Skip to content

fix(deps): update java dependencies #1992

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
renovate wants to merge 1 commit into from
Closed

fix(deps): update java dependencies #1992

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 9, 2026 •
edited by github-actions bot
Loading

This PR contains the following updates:

Package Change Age Confidence
org.springframework:spring-web 6.2.14 → 6.2.15 age confidence
org.postgresql:postgresql (source) 42.7.8 → 42.7.9 age confidence
org.jooq:jooq-bom (source) 3.20.10 → 3.20.11 age confidence
org.mockito:mockito-bom 5.20.0 → 5.21.0 age confidence
org.junit:junit-bom (source) 6.0.1 → 6.0.2 age confidence
org.junit.jupiter:junit-jupiter-params (source) 6.0.1 → 6.0.2 age confidence
org.seleniumhq.selenium:selenium-bom (source) 4.39.0 → 4.40.0 age confidence
io.opentelemetry:opentelemetry-exporter-zipkin 1.57.0 → 1.58.0 age confidence
org.flywaydb:flyway-database-postgresql (source) 11.11.1 → 11.20.3 age confidence
org.flywaydb:flyway-core (source) 11.11.1 → 11.20.3 age confidence
io.micrometer:micrometer-tracing-bom 1.6.1 → 1.6.2 age confidence
io.micrometer:micrometer-bom 1.16.1 → 1.16.2 age confidence
com.nimbusds:nimbus-jose-jwt 10.6 → 10.7 age confidence
ch.qos.logback:logback-classic (source, changelog) 1.5.26 → 1.5.27 age confidence
ch.qos.logback:logback-core (source, changelog) 1.5.26 → 1.5.27 age confidence
org.testcontainers:testcontainers-bom (source) 1.21.3 → 1.21.4 age confidence
org.testcontainers:postgresql (source) 1.21.3 → 1.21.4 age confidence
org.testcontainers:r2dbc (source) 1.21.3 → 1.21.4 age confidence
org.testcontainers:junit-jupiter (source) 1.21.3 → 1.21.4 age confidence
org.testcontainers:testcontainers (source) 1.21.3 → 1.21.4 age confidence
com.oracle.database.jdbc:ojdbc11 (source) 23.26.0.0.0 → 23.26.1.0.0 age confidence
org.flywaydb:flyway-database-oracle (source) 11.11.1 → 11.20.3 age confidence
org.springframework.boot:spring-boot-starter-parent (source) 3.5.8 → 3.5.10 age confidence

Release Notes

spring-projects/spring-framework (org.springframework:spring-web)

v6.2.15

⭐ New Features

  • Avoid package cycle caused by use of UriComponentsBuilder in ServletServerHttpRequest #​35954
  • DefaultHandshakeHandler should not log client faults on error level #​35948
  • Use concurrent set behind reactive TransactionSynchronizationManager#registerSynchronization #​35922
  • Expose Collection on FragmentsRendering to facilitate Unit Tests #​35912
  • Different ReactorNettyWebSocketSession call getId() may return the same value #​35911
  • Enhance handleTypeMismatch error message in ResponseEntityExceptionHandler #​35878

🐞 Bug Fixes

  • NullPointerException thrown from JdkClientHttpRequestFactory for null request header value #​35998
  • State inconsistency in LazyConnectionDataSourceProxy when connection settings fail #​35981
  • SubscriberInputStream#resume misuses parked thread reference #​35979
  • PathMatchingResourcePatternResolver fails with URI in JAR manifest Class-Path entries #​35967
  • Strong locking in ConcurrentReferenceHashMap#computeIfAbsent may cause context initialisation deadlock #​35945
  • BridgeMethodResolver change in 6.2.13 breaks Spring Data entity introspection #​35941
  • DefaultMessageListenerContainer does not clear Session and MessageConsumer for paused invokers #​35935
  • Tighten cacheable decision behind @Lazy injection point #​35918
  • Use provided ReactiveAdapterRegistry in BindingContext constructor #​35914
  • Accidental fallback match for Collection-type beans due to @Bean-level qualifier annotation #​35909
  • SortedResourcesFactoryBean does not accept non-existent resources anymore #​35896

📔 Documentation

  • Document that annotations are ignored if attributes reference types not present in the classpath #​35973
  • Fix broken Javadoc links to methods #​35904
  • Refer to "Spring Tools" instead of "Spring Tools for Eclipse" in reference manual #​35902
  • Clarify JMS sessionTransacted flag for local versus global transaction #​35898
  • Reference docs should not use obsolete "junit5" links #​35893
  • Testing chapter references nonexistent Dependency Management documentation #​35891

🔨 Dependency Upgrades

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.9

Added
  • feat: query timeout property PR #​3705
  • feat: Add PEMKeyManager to handle PEM based certs and keys PR #​3700
Changed
  • perf: optimize PGInterval.getValue() by replacing String.format with StringBuilder
  • doc: update property quoteReturningIdentifiers default value PR #​3847
  • security: Use a static method forName to load all user supplied classes. Use the Class.forName 3 parameter method and do not initilize it unless it is a subclass of the expected class
Fixed
  • fix: incorrect pg_stat_replication.reply_time calculation PR #​3906
  • fix: close temporary lob descriptors that are used internally in PreparedStatement#setBlob
  • fix: PGXAConnection.prepare(Xid) should return XA_RDONLY if the connection is read only PR #​3897
  • fix: make all Calendar instances proleptic Gregorian PR #​3837
  • fix: Simplify concurrency guards on QueryExecutorBase#transaction and QueryExecutorBase#standardConformingStrings PR #​3897
  • fix: avoid memory leaks in Java <= 21 caused by Thread.inheritedAccessControlContext PR #​3886
  • fix: Issue #​3784 pgjdbc can't decode numeric arrays containing special numbers like NaN PR #​3838
  • fix: use ssl_is_used() to check for ssl connection PR #​3867
  • fix: the classloader is nullable PR #​3907
mockito/mockito (org.mockito:mockito-bom)

v5.21.0

Compare Source

Changelog generated by Shipkit Changelog Gradle Plugin

5.21.0
  • 2025-12-09 - 17 commit(s) by Giulio Longfils, Joshua Selbo, Woongi9, Zylox, dependabot[bot]
  • Bump graalvm/setup-graalvm from 1.4.3 to 1.4.4 (#​3768)
  • Bump graalvm/setup-graalvm from 1.4.2 to 1.4.3 (#​3767)
  • Bump actions/checkout from 5 to 6 (#​3765)
  • Adds output of matchers to potential mismatch; Fixes #​2468 (#​3760)
  • Forbid mocking WeakReference with inline mock maker (#​3759)
  • StackOverflowError when mocking WeakReference (#​3758)
  • Bump actions/upload-artifact from 4 to 5 (#​3756)
  • Bump graalvm/setup-graalvm from 1.4.1 to 1.4.2 (#​3755)
  • Support primitives in GenericArrayReturnType. (#​3753)
  • ClassNotFoundException when stubbing array of primitive type on Android (#​3752)
  • Bump graalvm/setup-graalvm from 1.4.0 to 1.4.1 (#​3744)
  • Bump gradle/actions from 4 to 5 (#​3743)
  • Bump org.graalvm.buildtools.native from 0.11.0 to 0.11.1 (#​3738)
  • Bump com.diffplug.spotless:spotless-plugin-gradle from 7.2.1 to 8.0.0 (#​3735)
  • Bump graalvm/setup-graalvm from 1.3.7 to 1.4.0 (#​3734)
  • Bump org.assertj:assertj-core from 3.27.5 to 3.27.6 (#​3733)
  • Bump errorprone from 2.41.0 to 2.42.0 (#​3732)
  • Feat: automatically detect class to mock in mockStatic and mockConstruction (#​3731)
  • Return completed futures for unstubbed Future/CompletionStage in ReturnsEmptyValues (#​3727)
  • automatically detect class to mock (#​2779)
  • Incorrect "has following stubbing(s) with different arguments" message when using Argument Matchers (#​2468)
SeleniumHQ/selenium (org.seleniumhq.selenium:selenium-bom)

