From bcacae7e0cbbfaf2d536345aad141fb6c0b60fe9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:02 +0200 Subject: [PATCH 01/21] Upgrade to Ehcache3 3.10.9 Closes gh-47096 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 683998868d0..e7835996d86 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -328,7 +328,7 @@ bom { ] } } - library("Ehcache3", "3.10.8") { + library("Ehcache3", "3.10.9") { group("org.ehcache") { modules = [ "ehcache", From dc6fec6ed4a1e38807dd286cd0e31dc3282d12a1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:06 +0200 Subject: [PATCH 02/21] Upgrade to Hibernate 6.6.28.Final Closes gh-47097 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index e7835996d86..04862eed17b 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -532,7 +532,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "6.6.26.Final") { + library("Hibernate", "6.6.28.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From 984a3cd5b108efc1b5f8f907183483180f3fe722 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:10 +0200 Subject: [PATCH 03/21] Upgrade to HttpCore5 5.3.5 Closes gh-47098 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 04862eed17b..252251a27df 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -633,7 +633,7 @@ bom { ] } } - library("HttpCore5", "5.3.4") { + library("HttpCore5", "5.3.5") { group("org.apache.httpcomponents.core5") { modules = [ "httpcore5", From 4810c485193943582d3d517b5743b8ffb49e438f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:14 +0200 Subject: [PATCH 04/21] Upgrade to Infinispan 15.0.21.Final Closes gh-47099 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 252251a27df..d5757ca40cf 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -642,7 +642,7 @@ bom { ] } } - library("Infinispan", "15.0.19.Final") { + library("Infinispan", "15.0.21.Final") { group("org.infinispan") { bom("infinispan-bom") } From 303f15943fbfe4867afa5ddeadecbea8da4438a2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:18 +0200 Subject: [PATCH 05/21] Upgrade to Jakarta Mail 2.1.4 Closes gh-47100 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index d5757ca40cf..6a2de53e1e4 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -743,7 +743,7 @@ bom { .formatted(version.major(), version.minor()), "jakarta.json.bind") } } - library("Jakarta Mail", "2.1.3") { + library("Jakarta Mail", "2.1.4") { group("jakarta.mail") { modules = [ "jakarta.mail-api" From e64839dc8b24f731f2d68756524e6956711148d5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:22 +0200 Subject: [PATCH 06/21] Upgrade to Jaybird 5.0.9.java11 Closes gh-47101 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 6a2de53e1e4..8cfb4989281 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -934,7 +934,7 @@ bom { releaseNotes("https://github.com/jaxen-xpath/jaxen/releases/tag/v{version}") } } - library("Jaybird", "5.0.8.java11") { + library("Jaybird", "5.0.9.java11") { prohibit { endsWith ".java8" because "we use the .java11 version" From 447b83ef36044b6b83a1bc336d4ae40d851297ef Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:26 +0200 Subject: [PATCH 07/21] Upgrade to Jetty 12.0.26 Closes gh-47102 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 8cfb4989281..15f9a5b60ff 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1004,7 +1004,7 @@ bom { ] } } - library("Jetty", "12.0.25") { + library("Jetty", "12.0.26") { group("org.eclipse.jetty.ee10") { bom("jetty-ee10-bom") } From b5edbd80e957462adc6e550e3e9c8f6de237e86c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:30 +0200 Subject: [PATCH 08/21] Upgrade to Lombok 1.18.40 Closes gh-47103 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 15f9a5b60ff..cb10efba6e0 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1264,7 +1264,7 @@ bom { javadoc("https://logback.qos.ch/apidocs/ch.qos.logback.core", "ch.qos.logback") } } - library("Lombok", "1.18.38") { + library("Lombok", "1.18.40") { group("org.projectlombok") { modules = [ "lombok" From 9780b912633876c914c292c91d8cecb1072a51bc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:30 +0200 Subject: [PATCH 09/21] Upgrade to Micrometer 1.14.11 Closes gh-47073 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index cb10efba6e0..dc29c7d5f63 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1461,7 +1461,7 @@ bom { releaseNotes("https://github.com/apache/maven-war-plugin/releases/tag/maven-war-plugin-{version}") } } - library("Micrometer", "1.14.11-SNAPSHOT") { + library("Micrometer", "1.14.11") { considerSnapshots() group("io.micrometer") { modules = [ From d9c06d3d5a5df2688801e3d2d613282a1da87aca Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:34 +0200 Subject: [PATCH 10/21] Upgrade to Netty 4.1.126.Final Closes gh-47104 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index dc29c7d5f63..de06cf7fdb7 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1602,7 +1602,7 @@ bom { releaseNotes("https://github.com/neo4j/neo4j-java-driver/releases/tag/{version}") } } - library("Netty", "4.1.124.Final") { + library("Netty", "4.1.126.Final") { group("io.netty") { bom("netty-bom") } From 54572d227b3096d934a0acc9ef651bd2f774cad5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:13:38 +0200 Subject: [PATCH 11/21] Upgrade to Undertow 2.3.19.Final Closes gh-47105 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index de06cf7fdb7..791adaac9d9 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2465,7 +2465,7 @@ bom { releaseNotes("https://github.com/pingidentity/ldapsdk/releases/tag/{version}") } } - library("Undertow", "2.3.18.Final") { + library("Undertow", "2.3.19.Final") { group("io.undertow") { modules = [ "undertow-core", From 4104d08daeda34e2019c01707806ee8967819bbe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:11 +0200 Subject: [PATCH 12/21] Upgrade to Ehcache3 3.10.9 Closes gh-47106 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 5e7181833f5..0d9c77c4b81 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -334,7 +334,7 @@ bom { ] } } - library("Ehcache3", "3.10.8") { + library("Ehcache3", "3.10.9") { group("org.ehcache") { modules = [ "ehcache", From dddebef4b11beb2244c35c88959a613e980a0201 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:15 +0200 Subject: [PATCH 13/21] Upgrade to Hibernate 6.6.28.Final Closes gh-47107 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 0d9c77c4b81..2ff7b77fae9 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -554,7 +554,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "6.6.26.Final") { + library("Hibernate", "6.6.28.Final") { prohibit { versionRange "[7.0.0.Alpha1,)" because "it exceeds our Jakarta EE 10 baseline" From 98cdb3aab9eb8dfc80d233ff0d53d096ca9db44b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:19 +0200 Subject: [PATCH 14/21] Upgrade to HttpCore5 5.3.5 Closes gh-47108 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 2ff7b77fae9..545c6198d16 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -675,7 +675,7 @@ bom { ] } } - library("HttpCore5", "5.3.4") { + library("HttpCore5", "5.3.5") { group("org.apache.httpcomponents.core5") { modules = [ "httpcore5", From 7031c94ba9f2d2e4e29015f531fd03a0b3c30c47 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:23 +0200 Subject: [PATCH 15/21] Upgrade to Infinispan 15.2.6.Final Closes gh-47109 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 545c6198d16..5e99a44d3d5 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -684,7 +684,7 @@ bom { ] } } - library("Infinispan", "15.2.5.Final") { + library("Infinispan", "15.2.6.Final") { group("org.infinispan") { bom("infinispan-bom") } From c76b1c30687b7f7c5c48e8a53ef39ec9ae1fd285 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:27 +0200 Subject: [PATCH 16/21] Upgrade to Jakarta Mail 2.1.4 Closes gh-47110 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 5e99a44d3d5..22c36a15bf3 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -793,7 +793,7 @@ bom { .formatted(version.major(), version.minor()), "jakarta.json.bind") } } - library("Jakarta Mail", "2.1.3") { + library("Jakarta Mail", "2.1.4") { group("jakarta.mail") { modules = [ "jakarta.mail-api" From 593b977fddba7657370e17d9be072be41bcbabbb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:32 +0200 Subject: [PATCH 17/21] Upgrade to Jaybird 6.0.3 Closes gh-47111 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 22c36a15bf3..ccd7c5f80b7 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -988,7 +988,7 @@ bom { releaseNotes("https://github.com/jaxen-xpath/jaxen/releases/tag/v{version}") } } - library("Jaybird", "6.0.2") { + library("Jaybird", "6.0.3") { prohibit { endsWith ".java8" because "we use the .java11 version" From 0368edd30635a7cbef1db67229783424ee834661 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:35 +0200 Subject: [PATCH 18/21] Upgrade to Jetty 12.0.26 Closes gh-47112 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index ccd7c5f80b7..c3fdc103ec1 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1062,7 +1062,7 @@ bom { ] } } - library("Jetty", "12.0.25") { + library("Jetty", "12.0.26") { prohibit { contains ".alpha" because "we don't want alpha dependencies" From 6be4edbcc0e6281deefb39abcf3785966ef110f1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:39 +0200 Subject: [PATCH 19/21] Upgrade to Lombok 1.18.40 Closes gh-47113 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c3fdc103ec1..ce12829ff45 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1351,7 +1351,7 @@ bom { javadoc("https://logback.qos.ch/apidocs/ch.qos.logback.core", "ch.qos.logback") } } - library("Lombok", "1.18.38") { + library("Lombok", "1.18.40") { group("org.projectlombok") { modules = [ "lombok" From ed507004afc24be7cb1244933383fc8eca28c486 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:43 +0200 Subject: [PATCH 20/21] Upgrade to Netty 4.1.126.Final Closes gh-47114 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index ce12829ff45..55a5a4d49e8 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1709,7 +1709,7 @@ bom { releaseNotes("https://github.com/neo4j/neo4j-java-driver/releases/tag/{version}") } } - library("Netty", "4.1.124.Final") { + library("Netty", "4.1.126.Final") { prohibit { contains ".Alpha" contains ".Beta" From 0b32cde654b5a52aab2c8cd34023e60df721f59c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 8 Sep 2025 09:15:47 +0200 Subject: [PATCH 21/21] Upgrade to Undertow 2.3.19.Final Closes gh-47115 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 55a5a4d49e8..6c8fd72e3c9 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -2608,7 +2608,7 @@ bom { releaseNotes("https://github.com/pingidentity/ldapsdk/releases/tag/{version}") } } - library("Undertow", "2.3.18.Final") { + library("Undertow", "2.3.19.Final") { group("io.undertow") { modules = [ "undertow-core",