of silently wrapping PR #​4163
• fix: reject out-of-range and NaN values in PGInterval.setSeconds PR #​4194
• fix: close the socket when PgConnection setup fails after connect PR #​4161
• fix: keep the LazyCleanerImpl cleanup task alive across a transient empty queue PR #​4038
• fix: append the default non-proxy hosts when socksNonProxyHosts is set PR #​4045
• fix: clear the ResourceBundle cache on deregister so the driver can unload PR #​4237
• fix: delete the temp file when spooling a stream to disk fails with an IOException PR #​4190
• fix: avoid a direct java.lang.management dependency in the maxResultBuffer parser PR #​4069

spring-projects/spring-security (org.springframework.security:spring-security-web)

v7.1.0

Compare Source

🪲 Bug Fixes

• Opaque token introspectors should not allow empty credentials #​19201

🔨 Dependency Upgrades

• Bump @springio/antora-extensions from 1.14.11 to 1.14.12 in /docs #​19235
• Bump actions/checkout from 6.0.2 to 6.0.3 #​19271
• Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs #​19181
• Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.33 #​19228
• Bump ch.qos.logback:logback-classic from 1.5.33 to 1.5.34 #​19268
• Bump com.fasterxml.jackson:jackson-bom from 2.21.2 to 2.21.3 #​19133
• Bump com.fasterxml.jackson:jackson-bom from 2.21.3 to 2.22.0 #​19246
• Bump com.google.code.gson:gson from 2.13.2 to 2.14.0 #​19125
• Bump com.nimbusds:oauth2-oidc-sdk from 11.37 to 11.37.1 #​19157
• Bump com.nimbusds:oauth2-oidc-sdk from 11.37 to 11.37.2 #​19195
• Bump com.webauthn4j:webauthn4j-core from 0.31.3.RELEASE to 0.31.5.RELEASE #​19148
• Bump com.webauthn4j:webauthn4j-core from 0.31.5.RELEASE to 0.31.6.RELEASE #​19263
• Bump gradle-wrapper from 9.4.1 to 9.5.0 #​19135
• Bump gradle-wrapper from 9.5.0 to 9.5.1 #​19171
• Bump io-micrometer from 1.16.5 to 1.17.0 #​19287
• Bump io.mockk:mockk from 1.14.9 to 1.14.11 #​19244
• Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #​19296
• Bump org-jetbrains-kotlin from 2.3.20 to 2.3.21 #​19126
• Bump org-jetbrains-kotlin from 2.3.21 to 2.4.0 #​19264
• Bump org-opensaml5 from 5.2.1 to 5.2.2 #​19176
• Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 #​19190
• Bump org.apereo.cas.client:cas-client-core from 4.1.0 to 4.1.1 #​19200
• Bump org.hibernate.orm:hibernate-core from 7.3.1.Final to 7.3.2.Final #​19119
• Bump org.hibernate.orm:hibernate-core from 7.3.2.Final to 7.3.3.Final #​19149
• Bump org.hibernate.orm:hibernate-core from 7.3.3.Final to 7.3.4.Final #​19165
• Bump org.hibernate.orm:hibernate-core from 7.3.4.Final to 7.3.5.Final #​19191
• Bump org.hibernate.orm:hibernate-core from 7.3.5.Final to 7.3.6.Final #​19211
• Bump org.hibernate.orm:hibernate-core from 7.3.6.Final to 7.4.0.Final #​19226
• Bump org.jetbrains.kotlinx:kotlinx-coroutines-bom from 1.10.2 to 1.11.0 #​19166
• Bump org.junit:junit-bom from 6.0.3 to 6.1.0 #​19197
• Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 #​19169
• Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #​19290
• Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.1.0 #​19291
• Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #​19285
• Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5 #​19179
• Bump tools.jackson:jackson-bom from 3.1.2 to 3.1.3 #​19147
• Bump tools.jackson:jackson-bom from 3.1.3 to 3.1.4 #​19245
• Bump tools.jackson:jackson-bom from 3.1.4 to 3.2.0 #​19286
• Update to spring-data-bom 2026.0.0 #​19303

🔩 Build Updates

• Release 7.1.0 #​19218

v7.0.6

Compare Source

🪲 Bug Fixes

• FormPostRedirectStrategy should not emit percent-encoded values into hidden form inputs #​19137
• AbstractAuthenticationFilterConfigurer should not automatically pick up servlet path #​19128
• Principal Extractor should select the left-most RDN attribute value #​19254

🔨 Dependency Upgrades

• Bump antora from 3.2.0-alpha.11 to 3.2.0-alpha.12 in /docs #​19184
• Bump ch.qos.logback:logback-classic from 1.5.32 to 1.5.34 #​19266
• Bump com.webauthn4j:webauthn4j-core from 0.31.3.RELEASE to 0.31.5.RELEASE #​19151
• Bump com.webauthn4j:webauthn4j-core from 0.31.5.RELEASE to 0.31.6.RELEASE #​19265
• Bump gradle-wrapper from 8.14.4 to 8.14.5 #​19160
• Bump io-micrometer from 1.16.5 to 1.16.6 #​19292
• Bump io.mockk:mockk from 1.14.9 to 1.14.11 #​19247
• Bump io.projectreactor:reactor-bom from 2025.0.5 to 2025.0.6 #​19298
• Bump org-bouncycastle from 1.80 to 1.80.2 #​19193
• Bump org.apache.maven:maven-resolver-provider from 3.9.15 to 3.9.16 #​19192
• Bump org.slf4j:slf4j-api from 2.0.17 to 2.0.18 #​19174
• Bump org.springframework.data:spring-data-bom from 2025.1.5 to 2025.1.6 #​19294
• Bump org.springframework.ldap:spring-ldap-core from 4.0.3 to 4.0.4 #​19289
• Bump org.springframework:spring-framework-bom from 7.0.7 to 7.0.8 #​19288
• Bump spring-io/spring-release-actions from 0.0.4 to 0.0.5 #​19182
• Update to Micrometer 1.16.5 #​19225

🔩 Build Updates

• Release 7.0.6 #​19239

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "after 5pm on the first day of the month,on the first day of the month"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.