fix(deps): update java dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
io.netty:netty-bom (source)	4.1.129.Final → 4.2.9.Final
io.projectreactor.netty:reactor-netty-http	1.2.11 → 1.3.2
org.jooq:jooq-bom (source)	3.20.10 → 3.20.11
com.oracle.database.jdbc:ojdbc11 (source)	23.26.0.0.0 → 23.26.1.0.0
ch.qos.logback:logback-classic (source, changelog)	1.5.26 → 1.5.27
ch.qos.logback:logback-core (source, changelog)	1.5.26 → 1.5.27
org.springframework.boot:spring-boot-starter-parent (source)	3.5.9 → 3.5.10

---

Release Notes

reactor/reactor-netty (io.projectreactor.netty:reactor-netty-http)

v1.3.2

Reactor Netty 1.3.2 is part of 2025.0.2 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.8.2 by @​chemicL in afef745, see release notes
• Depend on Netty v4.2.9.Final by @​violetagg in #​4037
• Enable auto-read in HTTP client error and completion paths by @​violetagg in #​4029
• Add ConnectionProvider#evictInBackground overload with Scheduler parameter by @​eze210 in #​4038
• Add maxConnections configuration to HttpServer by @​raccoonback in #​4030
• Convert ByteBuf directly to Http2DataFrame instead of wrapping in DefaultHttpContent by @​violetagg in #​4045

🐞 Bug fixes

• Fix HTTP protocol version logging for HTTP/2 and HTTP/3 by @​violetagg in #​4031

New Contributors

• @​eze210 made their first contribution in #​4039

Full Changelog: reactor/reactor-netty@v1.3.1...v1.3.2

v1.3.1

Reactor Netty 1.3.1 is part of 2025.0.1 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.8.1 by @​violetagg in 2c05ba7, see release notes
• Support HTTP Authentication in HttpClient by @​raccoonback in #​3813 and by @​violetagg in 4c2071f, #​4025, #​4028

🐞 Bug fixes

• HTTP/3: Fix NullPointerException when configuring HttpClient#responseTimeout by @​violetagg in #​3999
• Fix Http3.isHttp3Available() to check for native QUIC library by @​violetagg in #​4013
• Enable lazy initialisation of proxy providers with configuration coming from system properties by @​violetagg in #​4015

📖 Documentation

• Update HttpServer#compressOptions javadoc by @​violetagg in #​4004
• Improve documentation clarity for HttpClient#followRedirect methods by @​violetagg in #​4021

Full Changelog: reactor/reactor-netty@v1.3.0...v1.3.1

v1.3.0

Reactor Netty 1.3.0 is part of 2025.0.0 Release Train.

1.3.0 Highlights

🎯 Major Upgrades

Netty 4.2

Built on the latest Netty 4.2, bringing the latest networking capabilities and performance improvements.

🎓 Graduated Features

HTTP/3 support

Reactor Netty HTTP/3 support is now production-ready.

QUIC support

Reactor Netty QUIC support is now production-ready.

IO_Uring support

Reactor Netty IO_Uring support is now production-ready.

• Reactor Netty default transport (Linux): Epoll (included out-of-the-box)
• Reactor Netty IO_Uring support: Available via explicit dependency: io.netty:netty-transport-native-io_uring
• Requirements: JDK 11+

🔍 Enhanced Null Safety using JSpecify

Migrated to JSpecify annotations for nullability constraints.

For detailed information and code examples, visit our documentation.

What's Changed

⚠️ Update considerations and deprecations

• Ensure POST empty body sending content-length 0 by @​violetagg in #​3663
• Ensure HttpClient does not add Content-Length header when GET/HEAD/DELETE and the send Publisher does not provide content by @​violetagg in #​3664

✨ New features and improvements

• Depend on Reactor Core v3.8.0 by @​violetagg in 586257f, see release notes
• Depend on Netty v4.2.7.Final by @​violetagg in #​3971
  • Adapt to SocketProtocolFamily by @​violetagg in #​3766
  • Adapt to IoEventLoopGroup by @​violetagg in #​3767
  • Graduate reactor-netty-incubator-quic to reactor-netty-quic by @​violetagg in #​3768
  • IO_Uring is now part of Netty by @​violetagg in #​3705 and by @​j-bahr in #​3974
  • Reactor Netty HTTP/3 support is no more in incubation by @​violetagg in #​3851, #​3996
• Depend on Micrometer v1.16.0 by @​violetagg in #​3997
• Depend on Micrometer Tracing v1.6.0 by @​violetagg in #​3997
• Depend on Context Propagation v1.2.0 by @​violetagg in #​3997
• Depend on Brave v6.3.0 by @​dependabot in #​3786
• Migrate to JSpecify annotations for nullability constraints by @​violetagg in #​3630, #​3640, #​3641, #​3642, #​3644, #​3645, #​3647, #​3665, #​3694, #​3707, #​3708, #​3709, #​3933, #​3934, #​3995, 8b148ce, ee5ac40
• Add HttpMeterRegistrarAdapter to track active streams in HTTP/2 and HTTP/3 by @​raccoonback in #​3632
• Move log statement to the correct place by @​violetagg in #​3674
• Add API for determining the resolved addresses to which this client should connect by @​violetagg in #​3687
• Support websocket over HTTP/2 by @​violetagg in #​3691 and #​3715
• Enable set up TcpResources default max connection by setting by @​lcamhoa in #​3712
• Make AccessLog class not final by @​dmitrysulman in #​3726
• Add request and response header iterators to AccessLogArgProvider by @​dmitrysulman in #​3735
• Support error log handler for Http server by @​raccoonback in #​3700 and by @​violetagg in 4ed2380 and #​3750
• Remove unused method parameter by @​violetagg in #​3751
• Remove the usage of deprecated functionality by @​violetagg in #​3792
• Use the new Netty HTTP/2 setting SETTINGS_ENABLE_CONNECT_PROTOCOL by @​violetagg in #​3794
• Remove the usage of deprecated functionality by @​violetagg in #​3819
• Improve protocol validation in Forwarded/X-Forwarded-Proto header parsing by @​violetagg in #​3823 and #​3824
• Remove trailer header pre-declaration requirement by @​violetagg in #​3825
• Support Proxy-Authorization renewal by @​violetagg in #​3925
• Add API for configuring maximum number RST frames that are allowed per window by @​violetagg in #​3931
• Preserve exception cause in ChannelBindException by @​violetagg in #​3976
• Add HTTP/2 PING-based connection health checks by @​violetagg in #​3980
• Allow setting .pendingAcquireMaxCount() to zero in ConnectionProvider by @​Martin7-1 in #​3987

🐞 Bug fixes

• Fix various issues with Nullable annotation by @​violetagg in #​3626, #​3628, #​3629, #​3646
• Fix NullPointerException in Http2SettingsSpec#hashCode by @​violetagg in #​3639
• Fix Http2ConnectionProvider#logStreamsState to log active/max streams per connection and per all connections by @​violetagg in #​3650
• Ensure the HTTP/2 stream is closed when an error happens before send operation by @​violetagg in #​3675
• Ensure the HTTP/3 stream is closed when an error happens before send operation by @​violetagg in #​3677
• Ensure the connection is invalidated when an error happens before h2c upgrade operation by @​violetagg in #​3678
• Ensure HttpInfos#version returns the correct protocol when Unix Domain Sockets by @​violetagg in #​3693
• Ensure reactor.netty.http.server.connections.active is updated when there is no HttpServerOperations by @​violetagg in #​3725
• Ensure the default compression configuration is taken from Netty by @​violetagg in #​3743
• Ensure the exception is propagated in case of delayed address resolution by @​violetagg in #​3744
• Release the partial HttpData only if it is not released by Netty by @​violetagg in #​3749
• Connection pools with/without resolvedAddressesSelector are different pools by @​violetagg in #​3753
• Remove extra write invocation when Expect: 100-continue by @​violetagg in #​3755
• Ensure the connection is invalidated when a connection close happens before HTTP/1.1 to HTTP/2 upgrade operation by @​violetagg in #​3806
• When HTTP/2 apply always the trailer headers by @​violetagg in #​3808
• Trailers must not include pseudo-header fields by @​violetagg in #​3810
• Add the HTTP/2 connection to the channel group for a proper graceful shutdown in case no active streams by @​violetagg in #​3827
• Add proper initialisation of maxConcurrentStreams when successful HTTP/1.1 to HTTP/2 upgrade by @​violetagg in #​3832
• Ensure the HTTP/2 upgrade stream inherits the proper state from the original HTTP/1.1 connection when successful upgrade from HTTP/1.1 to HTTP/2 by @​violetagg in #​3838
• When HTTP/2, ensure the trailer headers are provided in case full response is received by @​violetagg in #​3847
• Ensure HttpClientResponse#trailerHeaders always completes by @​violetagg in #​3848
• Fix message for handlerConfigurator by @​klopfdreh in #​3861
• Ensure both resolved and unresolved server bind addresses are used with ConnectionProvider#disposeWhen by @​violetagg in #​3881
• Ensure 100-Continue is handled when collecting client's metrics by @​violetagg in #​3895
• Ensure cookie validation errors are propagated by @​violetagg in #​3898
• Ensure ResponseTimeoutHandler is added as one of the first handlers in the pipeline by @​violetagg in #​3916
• Add missing check for null by @​violetagg in #​3932
• Do not try to send the file when Content-Length:0 by @​violetagg in #​3936
• Ensure the HTTP/2 upgrade stream inherits the proper state from the original HTTP/1.1 connection when successful upgrade from HTTP/1.1 to HTTP/2 by @​violetagg in #​3957
• Fix HttpClientConfig copying issue in MonoHttpConnect by @​violetagg in #​3964

📖 Documentation

• Add reactor-netty-quic reference documentation by @​violetagg in #​3775
• Add QUIC example by @​violetagg in #​3782
• Document the required HTTP/2 initial setting when websocket over HTTP/2 on the server by @​violetagg in #​3783

