Skip to content

Update all dependencies#337

Merged
mucsi96 merged 4 commits into
mainfrom
renovate/all
Jun 17, 2026
Merged

Update all dependencies#337
mucsi96 merged 4 commits into
mainfrom
renovate/all

Conversation

@github-actions

@github-actions github-actions Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
@angular-devkit/build-angular devDependencies patch 21.2.1321.2.14
@angular-devkit/core devDependencies patch 21.2.1321.2.14
@angular/animations (source) dependencies patch 21.2.1521.2.16
@angular/build devDependencies patch 21.2.1321.2.14
@angular/cdk dependencies patch 21.2.1321.2.14
@angular/cli devDependencies patch 21.2.1321.2.14
@angular/common (source) dependencies patch 21.2.1521.2.16
@angular/compiler (source) dependencies patch 21.2.1521.2.16
@angular/compiler-cli (source) devDependencies patch 21.2.1521.2.16
@angular/core (source) dependencies patch 21.2.1521.2.16
@angular/forms (source) dependencies patch 21.2.1521.2.16
@angular/material dependencies patch 21.2.1321.2.14
@angular/platform-browser (source) dependencies patch 21.2.1521.2.16
@angular/platform-browser-dynamic (source) dependencies patch 21.2.1521.2.16
@angular/router (source) dependencies patch 21.2.1521.2.16
@grafana/faro-web-sdk (source) dependencies patch 2.7.02.7.1
@types/node (source) devDependencies patch 25.9.125.9.2
ag-grid-angular dependencies patch 35.3.035.3.1
ag-grid-community (source) dependencies patch 35.3.035.3.1
org.springframework.ai:spring-ai-bom import patch 2.0.0-M82.0.0-RC1
io.hypersistence:hypersistence-utils-hibernate-71 compile patch 3.15.23.15.3

Release Notes

angular/angular-cli (@​angular-devkit/build-angular)

v21.2.14

Compare Source

@​angular/cli
Commit Type Description
aed448748 fix expand package groups for newly added peer dependencies in update schematic
@​angular/build
Commit Type Description
d46c082fb fix prevent esbuild service child process leakage
angular/angular (@​angular/animations)

v21.2.16

Compare Source

common
Commit Type Description
f6d8e642b0 fix only strip a literal /index.html suffix from URLs
compiler
Commit Type Description
ae1c8a1f7a fix move projection attributes into constants
core
Commit Type Description
3fd6897a67 fix harden inherit definition feature against polluted prototypes
7e38336dc7 fix use Object.create(null) for LOCALE_DATA as a hardening measure
platform-server
Commit Type Description
66821c4ed5 fix throw on suspicious URLs and restrict protocol-relative URLs
d3170031b6 fix update domino to latest version
angular/components (@​angular/cdk)

v21.2.14

Compare Source

No user facing changes in this release

grafana/faro-web-sdk (@​grafana/faro-web-sdk)

v2.7.1

Compare Source

Bug Fixes
ag-grid/ag-grid (ag-grid-angular)

v35.3.1

Compare Source

spring-projects/spring-ai (org.springframework.ai:spring-ai-bom)

v2.0.0-RC1: Spring AI 2.0.0-RC1

Compare Source

⭐ New Features

  • Add turn-boundary snapping to MessageWindowChatMemory eviction #​6312
  • Finish to remove default values from models #​6311
  • Move advisors to their proper modules #​6309
  • Remove SpringBeanToolCallbackResolver and toolNames() API #​6301
  • Streamline OpenAiChatModel implementations #​6295
  • Remove ToolSpec consumer API from ChatClient #​6292
  • Remove Minimax dedicated support in favor of Anthropic one #​6290
  • Remove internalToolExecutionEnabled #​6289
  • Rename N() to n() in options builders #​6285
  • Refine JdbcChatMemoryRepositoryDialect to use default method #​6283
  • Replace SLF4J by org.apache.commons.logging.LogFactory #​6280
  • Remove internal tool execution from MiniMaxChatModel #​6279
  • Remove internal tool execution from BedrockProxyChatModel #​6272
  • fix(core): allow tool callbacks and providers directly in ChatClient tools() #​6263
  • Remove internal tool execution from MistralAiChatModel #​6260
  • Remove internal tool execution from DeepSeekChatModel #​6258
  • Remove internal tool execution from OpenAiChatModel #​6257
  • Remove internal tool execution from OllamaChatModel #​6256
  • Remove duplicate builder overrides in OpenAiChatOptions #​6255
  • Refactor tool search by consolidating into a single module #​6254
  • Remove internal tool execution from AnthropicChatModel #​6252
  • Refactor toOptions method for vendor-specific autoconfiguration properties #​6248
  • Make equals parameter nullable #​6239
  • Remove unused GoogleGenAiChatOptions.TransportType #​6238
  • GH-6211: Avoid duplicate chat memory in tool prompts #​6228
  • GH-6206: Update tool callback guidance #​6214
  • Update Mistral AI chat models #​6210
  • Deprecate and rename ChatClient customizer #​6204
  • Refine Spring Boot dependencies #​6200
  • Simplify ToolCallAdvisor stream aggregation by removing publish() multicast #​6195
  • Add DeepSeek V4 chat model constants #​6194
  • Add EntityParamSpec to ChatClient entity() methods for per-call structured output configuration #​6165
  • Remove toolNames() API and SpringBeanToolCallbackResolver — use explicit ToolCallback beans instead #​6154
  • Retire Pixtral Large model #​6149
  • Refactor JSON utilities #​6135
  • Use .class reference for autoconf ordering #​6119
  • Add Tool Search Tool advisor for on-demand tool discovery #​5909
  • Allow accessing "timestamp" field from spring_ai_chat_memory table programatically when using JdbcChatMemoryRepository #​5168