v4.40.0

open-telemetry/opentelemetry-java (io.opentelemetry:opentelemetry-exporter-zipkin)

v1.58.0

Compare Source

API
Incubator
  • Delete GlobalConfigProvider in favor of access via ExtendedOpenTelemetry
    (#​7914)
  • Add DeclarativeConfigProperties#get method
    (#​7923)
  • Update ConfigProvider#getInstrumentationConfig response to be non-null
    (#​7954)
  • Add declarative config utility methods for common operations
    (#​7927)
SDK
Traces
  • Implement SDK metrics for trace
    (#​7895,
    #​7930)
  • Emit warning when TraceIdRatioBasedSampler is used as child sampler
    (#​7937)
Logs
  • Implement SDK metrics for logs
    (#​7931)
Exporters
Extensions
  • Declarative config: update to opentelemetry-configuration 1.0.0-rc.3
    (#​7861)
  • Declarative config: update jaeger remote sampler to require endpoint, initial_sampler
    (#​7943)
  • Declarative config: add support for view unit
    (#​7942)
  • Declarative config: add support for new logger config minimum_severity and trace_based properties
    (#​7940)
  • Declarative config: add support for composable parent threshold sampler
    (#​7941)
  • Declarative config: improve pattern for validating and loading SDK extension plugins
    (#​7947)
Project tooling
  • Use develocity build cache in PRs and local builds
    (#​7906)
  • Configure japicmp classpath to avoid false positives
    (#​7945)
flyway/flyway (org.flywaydb:flyway-database-postgresql)

v11.20.3: Flyway 11.20.3

See release notes here

micrometer-metrics/tracing (io.micrometer:micrometer-tracing-bom)

v1.6.2: 1.6.2

Compare Source

🐞 Bug Fixes

  • Add JSpecify as an API dependency #​1276

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.24 #​1275
  • Bump com.uber.nullaway:nullaway from 0.12.14 to 0.12.15 #​1268
  • Bump io.micrometer:micrometer-bom from 1.15.7 to 1.16.2 #​1282
  • Bump io.projectreactor:reactor-bom from 2024.0.12 to 2024.0.13 #​1244
  • Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 #​1261
  • Bump org.aspectj:aspectjweaver from 1.9.25 to 1.9.25.1 #​1262
  • Bump org.junit:junit-bom from 5.14.1 to 5.14.2 #​1274
  • Bump testcontainers from 1.21.3 to 1.21.4 #​1255
micrometer-metrics/micrometer (io.micrometer:micrometer-bom)

v1.16.2: 1.16.2

Compare Source

🐞 Bug Fixes

  • CaffeineCacheMetrics nullability is incompatible with Caffeine 3.2.3 #​6973
  • ExecutorServiceMetrics: repeatedly logs exception when monitoring ThreadPerTaskExecutor without --add-opens #​6726

🔨 Dependency Upgrades

  • Bump ch.qos.logback:logback-classic from 1.5.21 to 1.5.24 #​7027
  • Bump com.netflix.spectator:spectator-reg-atlas from 1.9.2 to 1.9.3 #​7051
  • Bump com.uber.nullaway:nullaway from 0.12.14 to 0.12.15 #​7020
  • Bump grpc from 1.76.1 to 1.76.2 #​6952
  • Bump maven-resolver from 1.9.24 to 1.9.25 #​6965
  • Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.5.2 #​7019
  • Bump org.junit:junit-bom from 5.14.1 to 5.14.2 #​7056
  • Bump spring6 from 6.2.14 to 6.2.15 #​6971
  • Bump testcontainers from 1.21.3 to 1.21.4 #​6993

❤️ Contributors

Thank you to all the contributors who worked on this release:

@​MariusVolkhart and @​izeye

connect2id/nimbus-jose-jwt (com.nimbusds:nimbus-jose-jwt)

v10.7

Compare Source

testcontainers/testcontainers-java (org.testcontainers:testcontainers-bom)

v1.21.4

Compare Source

This release makes version 1.21.x works with recent Docker Engine changes.