New Contributors

• @​lcamhoa made their first contribution in #​3712
• @​dmitrysulman made their first contribution in #​3726
• @​jkonicki made their first contribution in #​3829 and #​3830
• @​klopfdreh made their first contribution in #​3861
• @​Martin7-1 made their first contribution in #​3987

Full Changelog from M1 version to GA version: reactor/reactor-netty@v1.2.3...v1.3.0

v1.2.15

Reactor Netty 1.2.15 is part of 2024.0.15 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.16 by @​violetagg in 5aa16ed, see release notes
• Depend on Netty v4.1.131.Final by @​violetagg in #​4092

🐞 Bug fixes

• Fix race condition in pending acquire timer management by @​violetagg in #​4073

Full Changelog: reactor/reactor-netty@v1.2.14...v1.2.15

v1.2.14

Reactor Netty 1.2.14 is part of 2024.0.14 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.15 by @​chemicL in f95f565, see release notes
• Depend on Netty v4.1.130.Final by @​violetagg in #​4032
• Enable auto-read in HTTP client error and completion paths by @​violetagg in #​4029

🐞 Bug fixes

• Fix HTTP protocol version logging for HTTP/2 and HTTP/3 by @​violetagg in #​4031

Full Changelog: reactor/reactor-netty@v1.2.13...v1.2.14

v1.2.13

Reactor Netty 1.2.13 is part of 2024.0.13 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.14 by @​violetagg in bc2fb49, see release notes

🐞 Bug fixes

• HTTP/3: Fix NullPointerException when configuring HttpClient#responseTimeout by @​violetagg in #​3999
• Enable lazy initialisation of proxy providers with configuration coming from system properties by @​violetagg in #​4015

📖 Documentation

• Update HttpServer#compressOptions javadoc by @​violetagg in #​4004

Full Changelog: reactor/reactor-netty@v1.2.12...v1.2.13

v1.2.12

Reactor Netty 1.2.12 is part of 2024.0.12 Release Train.

What's Changed

✨ New features and improvements

• Depend on Reactor Core v3.7.13 by @​chemicL in e96e94a, see release notes
• Depend on Netty v4.1.128.Final by @​violetagg in #​3970
• Preserve exception cause in ChannelBindException by @​violetagg in #​3976
• Add HTTP/2 PING-based connection health checks by @​violetagg in #​3980
• Allow setting .pendingAcquireMaxCount() to zero in ConnectionProvider by @​Martin7-1 in #​3987

New Contributors

• @​Martin7-1 made their first contribution in #​3987

Full Changelog: reactor/reactor-netty@v1.2.11...v1.2.12

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

v3.5.10

🐞 Bug Fixes

• Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #​48836
• When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #​48835
• Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #​48810
• DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #​48702
• Application JAR created by extract command is not reproductible #​48664
• AOT processing of tests should not be disabled when 'skipTests' is set #​48661
• Fix zero-length byte buffer in InspectedContent #​48649

📔 Documentation

• Update documentation for Buildpack's AOT Cache support #​48768
• Document support for configuring arguments passed to Docker Compose #​48657
• Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #​48634
• Fix grammar and typos in the reference guide #​48596

🔨 Dependency Upgrades

• Upgrade to Classmate 1.7.3 #​48775
• Upgrade to Hibernate 6.6.41.Final #​48881
• Upgrade to HttpClient5 5.5.2 #​48777
• Upgrade to Logback 1.5.25 #​48882
• Upgrade to Micrometer 1.15.8 #​48705
• Upgrade to Micrometer Tracing 1.5.8 #​48706
• Upgrade to Pooled JMS 3.1.9 #​48779
• Upgrade to Postgresql 42.7.9 #​48883
• Upgrade to R2DBC MSSQL 1.0.4.RELEASE #​48847
• Upgrade to Reactor Bom 2024.0.14 #​48707
• Upgrade to REST Assured 5.5.7 #​48884
• Upgrade to Spring AMQP 3.2.9 #​48909
• Upgrade to Spring Data Bom 2025.0.8 #​48708
• Upgrade to Spring Integration 6.5.6 #​48921
• Upgrade to Spring Kafka 3.3.12 #​48709
• Upgrade to Spring Pulsar 1.2.14 #​48710
• Upgrade to Undertow 2.3.22.Final #​48848
• Upgrade to WebJars Locator Lite 1.1.3 #​48780

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GaoSSR, @​izeye, and @​ngocnhan-tran1996

---

Configuration

📅 Schedule: Branch creation - "before 6am every weekday" in timezone America/Vancouver, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Thanks for the PR!

Any successful deployments (not always required) will be available below.
API available

Once merged, code will be promoted and handed off to following workflow run.
Main Merge Workflow

[github-actions]

Overall Project	98.69%	🍏

There is no coverage information present for the Files changed

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[github-actions]

Overall Project	98.69%	🍏

There is no coverage information present for the Files changed

[github-actions]

Your Pull Request code is being promoted! Please follow the link below.
Main Merge Workflow