🐞 Bug Fixes

  • fix: place memory advisors outside ToolCallingAdvisor by default #​6314
  • Rename ToolCallAdvisor to ToolCallingAdvisor with backward-compat shims and bug fixes #​6303
  • Fix OpenAiChatModel.stream() to only buffer tool calls. #​6288
  • refactor(chat-client): enforce non-null ToolCallAdvisor.Builder and fix advisor chain mutation #​6282
  • fix: fix span hierarchy in streaming paths for all remaining chat models #​6276
  • fix: bring parent span into ThreadLocals to maintain Observation and span hierarchy parity #​6249
  • Guard JSON schema generation #​6217
  • Fix merge in openai options #​6215
  • deepseek V4 Function calling 400 Bad Request from POST #​5963

📔 Documentation

  • Fix "vector strore" typo in RAG diagram #​6300
  • Polish reference documentation #​6234
  • Improve Mistral AI Chat documentation for reasoning models and ReasoningEffort Javadoc #​6191
  • Reintroduce community support documentation for OCI and Azure CosmosDB #​6125

🔨 Dependency Upgrades

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Baqirrizvidev, @​Dream95, @​EvanYao826, @​ThomasVitale, @​YunKuiLu, @​chemicL, @​dafriz, @​ericbottard, @​galenzo17, @​goutamadwant, @​guanxuc, @​ilayaperumalg, @​juanjuandog, @​nicolaskrier, @​quaff, @​rajadilipkolli, @​sdeleuze, @​sobychacko, @​stohirov, @​symphony-enrico, @​tzolov, and @​wolf8334

vladmihalcea/hypersistence-utils (io.hypersistence:hypersistence-utils-hibernate-71)

v3.15.3

================================================================================

Add support for Hibernate 7.4 #​852

Small improvements to BatchSequenceGenerator 850

Add support for Optional attributes using @​Type(JsonType.class) #​849

Update the hsqldb version to 2.7.4 #​848

Fix merge method JavaDocs #​846

Add support for Update and Delete statements in SQLExtractor #​845

Upgrade Testcontainers to the 2.0.4 version #​844

Fix broken Javadoc {@​code} tags in JsonType #​842

Add Envers generic‑type handling for JSON collections #​838


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@mucsi96 mucsi96 closed this Jun 8, 2026
@mucsi96 mucsi96 reopened this Jun 8, 2026
claude and others added 3 commits June 8, 2026 07:48
Spring AI 2.0.0-RC1 switched spring-ai-openai to depend only on
openai-java-core, which no longer bundles the OkHttp client. Add the
openai-java-client-okhttp artifact explicitly so OpenAIOkHttpClient
resolves at compile time.
Spring AI 2.0.0-RC1's JsonSchemaGenerator requires the victools Jackson
module at runtime, but it is no longer reaching the runtime classpath
transitively, causing NoClassDefFoundError when BeanOutputConverter
generates schemas. Declare jsonschema-module-jackson explicitly at the
version Spring AI pins (5.0.0).
Add OpenAI Java client OkHttp dependency
@claude

claude Bot commented Jun 9, 2026

Copy link
Copy Markdown

Code Review for PR 337 - Update all dependencies

Overview: Renovate-generated dependency update covering 21 packages. Most are routine patches, but two changes deserve attention.

NOTABLE CHANGES

  1. Spring AI: 2.0.0-M8 to 2.0.0-RC1

The RC1 release notes show several breaking API removals: toolNames() API and SpringBeanToolCallbackResolver removed, internalToolExecutionEnabled removed, ToolCallAdvisor renamed to ToolCallingAdvisor, ToolSpec consumer API removed from ChatClient, and default values removed from models.

The PR compensates by adding two new explicit dependencies: com.openai:openai-java-client-okhttp:4.38.0 and com.github.victools:jsonschema-module-jackson:5.0.0.

Concern: This is labeled as a patch update but the Spring AI change is milestone-to-RC with meaningful API surface removals. Please verify all AI-powered features (translation, audio, Gemini image generation) work end-to-end after this upgrade.

  1. oidc-client-ts version range widened: ^3.5.0 to ^3.1.0

The minimum acceptable version was lowered, not raised. The resolved version in package-lock.json is unchanged today, but widening the lower bound allows installing older versions that may lack security patches. Recommend reverting to ^3.5.0 unless there is a specific reason to support older versions.

ROUTINE PATCH UPDATES (low risk)

Angular 21.2.15 to 21.2.16, Angular CDK/Material 21.2.13 to 21.2.14, Angular CLI 21.2.13 to 21.2.14, grafana/faro-web-sdk 2.7.0 to 2.7.1, ag-grid 35.3.0 to 35.3.1, @types/node 25.9.1 to 25.9.2, hypersistence-utils-hibernate-71 3.15.2 to 3.15.3. Angular 21.2.16 includes prototype-pollution hardening fixes.

SUMMARY

Safe to merge for all patch-level Angular/frontend updates. Verify Spring AI RC1 does not break AI features before merging. Fix the oidc-client-ts range regression.

@github-actions

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@mucsi96 mucsi96 merged commit c185e80 into main Jun 17, 2026
9 checks passed
@mucsi96 mucsi96 deleted the renovate/all branch June 17, 2026 06:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants