Skip to content

Bump the maven-dependencies group across 1 directory with 26 updates#438

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/maven-dependencies-49be4b0326
Open

Bump the maven-dependencies group across 1 directory with 26 updates#438
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/maven/maven-dependencies-49be4b0326

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 25, 2026 •
edited
Loading

Bumps the maven-dependencies group with 26 updates in the / directory:

Package From To
org.axonframework:axon-bom 4.12.1 4.12.3
io.axoniq:axonserver-connector-java 2025.2.0-EAP 2025.2.1
org.axonframework:axon-server-connector 4.12.1 5.0.2
org.axonframework:axon-messaging 4.12.1 5.0.2
org.axonframework:axon-spring-boot-autoconfigure 4.12.1 4.12.3
org.springframework.boot:spring-boot-starter-parent 3.5.6 4.0.2
org.springframework.boot:spring-boot-starter-webflux 3.5.6 4.0.2
org.springframework.boot:spring-boot-maven-plugin 3.5.6 4.0.2
org.springframework.boot:spring-boot-starter 3.5.6 4.0.2
org.springframework.boot:spring-boot-starter-data-jpa 3.5.6 4.0.2
org.springframework.boot:spring-boot-docker-compose 3.5.6 4.0.2
io.projectreactor:reactor-core 3.7.11 3.8.2
org.junit.jupiter:junit-jupiter 6.0.0 6.0.2
org.testcontainers:junit-jupiter 1.21.3 1.21.4
org.mockito:mockito-core 5.20.0 5.21.0
org.jetbrains.kotlin:kotlin-stdlib-jdk8 2.2.20 2.3.0
org.jetbrains.kotlin:kotlin-reflect 2.2.20 2.3.0
org.jetbrains.kotlin:kotlin-maven-allopen 2.2.20 2.3.0
org.jetbrains.kotlin:kotlin-maven-plugin 2.2.20 2.3.0
com.vaadin:vaadin-bom 24.9.2 25.0.3
com.vaadin:vaadin-maven-plugin 24.9.2 25.0.3
org.flywaydb:flyway-core 11.13.2 11.20.2
org.apache.avro:avro 1.12.0 1.12.1
org.apache.avro:avro-maven-plugin 1.12.0 1.12.1
com.fasterxml.jackson.core:jackson-annotations 2.20 2.21
org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.13 3.0.1

Updates org.axonframework:axon-bom from 4.12.1 to 4.12.3

Release notes

Sourced from org.axonframework:axon-bom's releases.

Axon Bill of Materials v4.12.3

🛠️ Dependency Upgrade

  • Upgrade AF to 4.12.3 and Connector to 2024.2.5 #210

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Axon Bill of Materials v4.12.2

🛠️ Dependency Upgrade

  • Upgrade AF to 4.12.2 #209

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Commits
  • 6c1188e [maven-release-plugin] prepare release axon-4.12.3
  • c0146be Merge pull request #210 from AxonFramework/dependency-upgrade/af-4.12.3
  • 2655d03 Upgrade AF to 4.12.3
  • 31e8024 Upgrade Connector to 2024.2.5
  • 7b12262 [maven-release-plugin] prepare for next development iteration
  • 24912ae [maven-release-plugin] prepare release axon-4.12.2
  • e273ba0 Merge pull request #209 from AxonFramework/dependency-upgrade/af-4.12.2
  • 56e850b Upgrade AF to 4.12.2
  • 5819a4e [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates io.axoniq:axonserver-connector-java from 2025.2.0-EAP to 2025.2.1

Release notes

Sourced from io.axoniq:axonserver-connector-java's releases.

Axon Server Connector for Java version 2025.2.1

🪲 Bug Fixes

  • Fix Maven Central badge in README.md #459
  • Connector must invoke callback on registration error #458

❤️ Contributors

We'd like to thank all the contributors who worked on this release!

