From c9ff15890fb43d682b6e7a714178a1d641d3762d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:57:57 +0200 Subject: [PATCH 01/14] Upgrade to Groovy 4.0.31 Closes gh-49905 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 1d48e95ccf9..47bf56fc695 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -500,7 +500,7 @@ bom { releaseNotes("https://github.com/graphql-java/graphql-java/releases/tag/v{version}") } } - library("Groovy", "4.0.30") { + library("Groovy", "4.0.31") { prohibit { contains "-alpha-" because "we don't want alpha dependencies" From 1dfc72dda9f2c88499fcd2b1748eacd9a69ea274 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:01 +0200 Subject: [PATCH 02/14] Upgrade to Hibernate 6.6.47.Final Closes gh-49906 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 47bf56fc695..9bb579172f8 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -561,7 +561,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "6.6.45.Final") { + library("Hibernate", "6.6.47.Final") { prohibit { versionRange "[7.0.0.Alpha1,)" because "it exceeds our Jakarta EE 10 baseline" From b594a0d033f9832d7540e6e4ca6f86f7167cd766 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:05 +0200 Subject: [PATCH 03/14] Upgrade to Jaybird 6.0.5 Closes gh-49907 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 9bb579172f8..8e535d6b763 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1002,7 +1002,7 @@ bom { releaseNotes("https://github.com/jaxen-xpath/jaxen/releases/tag/v{version}") } } - library("Jaybird", "6.0.4") { + library("Jaybird", "6.0.5") { prohibit { endsWith ".java8" because "we use the .java11 version" From 4fd4ed03ce8ee82cc721758cb46944550b6f042a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:09 +0200 Subject: [PATCH 04/14] Upgrade to Jetty 12.0.34 Closes gh-49908 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index 8e535d6b763..ac7e6afc870 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1076,7 +1076,7 @@ bom { ] } } - library("Jetty", "12.0.33") { + library("Jetty", "12.0.34") { prohibit { contains ".alpha" because "we don't want alpha dependencies" From 786ca272b2b21ae8cf03f5eab00e96104ce9993a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:13 +0200 Subject: [PATCH 05/14] Upgrade to MariaDB 3.5.8 Closes gh-49909 --- spring-boot-project/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index ac7e6afc870..4d82ec0a308 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -1376,7 +1376,7 @@ bom { javadoc("https://projectlombok.org/api") } } - library("MariaDB", "3.5.7") { + library("MariaDB", "3.5.8") { group("org.mariadb.jdbc") { modules = [ "mariadb-java-client" From ca054c05a9d5981afc257ed6d23eb97c7d3de295 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:17 +0200 Subject: [PATCH 06/14] Upgrade to Tomcat 10.1.54 Closes gh-49910 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 59312c8cf3a..f34ef19aac3 100644 --- a/gradle.properties +++ b/gradle.properties @@ -21,6 +21,6 @@ nativeBuildToolsVersion=0.10.6 snakeYamlVersion=2.4 springFrameworkVersion=6.2.17 springFramework60xVersion=6.0.23 -tomcatVersion=10.1.53 +tomcatVersion=10.1.54 kotlin.stdlib.default.dependency=false From ef1a5ef49e293eb56dcde8f8419e03dd01b1ecea Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:22 +0200 Subject: [PATCH 07/14] Upgrade to Groovy 5.0.5 Closes gh-49911 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 245e48cfc89..40d89c0f1fe 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -502,7 +502,7 @@ bom { releaseNotes("https://github.com/graphql-java/graphql-java/releases/tag/v{version}") } } - library("Groovy", "5.0.4") { + library("Groovy", "5.0.5") { prohibit { contains "-alpha-" because "we don't want alpha dependencies" From f47af1d567373b632f49ebbe37777a0450b8c733 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:26 +0200 Subject: [PATCH 08/14] Upgrade to Hibernate 7.2.10.Final Closes gh-49912 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 40d89c0f1fe..eb150a52454 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -567,7 +567,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "7.2.7.Final") { + library("Hibernate", "7.2.10.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From e9f2c2d4f73e436316bdb72c0f4517aaa6fef335 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:30 +0200 Subject: [PATCH 09/14] Upgrade to Jackson Bom 3.1.1 Closes gh-49913 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 67d200083c7..d88214ec3e1 100644 --- a/gradle.properties +++ b/gradle.properties @@ -12,7 +12,7 @@ commonsCodecVersion=1.19.0 graalVersion=25 hamcrestVersion=3.0 jackson2Version=2.21.2 -jacksonVersion=3.1.0 +jacksonVersion=3.1.1 javaFormatVersion=0.0.47 junitJupiterVersion=6.0.3 kotlinVersion=2.2.21 From 96827de561b4c1a82e671a72f3880e706c2466f8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:34 +0200 Subject: [PATCH 10/14] Upgrade to Jaybird 6.0.5 Closes gh-49914 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index eb150a52454..db9b3381ab2 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -976,7 +976,7 @@ bom { releaseNotes("https://github.com/jaxen-xpath/jaxen/releases/tag/v{version}") } } - library("Jaybird", "6.0.4") { + library("Jaybird", "6.0.5") { prohibit { endsWith ".java8" because "we use the .java11 version" From 53fe2f1bbe21f2f0791dce6e634c2df2b9ee96f7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:38 +0200 Subject: [PATCH 11/14] Upgrade to Jetty 12.1.8 Closes gh-49915 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index db9b3381ab2..69834e7f863 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1046,7 +1046,7 @@ bom { ] } } - library("Jetty", "12.1.7") { + library("Jetty", "12.1.8") { prohibit { contains ".alpha" because "we don't want alpha dependencies" From 56646b6a5ce83b65270a17c87ddddf1e78773c77 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:42 +0200 Subject: [PATCH 12/14] Upgrade to Log4j2 2.25.4 Closes gh-49916 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 69834e7f863..9e9e37cb55d 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1287,7 +1287,7 @@ bom { releaseNotes("https://github.com/liquibase/liquibase/releases/tag/v{version}") } } - library("Log4j2", "2.25.3") { + library("Log4j2", "2.25.4") { prohibit { contains "-alpha" contains "-beta" From 394a070a3021e94b73012362e4cd8ac2074d24d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:46 +0200 Subject: [PATCH 13/14] Upgrade to MariaDB 3.5.8 Closes gh-49917 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 9e9e37cb55d..81b41457f96 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1327,7 +1327,7 @@ bom { javadoc("https://projectlombok.org/api") } } - library("MariaDB", "3.5.7") { + library("MariaDB", "3.5.8") { group("org.mariadb.jdbc") { modules = [ "mariadb-java-client" From 0a392794d511b06f0bf63fc16c755ba82a2a1845 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Tue, 7 Apr 2026 06:58:50 +0200 Subject: [PATCH 14/14] Upgrade to Tomcat 11.0.21 Closes gh-49918 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index d88214ec3e1..789dfb18603 100644 --- a/gradle.properties +++ b/gradle.properties @@ -23,6 +23,6 @@ nullabilityPluginVersion=0.0.11 snakeYamlVersion=2.5 springFrameworkVersion=7.0.6 springFramework60xVersion=6.0.23 -tomcatVersion=11.0.20 +tomcatVersion=11.0.21 kotlin.stdlib.default.dependency=false