From f47c0fa6728c18082023ec8ff76d81c7d5c0fdc7 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:08 +0100 Subject: [PATCH 01/14] Upgrade to Caffeine 3.2.4 Closes gh-50322 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 87de0ef6972..3fc0321638c 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -175,7 +175,7 @@ bom { releaseNotes("https://github.com/cache2k/cache2k/releases/tag/v{version}") } } - library("Caffeine", "3.2.3") { + library("Caffeine", "3.2.4") { group("com.github.ben-manes.caffeine") { modules = [ "caffeine", From 3e1b6f2a88eb3b562d2e1c0a223400e89164dfe2 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:13 +0100 Subject: [PATCH 02/14] Upgrade to Glassfish JAXB 4.0.8 Closes gh-50323 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 3fc0321638c..8c952373037 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -436,7 +436,7 @@ bom { releaseNotes("https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v{version}") } } - library("Glassfish JAXB", "4.0.6") { + library("Glassfish JAXB", "4.0.8") { prohibit { versionRange "[4.0.7]" because "it contains a regression (https://github.com/spring-projects/spring-boot/issues/49607#issuecomment-4072451614)" From f6625511a417563efbffee1082558c47063fb749 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:18 +0100 Subject: [PATCH 03/14] Upgrade to Groovy 5.0.6 Closes gh-50324 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 8c952373037..389dcaa81eb 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -502,7 +502,7 @@ bom { releaseNotes("https://github.com/graphql-java/graphql-java/releases/tag/v{version}") } } - library("Groovy", "5.0.5") { + library("Groovy", "5.0.6") { prohibit { contains "-alpha-" because "we don't want alpha dependencies" From 11b702264f9efc0278a92e501d10eb1edcde3561 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:22 +0100 Subject: [PATCH 04/14] Upgrade to Hibernate 7.2.13.Final Closes gh-50325 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 389dcaa81eb..e6f22dd2475 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -567,7 +567,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "7.2.12.Final") { + library("Hibernate", "7.2.13.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From e4ef099eac8ae63d310f15469ea81c963e2a95b8 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:27 +0100 Subject: [PATCH 05/14] Upgrade to Jackson 2 Bom 2.21.3 Closes gh-50326 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index fe29442694f..7def77007be 100644 --- a/gradle.properties +++ b/gradle.properties @@ -11,7 +11,7 @@ checkstyleToolVersion=10.12.4 commonsCodecVersion=1.19.0 graalVersion=25 hamcrestVersion=3.0 -jackson2Version=2.21.2 +jackson2Version=2.21.3 jacksonVersion=3.1.2 javaFormatVersion=0.0.47 junitJupiterVersion=6.0.3 From 0d8775e354dfda8ae015a353eee61115d7271961 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:32 +0100 Subject: [PATCH 06/14] Upgrade to Jackson Bom 3.1.3 Closes gh-50327 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 7def77007be..caf25a306d4 100644 --- a/gradle.properties +++ b/gradle.properties @@ -12,7 +12,7 @@ commonsCodecVersion=1.19.0 graalVersion=25 hamcrestVersion=3.0 jackson2Version=2.21.3 -jacksonVersion=3.1.2 +jacksonVersion=3.1.3 javaFormatVersion=0.0.47 junitJupiterVersion=6.0.3 kotlinVersion=2.2.21 From 2decd3dce8ddf38137261435072ac5707c4b6e29 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:36 +0100 Subject: [PATCH 07/14] Upgrade to Jakarta XML Bind 4.0.5 Closes gh-50328 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index e6f22dd2475..8b3618a8186 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -903,7 +903,7 @@ bom { .formatted(version.major(), version.minor()), "jakarta.ws.rs") } } - library("Jakarta XML Bind", "4.0.4") { + library("Jakarta XML Bind", "4.0.5") { alignWith { version { from "org.glassfish.jaxb:jaxb-core" From 92c01c7d7a4514d45221023c416af8aa08d78a9c Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:41 +0100 Subject: [PATCH 08/14] Prohibit upgrades to Jetty 12.1.9 Closes gh-50329 --- platform/spring-boot-dependencies/build.gradle | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 8b3618a8186..fba288683f4 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1051,6 +1051,10 @@ bom { contains ".alpha" because "we don't want alpha dependencies" } + prohibit { + versionRange "[12.1.9]" + because "it contains a regression (https://github.com/jetty/jetty.project/issues/15021)" + } group("org.eclipse.jetty.ee11") { bom("jetty-ee11-bom") } From aad49518e0aeb6d8efec5c8a5b957de2ffc0d50d Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:46 +0100 Subject: [PATCH 09/14] Upgrade to jOOQ 3.19.33 Closes gh-50330 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index fba288683f4..c4cf0fc794f 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1074,7 +1074,7 @@ bom { ] } } - library("jOOQ", "3.19.32") { + library("jOOQ", "3.19.33") { prohibit { versionRange "[3.20.0,)" because "it requires Java 21" From ec95ce41c03e66368a67a8e14e64e17507c425e3 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:51 +0100 Subject: [PATCH 10/14] Upgrade to Netty 4.2.13.Final Closes gh-50331 --- platform/spring-boot-dependencies/build.gradle | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index c4cf0fc794f..129154245ea 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -437,10 +437,6 @@ bom { } } library("Glassfish JAXB", "4.0.8") { - prohibit { - versionRange "[4.0.7]" - because "it contains a regression (https://github.com/spring-projects/spring-boot/issues/49607#issuecomment-4072451614)" - } alignWith { dependencyManagementDeclaredIn("org.glassfish.jaxb:jaxb-bom") { excluding { candidate -> candidate.classifier().equals("sources") } @@ -1701,7 +1697,7 @@ bom { releaseNotes("https://github.com/neo4j/neo4j-java-driver/releases/tag/{version}") } } - library("Netty", "4.2.12.Final") { + library("Netty", "4.2.13.Final") { prohibit { contains ".Alpha" contains ".Beta" From b2667e1804b30d84a57d9aea0ea786f004b261b7 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:40:55 +0100 Subject: [PATCH 11/14] Upgrade to Postgresql 42.7.11 Closes gh-50332 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 129154245ea..20f4cd41d5c 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1788,7 +1788,7 @@ bom { javadoc("https://javadoc.io/doc/org.messaginghub/pooled-jms/{version}", "org.messaginghub.pooled.jms") } } - library("Postgresql", "42.7.10") { + library("Postgresql", "42.7.11") { group("org.postgresql") { modules = [ "postgresql" From 15227569525d53c54a8f9b206b00b8d4267432f7 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:41:00 +0100 Subject: [PATCH 12/14] Upgrade to R2DBC MySQL 1.4.2 Closes gh-50333 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 20f4cd41d5c..5e8c19190d8 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1885,7 +1885,7 @@ bom { releaseNotes("https://github.com/r2dbc/r2dbc-mssql/releases/tag/v{version}") } } - library("R2DBC MySQL", "1.4.1") { + library("R2DBC MySQL", "1.4.2") { group("io.asyncer") { modules = [ "r2dbc-mysql" From 2b18a3403ef37860fb6862ceaa85b4414c9b16ef Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:41:05 +0100 Subject: [PATCH 13/14] Upgrade to SAAJ Impl 3.0.5 Closes gh-50334 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 5e8c19190d8..9dbfcd9e0aa 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2324,7 +2324,7 @@ bom { .formatted(version.major(), version.minor())) } } - library("SAAJ Impl", "3.0.4") { + library("SAAJ Impl", "3.0.5") { group("com.sun.xml.messaging.saaj") { modules = [ "saaj-impl" From 7cfd94a2b0418d989e107a03b75471ce838d86a4 Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Thu, 7 May 2026 10:41:10 +0100 Subject: [PATCH 14/14] Upgrade to Tomcat 11.0.22 Closes gh-50335 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index caf25a306d4..5e1fae0f03c 100644 --- a/gradle.properties +++ b/gradle.properties @@ -23,6 +23,6 @@ nullabilityPluginVersion=0.0.11 snakeYamlVersion=2.5 springFrameworkVersion=7.0.7 springFramework60xVersion=6.0.23 -tomcatVersion=11.0.21 +tomcatVersion=11.0.22 kotlin.stdlib.default.dependency=false