Commits
  • 2407afe [maven-release-plugin] prepare release 2025.2.1
  • 6b2411d Merge pull request #458 from AxonIQ/fix/ack-callback-on-error
  • 0f412e7 Connector must invoke callback on registration error
  • 19d544e [maven-release-plugin] prepare for next development iteration
  • 3ab8f5c [maven-release-plugin] prepare release 2025.2.0
  • a4ae898 [maven-release-plugin] rollback the release of 2025.2.0
  • 8852c0a [maven-release-plugin] prepare for next development iteration
  • f42b709 [maven-release-plugin] prepare release 2025.2.0
  • 8069ab1 [maven-release-plugin] rollback the release of 2025.2.0
  • 46f4b16 [maven-release-plugin] prepare for next development iteration
  • Additional commits viewable in compare view

Updates org.axonframework:axon-server-connector from 4.12.1 to 5.0.2

Updates org.axonframework:axon-messaging from 4.12.1 to 5.0.2

Updates org.axonframework:axon-spring-boot-autoconfigure from 4.12.1 to 4.12.3

Updates org.springframework.boot:spring-boot-starter-parent from 3.5.6 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-parent's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.6 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-webflux's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-maven-plugin from 3.5.6 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-maven-plugin's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter from 3.5.6 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-data-jpa from 3.5.6 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-starter-data-jpa's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-docker-compose from 3.5.6 to 4.0.2

Release notes

Sourced from org.springframework.boot:spring-boot-docker-compose's releases.

v4.0.2

⚠️ Noteworthy Changes

  • The dependency on org.eclipse.jetty.ee11:jetty-ee11-servlets has been removed from spring-boot-jetty as it was unnecessary and unused. If your application code depends on a class from jetty-ee11-servlets, declare a dependency on it in your build configuration. #48677

🐞 Bug Fixes

  • No TransactionAutoConfiguration with spring-boot-starter-kafka for Spring Boot 4 #48880
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #48840
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #48838
  • SessionAutoConfiguration creates a DefaultCookieSerializer with a default SameSite of null instead of Lax #48830
  • Setting graphql schema location to "classpath*:graphql/**/" causes failure due to incorrectly packaged test resource #48829
  • Message interpolation by MVC and WebFlux's Validators does not work correctly in a native image #48828
  • CloudFoundry integration fails in Servlet-based web app without a dependency on spring-boot-starter-restclient #48826
  • RestTestClientAutoConfiguration and TestRestTemplateAutoConfiguration should be package-private #48820
  • SSL metrics are no longer auto-configured #48819
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #48812
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #48703
  • The spring-boot-cloudfoundry module should only have an optional dependency on spring-boot-security #48685
  • Application JAR created by extract command is not reproductible #48678
  • AOT processing of tests should not be disabled when 'skipTests' is set #48662
  • @SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT) is no longer applied to the management server #48653
  • Fix zero-length byte buffer in InspectedContent #48650
  • Can no longer override JacksonJsonHttpMessageConverter with ServerHttpMessageConvertersCustomizer #48635
  • HttpServiceClientProperties incorrectly uses the @ConfigurationProperties annotation on a LinkedHashMap class #48616
  • spring-boot-micrometer-tracing-opentelemetry fails if spring-boot-opentelemetry isn't there #48585
  • App fails to start with starter-webmvc and starter-zipkin #48581
  • Micrometer test modules should have an api dependency on micrometer-observation-test #48386

📔 Documentation

  • Fix typo in REST client documentation #48907
  • Remove duplicate word #48874
  • Document support for configuring arguments passed to Docker Compose #48806
  • The documentation related to EnvironmentPostProcessor links to deprecated interface #48803
  • Update documentation for Buildpack's AOT Cache support #48769
  • Correct docs to use new location for error handling configuration properties #48767
  • Document spring-boot-starter-cloudfoundry on Cloud Foundry Support Page #48675
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #48659
  • Example using excludeDevtools property should document that optional dependencies should be enabled #48641
  • Fix grammar and typos in the reference guide #48601
  • Update Tracing section for Spring Boot 4's modularity #48576

🔨 Dependency Upgrades

  • Upgrade to Classmate 1.7.3 #48783
  • Upgrade to Elasticsearch Client 9.2.3 #48721
  • Upgrade to Hibernate 7.2.1.Final #48857
  • Upgrade to HttpClient5 5.5.2 #48784
  • Upgrade to Jackson 2 Bom 2.20.2 #48910

... (truncated)

Commits
  • fae3545 Release v4.0.2
  • 9fde744 Merge branch '3.5.x' into 4.0.x
  • 650236d Remove breaking and unnecessary Undertow TLS with RSA test
  • 547bc77 Upgrade to Spring Batch 6.0.2
  • 4387cbb Upgrade to Jackson Bom 3.0.4
  • abec26e Polish
  • f677fba Upgrade to Spring Integration 7.0.2
  • 849c2ee Upgrade to Spring GraphQL 2.0.2
  • facd456 Upgrade to Nullability Plugin 0.0.10
  • e99c08f Merge branch '3.5.x' into 4.0.x
  • Additional commits viewable in compare view

Updates org.springframework.boot:spring-boot-starter-webflux from 3.5.6 to 4.0.2

...

Description has been truncated

@dependabot
Bump the maven-dependencies group across 1 directory with 26 updates
4900f1a 
Bumps the maven-dependencies group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [org.axonframework:axon-bom](https://github.com/AxonFramework/axon-bom) | `4.12.1` | `4.12.3` |
| [io.axoniq:axonserver-connector-java](https://github.com/AxonIQ/axonserver-connector-java) | `2025.2.0-EAP` | `2025.2.1` |
| org.axonframework:axon-server-connector | `4.12.1` | `5.0.2` |
| org.axonframework:axon-messaging | `4.12.1` | `5.0.2` |
| org.axonframework:axon-spring-boot-autoconfigure | `4.12.1` | `4.12.3` |
| [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.2` |
| [org.springframework.boot:spring-boot-starter-webflux](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.2` |
| [org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.2` |
| [org.springframework.boot:spring-boot-starter](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.2` |
| [org.springframework.boot:spring-boot-starter-data-jpa](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.2` |
| [org.springframework.boot:spring-boot-docker-compose](https://github.com/spring-projects/spring-boot) | `3.5.6` | `4.0.2` |
| [io.projectreactor:reactor-core](https://github.com/reactor/reactor-core) | `3.7.11` | `3.8.2` |
| [org.junit.jupiter:junit-jupiter](https://github.com/junit-team/junit-framework) | `6.0.0` | `6.0.2` |
| [org.testcontainers:junit-jupiter](https://github.com/testcontainers/testcontainers-java) | `1.21.3` | `1.21.4` |
| [org.mockito:mockito-core](https://github.com/mockito/mockito) | `5.20.0` | `5.21.0` |
| [org.jetbrains.kotlin:kotlin-stdlib-jdk8](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.3.0` |
| [org.jetbrains.kotlin:kotlin-reflect](https://github.com/JetBrains/kotlin) | `2.2.20` | `2.3.0` |
| org.jetbrains.kotlin:kotlin-maven-allopen | `2.2.20` | `2.3.0` |
| org.jetbrains.kotlin:kotlin-maven-plugin | `2.2.20` | `2.3.0` |
| com.vaadin:vaadin-bom | `24.9.2` | `25.0.3` |
| [com.vaadin:vaadin-maven-plugin](https://github.com/vaadin/platform) | `24.9.2` | `25.0.3` |
| [org.flywaydb:flyway-core](https://github.com/flyway/flyway) | `11.13.2` | `11.20.2` |
| org.apache.avro:avro | `1.12.0` | `1.12.1` |
| org.apache.avro:avro-maven-plugin | `1.12.0` | `1.12.1` |
| [com.fasterxml.jackson.core:jackson-annotations](https://github.com/FasterXML/jackson) | `2.20` | `2.21` |
| [org.springdoc:springdoc-openapi-starter-webmvc-ui](https://github.com/springdoc/springdoc-openapi) | `2.8.13` | `3.0.1` |



Updates `org.axonframework:axon-bom` from 4.12.1 to 4.12.3
- [Release notes](https://github.com/AxonFramework/axon-bom/releases)
- [Commits](AxonFramework/axon-bom@axon-4.12.1...axon-4.12.3)

Updates `io.axoniq:axonserver-connector-java` from 2025.2.0-EAP to 2025.2.1
- [Release notes](https://github.com/AxonIQ/axonserver-connector-java/releases)
- [Commits](AxonIQ/axonserver-connector-java@2025.2.0-EAP...2025.2.1)

Updates `org.axonframework:axon-server-connector` from 4.12.1 to 5.0.2

Updates `org.axonframework:axon-messaging` from 4.12.1 to 5.0.2

Updates `org.axonframework:axon-spring-boot-autoconfigure` from 4.12.1 to 4.12.3

Updates `org.springframework.boot:spring-boot-starter-parent` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter-webflux` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `io.projectreactor:reactor-core` from 3.7.11 to 3.8.2
- [Release notes](https://github.com/reactor/reactor-core/releases)
- [Commits](reactor/reactor-core@v3.7.11...v3.8.2)

Updates `org.junit.jupiter:junit-jupiter` from 6.0.0 to 6.0.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
- [Commits](junit-team/junit-framework@r6.0.0...r6.0.2)

Updates `org.testcontainers:junit-jupiter` from 1.21.3 to 1.21.4
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.21.3...1.21.4)

Updates `org.mockito:mockito-core` from 5.20.0 to 5.21.0
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v5.20.0...v5.21.0)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.springframework.boot:spring-boot-starter` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.jetbrains.kotlin:kotlin-stdlib-jdk8` from 2.2.20 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.3.0)

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.20 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.3.0)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.20 to 2.3.0

Updates `org.jetbrains.kotlin:kotlin-reflect` from 2.2.20 to 2.3.0
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.2.20...v2.3.0)

Updates `org.jetbrains.kotlin:kotlin-maven-allopen` from 2.2.20 to 2.3.0

Updates `org.jetbrains.kotlin:kotlin-maven-plugin` from 2.2.20 to 2.3.0

Updates `com.vaadin:vaadin-bom` from 24.9.2 to 25.0.3

Updates `com.vaadin:vaadin-maven-plugin` from 24.9.2 to 25.0.3
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.2...25.0.3)

Updates `org.springframework.boot:spring-boot-starter-data-jpa` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.flywaydb:flyway-core` from 11.13.2 to 11.20.2
- [Release notes](https://github.com/flyway/flyway/releases)
- [Commits](flyway/flyway@flyway-11.13.2...flyway-11.20.2)

Updates `com.vaadin:vaadin-maven-plugin` from 24.9.2 to 25.0.3
- [Release notes](https://github.com/vaadin/platform/releases)
- [Commits](vaadin/platform@24.9.2...25.0.3)

Updates `org.apache.avro:avro` from 1.12.0 to 1.12.1

Updates `org.apache.avro:avro-maven-plugin` from 1.12.0 to 1.12.1

Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.20 to 2.21
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `org.springframework.boot:spring-boot-docker-compose` from 3.5.6 to 4.0.2
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v4.0.2)

Updates `org.apache.avro:avro-maven-plugin` from 1.12.0 to 1.12.1

Updates `org.springdoc:springdoc-openapi-starter-webmvc-ui` from 2.8.13 to 3.0.1
- [Release notes](https://github.com/springdoc/springdoc-openapi/releases)
- [Changelog](https://github.com/springdoc/springdoc-openapi/blob/v3.0.1/CHANGELOG.md)
- [Commits](springdoc/springdoc-openapi@v2.8.13...v3.0.1)

---
updated-dependencies:
- dependency-name: org.axonframework:axon-bom
  dependency-version: 4.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: io.axoniq:axonserver-connector-java
  dependency-version: 2025.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-server-connector
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-messaging
  dependency-version: 5.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.axonframework:axon-spring-boot-autoconfigure
  dependency-version: 4.12.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-webflux
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: io.projectreactor:reactor-core
  dependency-version: 3.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.junit.jupiter:junit-jupiter
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.testcontainers:junit-jupiter
  dependency-version: 1.21.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.mockito:mockito-core
  dependency-version: 5.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-stdlib-jdk8
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-reflect
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-allopen
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.jetbrains.kotlin:kotlin-maven-plugin
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-bom
  dependency-version: 25.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-starter-data-jpa
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.flywaydb:flyway-core
  dependency-version: 11.20.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: com.vaadin:vaadin-maven-plugin
  dependency-version: 25.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.avro:avro
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.apache.avro:avro-maven-plugin
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-version: '2.21'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-dependencies
- dependency-name: org.springframework.boot:spring-boot-docker-compose
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
- dependency-name: org.apache.avro:avro-maven-plugin
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-dependencies
- dependency-name: org.springdoc:springdoc-openapi-starter-webmvc-ui
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: maven-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from smcvb as a code owner January 25, 2026 05:06
@smcvb
Copy link
Collaborator

smcvb commented Jan 26, 2026

We need to upgrade the samples to AF5 before this can be merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

@smcvb smcvb Awaiting requested review from smcvb smcvb is a code owner

Assignees

No one assigned

Labels

Priority 1: Must Status: On Hold Type: Dependency Upgrade

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@smcvb