From eb85911d260c870158b03d02481b92610894db07 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:22:55 +0200 Subject: [PATCH 01/19] Upgrade to CycloneDX Maven Plugin 2.9.3 Closes gh-51178 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index ea85079eaf0..b2b24e80cb6 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -291,7 +291,7 @@ bom { ] } } - library("CycloneDX Maven Plugin", "2.9.2") { + library("CycloneDX Maven Plugin", "2.9.3") { group("org.cyclonedx") { plugins = [ "cyclonedx-maven-plugin" From ac3321d980223b8874f3549121b5c38cf5d21cd0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:23:01 +0200 Subject: [PATCH 02/19] Upgrade to Groovy 5.0.8 Closes gh-51179 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index b2b24e80cb6..c3ba004c48b 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -498,7 +498,7 @@ bom { releaseNotes("https://github.com/graphql-java/graphql-java/releases/tag/v{version}") } } - library("Groovy", "5.0.7") { + library("Groovy", "5.0.8") { prohibit { contains "-alpha-" because "we don't want alpha dependencies" From e126c48cc653d0a73f4ebf43b12c4dd47ceb1977 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:23:06 +0200 Subject: [PATCH 03/19] Upgrade to Hibernate 7.2.24.Final Closes gh-51180 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index c3ba004c48b..509df964960 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -563,7 +563,7 @@ bom { releaseNotes("https://github.com/hazelcast/hazelcast/releases/tag/v{version}") } } - library("Hibernate", "7.2.23.Final") { + library("Hibernate", "7.2.24.Final") { group("org.hibernate.orm") { modules = [ "hibernate-agroal", From 4bcca11678a8d9f6b284f02f778f39ebb40a65f6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:23:10 +0200 Subject: [PATCH 04/19] Upgrade to JSpecify 1.0.1 Closes gh-51181 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 509df964960..5643f7604d7 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1122,7 +1122,7 @@ bom { releaseNotes("https://github.com/skyscreamer/JSONassert/releases/tag/jsonassert-{version}") } } - library("JSpecify", "1.0.0") { + library("JSpecify", "1.0.1") { group("org.jspecify") { modules = [ "jspecify" From 0e80308a5398b3bd69b21f181e9efee2fa519b51 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:23:16 +0200 Subject: [PATCH 05/19] Upgrade to MariaDB 3.5.10 Closes gh-51182 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 5643f7604d7..2969fad8b55 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1323,7 +1323,7 @@ bom { javadoc("https://projectlombok.org/api") } } - library("MariaDB", "3.5.9") { + library("MariaDB", "3.5.10") { group("org.mariadb.jdbc") { modules = [ "mariadb-java-client" From 42416228f8eccbec0d8a2a29adf014b6d85642e5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:23:20 +0200 Subject: [PATCH 06/19] Upgrade to R2DBC MySQL 1.4.3 Closes gh-51183 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 2969fad8b55..3dafe6a199b 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1882,7 +1882,7 @@ bom { releaseNotes("https://github.com/r2dbc/r2dbc-mssql/releases/tag/v{version}") } } - library("R2DBC MySQL", "1.4.2") { + library("R2DBC MySQL", "1.4.3") { group("io.asyncer") { modules = [ "r2dbc-mysql" From 435604f8d8e8a0faa0da6bed2f67fd0f252dcc15 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:11 +0200 Subject: [PATCH 07/19] Upgrade to ActiveMQ 6.2.8 Closes gh-51184 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 1ca624954fe..7e379b194e9 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -31,7 +31,7 @@ bom { ] } } - library("ActiveMQ", "6.2.7") { + library("ActiveMQ", "6.2.8") { group("org.apache.activemq") { modules = [ "activemq-console", From 569bc8cd811e63ab1bdf924121809684a9e61be9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:18 +0200 Subject: [PATCH 08/19] Upgrade to CycloneDX Maven Plugin 2.9.3 Closes gh-51185 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 7e379b194e9..3d8d2b12766 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -337,7 +337,7 @@ bom { ] } } - library("CycloneDX Maven Plugin", "2.9.2") { + library("CycloneDX Maven Plugin", "2.9.3") { group("org.cyclonedx") { plugins = [ "cyclonedx-maven-plugin" From 66b7e8da9ba3d691626842f3652be27765df9dc9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:26 +0200 Subject: [PATCH 09/19] Upgrade to Groovy 5.0.8 Closes gh-51186 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 3d8d2b12766..a8ea2523e6a 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -546,7 +546,7 @@ bom { releaseNotes("https://github.com/graphql-java/graphql-java/releases/tag/v{version}") } } - library("Groovy", "5.0.7") { + library("Groovy", "5.0.8") { prohibit { contains "-alpha-" because "we don't want alpha dependencies" From 172c0559b402f7d069e280d3e126b1eda72be59f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:33 +0200 Subject: [PATCH 10/19] Upgrade to Hibernate Validator 9.1.3.Final Closes gh-51187 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index a8ea2523e6a..31ebd6a7504 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -673,7 +673,7 @@ bom { .formatted(version.major(), version.minor())) } } - library("Hibernate Validator", "9.1.2.Final") { + library("Hibernate Validator", "9.1.3.Final") { group("org.hibernate.validator") { modules = [ "hibernate-validator", From ae96f82c647406a1e522b84d96bce0b998623d97 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:39 +0200 Subject: [PATCH 11/19] Upgrade to HttpClient5 5.6.3 Closes gh-51188 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 31ebd6a7504..cf222ef945d 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -727,7 +727,7 @@ bom { ] } } - library("HttpClient5", "5.6.2") { + library("HttpClient5", "5.6.3") { prohibit { contains "-alpha" contains "-beta" From bca7334ad9d5e9a3a28d5fee28bfe0b2bea5b556 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:45 +0200 Subject: [PATCH 12/19] Upgrade to JSpecify 1.0.1 Closes gh-51189 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index cf222ef945d..7331823a4a9 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1197,7 +1197,7 @@ bom { releaseNotes("https://github.com/skyscreamer/JSONassert/releases/tag/jsonassert-{version}") } } - library("JSpecify", "1.0.0") { + library("JSpecify", "1.0.1") { group("org.jspecify") { modules = [ "jspecify" From 533ac9168e0a6738311c9c73765c949dbb738153 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:50 +0200 Subject: [PATCH 13/19] Upgrade to MariaDB 3.5.10 Closes gh-51190 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 7331823a4a9..efd7505afe9 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1398,7 +1398,7 @@ bom { javadoc("https://projectlombok.org/api") } } - library("MariaDB", "3.5.9") { + library("MariaDB", "3.5.10") { group("org.mariadb.jdbc") { modules = [ "mariadb-java-client" From 4cae8fa66f5fe75d62ae69f2273ba4eb1ed11957 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:29:55 +0200 Subject: [PATCH 14/19] Upgrade to Maven Jar Plugin 3.5.1 Closes gh-51191 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index efd7505afe9..3ed78c019e4 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1533,7 +1533,7 @@ bom { releaseNotes("https://github.com/apache/maven-invoker-plugin/releases/tag/maven-invoker-plugin-{version}") } } - library("Maven Jar Plugin", "3.5.0") { + library("Maven Jar Plugin", "3.5.1") { prohibit { contains "-beta-" because "we don't want betas" From 74098b3670a9740778f2a31233c1ab6c501e581f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:30:01 +0200 Subject: [PATCH 15/19] Upgrade to Native Build Tools Plugin 1.1.6 Closes gh-51192 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index 06222da173f..f187bce843d 100644 --- a/gradle.properties +++ b/gradle.properties @@ -18,7 +18,7 @@ junitJupiterVersion=6.0.3 kotlinVersion=2.3.21 mavenVersion=3.9.13 mockitoVersion=5.23.0 -nativeBuildToolsVersion=1.1.5 +nativeBuildToolsVersion=1.1.6 nullabilityPluginVersion=0.0.14 snakeYamlVersion=2.6 springGrpcVersion=1.1.0 From cd659e3b14e505c052b79ab320032da1738a11ab Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:30:06 +0200 Subject: [PATCH 16/19] Upgrade to Oracle Database 23.26.3.0.0 Closes gh-51193 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 3ed78c019e4..97eaea3bedc 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1793,7 +1793,7 @@ bom { releaseNotes("https://github.com/open-telemetry/opentelemetry-java/releases/tag/v{version}") } } - library("Oracle Database", "23.26.2.0.0") { + library("Oracle Database", "23.26.3.0.0") { alignWith { dependencyManagementDeclaredIn("com.oracle.database.jdbc:ojdbc-bom") } From 0499051b4680814ea53aff275408bbb4f49cf6b1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:30:12 +0200 Subject: [PATCH 17/19] Upgrade to R2DBC MySQL 1.4.3 Closes gh-51194 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index 97eaea3bedc..cf9931eabe1 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1998,7 +1998,7 @@ bom { releaseNotes("https://github.com/r2dbc/r2dbc-mssql/releases/tag/v{version}") } } - library("R2DBC MySQL", "1.4.2") { + library("R2DBC MySQL", "1.4.3") { group("io.asyncer") { modules = [ "r2dbc-mysql" From bad2873459483bb1d3d105612d1e489922acfcc1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:30:17 +0200 Subject: [PATCH 18/19] Upgrade to SQLite JDBC 3.53.2.1 Closes gh-51195 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index cf9931eabe1..dfcbbd52d46 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -2764,7 +2764,7 @@ bom { releaseNotes("https://github.com/spring-projects/spring-ws/releases/tag/v{version}") } } - library("SQLite JDBC", "3.53.2.0") { + library("SQLite JDBC", "3.53.2.1") { group("org.xerial") { modules = [ "sqlite-jdbc" From b1250f1ff11bdebff1b3b1e83b335813f13dafd3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Nicoll?= Date: Mon, 3 Aug 2026 10:52:43 +0200 Subject: [PATCH 19/19] Upgrade to Pooled JMS 3.2.3 Closes gh-51196 --- platform/spring-boot-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/platform/spring-boot-dependencies/build.gradle b/platform/spring-boot-dependencies/build.gradle index dfcbbd52d46..3313e06c5c3 100644 --- a/platform/spring-boot-dependencies/build.gradle +++ b/platform/spring-boot-dependencies/build.gradle @@ -1855,7 +1855,7 @@ bom { releaseNotes("https://github.com/ascopes/protobuf-maven-plugin/releases/tag/v{version}") } } - library("Pooled JMS", "3.2.2") { + library("Pooled JMS", "3.2.3") { group("org.messaginghub") { modules = [ "pooled-jms"