Skip to content

fix(deps): update all minor dependencies#285

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

fix(deps): update all minor dependencies#285
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Feb 21, 2026 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Confidence
eclipse-temurin final patch 25.0.1_8-jre → 25.0.2_10-jre age confidence
org.sonarsource.scanner.maven:sonar-maven-plugin (source) build minor 5.5.0.6356 → 5.6.0.6792 age confidence
org.apache.maven.plugins:maven-resources-plugin (source) build minor 3.4.0 → 3.5.0 age confidence
org.apache.maven.plugins:maven-surefire-plugin (source) build patch 3.5.4 → 3.5.5 age confidence
org.apache.maven.plugins:maven-compiler-plugin (source) build minor 3.14.0 → 3.15.0 age confidence
org.apache.logging.log4j:log4j-slf4j2-impl (source) test patch 2.25.3 → 2.25.4 age confidence
org.springdoc:springdoc-openapi-starter-webmvc-ui (source) compile patch 3.0.1 → 3.0.3 age confidence
com.sun.xml.bind:jaxb-core (source) compile patch 4.0.6 → 4.0.7 age confidence
org.springframework.boot:spring-boot-starter-parent (source) parent patch 4.0.3 → 4.0.5 age confidence

Release Notes

SonarSource/sonar-scanner-maven (org.sonarsource.scanner.maven:sonar-maven-plugin)

v5.6.0.6792

Compare Source

Release notes - Sonar Scanner for Maven - 5.6

Maintenance

SCANMAVEN-318 Update Orchestrator and fix e2e matrix
SCANMAVEN-324 Convert e2e tests to invoker
SCANMAVEN-346 Fix CI failure
SCANMAVEN-347 Automate detection of sonar:sonar shorthand failure
SCANMAVEN-348 Bump org.assertj:assertj-core from 3.26.3 to 3.27.7 in /sonar-maven-plugin
SCANMAVEN-349 Remove Maven 4 e2e tests from promotion requirements
SCANMAVEN-356 Add automated release workflow
SCANMAVEN-357 Licence packaging standard - Maven Scanner
SCANMAVEN-358 Create SonarUpdateCenterRelease.yml
SCANMAVEN-361 Add issue-categories in automated release
SCANMAVEN-363 Fix e2e tests with Maven 4
SCANMAVEN-364 Do not run nightly builds on weekends
SCANMAVEN-365 Set up orchestrator cache
SCANMAVEN-366 Update sonar-scanner-java-library to 4.1.0.1619
SCANMAVEN-367 Update sonar-scanner-java-library to 4.1.1.1633
SCANMAVEN-369 Update parent pom to 87.0.0.3057

Feature

SCANMAVEN-281 Irrelevant encrypted properties are not filtered out in multi-module project with "sonar" in the name

springdoc/springdoc-openapi (org.springdoc:springdoc-openapi-starter-webmvc-ui)

v3.0.3

Compare Source

v3.0.2: springdoc-openapi v3.0.2 released!

Added
  • #​3229 – Add support for Spring Framework API Versioning with Functional Endpoints
  • #​3208 – Add springdoc.swagger-ui.document-title property
Changed
  • Upgrade Spring Boot to version 4.0.3
  • Upgrade swagger-core to version 2.2.43
  • Upgrade swagger-ui to version 5.32.0
  • Upgrade Scalar to version 0.5.55
Fixed
  • #​3232 – Gracefully handle springdoc endpoint paths during API version resolution
  • #​3230 – Scalar source URLs resolve to null/<groupName> on second request when using GroupedOpenApi
  • #​3226 – Propagate JsonView context when resolving Page<T> schema
  • #​3228 – springdoc-openapi-starter 3.x doesn't depend on org.springframework.boot:spring-boot-starter
  • #​3220 – Reachability metadata not compatible with GraalVM 25
  • #​3195 – Application won't compile when OpenApi and spring-boot-data-rest is present
  • #​3193 – OpenApi field in SpringDocConfigProperties does not comply with camel case naming conventions
  • #​3215 – Type annotation not considered when Kotlin is not present
  • #​3199 – Prevent duplicate _links in allOf child schemas
  • #​3198 – Property resolution for parameter default values
  • #​3206 – Upgrade swagger-core from version 2.2.41 to 2.2.42