spring-projects/spring-boot (org.springframework.boot:spring-boot-starter-parent)

v3.5.10

Compare Source

🐞 Bug Fixes
  • Evaluation of bean conditions unnecessarily queries the bean factory for types that are not present #​48836
  • When a bean condition references a type that is not present, it appears as ? in the condition evaluation report #​48835
  • Actuator /info endpoint fails in Java 25 Native Image (VirtualThreadSchedulerMXBean support) #​48810
  • DataSourceBuilder cannot create oracle.ucp.jdbc.PoolDataSourceImpl in a native image #​48702
  • Application JAR created by extract command is not reproductible #​48664
  • AOT processing of tests should not be disabled when 'skipTests' is set #​48661
  • Fix zero-length byte buffer in InspectedContent #​48649
📔 Documentation
  • Update documentation for Buildpack's AOT Cache support #​48768
  • Document support for configuring arguments passed to Docker Compose #​48657
  • Clarify javadoc to make it clear that HazelcastConfigCustomizer beans are only applied if Hazelcast is configured via a config file #​48634
  • Fix grammar and typos in the reference guide #​48596
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​GaoSSR, @​izeye, and @​ngocnhan-tran1996

v3.5.9

Compare Source

🐞 Bug Fixes
  • RabbitHealthIndicator reports an error when version is missing from the connection's server properties #​48486
  • Profiles retained during AOT processing are not configured in a native image #​48475
  • NullPointerException in UndertowWebServer.destroy() when using @DirtiesContext and Citrus Spring Boot Simulator #​48450
  • Redis health check reports an error when redis_version is missing from the INFO response #​48326
  • Parent's MeterRegistry beans are closed when child context closes #​48324
  • SpringBootTest.UseMainMethod.WHEN_AVAILABLE and ALWAYS are incompatible with package-private or parameter-less main method #​48271
📔 Documentation
  • Documentation has an outdated reference to the Jackson Kotlin Module #​48533
  • Caching documentation should clarify how to use a no-op implementation to run a test suite #​48531
  • Document that the default rolling policy for Log4j2 requires logging.file.path to be set #​48526
  • License header in build samples is displayed in the reference documentation #​48477
  • Configuring Two DataSources How-To code sample is inconsistent #​48448
  • Improve javadoc for when to use class names rather than class references #​48395
  • Document that org.aspectj.weaver.Advice must be on the classpath to enable support for Micrometer's annotations #​48359
  • Polish TestRestTemplate examples in the reference guide #​48335
  • Fix links to javadoc in the reference documentation #​48299
  • Clarify that @EnableBatchProcessing turns off all batch auto-configuration, including schema initialization #​48265
  • Kotlin auto-configuration examples are not annotated with @AutoConfiguration #​48227
  • Infinispan Cache Documentation is outdated #​48217
  • Revise "Use Liquibase for test-only migrations" section in reference manual #​48169
🔨 Dependency Upgrades
❤️ Contributors

Thank you to all the contributors who worked on this release:

@​banseok1216, @​berry120, @​dmitrysulman, @​geopark021, @​noojung, @​scottfrederick, @​vpavic, and @​youngledo

Configuration

📅 Schedule: Branch creation - "before 6am every weekday" in timezone America/Vancouver, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Thanks for the PR!

Deployments, as required, will be available below:
Any successful deployments (not always required) will be available here

Please create PRs in draft mode. Mark as ready to enable:

After merge, new images are deployed in:

@renovate renovate bot enabled auto-merge (squash) February 9, 2026 09:32
@github-actions
Copy link
Contributor

github-actions bot commented Feb 9, 2026

Overall Project NaN% NaN% 🍏

There is no coverage information present for the Files changed

@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 9, 2026

Quality Gate Passed Quality Gate passed for 'nr-forest-client-processor'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

auto-merge was automatically disabled February 9, 2026 20:35

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@paulushcgcj paulushcgcj Awaiting requested review from paulushcgcj paulushcgcj is a code owner

@mamartinezmejia mamartinezmejia Awaiting requested review from mamartinezmejia mamartinezmejia is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mamartinezmejia