Full Changelog: springdoc/springdoc-openapi@v3.0.1...v3.0.2

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

v4.0.5

Compare Source

🐞 Bug Fixes
  • Test starter for Spring Integration does not include Spring Integration test module #​49784
  • Some sliced tests that import TransactionAutoConfiguration do not import TransactionManagerCustomizationAutoConfiguration #​49782
  • WebSocket messaging's task executors are only auto-configured and stompWebSocketHandlerMapping is only forced to be eager when using Jackson #​49753
  • WebSocket app fails to start when Jackson is on the classpath but there's no JsonMapper bean #​49749
  • Metadata annotation processor ignores method-level @NestedConfigurationProperty when using constructor binding #​49738
  • Override of property in external 'application.properties' or 'application.yaml' is ignored #​49731
  • NativeImageResourceProvider does not find Flyway migration scripts in subdirectories #​49706
  • Add @ConditionalOnWebApplication to NettyReactiveWebServerAutoConfiguration #​49695
  • @GraphQlTest does not include @ControllerAdvice #​49672
📔 Documentation
  • Fix incorrect indefinite articles in Javadoc #​49727
  • Add some more Kotlin examples and trivial style fixes #​49714
  • Overhaul Spring Session documentation following modularization #​49704
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​Joowon-Seo, @​deejay1, @​dlwldnjs1009, @​kwondh5217, @​ljrmorgan, and @​quaff

v4.0.4

Compare Source

⚠️ Attention Required
  • OpenTelemetry's ZipkinSpanExporter has been deprecated and its support will be removed in Spring Boot 4.2. #​49453
  • Jackson 2 has been upgraded to 2.21.1 in response to the Jackson team ending support for Jackson 2.20.x. #​49389
  • Jackson has been upgraded to 3.1.0 in response to the Jackson team ending support for Jackson 3.0.x. #​49383
  • The default value for server.tomcat.max-part-count has been increased from 10 to 50. This aligns it with Tomcat's own default and the default in Spring Boot 3.x. #​49311
🐞 Bug Fixes
  • EndpointRequest request matcher for health groups is too complex #​49649
  • "/cloudfoundryapplication" web path is not limited to Actuator #​49646
  • Fix EndpointRequest.toLinks() when base-path is '/' #​49617
  • Docker fails when a 'tcp://' address ends with a slash (for example 'tcp://docker:2375/') #​49596
  • RSocket exposes duplicate endpoint for websocket setups #​49593
  • Failure analysis for a missing mail sender is misleading #​49582
  • SpringBootContextLoader mentions class that no longer exists in message for classes or locations assertion #​49535
  • Ordering of 'spring.config.import' is inconsistent when defined in environment or system properties #​49482
  • "spring.main.cloud-platform=none" does not disable cloud features #​49479
  • SSL support with Docker Compose does not work as documented #​49385
  • Auto-configuration overrides authorization server configuration applied by Customizer beans #​49367
  • Using @AutoConfigureWebTestClient prevents separate configuration of spring.test.webtestclient.timeout from taking effect #​49344
  • NoSuchMethodException when forcing the use of Log4J2LoggingSystem using org.springframework.boot.logging.LoggingSystem system property #​49343
  • RouterFunctions descriptions in Actuator do not support nesting #​49302
  • Maven plugin does not set '-parameters' option when processing AOT code #​49295
  • HTTP Service Interface Client doesn't work in a native image due to missing property binding #​49274
  • ErrorPageRegistrarBeanPostProcessor is not auto-configured in war deployments and the ErrorPageCustomizer is not applied #​49176
  • Missing starter for spring-boot-restdocs #​48289
📔 Documentation
  • Document support for Java 26 #​49604
  • List all supported colors when describing color-coded log output #​49562
  • Improve EndpointRequest matcher documentation #​49520
  • Clarify that running is the only supported input state when triggering a Quartz job through the Actuator endpoint #​49514
  • Document security considerations for forwarded headers in cloud deployments #​49507
  • Tutorial in the reference guide has outdated instructions #​49429
  • Document additional repositories required for shibboleth.net #​49392
  • Javadoc of JettyHttpClientBuilder refers to the wrong type #​49387
  • Example spring-devtools.properties file is shown in the wrong format #​49362
  • Clarify inferred relationships between OAuth 2 registrations and providers #​49327
  • Mention using org.springframework.boot.aot Gradle plugin directly for AOT processing with the JVM #​49321
  • Remove superfluous semi-colon from read timeout configuration example for HTTP service interface clients #​49306
  • Update CLI's INSTALL.txt to reflect Groovy no longer being bundled #​49298
  • JDK requirement for the CLI still refers to Java 8 #​49293
  • Java and Kotlin samples of an environment post processor are inconsistent #​49287
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​FBibonne, @​answndud, @​bbbbooo, @​chandanv89, @​giyeon95, @​itsmevichu, @​jayychoi, @​l2yujw, @​ngocnhan-tran1996, @​qnnn, @​quaff, and @​sbrannen

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Feb 21, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 9011a7f to cc41307 Compare February 21, 2026 12:45
@renovate renovate Bot changed the title fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v3.5.11 fix(deps): update all minor dependencies Feb 21, 2026
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from e84b08b to b37930b Compare March 5, 2026 10:15
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 0070162 to faa2ad2 Compare March 19, 2026 17:11
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from dc51624 to 967da6b Compare March 28, 2026 13:14
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 967da6b to 365d4d2 Compare April 12, 2026 00:44
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 365d4d2 to 883a1ab Compare April 20, 2026 13:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants